last executing test programs: 5.895292928s ago: executing program 4 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300009000000000000000000010000000c0001"], 0x28}}, 0x0) 5.567526943s ago: executing program 4 (id=2536): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)='\x00\x00\x00\x00\x001', 0x6}], 0x2, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x38}, 0x8004) 5.421398815s ago: executing program 4 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x25dfdbfe, {0x3}, [@NHA_ID={0x8, 0x1, 0xfffffffd}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x20004000) 5.282952417s ago: executing program 4 (id=2541): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 4.904240284s ago: executing program 4 (id=2546): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000200, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x6427, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) 4.302072263s ago: executing program 2 (id=2553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000000200)="ecfbf4e1a5da8b2632a4302b86dd516f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.17747259s ago: executing program 0 (id=2566): setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) 3.097223202s ago: executing program 3 (id=2567): r0 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x4, 0x1, 0x1, "8eb9a828e93b07f1dd06da6b41bfba1700000000000000ff00", 0x20493859}) 3.050779702s ago: executing program 2 (id=2568): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 2.912631034s ago: executing program 0 (id=2571): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) 2.903289525s ago: executing program 3 (id=2572): r0 = socket(0x2, 0xa, 0x200000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x0, 0x1}) 2.773144347s ago: executing program 4 (id=2573): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)=@ethtool_perm_addr}) 2.772622857s ago: executing program 2 (id=2574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 2.689068918s ago: executing program 2 (id=2575): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f00000000c0)={[{@nolargeio}, {@nouuid}, {@norecovery}, {@discard}]}, 0x0, 0x965a, &(0x7f0000012c40)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.326717193s ago: executing program 32 (id=2573): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)=@ethtool_perm_addr}) 2.302313894s ago: executing program 0 (id=2577): r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x0, 0x0, 0x59555956, 0x0, 0x0, 0x0, 0xb}}) 2.302121604s ago: executing program 3 (id=2579): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 2.096097727s ago: executing program 1 (id=2580): r0 = socket(0x25, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000280)="1ab8", 0x2, 0x4000, 0x0, 0x0) 2.094272517s ago: executing program 0 (id=2581): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000006500)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0x7f}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@quota}, {@noquota}, {@quota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x24, 0x62cf, &(0x7f0000000200)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jEuNssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9njnn85Hsn/fMmTnPnHnOmf3t+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vm72U7Usy+p/8r82Z9kL6v/eOLE5X/bqGz1CAAAAYLV+lf/93C1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0Q1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39Lh9vMftS3bAEhuLn8fkD7Y9/+fmYpdmt2aj+W3b29zr8dqGoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fmd9W2/O4raGGra1tT5DfvbY8TiGWtjH25u2tfiY0U9em038/GePHf+7C8/e3q723A1Nj1eMc8e2+jg/EZYUY61lG9I+ieMcahjn1javyXDTOGv5/er/bh3nc8sc5/DiMNdV62s+ng3l//5uvp9GGn+sl/bT1rDsF3dlWXZ5cdit6yzZVjaUbWpaMrT4+owXM7L+GPWp9OJsZEXz9M5lzNN6ndnePE9bj4n4+t8Z7jfSYQyNL9NPPj7W8Lr/cuFa5mlUf9adjpXWObjWx0q/zME4L76bP+kn2s7B7eH5P3Z35znYdu60mYPpeTfMwW295uDQ2HA+5vQi1PL7LM7BXU3rD+dbquX1mbu7z8GpC6fPTc1/9GP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU4Xf1/j3u5/m7KhdAxsC/suHgP3tKzbOFUXvji25Px7rcfheJfjcHPLumt9HI60Prna+hyQS+d0cWy8u77Tx68MZR2Osfz12bn64zA974bjcKThOGz7ntLmOBxZxnFYX+fczuV9zzLS8KfdGDq/F6xuDm5umIOt34+0zsG1/n6kX+bgeJgX39/Z+b1gaxjvE5Mr/X5kONvU9KY6tPh0w7mnviR9vz9+IC/t5uUd9RtuGssuzs+ev//RYxcunN+VhbIuXtIwV1rn66aG55Qtma9DK56vh+de/sQdbZZvDvtq/L76X+MdX6v6Onvv7/5a5e9u7fdn09LdWShrbL33Z7t38/r+HMuyz3/r4w9/47HPv67j/qz3m5+YWv334qkvbTj/jnY4/8a+//lie+mhHh8eHSmO3+G0d0abzsfNL9VIfu6q5dt+bmp55+PR8Ge9z8e3djkfb2lZd63Px6OtTy6ej2u9ftqxOq2v53iYJ6emu5+P6+ts2b3SOTmyZE42HmN3hVoL+/9VoVNIp/CGudNp3qZtjYyMhuc1ErfQPE/3NK0/Gnqz+rae2h2+KUyjXN483XFXsf5ww/2i9ZqnEy3rrvU8TT/76jRPa71++nZtWl/P8TAvbt3TfZ7W13l67+rPnRvjPxvOnWO95uDo8Fh9zKNpEubn+2xhY5yD92fHs7PZqWwmv3Usn0+1fFuTDyzvXDkW/qz3uXJLlzm4o2XdtZ6D6X2s09yrjSx98mug9fUcD/PiyQe6z8H6Oq/ffw3fuzYtaT5X7ghL0joN37u2/nyt08+87mjZTddrroyEcX5rf/efzdbXOXVgpX1m9/10b1hyU5v91Hr8djqmZrL12U9bwjifPdB5P9XHU1/ncweXOZ8OZ1l26cMP5j/vDb9fuXTxe19t+r1Lu9/pXPrwgz994Yl/Xsn4ARh8zxdlU/Fe1/BDtOX8/h8AAAAYCLHvHwo10f8DAABAacS+P/6v8ET/DwAAAKUR+/6RUJMy9P9/3HuVLa9/du75S1lK5i8E8fa0Gx4q1osZ1+nw9cTCovryB788+9//dGl5wxvKsuyXD/1R2/W3PBTHVZgI47z6hublS3z1vmVt++gjl9J2G/PrXwiPH5/PcqdBuwjudJZlX7/lM/l2Jt53Ja9PP3Q0rw9ffuLx+jrPHSy+jvd/5iXF+n8dwr+HTxxruv8zYT/8KNTpt7TfH/F+X7nyqq3737O4vXi/2rab86f95PuLx42fk/PZx4v1437uNP5vfPqpr9TXf/SV7cd/aaj9+J8Kj/vlUP/nZcX6ja9B/et4v0+G8cftxfvd/6Vvth3/1U8V6597Y7He0VDj9neEr7e/8dm5xv31aO1Y0/PK3lSsF7c//b0/zW+Pjxcfv3X840euNO2P1vnx9L8XjzPVsn5cHrcT/WPL9uuP0zg/4/af+pOjTfu51/avPvzMy+qP27r9e1vWO/fhnfn2Fx+v+ROb/uaTn2m7vTiew/9wrun5HH5nOI7D9p98f5iP4fb/vVo8XuunKxx9Z/P5J67/hc2Xmp5P9OafF9u/+pqTed0wvnHTTS944c2XX1Hfd1n23Q3F4/Xa/sm/Pds0/i/eVuyPeHvM6Lduv5O4/fMfmTxzdv7i3Ezaq4/dkn92zluL8cTx3hLOra1fHzl74QOz5yemJ6azbKK8H6F3zb4U6k+Lcrn72gtLzqA7Hwmv5x1/+fVNd//bp+Py/3h3sfzKW4r3rXvCep8NyzeH129l21/qyTtvy4/v2tNhhAtLPy94NbZu//GBZa0Ynn/r9wVxvp976Qfy/VC/LX/fiMf1Ksf/g5nicb4W9utC+GTmbbctbq9x/fjZCFfeVRzvq95/4TQXX9e/D6/3235UPH4cV3y+Pwjfx3xzS/P5Ls6Pr10aan38/FM8LofzSXa5uD2uFff3leduazu8+Dkk2eXb86//LD3O7St6mp3Mf3R+6tTcmYuPTl2Ynb8wNf/Rjx05ffbimQtH8s/yPPLBLnf9q3uyLFs8P23Kz08zs/v2ZvnZ6mxRrrNVjD+32vGfe+T4zP7pu2dmTxy7eOLCI+dmz588Pj9/fHZm/u5jJ07MfqTX/edmDu3afXDP/t2TJ+dmDh04eHDPwcm5M2frwygG1cO+6Q9Nnjl/JL/L/KG9B3c98MDe6cnTZ2dmD+2fnp682Ov++XvTZP3efzh5fvbUsQtzp2cn5+c+Nnto18F9+3b3/DTA0+dOzE9Mnb94Zuri/Oz5qeK5TFzIF9ff+3rdn3Ka/8/i+9lWteKD+LJ33LsvfT5r3Zc/3vGhilVaPkD02fBZNN9+0bkDy/k69v2joSZl6P8BAACAXOz7x0JN9P8AAABQGrHv3xBqov8HAACA0oh9/3io6b8EVKT/L13+f8ulZW1f/l/+v3F/yf9XLP//rn7L/xfnC/n/tbHa/L38fyD/L/+f8vNjWZatT37++oxf/l/+nxup3/L/se/fmGV+/w8AAAAlFfv+TaEm+n8AAAAojdj33xRqov8HAACA0oh9/wtCTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r+T4hOh5f/np7IbmJ9fi/GvMP9/eS3HfwPy/xsbv5D/px/1W/4/9v0vDDWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/7NoSYV6f/l/1eV/0+ZK/n/5vHL/zeT/w/zQf5f/n8dyP93J//fg/z/Db1+/qCP3/X/5f9Zqt/y/7Hvf1GoSUX6fwAAACit0cV/xr7/xaEm+n8AAADoPyPXdrfY978k1GRJ/3+NGwAAAABuuNj335q1BMEr8vt/+X/X/5f/l/+X/2+//eXn/4cz+f/+If/fnfx/D/L/8v/Vzf+PZ/L/XAf9lv/P+/5sPHtpqElF+n8AAACogtj33xZqov8HAACA0oh9//8LNdH/AwAAQGnEvn9LqElF+n/5/9Lk/3/R+NLJ/8v/d9u+/L/r/5eZ/H938v89yP/L/1c3/+/6/1wX/Zb/j33/7aEmFen/AQAAoApi339HqIn+HwAAAEoj9v3/P9RE/w8AAAClEfv+raEmFen/5f/7PP8fk6Ou/y//L//fl/n/cfn/viP/3538fw/y//L/8v/y/6ypfsv/x77/ZaEmFen/AQAAoApi3//yUBP9PwAAAJRG7PtfEWqi/wcAAIDSiH3/RKhJRfr/leT/a5fl/zu5ztf/H1vG9f+byP/L/3fbvvy/6/+Xmfx/d/L/Pcj/y//L/8v/s6b6Lf8f+/47Q00q0v8DAABAFcS+f1uoif4fAAAASiP2/XeFmuj/AQAAoDRi37891KQi/b/r/w9E/j+T/5f/l/+X/5f/Xx75/+7k/3uQ/5f/l/+X/2dNrXH+f6h14Urz/7Hvf2WoSUX6fwAAAKiC2PffHWqi/wcAAIDSiH3/PaEm+n8AAAAojdj37wg1qUj/L/8v/y//L/8v/99++/L/g0n+vzv5/x7k/+X/5f/l/1lT/Xb9/9j3vyrUpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/dyf/34P8v/y//L/8P2uq3/L/se+/L9SkIv0/AAAAVEHs++8PNdH/AwAAQGnEvn8q1ET/DwAAAKUR+/7pUJOK9P/y//L/8v/y/yvK/79i8XHl/wvy//1F/r87+f8e5P/l/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/y//L/r/7ffvvz/YJL/727t8//xKcr/y//L/7v+v/w/S/Vb/j/2/Q+EmlSk/wcAAIAqiH3/vlAT/T8AAACURuz794ea6P8BAACgNGLffyDUpCL9v/y//L/8v/y//H/77cv/Dyb5/+5c/7+Hlvz/WHhfkv+X/x+E/H99bsn/02/6Lf8f+/6DoSYV6f8BAACgCmLf/+pQE/0/AAAAlEbs+38t1ET/DwAAAKUR+/5fDzWpSP8v/y//L/8v/9/v+f8x+X/5/xWQ/+9O/r8H1/+X/x/g/L/r/9OP+i3/H/v+Q6EmFen/AQAAoApi3/8boSb6fwAAACiN2Pe/JtRE/w8AAAClEfv+w6EmFen/5f/XKf8fF8r/y//L/7v+v/z/dSX/3538fw/y//L/8v/y/6ypfsv/x77/taEmFen/AQAAoApi3/9gqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/9aEmFen/5f9d///G5/9Hm8Yu/794P/n/gvy//P9KyP93J//fg/y//L/8v/w/a6rf8v+x739DqElF+n8AAACogtj3vzHURP8PAAAApRH7/jeFmuj/AQAAoDRi3//mUJOK9P/y//L/Nz7/7/r/8v8F+X/5/7Ug/9/dYOb/67tR/j+T/+/78cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bwk10f8DAABAacS+/62hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c3YPn/X90clrv+f0H+v7/Hv9L8/0jL19cl///DTvn/hQ2t95f/53rot/x/7PvfFmpSkf4fAAAAqiD2/W8PNdH/AwAAQGnEvv8doSb6fwAAACiN2Pf/VqhJRfp/+f/6OBbTy/L/8v/5Avl/+X/5/4El/9/dgOX/w/X/5f8j+f/+Hr/r/8v/s1S/5f9j3//OUJOK9P8AAABQBbHvfzjURP8PAAAApRH7/neFmuj/AQAAoDRi3//uUJOK9P/y/67/L/8v/y//33778v+DaW3y/8Py//L/8v/y//2R//8v+X8GW7/l/2Pf/0ioSUX6fwAAAKiC2Pe/J9RE/w8AAAClEfv+3w410f8DAABAacS+/72hJhXp/+X/ByX/PyH/v8L8/1hYJv8v/y//Xy2u/9/d1u0/7pysbCT/L/8v/98f+X/X/2fA9Vv+P/b97ws1WX7/P77sNQEAAIAbIvb9vxNqUpHf/wMAAEAVxL7/d0NN9P8AAABQGrHv/71Qk9L1/59ru1T+f1Dy/67/n7n+v/x/y/OR/5f/b2f98v/xzDNw+X/X/+9G/l/+X/6/Y/5/qMf95f9pp9/y/7Hv//1Qk9L1/wAAAFBdse9/f6iJ/h8AAAAGQrv/k90q9v1HQk30/wAAAFAase8/GmpSkf5f/l/+X/6/T/P/f7HtX7//nbcf3SX/L/8v/78i63r9//rBP3jX/5f/70b+X/5f/t/1/1lT/Zb/j33/sVCTxcbvrS7wDwAAAIMt9v1/EGpSkd//AwAAQBXEvv94qIn+HwAAAEoj9v0zoSYV6f/l/+X/5f/7NP8/wNf/j/tjkPL/kxsGKP8fT7ry/22ta/7/PYs5cfn/leb/x9oubc3/1+T/m8j/r3j8386yTP5f/p8bqN/y/7Hvnw01qUj/DwAAAFUQ+v6hE0VdvEH/DwAAAKUR+/6ToSb6fwAAACiN2Pd/INSkIv2//L/8v/y//L/r/7ffft/m/13/vyv5/+76J//fnuv/y/8P8vjl/+X/Warf8v+x758LNalI/w8AAABVEPv+D4aa6P8BAACgNGLf/6FQE/0/APwfe/fRZFl93nH8Nm6KnqJMubzxwgu890tgYdb2C/CCjRd2lctlg22cE4OzEso5IAkFFFAACaGEhLJACQllIQnlLIQykmpU0/08z3Q4fW43fW/fc///z2fhh2nouRerC/jRfOcAADQjd/9fxi2d7H/9v/5f/6//1/8Pv77+fz3p/8fp/+fQ/+v/9f/6fxZqav1/7v6/ils62f8AAADQg9z9V8ct9j8AAAA0I3f/NXGL/Q8AAADNyN3/13HLWu7/jQePWwnq//X/zfb/f6D/P+z19f/6/5bp/8fp/+c4rf7/spn+fwlW/f5P0P8/NNP/06ip9f+5+/8mblnL/Q8AAAAMyd3/t3GL/Q8AAADNyN1/bdxi/wMAAEAzcvf/XdzSyf7f1/9vzPrs/zPj1f+31P9f6PU3Z/r/Pa+v/9f/t+x0+//rz/+VT/+v//f8/6D/9/x//T/7Ta3/z93/93FLJ/sfAAAAepC7/x/iFvsfAAAAmpG7/x/jFvsfAAAAmpG7/5/ilk72/wSf/7/9P4Ln/+/8WP+/kP7f8//3vb7+X//fsr6f/78194/oqf+/9r5Lr37o9t+94zivr//X/+v/9f8s1tT6/9z9/xy3dLL/AQAAoAe5+/8lbrH/AQAAoBm5+/81brH/AQAAYA2dGfxo7v5/i1s62f8T7P933pf+f5v+/xT7/y39v/5f/9+Cvvv/+Xrq/x/J63fS/w//Q/EE+vmTWtj7v2mm/9f/syBT6/9z9/973NLJ/gcAAIAe5O7/j7jF/gcAAIDpGvoPsUfk7r8ubrH/AQAAoBm5+8/GLZ3sf/3/8vv/X+n/16P/9/x//b/+vwn6/3H6/zn66P8Ppf/3/H/9P4s2tf4/d//1cUsn+x8AAAB6kLv/P+MW+x8AAACakbv/v+IW+x8AAACakbv/v+OWTva//t/z//X/+n/9//Dr6//Xk/5/nP5/Dv3/Sfv5i/X/+n/9P7sds/9/eOQv2wvp/3P3/0/c0sn+BwAAgB7k7v/fuMX+BwAAgGbk7v+/uMX+BwAAgGbk7v//uKWT/a//1//r/0/Y/1924efprv8/+KW3Tf8/TP9/OvT/4ybT/29sDn5Y/7/2/b/n/+v/9f/sMbXn/+fuf1Tc0sn+BwAAgB7k7n903DKy/4/9L/MBAACAlcrd/5i4xff/AQAAYO1ldZa7/7FxSyf7X/+v/9f/e/6/5/8Pv/5Y/3/Hrven/58W/f+4yfT/h9D/6//X+f3r//X/HDS1/j93/+Pilk72PwAAAPQgd/8NcYv9DwAAAM3I3f/4uMX+BwAAgGbk7n9C3NLJ/h/u/y/8fv3/0ej/975//f/w18ei+v/8GfX/o/3/lZ7/3yf9/zj9/xz6f/2//v+w/v/MvM/X/zNkav1/7v4nxi2d7H8AAADoQe7+J8Ut9j8AAAA0I3f/k+MW+x8AAACakbv/KXFLJ/vf8//1//r/9ev/Pf9/xyqf/z879f5/U/9/RPr/cfr/OfT/+n/9//jz/0d+FQD9P0Om1v/n7n9q3NLJ/gcAAIAe5O5/Wtxi/wMAAMB62P3fDuz/D0pD7v6nxy32PwAAADQjd/8z4pZ29v/oszr1//p//b/+X/8//PrT6v89//+o9P/j9P9z6P+X0c9vNtb/33jY50+h/79u2f3/CP0/Q/b0/3de+Piq+v/c/c+MW9rZ/wAAANC93P3PilvsfwAAAGhG7v5nxy32PwAAADQjd/9z4pZO9v/S+/+RX31A/6//1//r//X/+v9F0/+P0//Pof/3/H/P/9f/s1B7+v9dVtX/5+5/btzSyf4HAACAHuTuf17cYv8DAABAM3L33xi32P8AAADQjNz9z49bOtn/nv+v/9f/6//1/8Ovr/9fTyfq7y/S/xf9v/5f/6//1/+zAFPr/3P3vyBu6WT/AwAAQA9y978wbrH/AQAAoBm5+2+KW+x/AAAAaEbu/hfFLZ3sf/3/cvv//Lj+X/8/0//r//X/p6Lb5/9vDP2d6KBD+v97/vzsH+39iP5f/6//1//r/zmi3xr5fZPo/89d+KfL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/zXHLMff/WPMw7MHLj/0pS6D/9/x//b/+X/8//Pr6//XUbf9/RJ7/P4f+X/+v/9f/s1CT6P93/Th3/8viFt//BwAAgGbk7n953GL/AwAAQDNy978ibrH/AQAAoBm5+18Zt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n2Od+v+bT9D/bw5/eNX9/Emt+v3r//X/HDS1/j93/y1xSyf7HwAAAHqQu/9VcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/tf/6//1//p//f/w6+v/15P+f5z+fzab3TryBob6/3OXTLP/9/z/yb1//b/+n4Om1v/n7n9t3NLJ/gcAAIAe5O6/NW6x/wEAAKAZuftvi1vsfwAAAGhG7v7XxS2d7H/9v/5f/6//X0D/v6ev1f8P0/+fDv3/OP3/HOv0/H/9/+Tev/5f/89BU+v/c/e/Pm7pZP8DAABAD3L33x632P8AAADQjNz9b4hb7H8AAABoRu7+O+KWTva//l//r//X/3v+//Dr6//X0/L6/5n+X/+v/59D/6//1/+z39T6/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/jfHLfY/AAAANCN3/1vilk72v/5f/7/dz8cb0P/r/2cr6//P/zVI/6//PznP/x+n/59D/6//1//r/1mo4f7/upX1/7n73xq3dLL/AQAAoAe5+++MW+x/AAAAaEbu/rfFLfY/AAAANCN3/9vjlk72v/5f/7/3+f+zmf5f/+/5/ztOof/fmun/F