last executing test programs: 2m35.144985467s ago: executing program 1 (id=1339): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}, {&(0x7f0000000200)={0xc98, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, "", [@typed={0x4, 0x44}, @generic="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", @generic="43e74ae9a18e6d1006d21345ff36206051edf3324bcd6f748e8329de8bf43210fe758f7258080e023838add69aa6b9fc9670c8b2d5c21127f32f99cdcb71a24f25dc97a53e080c7f7a9859a62bf8b94c9bed00992a036052653ccf25c3a6a25f495c4d822e1e8737bc4b0333cafcceeac639fa1bf32adf6ed8b77e7f709ac7f92264d508", @generic]}, 0xc98}], 0x2}, 0x0) 2m34.948874878s ago: executing program 1 (id=1343): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0, 0xfffffec6}], 0x2) 2m34.283790591s ago: executing program 1 (id=1357): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, 0x0, &(0x7f0000000500)) 2m34.209124991s ago: executing program 1 (id=1359): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75d, &(0x7f0000001100)="$eJzs3M9rHFUcAPDvTLJNf0Q3ggf1IEILLZROkubSnowX8VIoFLzWkExCyCRbspvaxEJbz0JtLgqC6N2jV6HUP8CbFBS8C6I1HsRLZDabtE1347ZNsho/H5jsezPv7fd9dyYvM5C3AfxvvVH+SCIGI+JiRFRb+9OIONQsHY64udFu7cH1yXJLYn390q9J2S3W1qtb75W0Xo9Fs0u8EhH3KhGnP3wybn15ZW6iKPLFVn24MX9luL68cmZ2fmImn8kXRsfOj5wbGzs3MrZruZ549/yRO9+9vbr6/deN26/3n0livJl3tHLbtUCP2PhMKjG+bf/CXgTroaSLNv37MA4AAHZW3uf3te7NKlGNPndpAAAAcOCsD6wDAAAAB14SvR4BAAAAsLc2/w9gc23vXq2D7eSXtyJiqF38/uYa4ojDUYmIo2vJYysTko1u8Fxu3oqIu+Ntrr+kdf09u5Ft9W7WSLO/7pbzz3i7+Sfdmn+izfzTv/ndCc+p8/z3MH5fh/nvYpcxvvn81UrH+LciXutvFz/Zip90iP9el/Fvr350p9Ox9S8jTrb9+5M8FmuH74cYnp4tdvzVuvfXqfs75X/0ifhJ0oya7Jz/lS7z/2Dt97lOc0kZ/9Txnc//RvyBx/qV18THrXGkEXGn9VrWV7fFOD7/w7dPRk5ubsaf6vD5tz//72zl/0WX+f/01cC1LpsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAUxoRg5Gk2VY5TbMs4lhEvBxH06JWb5yeri0tTJXHIoaikk7PFvlIRFQ36klZH22WH9bPbquPRcRLPx7ZCDpb5NlkrZjqdfIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsORYRg5GkWUSkEfFHNU2zrNejAgAAAHbdUK8HAAAAAOw5z/8AAABw8D3r83+yy+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrSLFy6U2/rag+uTZX3q6vLSXO3qmam8PpfNL01mk7XFK9lMrTZT5Nlkbf6f3i+NiNHzsXRtuJHXG8P15ZXL87Wlhcbl2fmJmfxyXtmXrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhag80tSbOISJvlNM2yiBciYigqyfRskY9ExIsRcb9aGSjro70eNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALuuvrwyN1EU+aLCf7EQSUSnNn1O7n4WIp6m143ofOL+HYVez0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRCfXllbqIo8sV6r0cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb6U/JxFRbierJwa3Hz2U/FltvkbE+59d+uTaRKOxOFru/21rf+PT1v6zj3S8sZ85AAAAwIH35tM03nxO33yOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FZ9eWVuoijyxT0sxK1eZwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyLvwMAAP//88PCiA==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000040, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x8}}]}) 2m33.770522673s ago: executing program 1 (id=1363): unshare(0x20040600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffffff, 0x500, 0xa0028000}, 0x38) 2m32.993690537s ago: executing program 1 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 2m32.808476667s ago: executing program 32 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 52.998468083s ago: executing program 0 (id=3101): r0 = socket$pptp(0x18, 0x1, 0x2) accept4(r0, 0x0, 0x0, 0x800) 52.746524165s ago: executing program 0 (id=3117): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x550b, 0x0) 52.678726295s ago: executing program 0 (id=3108): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)={0x14, 0x14, 0x601, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 52.517595955s ago: executing program 0 (id=3112): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000001c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@nostrict}, {@unhide}, {@uid}, {@shortad}, {@gid}, {@shortad}, {@utf8}]}, 0x4, 0xc3d, &(0x7f0000001940)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000000200)) 51.778153869s ago: executing program 0 (id=3124): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x7, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "56ebfce1"}, 0x0, 0x4, {0x0}}) 51.053689092s ago: executing program 0 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0x4a}}) 50.929983603s ago: executing program 33 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0x4a}}) 6.352583792s ago: executing program 3 (id=3808): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x25, &(0x7f0000000740)=""/264, &(0x7f0000000000)=0x108) 6.249681842s ago: executing program 3 (id=3811): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="b036bfabe1fb96bb0c082759565dfcb80557f9142f33bcf674e2ae40078efc8732cb3153675e7c37f88337ce482d4fa26e2fb9dbe1cad4dc218d4e0fe41c", 0x0}, 0x20) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000042ebf04021046c022f1f0000000109024000010000000009040000000202ff00052406000005240000000d240f010000000000000000000524"], 0x0) 4.706484889s ago: executing program 3 (id=3829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x4b}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 4.56971s ago: executing program 3 (id=3830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x989}]}]}, 0x44}}, 0x0) 4.339771601s ago: executing program 3 (id=3831): syz_usb_connect(0x5, 0x63, &(0x7f0000002d00)={{0x12, 0x1, 0x201, 0xf, 0x4f, 0x7, 0x40, 0x67b, 0x2303, 0x53f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x3, 0x4, 0xe0, 0x3, [{{0x9, 0x4, 0x13, 0x9, 0x6, 0xba, 0x95, 0xd2, 0x3, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0xfe, 0x85}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x0, 0x96, 0x6}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x6, 0x6, 0x57}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x6, 0x8, 0x7, [@generic={0x9, 0x4, "0483af0cf67b3f"}]}}, {{0x9, 0x5, 0x8e, 0x2, 0x20, 0xc, 0x8, 0xff}}, {{0x9, 0x5, 0xc, 0x12, 0x40, 0x0, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 3.008398917s ago: executing program 2 (id=3855): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.847843207s ago: executing program 2 (id=3860): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000300)) 2.744033118s ago: executing program 2 (id=3864): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) 2.637122099s ago: executing program 2 (id=3867): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000200)={0xa, 0x0, 0x6e1d, @empty, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="14000000000000002910008008000000000000000000000014000000000000002900000043000000623f"], 0x48}, 0x0) 2.539983679s ago: executing program 2 (id=3871): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xfa, 0x70, 0x10, 0x8, 0x413, 0x6023, 0xb636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x1, 0x7a, 0x9e, 0xc0, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.465590669s ago: executing program 6 (id=3873): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000002240)={0x1, @win={{0x1fd, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2.32571142s ago: executing program 6 (id=3876): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 2.30476601s ago: executing program 6 (id=3878): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fchmod(r0, 0x15) 2.161762551s ago: executing program 6 (id=3879): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 2.143674031s ago: executing program 6 (id=3880): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x614295ec4dd735b7}}) 1.655283523s ago: executing program 5 (id=3887): r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 1.521772824s ago: executing program 5 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}}, 0x0) 1.466506474s ago: executing program 5 (id=3890): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0x1, @win={{0x46d}, 0x500, 0x0, 0x0, 0x0, 0x0}}) 1.359913804s ago: executing program 5 (id=3892): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) pread64(r0, 0x0, 0x0, 0x80) 1.359049154s ago: executing program 3 (id=3893): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0) 1.287226235s ago: executing program 5 (id=3894): r0 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x107, 0x13, 0x0, 0x20600000) 1.169722115s ago: executing program 5 (id=3895): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a534aa1287d331f9c2847200e2fd84d16f1f754da038d1479772550398d2ae3a5"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 684.202827ms ago: executing program 4 (id=3898): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0xfff9}) 473.823248ms ago: executing program 4 (id=3899): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) 473.065118ms ago: executing program 6 (id=3900): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8916, 0x0) 437.602558ms ago: executing program 2 (id=3901): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x2004053, &(0x7f0000000000)={[{@flushoncommit}, {@nossd}, {@nossd_spread}, {@noacl}, {@nobarrier}, {@discard}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000000c0)={{r0}, "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"}) 437.503829ms ago: executing program 4 (id=3902): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) 211.902219ms ago: executing program 4 (id=3903): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 119.40231ms ago: executing program 4 (id=3904): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 0s ago: executing program 4 (id=3905): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.3.2405'. [ 200.370089][T10720] loop4: detected capacity change from 0 to 128 [ 200.457134][ T4368] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 200.457170][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.457195][ T4368] usb 3-1: Product: syz [ 200.457212][ T4368] usb 3-1: Manufacturer: syz [ 200.457229][ T4368] usb 3-1: SerialNumber: syz [ 200.462100][ T4368] usb 3-1: config 0 descriptor?? [ 200.489905][T10725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2409'. [ 200.560262][ T4175] sysv_free_block: flc_count > flc_size [ 200.560567][ T4175] sysv_free_block: flc_count > flc_size [ 200.560578][ T4175] sysv_free_block: flc_count > flc_size [ 200.560587][ T4175] sysv_free_block: flc_count > flc_size [ 200.560596][ T4175] sysv_free_block: flc_count > flc_size [ 200.560606][ T4175] sysv_free_block: flc_count > flc_size [ 200.560615][ T4175] sysv_free_block: flc_count > flc_size [ 200.560625][ T4175] sysv_free_block: flc_count > flc_size [ 200.560634][ T4175] sysv_free_block: flc_count > flc_size [ 200.560644][ T4175] sysv_free_block: flc_count > flc_size [ 200.567346][ T4175] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 200.717218][ T4368] int51x1: probe of 3-1:0.0 failed with error -22 [ 200.926113][ T4368] usb 3-1: USB disconnect, device number 14 [ 201.111250][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2419'. [ 201.131209][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2420'. [ 201.665091][T10735] loop4: detected capacity change from 0 to 32768 [ 201.673520][T10809] loop2: detected capacity change from 0 to 1024 [ 201.683752][T10812] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 201.775962][T10735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2411 (10735) [ 201.810388][T10809] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2432: bad orphan inode 2097152 [ 201.923893][T10735] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 201.944211][T10821] loop5: detected capacity change from 0 to 1024 [ 201.962483][T10809] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.994519][T10735] BTRFS info (device loop4): using free space tree [ 202.027070][T10735] BTRFS info (device loop4): has skinny extents [ 202.070338][T10809] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.2432: reserved inode found cleared - inode=18 [ 202.142092][T10821] hfsplus: invalid catalog entry type in lookup [ 202.327885][T10735] BTRFS info (device loop4): enabling ssd optimizations [ 202.407813][T10868] sock: sock_timestamping_bind_phc: sock not bind to device [ 202.440205][T10735] BTRFS error (device loop4): balance: invalid convert data profile raid0 [ 202.475372][T10875] netlink: 'syz.5.2445': attribute type 1 has an invalid length. [ 202.520083][T10875] netlink: 'syz.5.2445': attribute type 2 has an invalid length. [ 202.552413][T10875] netlink: 'syz.5.2445': attribute type 1 has an invalid length. [ 203.050695][T10892] loop5: detected capacity change from 0 to 4096 [ 203.192319][T10892] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 203.224405][T10892] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 203.256568][T10892] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 203.310402][T10863] loop2: detected capacity change from 0 to 32768 [ 203.320904][T10892] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 203.381489][T10863] XFS: attr2 mount option is deprecated. [ 203.386512][T10892] ntfs: volume version 3.1. [ 203.535638][T10892] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 203.545711][T10863] XFS (loop2): cannot change alignment: superblock does not support data alignment [ 203.566858][T10892] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 203.582504][T10883] loop3: detected capacity change from 0 to 32768 [ 203.831122][T10931] loop0: detected capacity change from 0 to 2048 [ 203.923058][T10931] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.973069][T10883] XFS (loop3): Mounting V5 Filesystem [ 203.984674][T10949] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.992816][T10931] attempt to access beyond end of device [ 203.992816][T10931] loop0: rw=524288, want=33554432, limit=2048 [ 204.117922][T10931] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 204.163656][T10958] libceph: resolve '. [ 204.163656][T10958] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 204.163656][T10958] ' (ret=-3): failed [ 204.290984][T10883] XFS (loop3): Ending clean mount [ 204.300576][T10965] netlink: 'syz.5.2469': attribute type 1 has an invalid length. [ 204.377166][T10968] xt_TCPMSS: Only works on TCP SYN packets [ 204.448002][ T4170] XFS (loop3): Unmounting Filesystem [ 204.864751][T11005] loop2: detected capacity change from 0 to 16 [ 204.926052][T11005] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 205.106105][T11012] loop4: detected capacity change from 0 to 1024 [ 205.289345][T11012] hfsplus: invalid catalog entry type in lookup [ 205.456817][T11026] loop2: detected capacity change from 0 to 1024 [ 205.567046][T11037] __nla_validate_parse: 5 callbacks suppressed [ 205.567067][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2491'. [ 205.584826][T11041] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 205.642453][T11026] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.2489: Invalid block bitmap block 0 in block_group 0 [ 205.749325][T11026] Quota error (device loop2): write_blk: dquota write failed [ 205.786948][T11026] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 205.818371][T11026] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.2489: Failed to acquire dquot type 0 [ 205.897316][T11026] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.2489: Freeing blocks not in datazone - block = 0, count = 4096 [ 205.968951][T11026] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2489: Invalid inode bitmap blk 0 in block_group 0 [ 205.987029][ T154] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 206.012206][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 206.045018][T11026] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 206.088810][T11026] EXT4-fs (loop2): 1 orphan inode deleted [ 206.094620][T11026] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 206.214101][T11026] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.2489: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 206.369450][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 