07/P07/P4f+v83+/6JZQ/3/mUM/X//PFE3t+f+5+++KWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADQjd/+74pZO9r/+X/+/t//3/P/tD+j/9f+e/7+29P/j9P9z6P/b7P89/1//z8pMrf/P3f/uuKWT/Q8AAAA9yN3/nrjF/gcAAIBm5O5/b9xi/wMAAEAzcve/L27pZP/r//X/+n/9v/5/+PX1/+tJ/z9O/z+H/l//r//X/7NQU+v/c/e/P27pZP8DAABAD3L33x232P8AAADQjNz998Qt9j8AAAA0I3f/B+KWTva//l//r/9fz/5/S/+v/9f/D5pK/3/FFX94r/5f/6//1//r//X/vZta/5+7/4NxSyf7HwAAAHqQu/9DcYv9DwAAAM3I3f/huMX+BwAAgGbk7v9I3NLJ/j/Y/1882ylUdwz1/9Go6f930f/vff/6/+GvD8//1//r/5dvKv2/5/8/svev/9f/r/P7P1b//3sHP1//T4um1v/n7r83bulk/wMAAEAPcvd/NG6x/wEAAKAZufs/FrfY/wAAANCM3P33xS2d7H/P/9f/6//1//r/4dfX/68n/f84/f8c+n/9v+f/X/Onv6H/Z3Gm1v/n7v943NLJ/gcAAIAe5O7/RNxi/wMAAEAzcvd/Mm6x/wEAAKAZufs/Fbd0sv/1//p//f8S+v/N4a8P/b/+X/+/fPr/cfr/sv9PbUc//f/W0AdX3c+f1Krf/5L6/7su9fx/1tjU+v/c/Z+OWzrZ/wAAANCD3P2fiVvsfwAAAGhG7v7Pxi32PwAAADQjd//n4pZO9r/+v/H+//wPuu///8Tz//e9vv5f/98y/X/+HX2Y/n+Ofvr/Qavu59f9/Tfz/H/9Pws0tf4/d//9cUsn+x8AAAB6kLv/83GL/Q8AAADNyN3/hbjF/gcAAIBm5O7/YtzSyf7X/zfe/+97/v/GrMf+fwXP/z/k60P/r//X/y+f/n+c/n8O/b/+X/+v/2ehptb/5+5/YGOzy/0PAAAA6+qPf/8v7j/qH/vA9v/dmn0pbrlydu6I38YGAAAAJu787t/YnM2+vP0j3/8HAACAFuXu/0rc0sn+1//31f/3+fz/Jfb/519Y/6//1/9Piv5/3Ar6/63jvD/9v/5/nd+//l//z0FT6/9z9381btk1/DaP/WcJAAAATEnu/q/FLZ18/x8AAAB6kLv/63HLgf3vlwMEAACAdZW7/xtxSyff/9f/T7z/ny2p/48/Tv+/w/P/9f9Dr6//X0/6/3En7P/PbXj+v/5/hP5f/6//Z7+p9f+5+78Zt3Sy/wEAAKBRe/6NQu7+b8Ut9j8AAAA0I3f/t+MW+x8AAACakbv/O3FLJ/tf/3/q/X+m6kt8/v+Z+i3P/++8/79ha/D19f/6/5bp/8et4Pn/+v+9P7/+f4l2vf9L9P/6f6Zhav1/7v7vxi2d7H8AAADoQe7+78Ut9j8AAAA0I3f/9+MW+x8AAACakbv/wfPnN/vb/yvp/+Mn6bT/P97z/4/Y///2ZXtfe+7z//X/ffT/h7x+O/3/71x69u6r/uy2W/T/XHCa/X9+Lej/9f/6/x0T6v89/1//z0Qsvv/f3PPB4/b/27t/tjX7QdzSyf4HAACAHuTufyhusf8BAACgGbn7fxi32P8AAADQjNz9P4pbOtn/nv/fRv+/3zr2//n/6xX0/2cfcf9/ZjabraT/z6a49/7f8//1/wd5/v84/f8c+n/9v/5f/89CLb7/3/vB4/b/uft/HLd0sv8BAACgB7n7fxK35P7fOPa/ugcAAAAmJnf/T+MW3/8HAACAZuTu/1nc0sn+1//r/6fS/yfP/7/weW09//+qilP77P8vr9/S/y+X/n+c/n8O/b/+X/+v/2ehptb/5+7/edzSyf4HAACAHuTufzhusf8BAACgGbn7fxG32P8AAADQjNz9v4xbOtn/+v9W+/8s4vX/+v+p9P+e/+/5/6dD/z9O/z+H/n/N+//4gpnp//X/TMXU+v/c/b8OAAD//5W8bEE=") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 2.070626328s ago: executing program 3 (id=2582): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) 1.8767349s ago: executing program 1 (id=2583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x3c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x0) 1.730197803s ago: executing program 3 (id=2584): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x6207, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x8) 1.594743675s ago: executing program 1 (id=2585): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xc) 1.350609749s ago: executing program 2 (id=2586): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.080862663s ago: executing program 1 (id=2587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 787.922218ms ago: executing program 0 (id=2588): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 751.742558ms ago: executing program 1 (id=2589): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 419.873393ms ago: executing program 1 (id=2590): syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024a000101000000090400001602020000052406000005240000000d240f01000000000000000000062407000000090581034000000000090582020002000000090503024002"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00000524060001"], 0x0) 292.266656ms ago: executing program 0 (id=2591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000001400010000000000fcdbdf2500000000000000000000ffff00000000ac14141c0000000000000000000000000000000000070000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c000800080008001c2098db0c0015"], 0x68}}, 0x4004040) 215.437757ms ago: executing program 3 (id=2592): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580), 0x8) 0s ago: executing program 2 (id=2593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x0, 0x1, 0x0, 0xff, 0x0, 0x1045}}) kernel console output (not intermixed with test programs): (device loop2): rebuilding free space tree [ 139.076510][ T6218] BTRFS info (device loop2): disabling free space tree [ 139.094009][ T6218] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.124961][ T6218] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.137210][ T6260] loop3: detected capacity change from 0 to 4096 [ 139.246689][ T6232] loop4: detected capacity change from 0 to 32768 [ 139.316391][ T6218] BTRFS error (device loop2): balance: invalid convert data profile single [ 139.336457][ T6232] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 139.476085][ T6232] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.532750][ T6234] loop1: detected capacity change from 0 to 32768 [ 139.539381][ T4256] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.751695][ T6234] jfs_strtoUCS: char2uni returned -22. [ 139.801843][ T4252] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop2 scanned by udevd (4252) [ 139.815137][ T6238] loop0: detected capacity change from 0 to 32768 [ 139.879481][ T6238] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 139.879481][ T6238] [ 139.894496][ T4261] ocfs2: Unmounting device (7,4) on (node local) [ 139.908756][ T6234] charset = ascii, char = 0xc5 [ 140.018422][ T6238] ERROR: (device loop0): remounting filesystem as read-only [ 140.130168][ T6274] loop3: detected capacity change from 0 to 512 [ 140.197432][ T6274] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.439331][ T6274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 140.517850][ T6274] Quota error (device loop3): write_blk: dquota write failed [ 140.531836][ T6274] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 140.608481][ T6274] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.866: Failed to acquire dquot type 0 [ 140.708943][ T6274] EXT4-fs (loop3): 1 truncate cleaned up [ 140.714665][ T6274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.749839][ T6291] loop2: detected capacity change from 0 to 512 [ 140.837279][ T6274] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 5 index 2 [ 140.891565][ T93] block nbd4: Attempted send on invalid socket [ 140.898151][ T93] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 140.926853][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.872: corrupted inode contents [ 140.941593][ T6274] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 141.029677][ T6274] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.866: Failed to acquire dquot type 1 [ 141.048480][ T6291] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #3: comm syz.2.872: mark_inode_dirty error [ 141.090443][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.872: corrupted inode contents [ 141.168747][ T6291] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.872: mark_inode_dirty error [ 141.202538][ T6291] Quota error (device loop2): write_blk: dquota write failed [ 141.243257][ T6291] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.255692][ T6291] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.872: Failed to acquire dquot type 0 [ 141.301916][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.872: corrupted inode contents [ 141.331238][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 141.363488][ T6291] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #16: comm syz.2.872: mark_inode_dirty error [ 141.419929][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.872: corrupted inode contents [ 141.463199][ T6291] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.872: mark_inode_dirty error [ 141.544010][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.872: corrupted inode contents [ 141.594266][ T6291] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 141.622664][ T6291] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.872: corrupted inode contents [ 141.667542][ T6291] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.872: mark_inode_dirty error [ 141.734084][ T6291] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 141.787025][ T6291] EXT4-fs (loop2): 1 truncate cleaned up [ 141.797965][ T6291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.823996][ T27] audit: type=1326 audit(1751379778.597:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 141.838513][ T6291] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.121438][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 142.187962][ T14] kernel write not supported for file /371/net/sockstat (pid: 14 comm: kworker/0:1) [ 142.315695][ T6335] loop2: detected capacity change from 0 to 2048 [ 142.380208][ T6335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.475434][ T6335] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 142.523614][ T6335] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has too big (65320) entry at pos 0 [ 143.276889][ T6331] loop4: detected capacity change from 0 to 32768 [ 143.367835][ T6331] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 143.367835][ T6331] [ 143.409624][ T4973] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.423685][ T6331] ERROR: (device loop4): remounting filesystem as read-only [ 143.608365][ T4973] usb 3-1: Using ep0 maxpacket: 16 [ 143.615146][ T4973] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 143.659115][ T4973] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 143.708291][ T4973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.758343][ T4973] usb 3-1: config 0 has no interface number 0 [ 143.784374][ T4973] usb 3-1: config 0 interface 104 has no altsetting 1 [ 143.809113][ T4973] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 143.848353][ T4973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.920536][ T4973] usb 3-1: Product: syz [ 143.924752][ T4973] usb 3-1: Manufacturer: syz [ 143.951630][ T4973] usb 3-1: SerialNumber: syz [ 144.000186][ T4973] usb 3-1: config 0 descriptor?? [ 144.242092][ T4973] asix 3-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 144.273156][ T4973] asix: probe of 3-1:0.104 failed with error -71 [ 144.296184][ T6353] loop3: detected capacity change from 0 to 32768 [ 144.322378][ T4973] usb 3-1: USB disconnect, device number 5 [ 145.103931][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.913'. [ 145.153944][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.913'. [ 145.306489][ T6416] loop0: detected capacity change from 0 to 2048 [ 145.334954][ T6419] loop2: detected capacity change from 0 to 64 [ 145.394297][ T6416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.411956][ T6422] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 145.468196][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 145.468209][ T27] audit: type=1800 audit(1751379782.237:2387): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.916" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 145.854334][ T6439] No such timeout policy "syz1" [ 145.854933][ T6437] loop0: detected capacity change from 0 to 512 [ 145.963251][ T6437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.991330][ T6437] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.167623][ T6437] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 146.216271][ T6437] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 146.276411][ T6437] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.922: Failed to acquire dquot type 0 [ 146.368650][ T6455] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 146.368650][ T6455] SȘȞZ6' [ 146.504835][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 146.801630][ T6469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.856301][ T6469] overlayfs: missing 'lowerdir' [ 147.146318][ T6429] loop3: detected capacity change from 0 to 40427 [ 147.184827][ T6429] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 147.210189][ T6429] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.342612][ T6429] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.411607][ T6492] syz.2.946 (6492): drop_caches: 0 [ 147.611450][ T6429] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.658944][ T6429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.701791][ T6504] loop2: detected capacity change from 0 to 16 [ 147.726829][ T6504] erofs: (device loop2): mounted with root inode @ nid 36. [ 147.742171][ T6505] loop0: detected capacity change from 0 to 1024 [ 148.005632][ T56] hfsplus: b-tree write err: -5, ino 8 [ 148.069439][ T4257] syz-executor: attempt to access beyond end of device [ 148.069439][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.155607][ T6519] device geneve2 entered promiscuous mode [ 148.308356][ T4973] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.518455][ T4973] usb 5-1: Using ep0 maxpacket: 16 [ 148.528760][ T4973] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 148.578370][ T4973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.588877][ T4973] usb 5-1: Product: syz [ 148.593073][ T4973] usb 5-1: Manufacturer: syz [ 148.597705][ T4973] usb 5-1: SerialNumber: syz [ 148.650011][ T4973] usb 5-1: config 0 descriptor?? [ 148.677448][ T4973] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 148.917451][ T4327] usb 5-1: USB disconnect, device number 7 [ 149.317728][ T6528] loop1: detected capacity change from 0 to 32768 [ 149.420688][ T6528] ERROR: (device loop1): diWrite: ixpxd invalid [ 149.420688][ T6528] [ 149.464427][ T6528] ERROR: (device loop1): remounting filesystem as read-only [ 149.499327][ T6528] ERROR: (device loop1): txCommit: [ 149.499327][ T6528] [ 149.519934][ T6559] overlayfs: unrecognized mount option "\" or missing value [ 149.541527][ T6528] ea_get: invalid extended attribute [ 149.608447][ T6528] ffff8880550fb170: 04 00 00 00 .... [ 150.201332][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 150.345693][ T6595] sctp: [Deprecated]: syz.3.985 (pid 6595) Use of int in maxseg socket option. [ 150.345693][ T6595] Use struct sctp_assoc_value instead [ 150.536710][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 150.587029][ T6605] SET target dimension over the limit! [ 151.206648][ T6627] loop1: detected capacity change from 0 to 128 [ 151.304199][ T6627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.357892][ T6627] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.583569][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 151.993356][ T6651] loop1: detected capacity change from 0 to 8192 [ 152.191312][ T6667] xt_hashlimit: max too large, truncated to 1048576 [ 152.593717][ T6684] kernel read not supported for file / lhOb~h3JyxvL=QRn$hfǹWFGrqςû~QV7"qHdNn9D0)g [ 152.593717][ T6684] .j``~N@ۀ Wct\x|bEVyS$PAXg8mRClEtTTS_m)ל- (pid: 6684 comm: syz.1.1021) [ 152.730382][ T27] audit: type=1800 audit(1751379789.507:2388): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1021" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=41166 res=0 errno=0 [ 153.269908][ T27] audit: type=1326 audit(1751379790.047:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 153.351156][ T27] audit: type=1326 audit(1751379790.047:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 153.408497][ T6265] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.465497][ T27] audit: type=1326 audit(1751379790.047:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 153.496884][ T6719] xt_cluster: node mask cannot exceed total number of nodes [ 153.564518][ T27] audit: type=1326 audit(1751379790.047:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 153.599282][ T6265] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 153.639078][ T6265] usb 5-1: config 0 has no interface number 0 [ 153.645220][ T6265] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 153.709567][ T6265] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.731510][ T6265] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 153.760371][ T6265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.797508][ T6265] usb 5-1: Product: syz [ 153.818770][ T6265] usb 5-1: Manufacturer: syz [ 153.835998][ T6265] usb 5-1: SerialNumber: syz [ 153.853189][ T6265] usb 5-1: config 0 descriptor?? [ 153.867715][ T6706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.877452][ T6265] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 153.922582][ T6265] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 153.996186][ T6730] loop1: detected capacity change from 0 to 4096 [ 154.038053][ T6730] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 154.080658][ T6730] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.103904][ T6730] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 154.136130][ T6730] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.169613][ T6730] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.181505][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 154.207241][ T6730] ntfs: volume version 3.1. [ 154.234425][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 154.318386][ T4312] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.351752][ T129] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.387289][ T6265] usb 5-1: USB disconnect, device number 8 [ 154.396065][ T6748] loop2: detected capacity change from 0 to 128 [ 154.415656][ T6265] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 154.444637][ T6265] cyberjack 5-1:0.69: device disconnected [ 154.468599][ T6748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.491485][ T6748] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.522193][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 154.529081][ T6748] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.1051: No space for directory leaf checksum. Please run e2fsck -D. [ 154.544513][ T6748] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.1051: checksumming directory block 0 [ 154.546685][ T4312] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.566172][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 154.577924][ T129] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 154.606985][ T129] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 154.628353][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 154.637336][ T129] usb 1-1: config 1 has no interface number 0 [ 154.643687][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.653613][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 154.658451][ T4312] usb 4-1: Product: syz [ 154.663550][ T4312] usb 4-1: Manufacturer: syz [ 154.668177][ T4312] usb 4-1: SerialNumber: syz [ 154.672929][ T129] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.693790][ T4312] r8152-cfgselector 4-1: config 0 descriptor?? [ 154.700145][ T129] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.728862][ T129] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 154.760619][ T129] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 154.778313][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.812334][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 155.015916][ T129] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 155.048799][ T129] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 155.056512][ T129] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 155.140763][ T4312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 155.154662][ T4312] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 155.298639][ T4341] usb 1-1: USB disconnect, device number 7 [ 155.611335][ T6774] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 155.625753][ T6774] overlayfs: missing 'lowerdir' [ 155.708011][ T4973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.807787][ T6781] loop1: detected capacity change from 0 to 1024 [ 155.830371][ T6781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.863676][ T6781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.906084][ T6781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.928660][ T4973] usb 3-1: Using ep0 maxpacket: 32 [ 155.935654][ T4973] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.964614][ T4973] usb 3-1: config 0 has no interface number 0 [ 155.996344][ T6781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.022114][ T4973] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 156.071054][ T6793] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 156.093494][ T4973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.103511][ T6791] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.160791][ T4973] usb 3-1: Product: syz [ 156.178727][ T4973] usb 3-1: Manufacturer: syz [ 156.196677][ T4973] usb 3-1: SerialNumber: syz [ 156.211718][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 156.227922][ T4973] usb 3-1: config 0 descriptor?? [ 156.261141][ T4973] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 156.286363][ T4973] usb 3-1: selecting invalid altsetting 1 [ 156.313587][ T6795] loop3: detected capacity change from 0 to 4096 [ 156.343788][ T4973] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 156.381618][ T4973] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.414214][ T6799] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 156.439509][ T4973] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 156.468614][ T4973] usb 3-1: media controller created [ 156.478774][ T6800] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.557619][ T4973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.843335][ T4973] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 156.985583][ T4973] usb 3-1: USB disconnect, device number 6 [ 157.014859][ T6819] loop0: detected capacity change from 0 to 256 [ 157.104684][ T6819] FAT-fs (loop0): Directory bread(block 64) failed [ 157.118231][ T6819] FAT-fs (loop0): Directory bread(block 65) failed [ 157.158524][ T6819] FAT-fs (loop0): Directory bread(block 66) failed [ 157.184579][ T6819] FAT-fs (loop0): Directory bread(block 67) failed [ 157.198457][ T6819] FAT-fs (loop0): Directory bread(block 68) failed [ 157.223126][ T6819] FAT-fs (loop0): Directory bread(block 69) failed [ 157.248646][ T6819] FAT-fs (loop0): Directory bread(block 70) failed [ 157.269094][ T6819] FAT-fs (loop0): Directory bread(block 71) failed [ 157.288596][ T6265] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.296079][ T6819] FAT-fs (loop0): Directory bread(block 72) failed [ 157.296116][ T6819] FAT-fs (loop0): Directory bread(block 73) failed [ 157.476593][ T6828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.508502][ T6265] usb 2-1: Using ep0 maxpacket: 32 [ 157.554367][ T6265] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 157.580336][ T6265] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 157.618385][ T6265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 157.643815][ T6265] usb 2-1: config 1 has no interface number 0 [ 157.655919][ T6265] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.682450][ T6265] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.734407][ T6265] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 157.768379][ T6265] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 157.825394][ T6265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.850857][ T6265] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 158.065134][ T6265] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 158.074709][ T6265] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 158.088489][ T4312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.097326][ T6265] snd_usb_pod: probe of 2-1:1.1 failed with error -90 [ 158.111352][ T6855] loop4: detected capacity change from 0 to 2048 [ 158.133105][ T6855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.174380][ T6857] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1096'. [ 158.219724][ T6859] loop0: detected capacity change from 0 to 256 [ 158.286652][ T6265] usb 2-1: USB disconnect, device number 6 [ 158.302897][ T4312] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.326114][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.360646][ T4312] usb 3-1: Product: syz [ 158.364888][ T4312] usb 3-1: Manufacturer: syz [ 158.393815][ T4312] usb 3-1: SerialNumber: syz [ 158.420264][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 158.422900][ T4312] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.516753][ T4312] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.612888][ T6867] loop3: detected capacity change from 0 to 128 [ 159.000089][ T4319] usb 3-1: USB disconnect, device number 7 [ 159.168485][ T129] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.368485][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 159.375483][ T129] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.409109][ T129] usb 4-1: config 179 has no interface number 0 [ 159.415441][ T129] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 159.430005][ T129] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 159.467171][ T129] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 159.495946][ T129] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 159.548371][ T129] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.564127][ T129] usb 4-1: config 179 interface 65 has no altsetting 0 [ 159.608315][ T129] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 159.617408][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.628537][ T4312] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 159.635562][ T4312] ath9k_htc: Failed to initialize the device [ 159.672614][ T4319] usb 3-1: ath9k_htc: USB layer deinitialized [ 159.687247][ T129] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 159.688738][ T6900] netlink: 'syz.1.1117': attribute type 2 has an invalid length. [ 160.160086][ T6265] usb 4-1: USB disconnect, device number 8 [ 160.160247][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.185412][ T6265] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 160.296407][ T6920] netlink: 'syz.0.1126': attribute type 7 has an invalid length. [ 160.338429][ T6920] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1126'. [ 160.352649][ T6923] loop2: detected capacity change from 0 to 64 [ 160.725673][ T6936] loop4: detected capacity change from 0 to 2048 [ 160.801932][ T6936] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 160.897786][ T6944] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 160.910725][ T6936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.933294][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 160.979346][ T6944] bridge0: port 3(dummy0) entered blocking state [ 161.023656][ T6944] bridge0: port 3(dummy0) entered disabled state [ 161.049956][ T6944] device dummy0 entered promiscuous mode [ 161.129069][ T6944] bridge0: port 3(dummy0) entered blocking state [ 161.135899][ T6944] bridge0: port 3(dummy0) entered forwarding state [ 162.219751][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 162.219767][ T27] audit: type=1326 audit(1751379798.997:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 162.250267][ T6999] loop0: detected capacity change from 0 to 16 [ 162.278885][ T6999] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.361329][ T27] audit: type=1326 audit(1751379798.997:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 162.457366][ T27] audit: type=1326 audit(1751379799.027:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 162.589010][ T7012] dlm: no local IP address has been set [ 162.595129][ T7012] dlm: cannot start dlm midcomms -107 [ 162.605309][ T27] audit: type=1326 audit(1751379799.027:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 162.697397][ T27] audit: type=1326 audit(1751379799.027:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x7ffc0000 [ 163.992382][ T4972] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.089052][ T7077] xt_hashlimit: max too large, truncated to 1048576 [ 164.193012][ T4972] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 164.214298][ T4972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.249532][ T4972] pwc: Logitech ViewPort AV 100 webcam detected. [ 164.434349][ T4341] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.555054][ T7099] loop2: detected capacity change from 0 to 764 [ 164.587327][ T7099] Symlink component flag not implemented [ 164.599209][ T7099] Symlink component flag not implemented [ 164.607719][ T7099] Symlink component flag not implemented (129) [ 164.618429][ T7099] Symlink component flag not implemented (6) [ 164.655667][ T4972] pwc: send_video_command error -71 [ 164.662358][ T4341] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 164.681777][ T4972] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 164.691909][ T4341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.708584][ T4972] Philips webcam: probe of 4-1:127.0 failed with error -71 [ 164.725273][ T4341] usb 1-1: config 0 descriptor?? [ 164.731821][ T4972] usb 4-1: USB disconnect, device number 9 [ 164.743678][ T4341] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.790797][ T4341] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 164.965973][ T7111] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1218'. [ 164.966334][ T4973] usb 1-1: USB disconnect, device number 8 [ 165.744909][ T7115] loop4: detected capacity change from 0 to 32768 [ 165.825925][ T7115] XFS (loop4): Mounting V5 Filesystem [ 165.868148][ T7121] loop1: detected capacity change from 0 to 32768 [ 165.884676][ T7123] loop3: detected capacity change from 0 to 32768 [ 166.020699][ T7115] XFS (loop4): Ending clean mount [ 166.044126][ T7121] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.170038][ T7121] (syz.1.1224,7121,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 166.252583][ T4261] XFS (loop4): Unmounting Filesystem [ 166.255449][ T7121] (syz.1.1224,7121,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 166.328371][ T7121] (syz.1.1224,7121,0):ocfs2_mknod:298 ERROR: status = -2 [ 166.348982][ T7145] netlink: 'syz.3.1231': attribute type 13 has an invalid length. [ 166.363505][ T7121] (syz.1.1224,7121,0):ocfs2_mknod:502 ERROR: status = -2 [ 166.393813][ T7145] device macvtap0 entered promiscuous mode [ 166.404420][ T7121] (syz.1.1224,7121,0):ocfs2_create:676 ERROR: status = -2 [ 166.659299][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 168.110622][ T7208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1261'. [ 168.216226][ T7212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.503296][ T27] audit: type=1400 audit(1751379805.277:2398): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 169.040000][ T4341] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 169.048139][ T4341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.075025][ T4341] usb 5-1: config 0 has no interface number 0 [ 169.090259][ T4341] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 169.118336][ T4341] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 169.143438][ T4341] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.175847][ T4341] usb 5-1: config 0 interface 52 has no altsetting 0 [ 169.212656][ T4341] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 169.250447][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 169.263323][ T4341] usb 5-1: Product: syz [ 169.270769][ T4341] usb 5-1: SerialNumber: syz [ 169.293211][ T4341] usb 5-1: config 0 descriptor?? [ 169.521229][ T4341] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input10 [ 169.738458][ T4341] usb 5-1: USB disconnect, device number 9 [ 169.745534][ T3608] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 169.761173][ T7273] tmpfs: Bad value for 'nr_inodes' [ 169.989004][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1298'. [ 170.568608][ T4972] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 170.790593][ T4972] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.812077][ T4972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.828013][ T7282] loop1: detected capacity change from 0 to 32768 [ 170.832129][ T4972] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.854090][ T4972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.893263][ T7304] loop2: detected capacity change from 0 to 64 [ 170.906212][ T4972] usb 4-1: Product: syz [ 170.941311][ T4972] usb 4-1: Manufacturer: syz [ 170.971669][ T4972] usb 4-1: SerialNumber: syz [ 171.005893][ T4972] usb 4-1: config 0 descriptor?? [ 171.016699][ T7282] XFS (loop1): Mounting V5 Filesystem [ 171.021059][ T4972] usb 4-1: selecting invalid altsetting 0 [ 171.097359][ T7315] netlink: 'syz.2.1312': attribute type 39 has an invalid length. [ 171.123871][ T7315] device veth0_macvtap left promiscuous mode [ 171.186216][ T7282] XFS (loop1): Ending clean mount [ 171.230114][ T4973] usb 4-1: USB disconnect, device number 10 [ 171.395571][ T4251] XFS (loop1): Unmounting Filesystem [ 171.537361][ T7298] loop0: detected capacity change from 0 to 32768 [ 171.983947][ T27] audit: type=1326 audit(1751379808.757:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 172.014821][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 172.055029][ T27] audit: type=1326 audit(1751379808.757:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 172.123632][ T27] audit: type=1326 audit(1751379808.757:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 172.217380][ T27] audit: type=1326 audit(1751379808.757:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 172.294542][ T7340] loop4: detected capacity change from 0 to 512 [ 172.378234][ T7344] loop2: detected capacity change from 0 to 256 [ 172.415121][ T7340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.434406][ T7344] exfat: Deprecated parameter 'utf8' [ 172.447244][ T7340] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.464304][ T7344] exfat: Deprecated parameter 'utf8' [ 172.513866][ T7344] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe383f72e, utbl_chksum : 0xe619d30d) [ 172.619230][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 173.288414][ T4972] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.348868][ T7384] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 173.492377][ T4972] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 173.537237][ T4972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.547442][ T4972] usb 5-1: Product: syz [ 173.556058][ T4972] usb 5-1: Manufacturer: syz [ 173.584581][ T4972] usb 5-1: SerialNumber: syz [ 173.607932][ T4972] usb 5-1: config 0 descriptor?? [ 173.823115][ T4972] usb-storage 5-1:0.0: USB Mass Storage device detected [ 173.934956][ T27] audit: type=1326 audit(1751379810.707:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42718e929 code=0x7ffc0000 [ 174.008335][ T27] audit: type=1326 audit(1751379810.707:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42718e929 code=0x7ffc0000 [ 174.044913][ T4341] usb 5-1: USB disconnect, device number 10 [ 174.109449][ T27] audit: type=1326 audit(1751379810.707:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fc42718e929 code=0x7ffc0000 [ 174.184436][ T27] audit: type=1326 audit(1751379810.707:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42718e929 code=0x7ffc0000 [ 174.251854][ T7385] loop3: detected capacity change from 0 to 32768 [ 174.269045][ T27] audit: type=1326 audit(1751379810.707:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42718e929 code=0x7ffc0000 [ 174.515411][ T7394] loop0: detected capacity change from 0 to 32768 [ 174.576473][ T7394] JBD2: Ignoring recovery information on journal [ 174.724759][ T7394] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.798215][ T7394] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 174.828495][ T4341] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.878431][ T7394] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 174.904245][ T7394] OCFS2: File system is now read-only. [ 174.914210][ T7394] (syz.0.1348,7394,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 174.934455][ T7394] (syz.0.1348,7394,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 174.952843][ T7394] (syz.0.1348,7394,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 174.970410][ T7394] (syz.0.1348,7394,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 174.999900][ T7394] (syz.0.1348,7394,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 175.019921][ T7394] (syz.0.1348,7394,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 175.039120][ T7394] (syz.0.1348,7394,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 175.048367][ T4341] usb 4-1: Using ep0 maxpacket: 8 [ 175.055485][ T4341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.068359][ T7394] (syz.0.1348,7394,1):ocfs2_mknod:385 ERROR: status = -30 [ 175.079777][ T4341] usb 4-1: config 4 interface 0 has no altsetting 0 [ 175.097876][ T7394] (syz.0.1348,7394,1):ocfs2_mknod:502 ERROR: status = -30 [ 175.108618][ T4341] usb 4-1: string descriptor 0 read error: -22 [ 175.114925][ T4341] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 175.128361][ T7394] (syz.0.1348,7394,1):ocfs2_create:676 ERROR: status = -30 [ 175.138680][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.187571][ T4341] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 175.213784][ T7428] loop2: detected capacity change from 0 to 8192 [ 175.222232][ T4341] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.237710][ T4972] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.259256][ T4341] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 175.268968][ T4341] usb 4-1: media controller created [ 175.285456][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 175.287372][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.300951][ T7428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.325503][ T7428] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 175.335732][ T7428] REISERFS (device