206.374588][T11076] kernel profiling enabled (shift: 0) [ 206.434295][T11009] loop0: detected capacity change from 0 to 32768 [ 206.615838][T11009] XFS (loop0): Mounting V5 Filesystem [ 206.625247][T11094] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 206.686779][ T4365] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.803893][T11102] device veth5 entered promiscuous mode [ 206.818562][T11009] XFS (loop0): Ending clean mount [ 206.941754][ T4365] usb 4-1: Using ep0 maxpacket: 16 [ 206.968833][ T4169] XFS (loop0): Unmounting Filesystem [ 206.977459][T11123] netlink: 'syz.4.2511': attribute type 5 has an invalid length. [ 207.067342][ T4365] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.266888][ T4365] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 207.286249][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.298140][ T4365] usb 4-1: Product: syz [ 207.302360][ T4365] usb 4-1: Manufacturer: syz [ 207.307168][ T4365] usb 4-1: SerialNumber: syz [ 207.394494][ T4365] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 207.575175][T11154] device veth5 entered promiscuous mode [ 207.607162][ T3530] bcm5974 4-1:1.0: could not read from device [ 207.634594][ T4365] usb 4-1: USB disconnect, device number 18 [ 207.675468][T11155] loop4: detected capacity change from 0 to 2048 [ 207.755785][T11155] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.851353][T11155] attempt to access beyond end of device [ 207.851353][T11155] loop4: rw=524288, want=33554432, limit=2048 [ 207.863253][T11189] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.927731][T11155] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 208.582710][T11241] loop2: detected capacity change from 0 to 2048 [ 208.637599][T11245] device bond2 entered promiscuous mode [ 208.650613][T11245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.678782][T11241] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.716815][ T9282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.844553][T11283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.844863][T11241] attempt to access beyond end of device [ 208.844863][T11241] loop2: rw=524288, want=33554432, limit=2048 [ 208.944221][T11241] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 209.016056][T11285] loop3: detected capacity change from 0 to 4096 [ 209.320694][ T9282] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 209.337259][ T9282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.386932][ T9282] usb 5-1: Product: syz [ 209.412066][ T9282] usb 5-1: Manufacturer: syz [ 209.432341][ T9282] usb 5-1: SerialNumber: syz [ 209.477794][ T9282] usb 5-1: config 0 descriptor?? [ 209.565583][T11320] loop2: detected capacity change from 0 to 1764 [ 209.785619][T11324] loop0: detected capacity change from 0 to 4096 [ 209.797212][ T9282] int51x1: probe of 5-1:0.0 failed with error -22 [ 209.839940][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2551'. [ 209.893464][T11324] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 210.005874][ T9282] usb 5-1: USB disconnect, device number 12 [ 210.243823][T11365] loop0: detected capacity change from 0 to 256 [ 210.269764][T11363] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 210.379677][T11370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.596923][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 210.646012][T11391] batman_adv: Cannot find parent device [ 210.688216][T11399] libceph: resolve '0.' (ret=-3): failed [ 210.860886][T11408] loop0: detected capacity change from 0 to 1024 [ 211.007233][ T9] hfsplus: b-tree write err: -5, ino 4 [ 211.008137][T11427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.030659][T11424] loop3: detected capacity change from 0 to 2048 [ 211.101432][T11424] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.201452][T11424] attempt to access beyond end of device [ 211.201452][T11424] loop3: rw=524288, want=33554432, limit=2048 [ 211.213867][T11443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.251132][T11447] loop4: detected capacity change from 0 to 512 [ 211.267796][T11424] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 211.454631][T11447] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 211.546911][T11447] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.607377][T11469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 211.813611][T11466] loop2: detected capacity change from 0 to 4096 [ 212.125557][T11505] device batadv0 entered promiscuous mode [ 212.220849][T11515] usb usb8: check_ctrlrecip: process 11515 (syz.4.2601) requesting ep 01 but needs 81 [ 212.277683][T11515] usb usb8: usbfs: process 11515 (syz.4.2601) did not claim interface 0 before use [ 212.465941][T11512] loop0: detected capacity change from 0 to 4096 [ 212.564425][T11512] ntfs3: loop0: ino=3, Correct links count -> 2. [ 212.684188][T11520] loop2: detected capacity change from 0 to 4096 [ 212.826967][T11520] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 213.078286][T11543] loop0: detected capacity change from 0 to 764 [ 213.951627][T11597] loop3: detected capacity change from 0 to 2048 [ 214.046749][ T3504] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.127767][T11597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.156035][T11597] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.327008][ T3504] usb 5-1: Using ep0 maxpacket: 8 [ 214.477225][ T3504] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 214.485862][ T3504] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.512003][T11639] sock: sock_timestamping_bind_phc: sock not bind to device [ 214.512288][T11638] loop5: detected capacity change from 0 to 256 [ 214.565298][ T3504] usb 5-1: config 0 has no interface number 0 [ 214.583435][ T3504] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 214.653631][ T3504] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.668921][ T3504] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.680000][T11646] loop3: detected capacity change from 0 to 1024 [ 214.684846][ T3504] usb 5-1: config 0 interface 52 has no altsetting 0 [ 214.704078][T11638] exfat: Deprecated parameter 'utf8' [ 214.811099][T11638] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 214.827008][ T3504] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 214.838422][ T3504] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 214.887197][ T3504] usb 5-1: Manufacturer: syz [ 214.913113][ T3504] usb 5-1: config 0 descriptor?? [ 215.059208][T11668] loop5: detected capacity change from 0 to 512 [ 215.170435][ T3504] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 215.192936][ T3504] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 215.203294][T11668] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 215.280153][T11668] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.354666][T11693] loop2: detected capacity change from 0 to 256 [ 215.393370][ T4368] usb 5-1: USB disconnect, device number 13 [ 215.430308][T11668] EXT4-fs error (device loop5): ext4_get_first_dir_block:3597: inode #12: comm syz.5.2647: Directory hole found for htree leaf block 0 [ 215.492458][T11697] loop0: detected capacity change from 0 to 4096 [ 215.544825][T11707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.645288][T11693] loop2: detected capacity change from 0 to 256 [ 215.680415][ T5059] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 215.707190][T11693] exfat: Deprecated parameter 'utf8' [ 215.713488][T11693] exfat: Unexpected value for 'utf8' [ 215.825775][T11732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.937085][ T5059] usb 4-1: Using ep0 maxpacket: 32 [ 216.056945][ T5059] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.200119][T11740] loop0: detected capacity change from 0 to 8192 [ 216.237050][ T5059] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 216.254926][ T5059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.264852][ T4365] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.285180][ T5059] usb 4-1: Product: syz [ 216.287982][T11752] loop4: detected capacity change from 0 to 4096 [ 216.292291][ T5059] usb 4-1: Manufacturer: syz [ 216.305054][ T5059] usb 4-1: SerialNumber: syz [ 216.314075][ T5059] usb 4-1: config 0 descriptor?? [ 216.338006][T11740] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.357950][ T5059] cdc_ether 4-1:0.0: skipping garbage [ 216.387824][ T5059] usb 4-1: bad CDC descriptors [ 216.404575][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.423090][ T5059] usb 4-1: unsupported MDLM descriptors [ 216.436858][T11740] FAT-fs (loop0): Filesystem has been set read-only [ 216.438154][T11763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.449025][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.512997][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.519134][ T4365] usb 3-1: Using ep0 maxpacket: 16 [ 216.533036][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.551364][T11770] loop5: detected capacity change from 0 to 512 [ 216.578909][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.592536][ T9282] usb 4-1: USB disconnect, device number 19 [ 216.611874][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.623851][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.640042][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.664349][ T4365] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 216.665290][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.709821][T11770] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2673: casefold flag without casefold feature [ 216.714633][ T4365] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 216.736206][T11770] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2673: couldn't read orphan inode 15 (err -117) [ 216.769185][ T4365] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.789846][T11740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 216.840189][T11770] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.851690][ T26] audit: type=1800 audit(1731442511.911:15): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2665" name="file2" dev="loop0" ino=1048608 res=0 errno=0 [ 216.934881][T11786] loop4: detected capacity change from 0 to 764 [ 216.946967][ T4365] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 216.958918][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.967943][ T4365] usb 3-1: Product: syz [ 216.973313][ T4365] usb 3-1: Manufacturer: syz [ 216.979396][ T4365] usb 3-1: SerialNumber: syz [ 216.988222][ T4365] usb 3-1: config 0 descriptor?? [ 217.074807][ T4365] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 217.134290][T11803] loop5: detected capacity change from 0 to 256 [ 217.263312][ T4365] usb 3-1: USB disconnect, device number 15 [ 217.281566][T11803] loop5: detected capacity change from 0 to 256 [ 217.303798][T11823] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.359622][T11803] exfat: Deprecated parameter 'utf8' [ 217.365067][T11803] exfat: Unexpected value for 'utf8' [ 217.389400][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2685'. [ 217.399393][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2685'. [ 217.495396][T11845] program syz.4.2686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.595881][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2689'. [ 217.646288][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2689'. [ 217.754429][T11867] loop3: detected capacity change from 0 to 512 [ 217.876869][T11867] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 217.979030][T11867] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.020944][T11899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2704'. [ 218.605387][T11942] loop4: detected capacity change from 0 to 4096 [ 218.647206][ T3504] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.676445][T11942] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 218.755149][T11942] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 218.854384][T11942] ntfs3: loop4: ino=5, "/" directory corrupted [ 218.936925][ T3504] usb 4-1: Using ep0 maxpacket: 8 [ 219.229771][ T3504] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice=37.6e [ 219.239521][ T3504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.248664][ T3504] usb 4-1: Product: syz [ 219.253548][ T3504] usb 4-1: Manufacturer: syz [ 219.258700][ T3504] usb 4-1: SerialNumber: syz [ 219.283963][ T3504] usb 4-1: config 0 descriptor?? [ 219.312223][T12020] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 219.554962][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 219.581888][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2734'. [ 219.664131][T11937] loop2: detected capacity change from 0 to 32768 [ 219.706942][ T4489] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.717634][T11937] XFS: attr2 mount option is deprecated. [ 219.838772][ T3504] usb 4-1: USB disconnect, device number 20 [ 219.852098][T11937] XFS (loop2): Mounting V5 Filesystem [ 220.016809][ T4489] usb 6-1: Using ep0 maxpacket: 8 [ 220.032941][T11937] XFS (loop2): Ending clean mount [ 220.058462][T11937] XFS (loop2): Quotacheck needed: Please wait. [ 220.128148][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.175708][T11937] XFS (loop2): Quotacheck: Done. [ 220.181102][ T4489] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 220.213221][ T4489] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.255516][ T4489] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.306152][ T4489] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.326840][ T4489] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.366804][ T4489] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.382828][ T4489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.424908][ T4165] XFS (loop2): Unmounting Filesystem [ 220.690947][T12051] loop4: detected capacity change from 0 to 32768 [ 220.803690][T12051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2740 (12051) [ 220.870854][T12051] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 220.890625][T12051] BTRFS info (device loop4): using free space tree [ 220.909937][ T4489] usb 6-1: USB disconnect, device number 5 [ 220.949492][T12051] BTRFS info (device loop4): has skinny extents [ 221.287280][T12051] BTRFS info (device loop4): enabling ssd optimizations [ 221.374897][ T150] block nbd2: Attempted send on invalid socket [ 221.381383][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.395516][T12184] befs: (nbd2): unable to read superblock [ 221.633602][T12190] loop5: detected capacity change from 0 to 8192 [ 221.698171][T12190] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.755773][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.834761][T12190] FAT-fs (loop5): Filesystem has been set read-only [ 221.857069][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.884054][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.926810][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.935657][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.981723][T12215] cgroup: subsys name conflicts with all [ 222.144543][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.205477][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.254718][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.294638][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.357123][T12190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.405940][ T26] audit: type=1800 audit(1731442517.471:16): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2765" name="file2" dev="loop5" ino=1048609 res=0 errno=0 [ 222.691112][ T263] block nbd4: Attempted send on invalid socket [ 222.697514][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 222.708964][T12253] befs: (nbd4): unable to read superblock [ 