loop2): using ordered data mode [ 175.342563][ T7428] reiserfs: using flush barriers [ 175.357842][ T7428] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.394890][ T7428] REISERFS (device loop2): checking transaction log (loop2) [ 175.440705][ T4972] usb 2-1: Using ep0 maxpacket: 16 [ 175.453058][ T4972] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 175.465400][ T7428] REISERFS (device loop2): Using r5 hash to sort names [ 175.489045][ T4972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.509025][ T4972] usb 2-1: Product: syz [ 175.512921][ T7428] REISERFS (device loop2): using 3.5.x disk format [ 175.533868][ T7428] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 175.537836][ T4972] usb 2-1: Manufacturer: syz [ 175.580192][ T4972] usb 2-1: SerialNumber: syz [ 175.596925][ T4972] usb 2-1: config 0 descriptor?? [ 175.681965][ T4972] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 175.736969][ T4312] usb 4-1: USB disconnect, device number 11 [ 175.741016][ T4545] udevd[4545]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.915091][ T4972] usb 2-1: USB disconnect, device number 7 [ 176.774267][ T7471] loop2: detected capacity change from 0 to 512 [ 176.844592][ T7475] xt_TCPMSS: Only works on TCP SYN packets [ 176.862838][ T7471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.918894][ T7471] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.033506][ T7471] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 177.206825][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 177.702689][ T7469] loop1: detected capacity change from 0 to 32768 [ 177.833412][ T7469] XFS (loop1): Mounting V5 Filesystem [ 177.857662][ T7500] loop0: detected capacity change from 0 to 2048 [ 177.980407][ T7506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.026626][ T7469] XFS (loop1): Ending clean mount [ 178.043602][ T7500] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 178.059597][ T7483] loop3: detected capacity change from 0 to 32768 [ 178.094070][ T7469] XFS (loop1): Quotacheck needed: Please wait. [ 178.117086][ T7500] Remounting filesystem read-only [ 178.173073][ T7483] (syz.3.1387,7483,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.205575][ T7469] XFS (loop1): Quotacheck: Done. [ 178.218081][ T7483] (syz.3.1387,7483,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.305544][ T7483] JBD2: Ignoring recovery information on journal [ 178.476385][ T7483] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 178.502229][ T4251] XFS (loop1): Unmounting Filesystem [ 178.928945][ T4257] ocfs2: Unmounting device (7,3) on (node local) [ 179.308679][ T7540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.636298][ T7555] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 179.647075][ T7556] trusted_key: encrypted_key: insufficient parameters specified [ 179.756364][ T7558] loop3: detected capacity change from 0 to 64 [ 180.157234][ T7574] device bridge_slave_1 left promiscuous mode [ 180.221208][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.280349][ T7574] device bridge_slave_0 left promiscuous mode [ 180.286640][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.447317][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 180.630015][ T7592] loop4: detected capacity change from 0 to 64 [ 180.926471][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 180.938387][ T7603] netlink: 'syz.0.1440': attribute type 2 has an invalid length. [ 180.945516][ T7606] loop1: detected capacity change from 0 to 256 [ 180.971263][ T7606] exfat: Deprecated parameter 'namecase' [ 180.976491][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1443'. [ 180.976993][ T7606] exfat: Deprecated parameter 'namecase' [ 181.038412][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 181.048409][ T7606] exfat: Deprecated parameter 'namecase' [ 181.107273][ T7610] binder: 7609:7610 ioctl c00c6211 9999999999999999 returned -14 [ 181.125922][ T7606] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf0064b2e, utbl_chksum : 0xe619d30d) [ 181.298690][ T7617] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 181.687214][ T7635] netlink: 'syz.1.1456': attribute type 3 has an invalid length. [ 182.218844][ T7659] netlink: 'syz.0.1467': attribute type 1 has an invalid length. [ 182.262143][ T7656] loop4: detected capacity change from 0 to 1024 [ 182.303875][ T7656] hfsplus: bad catalog entry type [ 182.470428][ T56] hfsplus: b-tree write err: -5, ino 4 [ 182.786267][ T7674] loop4: detected capacity change from 0 to 4096 [ 182.856788][ T7674] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 182.900023][ T7674] ntfs3: loop4: Failed to load $Extend. [ 183.173748][ T7674] syz.4.1474 (7674) used greatest stack depth: 20624 bytes left [ 183.208675][ T7687] loop0: detected capacity change from 0 to 4096 [ 183.238759][ T7687] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 184.787007][ T7755] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 184.797771][ T7756] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 184.961492][ T27] audit: type=1326 audit(1751379821.737:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e58e929 code=0x7ffc0000 [ 185.038399][ T27] audit: type=1326 audit(1751379821.747:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7eff3e58e929 code=0x7ffc0000 [ 185.108408][ T27] audit: type=1326 audit(1751379821.747:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e58e929 code=0x7ffc0000 [ 185.207126][ T27] audit: type=1326 audit(1751379821.747:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.0.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3e58e929 code=0x7ffc0000 [ 185.342594][ T7778] loop4: detected capacity change from 0 to 512 [ 185.442940][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 185.453434][ T7787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 185.463729][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 185.473052][ T7778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.482432][ T7778] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.494471][ T7787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 185.513906][ T7787] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1531'. [ 185.558444][ T4972] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.619230][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 185.790604][ T4972] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 185.816272][ T4972] usb 4-1: config 0 has no interface number 0 [ 185.838199][ T4972] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 185.902543][ T4972] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.945987][ T4972] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 185.978285][ T4972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.986543][ T4972] usb 4-1: Product: syz [ 185.996683][ T4972] usb 4-1: Manufacturer: syz [ 186.027094][ T4972] usb 4-1: SerialNumber: syz [ 186.051734][ T4972] usb 4-1: config 0 descriptor?? [ 186.057977][ T7774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.077033][ T4972] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 186.117764][ T4972] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 186.122715][ T7805] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 186.530444][ T4972] usb 4-1: USB disconnect, device number 12 [ 186.551111][ T4972] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 186.617439][ T4972] cyberjack 4-1:0.69: device disconnected [ 187.163550][ T7848] trusted_key: encrypted_key: insufficient parameters specified [ 187.741821][ T7871] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1572'. [ 187.843395][ T7842] loop0: detected capacity change from 0 to 32768 [ 188.128439][ T4327] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.176747][ T7883] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 188.319999][ T4327] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 188.338383][ T4327] usb 3-1: config 0 has no interface number 0 [ 188.358302][ T4327] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 188.397817][ T4327] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.475575][ T4327] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 188.513300][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.539152][ T4327] usb 3-1: Product: syz [ 188.552602][ T4327] usb 3-1: Manufacturer: syz [ 188.565832][ T4327] usb 3-1: SerialNumber: syz [ 188.602213][ T4327] usb 3-1: config 0 descriptor?? [ 188.607845][ T7876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.644744][ T4327] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 188.688985][ T4327] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 189.085393][ T4972] usb 3-1: USB disconnect, device number 8 [ 189.115811][ T4972] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 189.157637][ T4972] cyberjack 3-1:0.69: device disconnected [ 189.644107][ T7938] loop4: detected capacity change from 0 to 1024 [ 189.902150][ T51] hfsplus: b-tree write err: -5, ino 4 [ 190.045880][ T7955] loop2: detected capacity change from 0 to 1024 [ 190.234463][ T51] hfsplus: b-tree write err: -5, ino 4 [ 190.291303][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1611'. [ 190.331665][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 190.513676][ T7971] loop0: detected capacity change from 0 to 8 [ 190.547802][ T7971] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 191.400422][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1639'. [ 192.020966][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 192.030330][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 192.874135][ T8078] MPI: mpi too large (124808 bits) [ 194.023978][ T27] audit: type=1326 audit(1751379830.797:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 194.098451][ T27] audit: type=1326 audit(1751379830.797:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 194.126376][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126424][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244118][ T27] audit: type=1326 audit(1751379830.837:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 194.329779][ T27] audit: type=1326 audit(1751379830.837:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 194.403131][ T27] audit: type=1326 audit(1751379830.837:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bbb8e929 code=0x7ffc0000 [ 194.576828][ T8150] sctp: [Deprecated]: syz.2.1707 (pid 8150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.576828][ T8150] Use struct sctp_sack_info instead [ 195.073394][ T8128] loop0: detected capacity change from 0 to 32768 [ 195.133337][ T8160] loop1: detected capacity change from 0 to 4096 [ 195.156619][ T8128] XFS (loop0): Mounting V5 Filesystem [ 195.249908][ T8160] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 195.375307][ T8128] XFS (loop0): Ending clean mount [ 195.514912][ T4265] XFS (loop0): Unmounting Filesystem [ 195.672510][ T8182] MPI: mpi too large (124808 bits) [ 195.770060][ T4319] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.983621][ T4319] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 196.019751][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.058492][ T4319] usb 3-1: Product: syz [ 196.062798][ T4319] usb 3-1: Manufacturer: syz [ 196.067415][ T4319] usb 3-1: SerialNumber: syz [ 196.133574][ T4319] usb 3-1: config 0 descriptor?? [ 196.167851][ T4319] hub 3-1:0.0: bad descriptor, ignoring hub [ 196.179579][ T4319] hub: probe of 3-1:0.0 failed with error -5 [ 196.186414][ T4319] f81232 3-1:0.0: f81534a converter detected [ 196.292965][ T8202] loop1: detected capacity change from 0 to 2048 [ 196.368414][ T8206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.384306][ T4319] usb 3-1: f81534a converter now attached to ttyUSB0 [ 196.390132][ T8202] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 196.394767][ T8207] netlink: 'syz.0.1732': attribute type 39 has an invalid length. [ 196.462706][ T8202] Remounting filesystem read-only [ 196.515412][ T8207] device veth0_macvtap left promiscuous mode [ 196.519452][ T8209] loop3: detected capacity change from 0 to 1024 [ 196.571539][ T8209] syz.3.1743: attempt to access beyond end of device [ 196.571539][ T8209] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 196.616251][ T8209] Buffer I/O error on dev loop3, logical block 458752, async page read [ 196.647358][ T8209] syz.3.1743: attempt to access beyond end of device [ 196.647358][ T8209] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 196.666778][ T8209] Buffer I/O error on