222.858452][T12288] openvswitch: netlink: IP tunnel dst address not specified [ 222.910043][T12202] loop0: detected capacity change from 0 to 32768 [ 222.940563][T12202] XFS: attr2 mount option is deprecated. [ 222.946270][T12202] XFS: ikeep mount option is deprecated. [ 223.005479][T12300] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 223.096859][T12202] XFS (loop0): Mounting V5 Filesystem [ 223.308240][T12202] XFS (loop0): Ending clean mount [ 223.385472][T12232] loop2: detected capacity change from 0 to 32768 [ 223.405355][T12336] loop4: detected capacity change from 0 to 1764 [ 223.421358][T12343] netlink: 'syz.5.2801': attribute type 1 has an invalid length. [ 223.455802][T12232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2778 (12232) [ 223.523321][ T4169] XFS (loop0): Unmounting Filesystem [ 223.602924][T12232] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 223.635863][T12232] BTRFS info (device loop2): using free space tree [ 223.645621][T12232] BTRFS info (device loop2): has skinny extents [ 223.847111][T12383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.926419][T12232] BTRFS info (device loop2): enabling ssd optimizations [ 224.095864][T12394] loop5: detected capacity change from 0 to 4096 [ 224.241325][T12394] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 224.627551][T12394] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 224.653904][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2820'. [ 224.695366][T12394] ntfs3: loop5: ino=5, "/" directory corrupted [ 224.746818][ T4206] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.954423][T12451] loop5: detected capacity change from 0 to 256 [ 224.985409][T12453] netlink: 'syz.2.2827': attribute type 1 has an invalid length. [ 224.997009][ T4206] usb 4-1: Using ep0 maxpacket: 16 [ 225.044933][T12451] MINIX-fs: mounting file system with errors, running fsck is recommended [ 225.120550][ T4206] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 225.159909][ T4206] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 225.204576][ T4206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.292336][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2834'. [ 225.377211][ T4206] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 225.386408][ T4206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.417377][ T4206] usb 4-1: Product: syz [ 225.421609][ T4206] usb 4-1: Manufacturer: syz [ 225.427054][ T4496] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.441694][T12489] loop0: detected capacity change from 0 to 128 [ 225.461493][ T4206] usb 4-1: SerialNumber: syz [ 225.495228][T12489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 225.496610][ T4206] usb 4-1: config 0 descriptor?? [ 225.546601][T12501] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2842'. [ 225.549943][ T4206] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 225.550845][T12489] System zones: [ 225.576073][T12501] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2842'. [ 225.628533][T12489] 1-3, 19-19, 35-36 [ 225.641643][T12489] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 225.718239][ T4496] usb 5-1: Using ep0 maxpacket: 8 [ 225.727221][T12489] ext4 filesystem being mounted at /611/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.732981][T12517] loop5: detected capacity change from 0 to 1764 [ 225.816898][T12489] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted [ 225.842174][ T4368] usb 4-1: USB disconnect, device number 21 [ 225.857227][ T4496] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 225.883498][ T4496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.909976][ T4496] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.924915][ T4496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 225.935837][ T4496] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 225.955264][ T4496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.998780][ T4496] usb 5-1: config 0 descriptor?? [ 226.027944][T12465] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 226.304617][ T4496] usb 5-1: USB disconnect, device number 14 [ 226.435352][ C0] sd 0:0:1:0: tag#7205 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 226.445325][ C0] sd 0:0:1:0: tag#7205 CDB: Read(16) [ 226.450694][ C0] sd 0:0:1:0: tag#7205 CDB[00]: 88 ef 12 c9 d2 43 00 00 00 00 00 00 00 00 00 00 [ 226.459844][ C0] sd 0:0:1:0: tag#7205 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.468968][ C0] sd 0:0:1:0: tag#7205 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.478048][ C0] sd 0:0:1:0: tag#7205 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.487375][ C0] sd 0:0:1:0: tag#7205 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.496428][ C0] sd 0:0:1:0: tag#7205 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.505607][ C0] sd 0:0:1:0: tag#7205 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.514700][ C0] sd 0:0:1:0: tag#7205 CDB[70]: 00 00 00 [ 226.582131][ T1323] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 226.671067][T12592] netlink: 'syz.3.2862': attribute type 3 has an invalid length. [ 226.716315][T12592] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2862'. [ 226.987270][ T1323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.018388][ T1323] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 227.040941][ T1323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.053689][T12614] loop0: detected capacity change from 0 to 1764 [ 227.085265][ T1323] usb 6-1: config 0 descriptor?? [ 227.123464][T12631] openvswitch: netlink: Flow key attr not present in new flow. [ 227.133974][ T1323] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 227.154737][ T1323] command write [95] error -22 [ 227.377404][ T4206] usb 6-1: USB disconnect, device number 6 [ 227.700951][T12698] loop2: detected capacity change from 0 to 64 [ 227.892914][T12698] Trying to free block not in datazone [ 227.922313][T12698] Trying to free block not in datazone [ 227.935515][T12738] loop3: detected capacity change from 0 to 128 [ 227.980330][T12698] Trying to free block not in datazone [ 228.063410][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2899'. [ 228.063901][T12738] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 228.272398][T12766] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 228.292316][T12771] blktrace: Concurrent blktraces are not allowed on sg0 [ 228.297876][T12766] EXT4-fs (loop0): unable to read superblock [ 228.308286][ T4170] sysv_free_block: flc_count > flc_size [ 228.314284][ T4170] sysv_free_block: flc_count > flc_size [ 228.348277][ T4170] sysv_free_block: flc_count > flc_size [ 228.353879][ T4170] sysv_free_block: flc_count > flc_size [ 228.400375][ T4170] sysv_free_block: flc_count > flc_size [ 228.406273][ T4170] sysv_free_block: flc_count > flc_size [ 228.433762][ T4170] sysv_free_block: flc_count > flc_size [ 228.461799][ T4170] sysv_free_block: flc_count > flc_size [ 228.478487][ T4170] sysv_free_block: flc_count > flc_size [ 228.502131][ T4170] sysv_free_block: flc_count > flc_size [ 228.538851][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 228.800133][T12821] blktrace: Concurrent blktraces are not allowed on sg0 [ 228.825130][T12824] loop5: detected capacity change from 0 to 128 [ 228.859652][T12827] loop0: detected capacity change from 0 to 1024 [ 228.936507][T12824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 228.946512][T12827] hfsplus: request for non-existent node 128 in B*Tree [ 228.977078][T12824] System zones: 1-3, 19-19, 35-36 [ 228.983685][T12827] hfsplus: request for non-existent node 128 in B*Tree [ 228.992683][T12824] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 229.010362][T12824] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.025499][T12824] EXT4-fs warning (device loop5): ext4_group_extend:1823: can't shrink FS - resize aborted [ 229.282058][T12872] loop5: detected capacity change from 0 to 64 [ 229.374210][T12872] Trying to free block not in datazone [ 229.389713][T12872] Trying to free block not in datazone [ 229.401440][ T3504] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 229.425735][T12872] Trying to free block not in datazone [ 229.666805][ T3504] usb 4-1: Using ep0 maxpacket: 8 [ 229.697086][ T4490] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.700399][T12901] loop4: detected capacity change from 0 to 4096 [ 229.806171][T12901] ntfs: volume version 3.1. [ 229.816905][ T3504] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 229.831995][ T3504] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.860990][ T3504] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.861087][T12901] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 229.871364][ T3504] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.895152][T12901] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode. [ 229.909981][T12901] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 229.924576][ T3504] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.951333][T12901] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode. [ 229.961357][ T3504] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.972494][ T4490] usb 1-1: Using ep0 maxpacket: 16 [ 229.990384][ T3504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.108672][ T4490] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 230.123357][T12948] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 230.129433][ T4490] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.208408][ T4490] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.387127][ T9282] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.476960][ T4490] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 230.517114][ T4490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.543800][ T4490] usb 1-1: Product: syz [ 230.549197][ T4490] usb 1-1: Manufacturer: syz [ 230.553963][ T4490] usb 1-1: SerialNumber: syz [ 230.561129][ T4490] usb 1-1: config 0 descriptor?? [ 230.611429][ T3504] usb 4-1: USB disconnect, device number 22 [ 230.672142][ T4490] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 230.829039][ T9282] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 230.864554][ T9282] usb 3-1: config 0 has an invalid interface number: 82 but max is 35 [ 230.910355][ T9282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 230.945787][T13032] netlink: 'syz.4.2972': attribute type 10 has an invalid length. [ 230.964433][ T9282] usb 3-1: config 0 has no interface number 0 [ 230.984102][ T9282] usb 3-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 231.052152][ T9282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.093502][ T9282] usb 3-1: config 0 descriptor?? [ 231.132722][ T3504] usb 1-1: USB disconnect, device number 9 [ 231.160165][ T9282] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 231.167754][T13042] loop4: detected capacity change from 0 to 128 [ 231.303071][T13042] FAT-fs (loop4): Directory bread(block 3236) failed [ 231.328617][T13042] FAT-fs (loop4): Directory bread(block 3237) failed [ 231.337935][T13042] FAT-fs (loop4): Directory bread(block 3238) failed [ 231.345197][T13042] FAT-fs (loop4): Directory bread(block 3239) failed [ 231.353967][T13042] FAT-fs (loop4): Directory bread(block 3240) failed [ 231.363036][T13042] FAT-fs (loop4): Directory bread(block 3241) failed [ 231.371404][T13042] FAT-fs (loop4): Directory bread(block 3242) failed [ 231.380304][T13042] FAT-fs (loop4): Directory bread(block 3243) failed [ 231.409290][T13042] FAT-fs (loop4): Directory bread(block 3236) failed [ 231.419718][T13042] FAT-fs (loop4): Directory bread(block 3237) failed [ 231.473970][ T4496] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 231.578649][ T9282] gspca_sunplus: reg_r err -71 [ 231.584521][ T9282] sunplus: probe of 3-1:0.82 failed with error -71 [ 231.636487][ T9282] usb 3-1: USB disconnect, device number 16 [ 231.647494][T13036] loop5: detected capacity change from 0 to 32768 [ 231.741424][T13065] loop4: detected capacity change from 0 to 4096 [ 231.776926][T13036] XFS (loop5): Mounting V5 Filesystem [ 231.932828][ T4496] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 231.934492][T13065] ntfs: volume version 3.1. [ 231.946826][ T4496] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 231.962816][ T4496] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 231.964974][T13036] XFS (loop5): Ending clean mount [ 231.972935][ T4496] usb 4-1: config 0 has no interface number 0 [ 231.972962][ T4496] usb 4-1: config 0 has no interface number 1 [ 231.973011][ T4496] usb 4-1: config 0 interface 213 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 231.973037][ T4496] usb 4-1: config 0 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.026725][ T4496] usb 4-1: too many endpoints for config 0 interface 229 altsetting 129: 54, using maximum allowed: 30 [ 232.042491][ T4496] usb 4-1: config 0 interface 229 altsetting 129 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 232.063931][ T4496] usb 4-1: config 0 interface 229 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 54 [ 232.096117][ T4496] usb 4-1: config 0 interface 229 has no altsetting 0 [ 232.306897][ T1323] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 232.307233][ T4496] usb 4-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice= 9.0b [ 232.335995][ T7417] XFS (loop5): Unmounting Filesystem [ 232.371514][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.405370][ T4496] usb 4-1: Product: syz [ 232.420534][ T4496] usb 4-1: Manufacturer: syz [ 232.430917][ T4496] usb 4-1: SerialNumber: syz [ 232.468352][ T4496] usb 4-1: config 0 descriptor?? [ 232.697201][ T1323] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 232.726905][ T1323] usb 1-1: config 0 has no interface number 0 [ 232.744439][T13136] netlink: 'syz.2.2995': attribute type 2 has an invalid length. [ 232.766090][T13136] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2995'. [ 232.811278][ T4496] kaweth 4-1:0.213: Firmware present in device. [ 232.907011][ T1323] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 232.926446][ T1323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.961053][T13149] loop2: detected capacity change from 0 to 164 [ 232.969725][ T1323] usb 1-1: Product: syz [ 232.987106][ T1323] usb 1-1: Manufacturer: syz [ 232.990705][ T4496] kaweth 4-1:0.213: Error reading configuration (-71), no net device created [ 232.991931][ T1323] usb 1-1: SerialNumber: syz [ 233.020877][ T4496] kaweth: probe of 4-1:0.213 failed with error -5 [ 233.037844][ T1323] usb 1-1: config 0 descriptor?? [ 233.078740][ T1323] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 233.083833][T13156] loop5: detected capacity change from 0 to 1024 [ 233.098320][ T1323] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 233.112979][ T1323] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 233.130928][ T4496] kaweth 4-1:0.229: Firmware present in device. [ 233.151271][ T1323] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 233.177057][ T4496] kaweth 4-1:0.229: Error reading configuration (-71), no net device created [ 233.179572][ T1323] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 233.201984][ T4496] kaweth: probe of 4-1:0.229 failed with error -5 [ 233.243898][T13156] hfsplus: bad catalog entry type [ 233.254690][ T4496] usb 4-1: USB disconnect, device number 23 [ 233.324957][ T1501] hfsplus: b-tree write err: -5, ino 4 [ 233.564513][T13204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.571844][T13204] IPv6: NLM_F_CREATE should be set when creating new route [ 233.579179][T13204] IPv6: NLM_F_CREATE should be set when creating new route [ 233.729562][ T5055] usb 1-1: USB disconnect, device number 10 [ 233.759455][T13222] loop5: detected capacity