dev loop3, logical block 458752, async page read [ 196.728646][ T4312] usb 3-1: USB disconnect, device number 9 [ 196.771125][ T4312] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 196.803509][ T4312] f81232 3-1:0.0: device disconnected [ 197.213862][ T8231] binder: 8229:8231 ioctl c018620b 0 returned -14 [ 197.272145][ T6265] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.439695][ T8235] loop0: detected capacity change from 0 to 2048 [ 197.475742][ T8235] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 197.494995][ T6265] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 197.539252][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.547301][ T6265] usb 2-1: Product: syz [ 197.555681][ T8235] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 197.569886][ T6265] usb 2-1: Manufacturer: syz [ 197.574525][ T6265] usb 2-1: SerialNumber: syz [ 197.586500][ T8235] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 197.599030][ T8245] tmpfs: Bad value for 'mpol' [ 197.613261][ T6265] usb 2-1: config 0 descriptor?? [ 197.630447][ T8235] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 197.638129][ T8235] UDF-fs: Scanning with blocksize 512 failed [ 197.689935][ T8235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.850376][ T6265] usb-storage 2-1:0.0: USB Mass Storage device detected [ 198.065960][ T4341] usb 2-1: USB disconnect, device number 8 [ 198.247567][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1757'. [ 198.287373][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 199.246559][ T8296] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1774'. [ 199.268419][ T8296] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 199.286473][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 199.633481][ T27] audit: type=1400 audit(1751379836.407:2417): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8306 comm="syz.0.1779" [ 199.831461][ T8315] 8021q: VLANs not supported on lo [ 200.044261][ T8324] loop3: detected capacity change from 0 to 64 [ 200.144142][ T8329] loop2: detected capacity change from 0 to 164 [ 200.161024][ T8331] tmpfs: Bad value for 'nr_blocks' [ 200.229464][ T8329] syz.2.1790: attempt to access beyond end of device [ 200.229464][ T8329] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 200.273984][ T8329] syz.2.1790: attempt to access beyond end of device [ 200.273984][ T8329] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 200.443611][ T8338] dlm: no locking on control device [ 200.599742][ T4319] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 200.801135][ T4319] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 200.820670][ T4319] usb 5-1: config 0 has no interface number 0 [ 200.842888][ T4319] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 200.872356][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.897194][ T4319] usb 5-1: Product: syz [ 200.902737][ T4319] usb 5-1: Manufacturer: syz [ 200.907461][ T4319] usb 5-1: SerialNumber: syz [ 200.908439][ T6265] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.948482][ T4319] usb 5-1: config 0 descriptor?? [ 200.956068][ T4319] qmi_wwan 5-1:0.207: bogus CDC Union: master=0, slave=1 [ 201.006724][ T8362] sctp: [Deprecated]: syz.3.1807 (pid 8362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.006724][ T8362] Use struct sctp_sack_info instead [ 201.099570][ T6265] usb 2-1: Using ep0 maxpacket: 8 [ 201.111187][ T6265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.160562][ T6265] usb 2-1: config 4 interface 0 has no altsetting 0 [ 201.168676][ T4319] qmi_wwan: probe of 5-1:0.207 failed with error -22 [ 201.188172][ T6265] usb 2-1: string descriptor 0 read error: -22 [ 201.197582][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 201.217073][ T6265] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 201.231256][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.280997][ T6265] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 201.292060][ T6265] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.303286][ T6265] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 201.332370][ T6265] usb 2-1: media controller created [ 201.377715][ T6265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.395860][ T4319] usb 5-1: USB disconnect, device number 11 [ 201.504836][ T8377] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 201.767124][ T6265] usb 2-1: USB disconnect, device number 9 [ 202.054999][ T8399] loop3: detected capacity change from 0 to 8 [ 202.158343][ T4327] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.164936][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 202.180947][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1826'. [ 202.217825][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1826'. [ 202.350245][ T4327] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.388457][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.427664][ T4327] usb 1-1: config 0 descriptor?? [ 202.447267][ T4327] cp210x 1-1:0.0: cp210x converter detected [ 202.668483][ T4341] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.737342][ T8391] loop2: detected capacity change from 0 to 40427 [ 202.761953][ T8391] F2FS-fs (loop2): invalid crc value [ 202.776342][ T8391] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.863099][ T8391] F2FS-fs (loop2): Start checkpoint disabled! [ 202.865806][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 202.870666][ T4327] usb 1-1: cp210x converter now attached to ttyUSB0 [ 202.887045][ T4341] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 202.901260][ T8420] Cannot find del_set index 65534 as target [ 202.911970][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 202.934810][ T4327] usb 1-1: USB disconnect, device number 9 [ 202.940094][ T8422] loop4: detected capacity change from 0 to 256 [ 202.949193][ T4341] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 202.954254][ T8391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 202.960895][ T8422] exfat: Deprecated parameter 'utf8' [ 202.973748][ T4341] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 203.011665][ T4327] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.024793][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.039890][ T4327] cp210x 1-1:0.0: device disconnected [ 203.043726][ T4341] usb 4-1: config 0 descriptor?? [ 203.114606][ T8422] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 203.203912][ T8425] loop1: detected capacity change from 0 to 1024 [ 203.263574][ T4341] hdpvr 4-1:0.0: firmware version 0x12 dated [ 203.288632][ T8425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.393552][ T8425] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 203.470358][ T8425] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 203.483566][ T4341] hdpvr 4-1:0.0: device init failed [ 203.489590][ T4341] hdpvr: probe of 4-1:0.0 failed with error -12 [ 203.495998][ T8425] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1837: Failed to acquire dquot type 0 [ 203.511037][ T4341] usb 4-1: USB disconnect, device number 13 [ 203.553165][ T8425] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 203.612824][ T8425] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #13: comm syz.1.1837: corrupted inode contents [ 203.655255][ T8425] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #13: comm syz.1.1837: mark_inode_dirty error [ 203.694664][ T8425] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #13: comm syz.1.1837: corrupted inode contents [ 203.740813][ T8425] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1837: mark_inode_dirty error [ 203.789301][ T8425] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #13: comm syz.1.1837: corrupted inode contents [ 203.828446][ T8425] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 203.857687][ T8425] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #13: comm syz.1.1837: corrupted inode contents [ 203.888328][ T8425] EXT4-fs error (device loop1): ext4_truncate:4312: inode #13: comm syz.1.1837: mark_inode_dirty error [ 203.940146][ T8425] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 203.987005][ T8425] EXT4-fs (loop1): 1 truncate cleaned up [ 203.993715][ T8425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.128487][ T8425] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 204.137615][ T8425] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 204.205277][ T8425] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1837: Failed to acquire dquot type 0 [ 204.417838][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 204.425358][ T8457] program syz.3.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.475803][ T8461] loop0: detected capacity change from 0 to 1764 [ 205.470130][ T8489] loop4: detected capacity change from 0 to 4096 [ 205.509853][ T8489] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 205.568564][ T8489] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 205.649385][ T8489] ntfs: volume version 3.1. [ 205.705643][ T8489] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 205.789230][ T8489] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 205.832044][ T8489] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 205.989359][ T8511] netlink: 'syz.3.1879': attribute type 3 has an invalid length. [ 206.017640][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1879'. [ 206.078471][ T4312] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 206.269986][ T4312] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 206.292436][ T8519] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.296955][ T4312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.336556][ T8494] loop1: detected capacity change from 0 to 40427 [ 206.350815][ T4312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.360892][ T4327] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.389920][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.392103][ T8494] F2FS-fs (loop1): invalid crc value [ 206.398895][ T4312] usb 1-1: Product: syz [ 206.420710][ T8523] netlink: 'syz.4.1885': attribute type 10 has an invalid length. [ 206.430049][ T4312] usb 1-1: Manufacturer: syz [ 206.434698][ T4312] usb 1-1: SerialNumber: syz [ 206.442430][ T8494] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 206.456157][ T4312] usb 1-1: config 0 descriptor?? [ 206.492525][ T4312] usb 1-1: selecting invalid altsetting 0 [ 206.568480][ T4327] usb 3-1: Using ep0 maxpacket: 16 [ 206.589778][ T4327] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 206.627774][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.638002][ T8494] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 206.657031][ T4327] usb 3-1: Product: syz [ 206.666908][ T8494] F2FS-fs (loop1): Start checkpoint disabled! [ 206.667205][ T4327] usb 3-1: Manufacturer: syz [ 206.698403][ T4327] usb 3-1: SerialNumber: syz [ 206.704140][ T8494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 206.719483][ T4327] r8152-cfgselector 3-1: config 0 descriptor?? [ 206.751912][ T4341] usb 1-1: USB disconnect, device number 10 [ 206.770617][ T8523] device veth0_vlan left promiscuous mode [ 206.791537][ T8523] device veth0_vlan entered promiscuous mode [ 206.828809][ T8494] F2FS-fs (loop1): disabling checkpoint not compatible with read-only [ 206.833081][ T8523] team0: Device veth0_vlan failed to register rx_handler [ 207.059319][ T8521] loop3: detected capacity change from 0 to 32768 [ 207.112254][ T8521] JBD2: Ignoring recovery information on journal [ 207.168374][ T4327] r8152-cfgselector 3-1: Unknown version 0x0000 [ 207.174792][ T4327] r8152-cfgselector 3-1: bad CDC descriptors [ 207.191706][ T4327] r8152-cfgselector 3-1: Unknown version 0x0000 [ 207.199346][ T4327] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 207.222685][ T8521] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 207.326551][ T27] audit: type=1800 audit(1751379844.097:2418): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1884" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 207.479021][ T4257] ocfs2: Unmounting device (7,3) on (node local) [ 207.482037][ T8534] loop0: detected capacity change from 0 to 1024 [ 207.526486][ T8536] loop1: detected capacity change from 0 to 1024 [ 207.585466][ T8536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.814420][ T8543] loop3: detected capacity change from 0 to 256 [ 207.955160][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 208.734778][ T8579] SET target dimension over the limit! [ 208.922962][ T8585] loop3: detected capacity change from 0 to 256 [ 208.971152][ T8588] device lo entered promiscuous mode [ 208.977379][ T8591] loop4: detected capacity change from 0 to 8 [ 209.033025][ T8591] SQUASHFS error: lzo decompression failed, data probably corrupt [ 209.067394][ T8591] SQUASHFS error: Failed to read block 0x1c0: -5 [ 209.105824][ T8591] SQUASHFS error: Unable to read metadata cache entry [1be] [ 209.381397][ T129] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 209.554768][ T8611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1926'. [ 209.599252][ T129] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 209.628039][ T129] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 209.649562][ T8613] loop4: detected capacity change from 0 to 512 [ 209.666761][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.700793][ T129] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 209.717262][ T8613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.766968][ T129] usb 3-1: No valid video chain found. [ 209.777112][ T8613] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.787922][ T27] audit: type=1326 audit(1751379846.557:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 209.810666][ T27] audit: type=1326 audit(1751379846.557:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 209.847210][ T27] audit: type=1326 audit(1751379846.617:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 209.876557][ T27] audit: type=1326 audit(1751379846.617:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x7ffc0000 [ 209.908582][ T129] usb 3-1: USB disconnect, device number 11 [ 210.013860][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 210.100205][ T8628] loop1: detected capacity change from 0 to 64 [ 210.122669][ T8624] loop0: detected capacity change from 0 to 4096 [ 211.264546][ T8672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'. [ 211.443327][ T8678] loop0: detected capacity change from 0 to 1024 [ 211.749211][ T8693] trusted_key: encrypted_key: hex blob is missing [ 211.867340][ T8696] loop3: detected capacity change from 0 to 256 [ 211.895609][ T8697] xt_l2tp: v2 doesn't support IP mode [ 211.911333][ T8696] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 211.913847][ T8699] netlink: 1033 bytes leftover after parsing attributes in process `syz.2.1968'. [ 212.132604][ T8703] loop1: detected capacity change from 0 to 128 [ 212.153368][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 212.153382][ T27] audit: type=1326 audit(1751379848.927:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.0.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff3e58e929 code=0x0 [ 212.186997][ T8703] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 212.217669][ T8709] netlink: 'syz.3.1973': attribute type 30 has an invalid length. [ 212.292999][ T27] audit: type=1800 audit(1751379849.067:2425): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1972" name="file2" dev="loop1" ino=1048618 res=0 errno=0 [ 212.304583][ T8703] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 212.344673][ T8703] FAT-fs (loop1): Filesystem has been set read-only [ 212.930883][ T8724] loop4: detected capacity change from 0 to 8192 [ 212.999091][ T8724] loop4: p1 < > p2 < > p4 < > [ 213.004338][ T8724] loop4: partition table partially beyond EOD, truncated [ 213.037829][ T8724] loop4: p4 start 524845 is beyond EOD, truncated [ 213.429359][ T4252] udevd[4252]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 213.437423][ T4545] udevd[4545]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 214.163711][ T8771] netlink: 'syz.2.2003': attribute type 4 has an invalid length. [ 214.163768][ T8745] loop0: detected capacity change from 0 to 32768 [ 214.166432][ T8767] loop4: detected capacity change from 0 to 4096 [ 214.270405][ T8767] ntfs: volume version 3.1. [ 214.351717][ T8751] loop3: detected capacity change from 0 to 32768 [ 214.354506][ T8767] ntfs: (device loop4): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 214.454567][ T27] audit: type=1800 audit(1751379851.227:2426): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1993" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 214.950353][ T8785] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 215.264053][ T8785] device veth0_vlan left promiscuous mode [ 215.283409][ T8785] device veth0_vlan entered promiscuous mode [ 215.311905][ T8785] team0: Device veth0_vlan failed to register rx_handler [ 215.398539][ T129] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 215.451302][ T8789] netlink: 'syz.3.2013': attribute type 4 has an invalid length. [ 215.584982][ T8797] netlink: 'syz.0.2016': attribute type 4 has an invalid length. [ 215.588414][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 215.601586][ T129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.623516][ T8797] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2016'. [ 215.657423][ T129] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 215.666621][ T129] usb 5-1: config 7 has no interface number 0 [ 215.678216][ T129] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 215.696124][ T129] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 215.706503][ T129] usb 5-1: config 7 interface 187 has no altsetting 0 [ 215.722684][ T129] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 215.773969][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.792521][ T129] usb 5-1: Product: syz [ 215.796735][ T129] usb 5-1: Manufacturer: syz [ 215.802971][ T129] usb 5-1: SerialNumber: syz [ 215.815915][ T8791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.848583][ T8791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.057248][ T8813] netlink: 'syz.3.2025': attribute type 5 has an invalid length. [ 216.074618][ T129] usb 5-1: Limiting number of CPorts to U8_MAX [ 216.090242][ T8813] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2025'. [ 216.093271][ T129] usb 5-1: Unknown endpoint type found, address 0x07 [ 216.125869][ T8815] [U] v3f"S/4:XTzWtlW= [ 216.133529][ T129] usb 5-1: Unused bulk OUT endpoint found: 0x03 [ 216.134340][ T27] audit: type=1326 audit(1751379852.907:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.2026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd66a38e929 code=0x0 [ 216.148389][ T129] usb 5-1: Not enough endpoints found in device, aborting! [ 216.169791][ T8815] [U] J"e:" [ 216.379945][ T4319] usb 5-1: USB disconnect, device number 12 [ 217.469379][ T8871] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2053'. [ 217.495483][ T8871] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 217.523820][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 217.886494][ T8885] device bridge_slave_1 left promiscuous mode [ 217.913999][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.964054][ T8885] device bridge_slave_0 left promiscuous mode [ 217.997901][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.185670][ T8884] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 218.378003][ T8884] device veth0_vlan left promiscuous mode [ 218.421114][ T8884] device veth0_vlan entered promiscuous mode [ 218.458935][ T8884] team0: Device veth0_vlan failed to register rx_handler [ 218.666206][ T8901] 8021q: VLANs not supported on lo [ 219.054897][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.542199][ T8930] loop2: detected capacity change from 0 to 256 [ 219.556189][ T8930] exfat: Deprecated parameter 'utf8' [ 219.586541][ T8930] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 219.840098][ T8940] loop1: detected capacity change from 0 to 64 [ 220.142220][ T8944] loop4: detected capacity change from 0 to 4096 [ 220.348456][ T4341] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.508997][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 220.558579][ T4341] usb 1-1: Using ep0 maxpacket: 8 [ 220.566288][ T4341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.574846][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 220.597312][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 220.606693][ T4341] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 220.631018][ T4341] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 220.656348][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 220.657444][ T4341] usb 1-1: config 4 has no interface number 0 [ 220.707042][ T4341] usb 1-1: string descriptor 0 read error: -22 [ 220.715990][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 220.723949][ T4341] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 220.746954][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.776364][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 220.796727][ T8966] loop3: detected capacity change from 0 to 256 [ 220.803502][ T4341] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 220.830522][ T4341] usb 1-1: No valid video chain found. [ 220.830760][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 220.836965][ T8966] exfat: Deprecated parameter 'utf8' [ 220.894008][ T8966] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 221.025581][ T4341] usb 1-1: USB disconnect, device number 11 [ 221.164426][ T8948] loop1: detected capacity change from 0 to 32768 [ 221.242237][ T27] audit: type=1800 audit(1751379858.017:2428): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2091" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 221.534425][ T8978] loop3: detected capacity change from 0 to 4096 [ 221.562682][ T8978] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 221.757233][ T8978] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 222.295740][ T8974] loop4: detected capacity change from 0 to 32768 [ 222.338613][ T8974] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2104 (8974) [ 222.372439][ T8996] loop0: detected capacity change from 0 to 4096 [ 222.404615][ T8974] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.439481][ T8974] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 222.480515][ T8974] BTRFS info (device loop4): using free space tree [ 222.562099][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 222.758420][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 222.907856][ T8974] BTRFS info (device loop4): enabling ssd optimizations [ 223.038154][ T9036] netlink: 'syz.2.2126': attribute type 10 has an invalid length. [ 223.104605][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.112209][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.127321][ T4261] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.149981][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.157494][ T9036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.166127][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.173303][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.323392][ T9036] team0: Port device bridge0 added [ 223.950969][ T9071] loop2: detected capacity change from 0 to 64 [ 224.037372][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2143'. [ 224.128488][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 224.275313][ T9081] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 224.355955][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 224.419649][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 224.460386][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 224.501751][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 224.520162][ T9089] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 9089 comm: syz.1.2150) [ 224.539152][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 224.646663][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 224.794787][ T27] audit: type=1400 audit(1751379861.567:2429): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=9096 comm="syz.1.2154" [ 225.265114][ T9121] loop4: detected capacity change from 0 to 256 [ 225.478479][ T6265] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.646790][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.678548][ T6265] usb 2-1: Using ep0 maxpacket: 32 [ 225.688195][ T6265] usb 2-1: config 6 has an invalid interface number: 225 but max is 0 [ 225.697948][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 225.699036][ T9130] loop2: detected capacity change from 0 to 2048 [ 225.718317][ T6265] usb 2-1: config 6 has no interface number 0 [ 225.728791][ T6265] usb 2-1: config 6 interface 225 has no altsetting 0 [ 225.742521][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 225.781893][ T6265] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 