change from 0 to 512 [ 233.767068][ T5055] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 233.798150][ T5055] keyspan 1-1:0.133: device disconnected [ 233.828186][T13223] loop2: detected capacity change from 0 to 1024 [ 233.841589][T13222] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.3016: bad orphan inode 13 [ 233.863283][T13222] ext4_test_bit(bit=12, block=4) = 1 [ 233.877139][T13222] is_bad_inode(inode)=0 [ 233.881459][T13222] NEXT_ORPHAN(inode)=0 [ 233.907382][T13222] max_ino=32 [ 233.910711][T13222] i_nlink=1 [ 233.914117][T13222] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.979871][T13222] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.3016: Unrecognised inode hash code 20 [ 234.006903][T13222] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3016: Corrupt directory, running e2fsck is recommended [ 234.024246][T13223] hfsplus: bad catalog entry type [ 234.177756][ T4376] hfsplus: b-tree write err: -5, ino 4 [ 234.367336][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 234.760899][T13334] loop4: detected capacity change from 0 to 2048 [ 234.856297][T13334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.937586][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3044'. [ 235.118897][T13375] netlink: 'syz.3.3052': attribute type 21 has an invalid length. [ 235.169354][T13375] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3052'. [ 235.414493][T13409] loop0: detected capacity change from 0 to 512 [ 235.476890][ T4496] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.505524][T13407] loop5: detected capacity change from 0 to 2048 [ 235.512131][T13409] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3062: bad orphan inode 13 [ 235.512546][T13409] ext4_test_bit(bit=12, block=4) = 1 [ 235.550729][T13409] is_bad_inode(inode)=0 [ 235.555232][T13409] NEXT_ORPHAN(inode)=0 [ 235.559445][T13409] max_ino=32 [ 235.562661][T13409] i_nlink=1 [ 235.566098][T13409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.628876][T13407] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.647038][T13419] cgroup: name respecified [ 235.729976][T13409] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.3062: Unrecognised inode hash code 20 [ 235.837591][T13409] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3062: Corrupt directory, running e2fsck is recommended [ 235.857279][ T4496] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.887445][ T4496] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.956657][T13433] loop3: detected capacity change from 0 to 4096 [ 236.007022][ T4496] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.062278][ T4496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.116846][ T4496] usb 5-1: SerialNumber: syz [ 236.480566][ T4496] usb 5-1: 0:2 : does not exist [ 236.485579][ T4496] usb 5-1: unit 5: unexpected type 0x03 [ 236.501278][T13461] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 236.512742][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'. [ 236.530355][ T4496] usb 5-1: unit 255 not found! [ 236.546788][T13461] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3075'. [ 236.601673][ T4496] usb 5-1: USB disconnect, device number 15 [ 236.626837][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'. [ 236.869755][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.205068][T13519] loop0: detected capacity change from 0 to 64 [ 237.254681][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 237.302029][T13529] loop5: detected capacity change from 0 to 256 [ 237.325750][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3094'. [ 237.432933][T13535] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (81), value rounded to 0 ms [ 237.450738][T13529] FAT-fs (loop5): Directory bread(block 64) failed [ 237.465420][T13529] FAT-fs (loop5): Directory bread(block 65) failed [ 237.473041][T13529] FAT-fs (loop5): Directory bread(block 66) failed [ 237.531929][T13529] FAT-fs (loop5): Directory bread(block 67) failed [ 237.555527][T13529] FAT-fs (loop5): Directory bread(block 68) failed [ 237.562515][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3100'. [ 237.575476][T13529] FAT-fs (loop5): Directory bread(block 69) failed [ 237.635935][T13529] FAT-fs (loop5): Directory bread(block 70) failed [ 237.687659][T13529] FAT-fs (loop5): Directory bread(block 71) failed [ 237.713658][T13529] FAT-fs (loop5): Directory bread(block 72) failed [ 237.738736][T13529] FAT-fs (loop5): Directory bread(block 73) failed [ 237.806355][T13594] cgroup: name respecified [ 237.814971][T13595] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.048865][T13613] loop4: detected capacity change from 0 to 64 [ 238.229361][T13625] loop5: detected capacity change from 0 to 128 [ 238.306603][T13618] loop0: detected capacity change from 0 to 2048 [ 238.370487][T13618] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 238.418276][T13618] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 238.489009][T13618] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 238.522209][T13618] UDF-fs: Scanning with blocksize 512 failed [ 238.625067][T13618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.741344][T13648] loop3: detected capacity change from 0 to 4096 [ 238.779645][T13659] /dev/loop0: Can't open blockdev [ 238.906812][ T4169] UDF-fs: error (device loop0): udf_read_inode: (ino 834) failed !bh [ 238.938868][T13648] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.988733][ T4169] UDF-fs: error (device loop0): udf_read_inode: (ino 834) failed !bh [ 239.190522][T13680] netlink: 'syz.4.3129': attribute type 1 has an invalid length. [ 239.231885][T13680] __nla_validate_parse: 1 callbacks suppressed [ 239.231907][T13680] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3129'. [ 239.433016][T13597] loop2: detected capacity change from 0 to 32768 [ 239.499927][ T1501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.609011][ T1501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.615412][T13696] loop5: detected capacity change from 0 to 4096 [ 239.702443][ T1501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.785367][T13715] libceph: resolve '400' (ret=-3): failed [ 239.792348][T13597] XFS (loop2): Mounting V5 Filesystem [ 239.822698][ T1501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.127072][ T9282] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 240.486984][ T4492] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 240.508171][ T9282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 4231, setting to 64 [ 240.548702][T13597] XFS (loop2): Ending clean mount [ 240.686988][ T9282] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 240.696129][ T9282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.733638][ T9282] usb 4-1: Product: syz [ 240.738119][ T9282] usb 4-1: Manufacturer: syz [ 240.743061][ T9282] usb 4-1: SerialNumber: syz [ 240.776243][ T9282] usb 4-1: config 0 descriptor?? [ 240.804345][ T4165] XFS (loop2): Unmounting Filesystem [ 240.823789][T13719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.851855][ T9282] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 240.900384][ T4492] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.918974][ T4492] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.017289][ T4492] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.026396][ T4492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.047865][ T4492] usb 6-1: SerialNumber: syz [ 241.188456][ T4496] usb 4-1: USB disconnect, device number 24 [ 241.212100][T13878] loop4: detected capacity change from 0 to 256 [ 241.370465][ T4492] usb 6-1: 0:2 : does not exist [ 241.384115][ T4492] usb 6-1: unit 5: unexpected type 0x03 [ 241.391525][T13878] FAT-fs (loop4): Directory bread(block 64) failed [ 241.399275][ T4492] usb 6-1: unit 255 not found! [ 241.402419][T13878] FAT-fs (loop4): Directory bread(block 65) failed [ 241.427450][T13878] FAT-fs (loop4): Directory bread(block 66) failed [ 241.435242][T13878] FAT-fs (loop4): Directory bread(block 67) failed [ 241.489744][T13751] chnl_net:caif_netlink_parms(): no params data found [ 241.501269][ T4492] usb 6-1: USB disconnect, device number 7 [ 241.507234][T13878] FAT-fs (loop4): Directory bread(block 68) failed [ 241.518564][T13878] FAT-fs (loop4): Directory bread(block 69) failed [ 241.554588][T13878] FAT-fs (loop4): Directory bread(block 70) failed [ 241.580470][T13878] FAT-fs (loop4): Directory bread(block 71) failed [ 241.622346][T13878] FAT-fs (loop4): Directory bread(block 72) failed [ 241.631673][T13878] FAT-fs (loop4): Directory bread(block 73) failed [ 241.817413][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.862868][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.868512][T13994] loop3: detected capacity change from 0 to 1024 [ 241.915897][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.960294][T13751] device bridge_slave_0 entered promiscuous mode [ 242.004773][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.039635][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.079165][T13751] device bridge_slave_1 entered promiscuous mode [ 242.083187][T14012] loop4: detected capacity change from 0 to 128 [ 242.294345][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 242.325424][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.336866][ T4206] Bluetooth: hci1: command 0x0409 tx timeout [ 242.399600][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.433001][T14067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3161'. [ 242.654097][T13751] team0: Port device team_slave_0 added [ 242.723966][T13751] team0: Port device team_slave_1 added [ 242.882945][ T1501] device hsr_slave_0 left promiscuous mode [ 242.893137][ T1501] device hsr_slave_1 left promiscuous mode [ 242.934381][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.962103][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.987914][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.017605][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.032837][ T1501] device bridge_slave_1 left promiscuous mode [ 243.060744][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.109312][ T1501] device bridge_slave_0 left promiscuous mode [ 243.116030][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.154273][ T1501] device veth1_macvtap left promiscuous mode [ 243.182412][ T1501] device veth0_macvtap left promiscuous mode [ 243.198141][ T1501] device veth1_vlan left promiscuous mode [ 243.221408][ T1501] device veth0_vlan left promiscuous mode [ 243.295549][T14185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.599433][T14198] loop2: detected capacity change from 0 to 4096 [ 243.740645][T14198] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.879317][ T1501] bond2 (unregistering): Released all slaves [ 243.967687][ T1501] bond1 (unregistering): Released all slaves [ 244.406270][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 244.416844][ T4206] Bluetooth: hci1: command 0x041b tx timeout [ 244.495275][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 244.526498][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.577597][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.669090][ T1501] bond0 (unregistering): Released all slaves [ 244.774550][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.796911][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.817654][T14268] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 244.878502][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.999004][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.005997][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.017651][T14280] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3213'. [ 245.045572][T14272] loop5: detected capacity change from 0 to 4096 [ 245.066812][T14278] loop2: detected capacity change from 0 to 1024 [ 245.096496][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.183255][T14272] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.340090][T13751] device hsr_slave_0 entered promiscuous mode [ 245.403315][T13751] device hsr_slave_1 entered promiscuous mode [ 245.438256][T13751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.446214][T13751] Cannot create hsr debugfs directory [ 245.655826][T14365] loop5: detected capacity change from 0 to 256 [ 245.842865][T14398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.988589][T14365] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 246.076279][T14365] exFAT-fs (loop5): hint_cluster is invalid (521) [ 246.129250][T14365] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000208) [ 246.165104][T14365] exFAT-fs (loop5): Filesystem has been set read-only [ 246.205053][T14365] exFAT-fs (loop5): error, failed to bmap (inode : ffff888074668160 iblock : 9, err : -5) [ 246.248839][T14365] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000208) [ 246.311639][T13751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.327396][T14365] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000208) [ 246.381717][T13751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.449818][T13751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.492025][T13751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 246.497127][ T4206] Bluetooth: hci1: command 0x040f tx timeout [ 246.754306][T14504] xt_TCPMSS: Only works on TCP SYN packets [ 246.913058][T13751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.996472][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.031901][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.090532][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.132740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.155972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.207484][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.214770][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.253729][T14527] netlink: 'syz.3.3261': attribute type 3 has an invalid length. [ 247.277713][T14529] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 247.298393][T14527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3261'. [ 247.422150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.468615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.529545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.585665][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.592874][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.636320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.646754][ T5055] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.672761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.711827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.735487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.802796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.828924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.831782][T14564] loop3: detected capacity change from 0 to 256 [ 247.850350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.908678][T13751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.950546][T13751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.989733][T14564] FAT-fs (loop3): Directory bread(block 64) failed [ 248.007201][ T5055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 4231, setting to 64 [ 248.012484][T14564] FAT-fs (loop3): Directory bread(block 65) failed [ 248.019393][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.058028][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.061645][T14564] FAT-fs (loop3): Directory bread(block 66) failed [ 248.076111][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.121266][T14564] FAT-fs (loop3): Directory bread(block 67) failed [ 248.125160][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.138276][T14564] FAT-fs (loop3): Directory bread(block 68) failed [ 248.155296][T14564] FAT-fs (loop3): Directory bread(block 69) failed [ 248.162170][T14564] FAT-fs (loop3): Directory bread(block 70) failed [ 248.180539][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.207005][ T5055] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 248.210434][T14564] FAT-fs (loop3): Directory bread(block 71) failed [ 248.216096][ T5055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.276909][T14579] No such timeout policy "syz1" [ 248.286189][T14564] FAT-fs (loop3): Directory bread(block 72) failed [ 248.287400][ T5055] usb 5-1: Product: syz [ 248.318841][T14564] FAT-fs (loop3): Directory bread(block 73) failed [ 248.327037][ T5055] usb 5-1: Manufacturer: syz [ 248.331765][ T5055] usb 5-1: SerialNumber: syz [ 248.349573][T14476] loop2: detected capacity change from 0 to 40427 [ 248.387750][ T5055] usb 5-1: config 0 descriptor?? [ 248.407007][T14535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.451762][ T5055] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 248.526839][T14476] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 248.544933][T14476] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 248.585496][ T5055] Bluetooth: hci1: command 0x0419 tx timeout [ 248.629873][T14476] F2FS-fs (loop2): invalid crc value [ 248.654854][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.670768][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.694190][T14476] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 248.723815][T13751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.736971][ T5055] usb 5-1: USB disconnect, device number 16 [ 248.776684][T14476] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 248.794046][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3269'. [ 248.934988][T14616] loop3: detected capacity change from 0 to 1764 [ 249.009734][T14476] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 249.020232][T14629] xt_TCPMSS: Only works on TCP SYN packets [ 249.026285][T14476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.385153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.445879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.520429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.551830][T14652] netlink: 151480 bytes leftover after parsing attributes in process `syz.3.3274'. [ 249.563335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.592666][T13751] device veth0_vlan entered promiscuous mode [ 249.620712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.637175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.685523][T13751] device veth1_vlan entered promiscuous mode [ 249.830611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.858447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.887892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.921474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.967157][T13751] device veth0_macvtap entered promiscuous mode [ 250.009129][T13751] device veth1_macvtap entered promiscuous mode [ 250.116578][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.176298][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.213779][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.280821][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.331811][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.396535][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.453090][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.491252][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.554814][T13751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.589099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.613125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.653205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.678243][T14637] loop5: detected capacity change from 0 to 32768 [ 250.693317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.758953][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.817977][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.850210][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.886678][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.922796][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.954108][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.996699][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.036664][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.058374][T13751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.075291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.090676][T14637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3271 (14637) [ 251.117835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.143654][T13751] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.192238][T13751] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.201330][T14637] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 251.236697][T13751] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.249207][T14637] BTRFS info (device loop5): using free space tree [ 251.276827][T13751] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.286054][T14637] BTRFS info (device loop5): has skinny extents [ 251.547362][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 251.557464][T14637] BTRFS info (device loop5): enabling ssd optimizations [ 251.598830][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.660982][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.799269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.830952][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.897091][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.984337][T14794] xt_CT: No such helper "syz0" [ 252.037035][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.269970][T14826] loop2: detected capacity change from 0 to 256 [ 252.387299][T14826] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 252.459982][T14826] exFAT-fs (loop2): hint_cluster is invalid (521) [ 252.489441][T14826] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 252.521249][T14826] exFAT-fs (loop2): Filesystem has been set read-only [ 252.542739][T14826] exFAT-fs (loop2): error, failed to bmap (inode : ffff888063048e60 iblock : 9, err : -5) [ 252.575443][T14826] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 252.634036][T14826] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 252.982433][T14871] 9pnet: p9_fd_create_unix (14871): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.035582][T14867] loop2: detected capacity change from 0 to 1764 [ 253.122558][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.338211][T14891] loop3: detected capacity change from 0 to 256 [ 253.451070][T14891] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 253.584828][T14891] exFAT-fs (loop3): hint_cluster is invalid (521) [ 253.626837][T14891] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 253.656855][T14918] tmpfs: Bad value for 'mpol' [ 253.666913][T14891] exFAT-fs (loop3): Filesystem has been set read-only [ 253.696054][T14891] exFAT-fs (loop3): error, failed to bmap (inode : ffff888063049b60 iblock : 9, err : -5) [ 253.742440][T14891] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 253.794520][T14891] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 253.832037][T14930] netlink: 'syz.2.3338': attribute type 30 has an invalid length. [ 254.019820][T14941] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 254.065704][T14947] cgroup: release_agent respecified [ 254.288799][T14954] loop4: detected capacity change from 0 to 2048 [ 254.491793][T14954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.661746][T14859] loop5: detected capacity change from 0 to 40427 [ 254.789698][T14983] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 254.851749][T14859] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 254.916265][T14859] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 254.985388][T14859] F2FS-fs (loop5): invalid crc value [ 255.012873][T14996] loop3: detected capacity change from 0 to 2048 [ 255.042730][T14859] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 255.090871][T15012] tmpfs: Bad value for 'mpol' [ 255.126801][T14859] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.149124][T14996] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.245473][T15025] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.476369][T14859] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 255.511724][T14859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 255.549941][T15049] loop4: detected capacity change from 0 to 256 [ 255.620168][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.626514][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.876939][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3381'. [ 255.907714][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3381'. [ 255.952433][T15075] loop2: detected capacity change from 0 to 2048 [ 256.040295][T15075] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 256.145521][T15096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.450100][T15126] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 256.479564][T15126] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 256.512980][T15126] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 256.746959][ T4206] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 256.831576][T15161] loop6: detected capacity change from 0 to 1764 [ 256.901121][T15173] loop5: detected capacity change from 0 to 512 [ 256.974657][T15173] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.032150][T15182] loop3: detected capacity change from 0 to 64 [ 257.079776][T15173] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 257.100646][T15173] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3410: invalid indirect mapped block 2683928664 (level 1) [ 257.107000][ T4206] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 257.131714][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.151285][ T4206] usb 3-1: config 0 descriptor?? [ 257.187077][T15173] EXT4-fs (loop5): 1 truncate cleaned up [ 257.193009][T15173] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noinit_itable,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 257.199644][ T4206] go7007: probe of 3-1:0.0 failed with error -12 [ 257.405528][ T4206] usb 3-1: USB disconnect, device number 17 [ 257.624498][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3421'. [ 257.716312][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3421'. [ 258.162752][T15176] loop4: detected capacity change from 0 to 32768 [ 258.247757][ T26] audit: type=1326 audit(1731442553.321:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15254 comm="syz.2.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3182f719 code=0x7ffc0000 [ 258.316514][ T26] audit: type=1326 audit(1731442553.321:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15254 comm="syz.2.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4e3182f719 code=0x7ffc0000 [ 258.357796][ T26] audit: type=1326 audit(1731442553.321:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15254 comm="syz.2.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3182f719 code=0x7ffc0000 [ 258.380927][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.389611][ T26] audit: type=1326 audit(1731442553.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15254 comm="syz.2.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3182f719 code=0x7ffc0000 [ 258.424167][T15176] XFS (loop4): Mounting V5 Filesystem [ 258.445926][T15271] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3435'. [ 258.568296][T15288] loop2: detected capacity change from 0 to 512 [ 258.652846][T15176] XFS (loop4): Ending clean mount [ 258.673487][T15288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.696081][T15176] XFS (loop4): Quotacheck needed: Please wait. [ 258.697023][T15288] ext4 filesystem being mounted at /781/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.774413][T15176] XFS (loop4): Quotacheck: Done. [ 258.823230][T15303] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3444'. [ 258.836862][ T5055] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 258.877686][ T4206] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 258.903772][ T4175] XFS (loop4): Unmounting Filesystem [ 258.914163][T15309] loop2: detected capacity change from 0 to 256 [ 258.949431][T15311] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3446'. [ 258.963687][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.975918][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.988327][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.000959][T15309] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.007473][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.030512][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.045174][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.055823][T15311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.061698][T15309] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1e22868b, utbl_chksum : 0xe619d30d) [ 259.070879][T15311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.094637][T15311] device batadv_slave_1 entered promiscuous mode [ 259.128985][ T4206] usb 4-1: Using ep0 maxpacket: 32 [ 259.134320][ T5055] usb 6-1: Using ep0 maxpacket: 16 [ 259.267316][ T4206] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.282470][ T4206] usb 4-1: config 0 has no interface number 0 [ 259.457403][ T5055] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2 [ 259.484418][ T4206] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 259.505349][ T5055] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.514497][ T4206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.528879][ T5055] usb 6-1: Product: syz [ 259.533096][ T5055] usb 6-1: Manufacturer: syz [ 259.538919][ T4206] usb 4-1: Product: syz [ 259.543108][ T4206] usb 4-1: Manufacturer: syz [ 259.548273][ T4206] usb 4-1: SerialNumber: syz [ 259.564911][ T5055] usb 6-1: SerialNumber: syz [ 259.580166][ T4206] usb 4-1: config 0 descriptor?? [ 259.586359][ T5055] usb 6-1: config 0 descriptor?? [ 259.629199][ T4206] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 259.640612][ T5055] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 259.657299][ T4206] usb 4-1: selecting invalid altsetting 1 [ 259.663275][ T4206] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 259.682857][ T4206] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.694534][ T4206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 259.705980][ T4206] usb 4-1: media controller created [ 259.753945][ T4206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.801222][ T26] audit: type=1326 audit(1731442554.871:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da6e1719 code=0x7ffc0000 [ 259.830656][ T26] audit: type=1326 audit(1731442554.871:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da6e1719 code=0x7ffc0000 [ 259.853888][ T4204] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.887812][ T4206] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 259.906806][ T26] audit: type=1326 audit(1731442554.921:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc7da6e1719 code=0x7ffc0000 [ 259.925708][ T4206] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 259.972177][ T26] audit: type=1326 audit(1731442554.921:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da6e1719 code=0x7ffc0000 [ 260.036104][ T4206] DVB: Unable to find symbol mxl5005s_attach() [ 260.046417][T15372] binder: 15371:15372 ioctl c018620c 20000040 returned -22 [ 260.059241][ T26] audit: type=1326 audit(1731442554.921:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7da6e1719 code=0x7ffc0000 [ 260.102059][ T5055] usb 6-1: USB disconnect, device number 8 [ 260.129022][ T4206] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 260.156822][ T4204] usb 7-1: Using ep0 maxpacket: 16 [ 260.261138][ T4206] usb 4-1: USB disconnect, device number 25 [ 260.296810][ T4204] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.315389][ T4204] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 260.406973][ T4204] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.424471][ T4204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.434506][ T4204] usb 7-1: SerialNumber: syz [ 260.488358][T15362] loop2: detected capacity change from 0 to 32768 [ 260.510448][ T7061] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 260.706406][T15362] XFS (loop2): Mounting V5 Filesystem [ 260.719850][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 260.751353][ T4204] usb 7-1: USB disconnect, device number 2 [ 260.766729][ T7061] usb 5-1: Using ep0 maxpacket: 16 [ 260.878578][T15362] XFS (loop2): Ending clean mount [ 260.908056][T15362] XFS (loop2): Quotacheck needed: Please wait. [ 260.917101][ T7061] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.928687][ T7061] usb 5-1: config 0 has no interface number 0 [ 260.996482][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3469'. [ 261.035974][T15362] XFS (loop2): Quotacheck: Done. [ 261.107100][ T4165] XFS (loop2): Unmounting Filesystem [ 261.121778][T15447] binder: 15446:15447 ioctl c018620c 20000040 returned -22 [ 261.167315][ T7061] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 261.193876][ T7061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.255203][ T7061] usb 5-1: Product: syz [ 261.294086][ T7061] usb 5-1: Manufacturer: syz [ 261.323267][ T7061] usb 5-1: SerialNumber: syz [ 261.352763][ T7061] usb 5-1: config 0 descriptor?? [ 261.410237][ T7061] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 261.670184][T15492] netlink: 'syz.5.3485': attribute type 2 has an invalid length. [ 261.820932][T15500] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3473'. [ 261.838365][ T7061] gspca_spca1528: reg_w err -71 [ 261.857010][ T4488] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 261.884211][ T7061] spca1528: probe of 5-1:0.1 failed with error -71 [ 261.913786][ T7061] usb 5-1: USB disconnect, device number 17 [ 261.962111][T15498] loop5: detected capacity change from 0 to 4096 [ 262.042882][T15498] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 262.071467][T15498] ntfs3: loop5: Failed to load $Extend. [ 262.111311][T15498] ntfs3: loop5: ino=5, "/" directory corrupted [ 262.118186][ T4488] usb 7-1: Using ep0 maxpacket: 8 [ 262.267025][ T4488] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.281379][ T4488] usb 7-1: config 0 has no interface number 0 [ 262.298121][ T4488] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.319704][ T4488] usb 7-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.319975][T15493] loop3: detected capacity change from 0 to 32768 [ 262.339309][ T4488] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.349242][ T4488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.359885][ T4488] usb 7-1: config 0 descriptor?? [ 262.411278][ T4488] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 262.521575][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3494'. [ 262.528289][T15493] XFS (loop3): Mounting V5 Filesystem [ 262.538742][ T4204] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 262.619705][ T4488] usb 7-1: USB disconnect, device number 3 [ 262.705307][T15558] netlink: 'syz.4.3496': attribute type 2 has an invalid length. [ 262.756318][T15493] XFS (loop3): Ending clean mount [ 262.794995][T15493] XFS (loop3): Quotacheck needed: Please wait. [ 262.801534][ T4204] usb 3-1: Using ep0 maxpacket: 16 [ 262.823290][ T4206] Bluetooth: hci3: command 0x0406 tx timeout [ 262.902596][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'. [ 262.913920][T15571] loop5: detected capacity change from 0 to 512 [ 262.933611][T15493] XFS (loop3): Quotacheck: Done. [ 262.947781][ T4204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 262.976719][T15571] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 262.976719][T15571] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 262.976719][T15571] [ 263.061368][ T4170] XFS (loop3): Unmounting Filesystem [ 263.116110][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 263.206959][ T4204] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 263.216109][ T4204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.262940][ T4204] usb 3-1: Product: syz [ 263.287180][ T4204] usb 3-1: Manufacturer: syz [ 263.304322][ T4204] usb 3-1: SerialNumber: syz [ 263.334226][ T4204] usb 3-1: config 0 descriptor?? [ 263.375570][T15599] netlink: 'syz.6.3509': attribute type 2 has an invalid length. [ 263.388966][T15600] netlink: 'syz.4.3510': attribute type 3 has an invalid length. [ 263.389620][T15571] loop5: detected capacity change from 0 to 4096 [ 263.408863][ T4204] pegasus_notetaker: probe of 3-1:0.0 failed with error -12 [ 263.413042][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 263.463206][T15571] ntfs3: Unknown parameter 'errors' [ 263.624980][ T4206] usb 3-1: USB disconnect, device number 18 [ 263.671171][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 263.912934][T15628] loop5: detected capacity change from 0 to 4096 [ 263.963062][T15648] netlink: 'syz.3.3522': attribute type 12 has an invalid length. [ 264.202853][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 264.219472][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 264.284743][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 264.301050][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 264.343101][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 264.369149][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 264.392282][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 264.394540][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 264.438821][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 264.486750][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 264.494822][T15628] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 264.541047][T15690] loop2: detected capacity change from 0 to 256 [ 264.584769][T15690] exfat: Deprecated parameter 'namecase' [ 264.616783][T15690] exfat: Deprecated parameter 'namecase' [ 264.691458][T15690] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 264.954985][ T1323] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 264.963344][ T4165] exFAT-fs (loop2): invalid start cluster (4278190088) [ 264.996309][T15727] loop3: detected capacity change from 0 to 64 [ 265.151953][T15727] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 265.217121][ T1323] usb 5-1: Using ep0 maxpacket: 16 [ 265.336945][ T1323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.537731][ T1323] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 265.586474][ T1323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.614132][ T1323] usb 5-1: Product: syz [ 265.618976][ T1323] usb 5-1: Manufacturer: syz [ 265.639777][T15764] loop5: detected capacity change from 0 to 256 [ 265.664676][ T1323] usb 5-1: SerialNumber: syz [ 265.687851][ T1323] usb 5-1: config 0 descriptor?? [ 265.730134][T15764] exfat: Deprecated parameter 'namecase' [ 265.738978][ T1323] pegasus_notetaker: probe of 5-1:0.0 failed with error -12 [ 265.766916][T15764] exfat: Deprecated parameter 'namecase' [ 265.806093][T15764] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 265.872675][T15767] loop3: detected capacity change from 0 to 4096 [ 265.993893][ T4206] usb 5-1: USB disconnect, device number 18 [ 266.027217][ T7417] exFAT-fs (loop5): invalid start cluster (4278190088) [ 266.056770][ T1323] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 266.222373][T15794] netlink: 'syz.5.3555': attribute type 11 has an invalid length. [ 266.265133][T15794] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.3555'. [ 266.297417][ T1323] usb 3-1: Using ep0 maxpacket: 8 [ 266.320345][T15729] loop6: detected capacity change from 0 to 32768 [ 266.397742][T15729] XFS: ikeep mount option is deprecated. [ 266.424414][ T1323] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.461151][ T1323] usb 3-1: config 0 has no interface number 0 [ 266.514015][ T1323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.580916][T15820] netlink: 'syz.5.3560': attribute type 3 has an invalid length. [ 266.594437][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3560'. [ 266.605424][ T1323] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.606560][ T1323] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.723456][ T1323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.771239][ T1323] usb 3-1: config 0 descriptor?? [ 266.838934][ T1323] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 266.878680][T15729] XFS (loop6): Mounting V5 Filesystem [ 266.929317][T15846] netlink: 'syz.4.3565': attribute type 11 has an invalid length. [ 266.959024][T15846] netlink: 131208 bytes leftover after parsing attributes in process `syz.4.3565'. [ 267.114677][ T5543] usb 3-1: USB disconnect, device number 19 [ 267.208947][T15729] XFS (loop6): Ending clean mount [ 267.278297][T15729] XFS (loop6): Quotacheck needed: Please wait. [ 267.417819][T15886] netlink: 'syz.5.3581': attribute type 11 has an invalid length. [ 267.427344][T15729] XFS (loop6): Quotacheck: Done. [ 267.486854][T15886] netlink: 131208 bytes leftover after parsing attributes in process `syz.5.3581'. [ 267.558308][T13751] XFS (loop6): Unmounting Filesystem [ 267.754311][T15904] loop4: detected capacity change from 0 to 2048 [ 267.879751][T15904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.908554][T15917] netlink: 'syz.2.3576': attribute type 3 has an invalid length. [ 267.990345][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'. [ 268.329849][T15932] loop5: detected capacity change from 0 to 2048 [ 268.530059][T15932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.600545][ T26] audit: type=1800 audit(1731442563.671:26): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3580" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 268.695571][T15962] netlink: 'syz.6.3572': attribute type 11 has an invalid length. [ 268.734591][T15962] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.3572'. [ 268.736332][T15855] loop3: detected capacity change from 0 to 32768 [ 268.872723][T15855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3567 (15855) [ 268.873118][T15959] loop2: detected capacity change from 0 to 4096 [ 268.973278][T15855] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 268.992769][T15855] BTRFS info (device loop3): using free space tree [ 269.002902][T15855] BTRFS info (device loop3): has skinny extents [ 269.029175][ T7061] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 269.138814][T15855] BTRFS info (device loop3): enabling ssd optimizations [ 269.347352][ T7061] usb 5-1: Using ep0 maxpacket: 8 [ 269.447274][ T6596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (6596) [ 269.477065][ T7061] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.485707][ T7061] usb 5-1: config 0 has no interface number 0 [ 269.512115][ T7061] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.542520][ T7061] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.566844][ T7061] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.610309][ T7061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.658511][ T7061] usb 5-1: config 0 descriptor?? [ 269.739826][ T7061] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 269.962898][ T4206] usb 5-1: USB disconnect, device number 19 [ 270.010380][T16056] netlink: 'syz.2.3599': attribute type 11 has an invalid length. [ 270.067652][T16056] netlink: 131208 bytes leftover after parsing attributes in process `syz.2.3599'. [ 270.707764][T16017] loop6: detected capacity change from 0 to 32768 [ 271.016188][T16118] loop5: detected capacity change from 0 to 2048 [ 271.080088][T16118] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 271.258444][T16118] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,journal_ioprio=0x0000000000000005,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,nobarrier,barrier=0x0000000000000003,data_err=abort,nojournal_checksum,. Quota mode: none. [ 271.412126][T16118] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3613: bg 0: block 234: padding at end of block bitmap is not set [ 271.564091][T16118] EXT4-fs (loop5): Remounting filesystem read-only [ 271.604804][T16118] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 271.664542][T16118] EXT4-fs (loop5): Remounting filesystem read-only [ 271.766863][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3626'. [ 272.074214][T16197] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 272.390207][T16218] loop6: detected capacity change from 0 to 256 [ 272.403153][T16105] loop2: detected capacity change from 0 to 32768 [ 272.527737][T16218] FAT-fs (loop6): Directory bread(block 64) failed [ 272.551642][T16218] FAT-fs (loop6): Directory bread(block 65) failed [ 272.586994][T16218] FAT-fs (loop6): Directory bread(block 66) failed [ 272.633112][T16218] FAT-fs (loop6): Directory bread(block 67) failed [ 272.670625][T16218] FAT-fs (loop6): Directory bread(block 68) failed [ 272.690872][T16218] FAT-fs (loop6): Directory bread(block 69) failed [ 272.707510][T16157] loop3: detected capacity change from 0 to 32768 [ 272.744568][T16218] FAT-fs (loop6): Directory bread(block 70) failed [ 272.763145][ T4204] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 272.767240][T16218] FAT-fs (loop6): Directory bread(block 71) failed [ 272.813888][T16218] FAT-fs (loop6): Directory bread(block 72) failed [ 272.846742][T16218] FAT-fs (loop6): Directory bread(block 73) failed [ 272.985183][ T26] audit: type=1800 audit(1731442568.051:27): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3636" name="file1" dev="loop6" ino=1048637 res=0 errno=0 [ 273.069588][ T4204] usb 5-1: Using ep0 maxpacket: 16 [ 273.232516][ T4204] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.258460][ T4204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.291329][ T4204] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 273.322658][ T4204] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.477132][ T4204] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 273.494464][ T4204] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.543620][ T4204] usb 5-1: Manufacturer: syz [ 273.568892][ T4204] usb 5-1: config 0 descriptor?? [ 273.647975][T16213] loop5: detected capacity change from 0 to 32768 [ 273.836364][ T4492] usb 5-1: USB disconnect, device number 20 [ 273.897635][T16213] XFS (loop5): Mounting V5 Filesystem [ 273.942464][ T4204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.986383][T16213] XFS (loop5): Ending clean mount [ 274.002753][T16213] XFS (loop5): Quotacheck needed: Please wait. [ 274.039559][T16273] loop2: detected capacity change from 0 to 32768 [ 274.085808][T16273] XFS: ikeep mount option is deprecated. [ 274.100353][T16213] XFS (loop5): Quotacheck: Done. [ 274.199639][ T7417] XFS (loop5): Unmounting Filesystem [ 274.217016][ T4204] usb 7-1: Using ep0 maxpacket: 16 [ 274.224905][T16273] XFS (loop2): Mounting V5 Filesystem [ 274.386532][T16273] XFS (loop2): Ending clean mount [ 274.393952][T16273] XFS (loop2): Quotacheck needed: Please wait. [ 274.419867][T16296] loop3: detected capacity change from 0 to 40427 [ 274.464348][T16296] F2FS-fs (loop3): invalid crc value [ 274.524382][T16296] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.534458][T16273] XFS (loop2): Quotacheck: Done. [ 274.547023][ T4204] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 274.589911][ T4204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.640684][ T4204] usb 7-1: Product: syz [ 274.646113][ T4165] XFS (loop2): Unmounting Filesystem [ 274.651056][ T4204] usb 7-1: Manufacturer: syz [ 274.666957][ T4204] usb 7-1: SerialNumber: syz [ 274.686277][ T4204] usb 7-1: config 0 descriptor?? [ 274.830454][T16296] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.997104][ T4204] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 275.006112][ T4204] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 275.071651][T16355] loop4: detected capacity change from 0 to 256 [ 275.225548][ T3504] usb 7-1: USB disconnect, device number 4 [ 275.485831][T16376] loop5: detected capacity change from 0 to 2048 [ 275.529611][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 275.622632][T16393] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.720101][T16376] NILFS (loop5): error -2 truncating bmap (ino=16) [ 275.757071][T16403] netlink: 'syz.3.3670': attribute type 2 has an invalid length. [ 275.807800][T16403] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 275.985696][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3675'. [ 276.043039][T16415] loop4: detected capacity change from 0 to 1764 [ 276.118376][T16415] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 276.169625][T16433] loop2: detected capacity change from 0 to 256 [ 276.225967][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 276.331714][T16433] FAT-fs (loop2): Directory bread(block 64) failed [ 276.360977][T16433] FAT-fs (loop2): Directory bread(block 65) failed [ 276.390060][T16433] FAT-fs (loop2): Directory bread(block 66) failed [ 276.414389][T16453] loop6: detected capacity change from 0 to 512 [ 276.421009][T16433] FAT-fs (loop2): Directory bread(block 67) failed [ 276.441696][T16433] FAT-fs (loop2): Directory bread(block 68) failed [ 276.456843][T16433] FAT-fs (loop2): Directory bread(block 69) failed [ 276.460059][T16451] loop4: detected capacity change from 0 to 2048 [ 276.464916][T16433] FAT-fs (loop2): Directory bread(block 70) failed [ 276.485049][T16433] FAT-fs (loop2): Directory bread(block 71) failed [ 276.493656][T16433] FAT-fs (loop2): Directory bread(block 72) failed [ 276.502674][T16433] FAT-fs (loop2): Directory bread(block 73) failed [ 276.558049][ T26] audit: type=1800 audit(1731442571.631:28): pid=16433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3680" name="file1" dev="loop2" ino=1048639 res=0 errno=0 [ 276.571925][T16453] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.3684: bad orphan inode 4 [ 276.612444][T16467] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.644525][T16453] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.656264][T16451] NILFS (loop4): error -2 truncating bmap (ino=16) [ 276.706828][ T3504] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 276.721773][T16453] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.3684: Logical block already allocated [ 276.916955][ T4491] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.942784][T16487] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3690'. [ 276.968682][ T3504] usb 4-1: Using ep0 maxpacket: 8 [ 276.996270][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 277.097192][ T3504] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.142943][ T3504] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 277.168096][ T3504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.177019][ T4491] usb 6-1: Using ep0 maxpacket: 8 [ 277.211173][ T3504] usb 4-1: config 0 descriptor?? [ 277.361232][T16520] device macsec0 entered promiscuous mode [ 277.482085][T16527] overlayfs: conflicting options: userxattr,metacopy=on [ 277.505972][ T3504] usb 4-1: USB disconnect, device number 26 [ 277.531656][ T4491] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=32.82 [ 277.556829][ T4491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.565164][ T4491] usb 6-1: Product: syz [ 277.600243][T16538] loop2: detected capacity change from 0 to 256 [ 277.606649][ T4491] usb 6-1: Manufacturer: syz [ 277.611794][T16542] netlink: 'syz.6.3709': attribute type 3 has an invalid length. [ 277.619479][ T4491] usb 6-1: SerialNumber: syz [ 277.643268][ T4491] usb 6-1: config 0 descriptor?? [ 277.673066][T16547] netlink: 674 bytes leftover after parsing attributes in process `syz.4.3710'. [ 277.709769][ T4491] gspca_main: spca501-2.14.0 probing 1776:501c [ 277.914194][T16572] netlink: 'syz.6.3717': attribute type 5 has an invalid length. [ 277.932667][ T4491] gspca_spca501: reg write: error -71 [ 277.944646][ T4491] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 277.964930][ T4491] spca501: probe of 6-1:0.0 failed with error -22 [ 278.037106][ T4491] usb 6-1: USB disconnect, device number 9 [ 278.139071][T16571] loop4: detected capacity change from 0 to 4096 [ 278.359908][T16605] loop2: detected capacity change from 0 to 164 [ 278.486053][T16605] rock: directory entry would overflow storage [ 278.518058][T16605] rock: sig=0x66, size=4, remaining=3 [ 278.537977][T16605] rock: directory entry would overflow storage [ 278.560814][T16605] rock: sig=0x66, size=4, remaining=3 [ 278.578300][T16605] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 278.580719][T16624] netlink: 'syz.3.3731': attribute type 4 has an invalid length. [ 278.600764][T16613] loop6: detected capacity change from 0 to 2048 [ 278.608416][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 278.655958][T16624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.674002][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.744141][T16634] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.777017][ T5055] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.863893][T16613] NILFS (loop6): error -2 truncating bmap (ino=16) [ 279.026760][ T5543] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 279.039594][ T5055] usb 6-1: Using ep0 maxpacket: 8 [ 279.130628][T16654] netlink: 'syz.3.3739': attribute type 13 has an invalid length. [ 279.157317][ T5055] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.176857][ T5055] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 279.198603][ T5055] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.235502][ T5055] usb 6-1: config 0 descriptor?? [ 279.267947][T16662] QAT: Stopping all acceleration devices. [ 279.426878][ T5543] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 279.446201][ T5543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.470766][ T5543] usb 3-1: config 0 descriptor?? [ 279.509254][ T5543] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 279.522678][ T4491] usb 6-1: USB disconnect, device number 10 [ 279.661542][T16645] loop4: detected capacity change from 0 to 32768 [ 279.727893][T16645] XFS: ikeep mount option is deprecated. [ 279.808659][T16669] loop3: detected capacity change from 0 to 32768 [ 279.844132][T16645] XFS (loop4): Mounting V5 Filesystem [ 279.934421][T16669] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 279.947264][T16669] BTRFS info (device loop3): using free space tree [ 279.953879][T16669] BTRFS info (device loop3): has skinny extents [ 279.971107][T16645] XFS (loop4): Ending clean mount [ 279.983420][T16645] XFS (loop4): Quotacheck needed: Please wait. [ 280.026972][ T5543] gspca_zc3xx: reg_w_i err -110 [ 280.031938][ T5543] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 280.066820][T16645] XFS (loop4): Quotacheck: Done. [ 280.223971][ T4175] XFS (loop4): Unmounting Filesystem [ 280.234489][ T4491] usb 3-1: USB disconnect, device number 20 [ 280.236826][T16669] BTRFS info (device loop3): enabling ssd optimizations [ 280.390148][T16725] loop2: detected capacity change from 0 to 2048 [ 280.626932][T16732] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.684875][T16725] NILFS (loop2): error -2 truncating bmap (ino=16) [ 280.870820][T16679] loop6: detected capacity change from 0 to 32768 [ 280.963470][T16679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3744 (16679) [ 281.079013][T16679] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 281.151354][T16679] BTRFS info (device loop6): using free space tree [ 281.183951][T16679] BTRFS info (device loop6): has skinny extents [ 281.375399][T16751] loop3: detected capacity change from 0 to 4096 [ 281.514322][T16751] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 281.611796][T16746] loop5: detected capacity change from 0 to 32764 [ 281.695778][T16679] BTRFS info (device loop6): enabling ssd optimizations [ 281.861738][T16746] attempt to access beyond end of device [ 281.861738][T16746] loop5: rw=4096, want=32768, limit=32764 [ 281.923136][T16746] XFS (loop5): last sector read failed [ 282.758677][T16848] netlink: 'syz.2.3774': attribute type 16 has an invalid length. [ 282.793203][T16845] loop3: detected capacity change from 0 to 4096 [ 282.803342][T16850] loop4: detected capacity change from 0 to 256 [ 282.816842][T16848] netlink: 'syz.2.3774': attribute type 17 has an invalid length. [ 282.848199][T16848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.879595][T16848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.897914][T16845] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 282.925668][T16848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.947402][T16848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.028352][T16845] ntfs: volume version 3.1. [ 283.041314][T16850] FAT-fs (loop4): Directory bread(block 64) failed [ 283.070570][T16850] FAT-fs (loop4): Directory bread(block 65) failed [ 283.113153][T16850] FAT-fs (loop4): Directory bread(block 66) failed [ 283.142205][T16857] netlink: 'syz.6.3764': attribute type 3 has an invalid length. [ 283.149227][T16850] FAT-fs (loop4): Directory bread(block 67) failed [ 283.176937][T16850] FAT-fs (loop4): Directory bread(block 68) failed [ 283.183549][T16850] FAT-fs (loop4): Directory bread(block 69) failed [ 283.207014][T16850] FAT-fs (loop4): Directory bread(block 70) failed [ 283.213967][T16850] FAT-fs (loop4): Directory bread(block 71) failed [ 283.246908][T16850] FAT-fs (loop4): Directory bread(block 72) failed [ 283.266748][T16850] FAT-fs (loop4): Directory bread(block 73) failed [ 283.289601][T16864] loop2: detected capacity change from 0 to 64 [ 283.864513][T16912] device bridge3 entered promiscuous mode [ 283.885306][T16901] loop4: detected capacity change from 0 to 4096 [ 283.980700][T16925] binder: 16924:16925 ioctl 400c620e 0 returned -14 [ 284.033659][T16930] netlink: 131088 bytes leftover after parsing attributes in process `syz.6.3797'. [ 284.116514][T16937] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 284.337287][T16953] loop4: detected capacity change from 0 to 512 [ 284.440296][T16970] netlink: 'syz.5.3812': attribute type 1 has an invalid length. [ 284.450551][T16970] netlink: 'syz.5.3812': attribute type 2 has an invalid length. [ 284.494547][T16953] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 284.537144][T16953] ext4 filesystem being mounted at /795/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.626831][ T5543] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 284.655320][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3817'. [ 284.782676][T16953] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 284.870750][T16953] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 284.914434][T16953] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.3805: Failed to acquire dquot type 0 [ 284.987063][ T5543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.026508][ T5543] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 285.066848][ T4368] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.085154][ T5543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.119210][ T5543] usb 4-1: config 0 descriptor?? [ 285.160021][ T5543] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 285.167953][ T5543] rndis_host: probe of 4-1:0.0 failed with error -22 [ 285.175921][ T5543] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 285.184440][ T5543] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 285.202865][ T5543] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 285.274287][T17019] netlink: 'syz.4.3822': attribute type 21 has an invalid length. [ 285.287063][T17019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3822'. [ 285.326817][ T4368] usb 3-1: Using ep0 maxpacket: 16 [ 285.364440][ T4496] usb 4-1: USB disconnect, device number 27 [ 285.447057][ T4368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.476860][ T4368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.676844][ T4368] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 285.686184][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 285.694538][ T4368] usb 3-1: Product: syz [ 285.698979][ T4368] usb 3-1: Manufacturer: syz [ 285.703727][ T4368] usb 3-1: SerialNumber: syz [ 285.729140][ T4368] usb 3-1: config 0 descriptor?? [ 285.736822][ T4492] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 285.767655][ T4368] usb 3-1: NFC: intf ffff8880776ba000 id ffffffff8d149b20 [ 285.806483][T17036] loop4: detected capacity change from 0 to 32768 [ 285.813459][ T3504] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 285.853270][T17036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3827 (17036) [ 285.894989][T17036] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 285.914091][T17036] BTRFS info (device loop4): using free space tree [ 285.924182][T17036] BTRFS info (device loop4): has skinny extents [ 285.978103][ T4496] usb 3-1: USB disconnect, device number 21 [ 286.026905][ T4492] usb 7-1: Using ep0 maxpacket: 32 [ 286.103306][T17036] BTRFS info (device loop4): enabling ssd optimizations [ 286.233307][ T3504] usb 6-1: Using ep0 maxpacket: 32 [ 286.317275][ T4492] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.339808][ T4492] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.367245][ T3504] usb 6-1: config 0 has an invalid interface number: 131 but max is 1 [ 286.377405][ T3504] usb 6-1: config 0 has an invalid interface number: 222 but max is 1 [ 286.392921][ T4492] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.403240][ T3504] usb 6-1: config 0 has no interface number 0 [ 286.409589][ T4492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.418086][ T3504] usb 6-1: config 0 has no interface number 1 [ 286.424412][ T3504] usb 6-1: config 0 interface 131 altsetting 2 bulk endpoint 0xB has invalid maxpacket 1023 [ 286.438056][ T3504] usb 6-1: config 0 interface 131 has no altsetting 0 [ 286.445923][ T3504] usb 6-1: config 0 interface 222 has no altsetting 0 [ 286.500722][ T4492] hub 7-1:4.0: USB hub found [ 286.624909][ T3504] usb 6-1: New USB device found, idVendor=0499, idProduct=1030, bcdDevice= 1.2e [ 286.638255][ T3504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.647221][ T3504] usb 6-1: Product: syz [ 286.652451][ T3504] usb 6-1: Manufacturer: syz [ 286.660498][ T3504] usb 6-1: SerialNumber: syz [ 286.668101][ T3504] usb 6-1: config 0 descriptor?? [ 286.699926][T17039] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 286.730464][ T4492] hub 7-1:4.0: config failed, can't read hub descriptor (err -90) [ 286.952823][ T26] audit: type=1400 audit(1731442582.021:29): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17106 comm="syz.2.3837" [ 287.059536][ T3504] usb 6-1: invalid MIDI in EP 0 [ 287.067241][ T3504] snd-usb-audio: probe of 6-1:0.131 failed with error -22 [ 287.077145][ T4495] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 287.088251][ T1323] usb 7-1: USB disconnect, device number 5 [ 287.159533][ T3504] snd-usb-audio: probe of 6-1:0.222 failed with error -2 [ 287.207298][ T3504] usb 6-1: USB disconnect, device number 11 [ 287.246460][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.222/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.336938][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'. [ 287.484891][T17160] overlayfs: missing 'lowerdir' [ 287.526979][ T4495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.607312][ T4495] usb 4-1: config 3 has an invalid interface number: 19 but max is 0 [ 287.615447][ T4495] usb 4-1: config 3 has an invalid interface number: 4 but max is 0 [ 287.643334][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 287.676223][ T4495] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 287.719042][ T4495] usb 4-1: config 3 has no interface number 0 [ 287.725558][ T4495] usb 4-1: config 3 has no interface number 1 [ 287.776931][ T4495] usb 4-1: config 3 interface 19 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 287.803255][ T4495] usb 4-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 287.847825][ T4495] usb 4-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 287.900619][ T4495] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 287.954881][T17206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3866'. [ 287.963249][ T4495] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 64 [ 287.996978][ T4495] usb 4-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 288.057048][ T4495] usb 4-1: config 3 interface 19 has no altsetting 0 [ 288.063838][ T4495] usb 4-1: config 3 interface 4 has no altsetting 0 [ 288.211309][T17231] loop4: detected capacity change from 0 to 256 [ 288.317390][ T4495] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 288.326524][ T4495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.356832][ T5543] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 288.367247][T17231] FAT-fs (loop4): Directory bread(block 64) failed [ 288.367303][T17231] FAT-fs (loop4): Directory bread(block 65) failed [ 288.367382][T17231] FAT-fs (loop4): Directory bread(block 66) failed [ 288.367416][T17231] FAT-fs (loop4): Directory bread(block 67) failed [ 288.367489][T17231] FAT-fs (loop4): Directory bread(block 68) failed [ 288.367523][T17231] FAT-fs (loop4): Directory bread(block 69) failed [ 288.367593][T17231] FAT-fs (loop4): Directory bread(block 70) failed [ 288.367627][T17231] FAT-fs (loop4): Directory bread(block 71) failed [ 288.367714][T17231] FAT-fs (loop4): Directory bread(block 72) failed [ 288.367747][T17231] FAT-fs (loop4): Directory bread(block 73) failed [ 288.381235][ T4495] usb 4-1: Product: syz [ 288.381259][ T4495] usb 4-1: Manufacturer: syz [ 288.381289][ T4495] usb 4-1: SerialNumber: syz [ 288.471911][ T26] audit: type=1800 audit(1731442583.541:30): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3875" name="file1" dev="loop4" ino=1048642 res=0 errno=0 [ 288.596775][ T5543] usb 3-1: Using ep0 maxpacket: 8 [ 288.721724][ T5543] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 288.740450][ T5543] usb 3-1: config 0 has no interface number 0 [ 288.743027][ T4495] pl2303 4-1:3.19: required endpoints missing [ 288.757274][ T5543] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.838018][ T4495] pl2303 4-1:3.4: required interrupt-in endpoint missing [ 288.873923][ T4495] usb 4-1: USB disconnect, device number 28 [ 288.946842][ T5543] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 288.972311][ T5543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.017414][ T5543] usb 3-1: Product: syz [ 289.037031][ T5543] usb 3-1: Manufacturer: syz [ 289.056805][ T5543] usb 3-1: SerialNumber: syz [ 289.079322][ T5543] usb 3-1: config 0 descriptor?? [ 289.129912][ T5543] em28xx 3-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 289.147480][ T5543] em28xx 3-1:0.191: Video interface 191 found: [ 289.275762][T17249] loop6: detected capacity change from 0 to 32768 [ 289.346411][T17294] loop4: detected capacity change from 0 to 4096 [ 289.369729][T17249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3880 (17249) [ 289.432479][T17249] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 289.475505][T17294] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.476986][T17249] BTRFS info (device loop6): using free space tree [ 289.493387][T17249] BTRFS info (device loop6): has skinny extents [ 289.568325][ T5543] em28xx 3-1:0.191: unknown em28xx chip ID (0) [ 289.689749][ T5543] em28xx 3-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 289.700865][T17249] BTRFS info (device loop6): enabling ssd optimizations [ 289.717109][ T5543] em28xx 3-1:0.191: board has no eeprom [ 289.791053][ T4495] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 289.818755][ T5543] em28xx 3-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 289.830643][ T5543] em28xx 3-1:0.191: analog set to bulk mode. [ 289.843255][ T4368] em28xx 3-1:0.191: Registering V4L2 extension [ 289.856125][T17249] BTRFS info (device loop6): balance: start [ 289.878396][ T5543] usb 3-1: USB disconnect, device number 22 [ 289.900180][T17249] BTRFS info (device loop6): balance: ended with status: 0 [ 289.916144][ T5543] em28xx 3-1:0.191: Disconnecting em28xx [ 289.982217][T17297] infiniband syz1: set active [ 289.982361][T17297] infiniband syz1: added bond_slave_1 [ 290.107694][ T4495] usb 6-1: Using ep0 maxpacket: 16 [ 290.227148][ T4495] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.235532][ T4495] usb 6-1: config 0 has no interface number 0 [ 290.267554][T17297] RDS/IB: syz1: added [ 290.275694][ T4495] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 290.290387][ T4368] em28xx 3-1:0.191: Config register raw data: 0xffffffed [ 290.301485][T17297] smc: adding ib device syz1 with port count 1 [ 290.308011][ T4368] em28xx 3-1:0.191: AC97 chip type couldn't be determined [ 290.318605][T17297] smc: ib device syz1 port 1 has pnetid [ 290.331776][ T4495] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 290.336173][ T4368] em28xx 3-1:0.191: No AC97 audio processor [ 290.527221][ T4495] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 290.562342][ T4495] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 290.570196][ T4368] usb 3-1: Decoder not found [ 290.586675][ T4495] usb 6-1: Product: syz [ 290.591153][ T4495] usb 6-1: SerialNumber: syz [ 290.600018][ T4368] em28xx 3-1:0.191: failed to create media graph [ 290.606462][ T4368] em28xx 3-1:0.191: V4L2 device video103 deregistered [ 290.649211][ T4495] usb 6-1: config 0 descriptor?? [ 290.688805][ T4495] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 290.703336][T17375] ================================================================== [ 290.712038][T17375] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430 [ 290.719038][T17375] Read of size 8 at addr ffff88803c70c900 by task v4l_id/17375 [ 290.726612][T17375] [ 290.728957][T17375] CPU: 1 PID: 17375 Comm: v4l_id Not tainted 5.15.171-syzkaller #0 [ 290.729141][ T4495] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input32 [ 290.736869][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.736941][T17375] Call Trace: [ 290.736951][T17375] [ 290.763123][T17375] dump_stack_lvl+0x1e3/0x2d0 [ 290.767846][T17375] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 290.773514][T17375] ? _printk+0xd1/0x120 [ 290.777713][T17375] ? __wake_up_klogd+0xcc/0x100 [ 290.782600][T17375] ? panic+0x860/0x860 [ 290.786695][T17375] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 290.792193][T17375] print_address_description+0x63/0x3b0 [ 290.797777][T17375] ? v4l2_fh_open+0xc7/0x430 [ 290.802407][T17375] kasan_report+0x16b/0x1c0 [ 290.806957][T17375] ? v4l2_fh_open+0xc7/0x430 [ 290.811600][T17375] v4l2_fh_open+0xc7/0x430 [ 290.816062][T17375] em28xx_v4l2_open+0x15d/0xa10 [ 290.820973][T17375] v4l2_open+0x228/0x360 [ 290.825247][T17375] chrdev_open+0x54a/0x630 [ 290.829778][T17375] ? cd_forget+0x160/0x160 [ 290.834221][T17375] ? do_raw_spin_unlock+0x137/0x8b0 [ 290.839456][T17375] ? fsnotify_perm+0x47b/0x590 [ 290.844262][T17375] ? cd_forget+0x160/0x160 [ 290.848710][T17375] do_dentry_open+0x807/0xfb0 [ 290.853426][T17375] path_openat+0x2705/0x2f20 [ 290.858083][T17375] ? do_filp_open+0x460/0x460 [ 290.862815][T17375] do_filp_open+0x21c/0x460 [ 290.867369][T17375] ? vfs_tmpfile+0x2e0/0x2e0 [ 290.872021][T17375] ? _raw_spin_unlock+0x24/0x40 [ 290.876902][T17375] ? alloc_fd+0x598/0x630 [ 290.881271][T17375] do_sys_openat2+0x13b/0x4f0 [ 290.885975][T17375] ? do_sys_open+0x220/0x220 [ 290.890726][T17375] __x64_sys_openat+0x243/0x290 [ 290.895620][T17375] ? __ia32_sys_open+0x270/0x270 [ 290.900621][T17375] ? syscall_enter_from_user_mode+0x2e/0x240 [ 290.906783][T17375] ? lockdep_hardirqs_on+0x94/0x130 [ 290.912025][T17375] ? syscall_enter_from_user_mode+0x2e/0x240 [ 290.918067][T17375] do_syscall_64+0x3b/0xb0 [ 290.922528][T17375] ? clear_bhb_loop+0x15/0x70 [ 290.927245][T17375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.933184][T17375] RIP: 0033:0x7f5d9b2ae9a4 [ 290.937630][T17375] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 290.957350][T17375] RSP: 002b:00007ffd31b05a20 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.965803][T17375] RAX: ffffffffffffffda RBX: 00007ffd31b05c38 RCX: 00007f5d9b2ae9a4 [ 290.973894][T17375] RDX: 0000000000000000 RSI: 00007ffd31b05f1c RDI: 00000000ffffff9c [ 290.982330][T17375] RBP: 00007ffd31b05f1c R08: 0000000000000000 R09: 0000000000000000 [ 290.990685][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.998913][T17375] R13: 00007ffd31b05c50 R14: 0000559edc202670 R15: 00007f5d9b6f7a80 [ 291.006932][T17375] [ 291.009992][T17375] [ 291.012361][T17375] The buggy address belongs to the page: [ 291.018025][T17375] page:ffffea0000f1c300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c70c [ 291.028317][T17375] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 291.036072][T17375] raw: 00fff00000000000 ffffea0002080608 ffff8880b91409b0 0000000000000000 [ 291.045206][T17375] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 291.055153][T17375] page dumped because: kasan: bad access detected [ 291.061981][T17375] page_owner tracks the page as freed [ 291.067724][T17375] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4368, ts 289875074911, free_ts 290701209235 [ 291.085405][T17375] get_page_from_freelist+0x3b78/0x3d40 [ 291.091193][T17375] __alloc_pages+0x272/0x700 [ 291.096771][T17375] kmalloc_order+0x41/0x150 [ 291.101988][T17375] kmalloc_order_trace+0x15/0xe0 [ 291.107038][T17375] em28xx_v4l2_init+0xe2/0x2d50 [ 291.111958][T17375] em28xx_init_extension+0x11b/0x1c0 [ 291.117729][T17375] process_one_work+0x8a1/0x10c0 [ 291.122717][T17375] worker_thread+0xaca/0x1280 [ 291.127573][T17375] kthread+0x3f6/0x4f0 [ 291.131884][T17375] ret_from_fork+0x1f/0x30 [ 291.136418][T17375] page last free stack trace: [ 291.141113][T17375] free_unref_page_prepare+0xc34/0xcf0 [ 291.146610][T17375] free_unref_page+0x95/0x2d0 [ 291.151317][T17375] free_nonslab_page+0xe4/0x150 [ 291.156203][T17375] kfree+0x1cf/0x270 [ 291.160139][T17375] em28xx_v4l2_init+0x15d7/0x2d50 [ 291.165205][T17375] em28xx_init_extension+0x11b/0x1c0 [ 291.170526][T17375] process_one_work+0x8a1/0x10c0 [ 291.175502][T17375] worker_thread+0xaca/0x1280 [ 291.180211][T17375] kthread+0x3f6/0x4f0 [ 291.184311][T17375] ret_from_fork+0x1f/0x30 [ 291.189031][T17375] [ 291.191433][T17375] Memory state around the buggy address: [ 291.197084][T17375] ffff88803c70c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 291.205191][T17375] ffff88803c70c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 291.213315][T17375] >ffff88803c70c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 291.221500][T17375] ^ [ 291.225877][T17375] ffff88803c70c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 291.234114][T17375] ffff88803c70ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 291.242427][T17375] ================================================================== [ 291.251165][T17375] Disabling lock debugging due to kernel taint [ 291.265116][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 291.274437][ T4368] em28xx 3-1:0.191: Remote control support is not available for this card. [ 291.285501][ T5543] em28xx 3-1:0.191: Closing input extension [ 291.296645][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.316730][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.336701][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.348129][ T4488] usb 6-1: USB disconnect, device number 12 [ 291.356649][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.363643][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 291.395024][ T4488] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 291.404461][T17375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.411706][T17375] CPU: 0 PID: 17375 Comm: v4l_id Tainted: G B 5.15.171-syzkaller #0 [ 291.421011][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.431178][T17375] Call Trace: [ 291.434604][T17375] [ 291.437599][T17375] dump_stack_lvl+0x1e3/0x2d0 [ 291.442299][T17375] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 291.448047][T17375] ? panic+0x860/0x860 [ 291.452143][T17375] ? rcu_is_watching+0x11/0xa0 [ 291.456931][T17375] ? preempt_schedule_common+0xa6/0xd0 [ 291.462413][T17375] panic+0x318/0x860 [ 291.465801][T17366] loop2: detected capacity change from 0 to 32768 [ 291.466337][T17375] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.478954][T17375] ? check_panic_on_warn+0x1d/0xa0 [ 291.484090][T17375] ? fb_is_primary_device+0xd0/0xd0 [ 291.489313][T17375] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 291.495314][T17375] ? _raw_spin_unlock+0x40/0x40 [ 291.500199][T17375] check_panic_on_warn+0x7e/0xa0 [ 291.505242][T17375] ? v4l2_fh_open+0xc7/0x430 [ 291.509852][T17375] end_report+0x6d/0xf0 [ 291.514025][T17375] kasan_report+0x18e/0x1c0 [ 291.518543][T17375] ? v4l2_fh_open+0xc7/0x430 [ 291.523241][T17375] v4l2_fh_open+0xc7/0x430 [ 291.527678][T17375] em28xx_v4l2_open+0x15d/0xa10 [ 291.532548][T17375] v4l2_open+0x228/0x360 [ 291.536807][T17375] chrdev_open+0x54a/0x630 [ 291.541247][T17375] ? cd_forget+0x160/0x160 [ 291.545773][T17375] ? do_raw_spin_unlock+0x137/0x8b0 [ 291.550998][T17375] ? fsnotify_perm+0x47b/0x590 [ 291.555896][T17375] ? cd_forget+0x160/0x160 [ 291.560331][T17375] do_dentry_open+0x807/0xfb0 [ 291.565343][T17375] path_openat+0x2705/0x2f20 [ 291.570464][T17375] ? do_filp_open+0x460/0x460 [ 291.575917][T17375] do_filp_open+0x21c/0x460 [ 291.580600][T17375] ? vfs_tmpfile+0x2e0/0x2e0 [ 291.585236][T17375] ? _raw_spin_unlock+0x24/0x40 [ 291.590419][T17375] ? alloc_fd+0x598/0x630 [ 291.594969][T17375] do_sys_openat2+0x13b/0x4f0 [ 291.599698][T17375] ? do_sys_open+0x220/0x220 [ 291.604834][T17375] __x64_sys_openat+0x243/0x290 [ 291.610335][T17375] ? __ia32_sys_open+0x270/0x270 [ 291.615476][T17375] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.622458][T17375] ? lockdep_hardirqs_on+0x94/0x130 [ 291.627987][T17375] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.634022][T17375] do_syscall_64+0x3b/0xb0 [ 291.638894][T17375] ? clear_bhb_loop+0x15/0x70 [ 291.643615][T17375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.649827][T17375] RIP: 0033:0x7f5d9b2ae9a4 [ 291.654356][T17375] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 291.674690][T17375] RSP: 002b:00007ffd31b05a20 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.683383][T17375] RAX: ffffffffffffffda RBX: 00007ffd31b05c38 RCX: 00007f5d9b2ae9a4 [ 291.691662][T17375] RDX: 0000000000000000 RSI: 00007ffd31b05f1c RDI: 00000000ffffff9c [ 291.700102][T17375] RBP: 00007ffd31b05f1c R08: 0000000000000000 R09: 0000000000000000 [ 291.711502][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.722573][T17375] R13: 00007ffd31b05c50 R14: 0000559edc202670 R15: 00007f5d9b6f7a80 [ 291.735255][T17375] [ 291.739506][T17375] Kernel Offset: disabled [ 291.745540][T17375] Rebooting in 86400 seconds..