225.819622][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.824083][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 225.845762][ T9130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.863790][ T6265] usb 2-1: Product: syz [ 225.871232][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 225.882545][ T6265] usb 2-1: Manufacturer: syz [ 225.896894][ T9136] loop0: detected capacity change from 0 to 64 [ 225.908353][ T6265] usb 2-1: SerialNumber: syz [ 225.921131][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 226.138149][ T6265] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 226.229623][ T6265] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 226.254533][ T6265] dib0700: firmware download failed at 7 with -22 [ 226.287906][ T6265] usb 2-1: USB disconnect, device number 10 [ 226.628194][ T9158] loop3: detected capacity change from 0 to 64 [ 227.224093][ T9183] netlink: 'syz.3.2197': attribute type 21 has an invalid length. [ 227.268210][ T9183] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2197'. [ 227.398379][ T9185] mmap: syz.1.2198 (9185) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.698466][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 227.885907][ T9205] loop0: detected capacity change from 0 to 16 [ 227.908318][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 227.916215][ T22] usb 5-1: config 6 has an invalid interface number: 225 but max is 0 [ 227.934848][ T9205] erofs: (device loop0): mounted with root inode @ nid 36. [ 227.954397][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 227.972207][ T22] usb 5-1: config 6 has no interface number 0 [ 227.987797][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 228.000036][ T22] usb 5-1: config 6 interface 225 has no altsetting 0 [ 228.049017][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 228.063188][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 228.104020][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.125523][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 228.142726][ T22] usb 5-1: Product: syz [ 228.146940][ T22] usb 5-1: Manufacturer: syz [ 228.166571][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 228.184471][ T22] usb 5-1: SerialNumber: syz [ 228.224594][ T9213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2212'. [ 228.233138][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 228.420663][ T22] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 228.447714][ T22] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 228.466270][ T22] dib0700: firmware download failed at 7 with -22 [ 228.492135][ T22] usb 5-1: USB disconnect, device number 13 [ 228.645340][ T9227] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2) [ 228.649944][ T9225] loop0: detected capacity change from 0 to 256 [ 228.715926][ T9225] FAT-fs (loop0): Directory bread(block 64) failed [ 228.769760][ T9225] FAT-fs (loop0): Directory bread(block 65) failed [ 228.776454][ T9225] FAT-fs (loop0): Directory bread(block 66) failed [ 228.824632][ T9225] FAT-fs (loop0): Directory bread(block 67) failed [ 228.867694][ T9225] FAT-fs (loop0): Directory bread(block 68) failed [ 228.875088][ T9225] FAT-fs (loop0): Directory bread(block 69) failed [ 228.876381][ T9233] loop1: detected capacity change from 0 to 256 [ 228.881962][ T9225] FAT-fs (loop0): Directory bread(block 70) failed [ 228.929059][ T9225] FAT-fs (loop0): Directory bread(block 71) failed [ 228.935708][ T9225] FAT-fs (loop0): Directory bread(block 72) failed [ 228.968813][ T9233] FAT-fs (loop1): Directory bread(block 64) failed [ 228.978392][ T9225] FAT-fs (loop0): Directory bread(block 73) failed [ 228.995861][ T9233] FAT-fs (loop1): Directory bread(block 65) failed [ 229.038509][ T9233] FAT-fs (loop1): Directory bread(block 66) failed [ 229.045092][ T9233] FAT-fs (loop1): Directory bread(block 67) failed [ 229.109321][ T9233] FAT-fs (loop1): Directory bread(block 68) failed [ 229.115917][ T9233] FAT-fs (loop1): Directory bread(block 69) failed [ 229.148491][ T9233] FAT-fs (loop1): Directory bread(block 70) failed [ 229.161450][ T9233] FAT-fs (loop1): Directory bread(block 71) failed [ 229.209065][ T9233] FAT-fs (loop1): Directory bread(block 72) failed [ 229.215649][ T9233] FAT-fs (loop1): Directory bread(block 73) failed [ 229.822639][ T9257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2233'. [ 230.075773][ T9235] loop3: detected capacity change from 0 to 40427 [ 230.123714][ T9235] F2FS-fs (loop3): invalid crc value [ 230.162180][ T9235] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 230.313623][ T9270] xt_SECMARK: invalid mode: 2 [ 230.447986][ T9235] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 230.506636][ T9235] F2FS-fs (loop3): Start checkpoint disabled! [ 230.517509][ T9247] loop0: detected capacity change from 0 to 32768 [ 230.552718][ T9235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 230.604434][ T9247] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 230.638675][ T9247] (syz.0.2228,9247,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 230.668312][ T9247] (syz.0.2228,9247,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 230.699445][ T9235] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 230.734380][ T9247] (syz.0.2228,9247,0):ocfs2_mknod:298 ERROR: status = -2 [ 230.749188][ T9247] (syz.0.2228,9247,0):ocfs2_mknod:502 ERROR: status = -2 [ 230.778338][ T9247] (syz.0.2228,9247,1):ocfs2_mkdir:659 ERROR: status = -2 [ 230.958285][ T9288] loop1: detected capacity change from 0 to 256 [ 230.984684][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 231.076779][ T9288] FAT-fs (loop1): Directory bread(block 64) failed [ 231.152103][ T9288] FAT-fs (loop1): Directory bread(block 65) failed [ 231.178544][ T9288] FAT-fs (loop1): Directory bread(block 66) failed [ 231.185162][ T9288] FAT-fs (loop1): Directory bread(block 67) failed [ 231.228518][ T9288] FAT-fs (loop1): Directory bread(block 68) failed [ 231.246690][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'. [ 231.276772][ T9288] FAT-fs (loop1): Directory bread(block 69) failed [ 231.308524][ T9294] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 231.328908][ T9288] FAT-fs (loop1): Directory bread(block 70) failed [ 231.335468][ T9288] FAT-fs (loop1): Directory bread(block 71) failed [ 231.368589][ T9288] FAT-fs (loop1): Directory bread(block 72) failed [ 231.405757][ T9288] FAT-fs (loop1): Directory bread(block 73) failed [ 231.414910][ T9297] loop4: detected capacity change from 0 to 64 [ 231.422026][ T9] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 231.438109][ T9298] loop0: detected capacity change from 0 to 512 [ 231.574973][ T9298] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 231.605235][ T9302] netlink: 'syz.3.2245': attribute type 2 has an invalid length. [ 231.608487][ T9298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 231.698191][ T9298] System zones: 0-1, 15-15, 18-18, 34-34 [ 231.705526][ T9298] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.714032][ T9298] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 231.724201][ T9298] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 231.739584][ T9298] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 231.779603][ T9298] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2252: bad orphan inode 16 [ 231.877820][ T9298] ext4_test_bit(bit=15, block=18) = 1 [ 231.922480][ T9298] is_bad_inode(inode)=0 [ 231.957951][ T9298] NEXT_ORPHAN(inode)=0 [ 231.994083][ T9298] max_ino=32 [ 231.997353][ T9298] i_nlink=2 [ 232.029457][ T9298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.227933][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 232.325366][ T9324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2261'. [ 232.413143][ T9326] tmpfs: Bad value for 'mpol' [ 232.527342][ T9331] netlink: 'syz.3.2266': attribute type 7 has an invalid length. [ 232.547004][ T9331] netlink: 'syz.3.2266': attribute type 8 has an invalid length. [ 232.734794][ T9338] netlink: 'syz.1.2270': attribute type 15 has an invalid length. [ 232.854740][ T9345] netlink: 'syz.2.2274': attribute type 21 has an invalid length. [ 232.918528][ T9345] netlink: 'syz.2.2274': attribute type 6 has an invalid length. [ 232.954443][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2274'. [ 232.988544][ T9350] netlink: 'syz.1.2277': attribute type 30 has an invalid length. [ 233.190247][ T9355] tmpfs: Bad value for 'mpol' [ 233.446993][ T9346] loop0: detected capacity change from 0 to 32768 [ 233.506708][ T9346] [ 233.506708][ T9346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.506708][ T9346] [ 233.516435][ T9346] jfs_lookup: dtSearch returned -5 [ 233.644828][ T9369] loop1: detected capacity change from 0 to 64 [ 233.659789][ T4265] [ 233.659789][ T4265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.659789][ T4265] [ 233.687150][ T4265] [ 233.687150][ T4265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.687150][ T4265] [ 233.758598][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2287'. [ 233.767619][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2287'. [ 234.135020][ T9386] x_tables: duplicate underflow at hook 2 [ 234.141936][ T9387] netlink: 'syz.0.2294': attribute type 30 has an invalid length. [ 234.331275][ T27] audit: type=1326 audit(1751379871.107:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.345236][ T9392] loop4: detected capacity change from 0 to 256 [ 234.423074][ T9392] FAT-fs (loop4): Directory bread(block 64) failed [ 234.427419][ T27] audit: type=1326 audit(1751379871.107:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.457875][ T9392] FAT-fs (loop4): Directory bread(block 65) failed [ 234.508845][ T9392] FAT-fs (loop4): Directory bread(block 66) failed [ 234.515245][ T27] audit: type=1326 audit(1751379871.107:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.515434][ T9392] FAT-fs (loop4): Directory bread(block 67) failed [ 234.598801][ T9392] FAT-fs (loop4): Directory bread(block 68) failed [ 234.608807][ T27] audit: type=1326 audit(1751379871.107:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.613512][ T9392] FAT-fs (loop4): Directory bread(block 69) failed [ 234.656197][ T9392] FAT-fs (loop4): Directory bread(block 70) failed [ 234.663719][ T9392] FAT-fs (loop4): Directory bread(block 71) failed [ 234.688866][ T27] audit: type=1326 audit(1751379871.107:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.701070][ T9392] FAT-fs (loop4): Directory bread(block 72) failed [ 234.726306][ T9392] FAT-fs (loop4): Directory bread(block 73) failed [ 234.758378][ T27] audit: type=1326 audit(1751379871.107:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.801125][ T27] audit: type=1326 audit(1751379871.107:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.899426][ T27] audit: type=1326 audit(1751379871.107:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 234.978369][ T27] audit: type=1326 audit(1751379871.107:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 235.060384][ T9406] delete_channel: no stack [ 235.064165][ T9405] loop0: detected capacity change from 0 to 2048 [ 235.088924][ T9405] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 235.171981][ T9408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.178516][ T9379] loop1: detected capacity change from 0 to 32768 [ 235.300429][ T9417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 235.331669][ T9379] XFS (loop1): Mounting V5 Filesystem [ 235.528660][ T9379] XFS (loop1): Ending clean mount [ 235.541239][ T9422] netlink: 'syz.4.2307': attribute type 95 has an invalid length. [ 235.709965][ T4251] XFS (loop1): Unmounting Filesystem [ 236.719595][ T27] kauditd_printk_skb: 1424 callbacks suppressed [ 236.719611][ T27] audit: type=1326 audit(1751379873.497:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 236.825006][ T27] audit: type=1326 audit(1751379873.537:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 236.929381][ T27] audit: type=1326 audit(1751379873.537:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 236.984476][ T27] audit: type=1326 audit(1751379873.537:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.048382][ T6265] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 237.056598][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 237.082805][ T27] audit: type=1326 audit(1751379873.537:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.154435][ T27] audit: type=1326 audit(1751379873.537:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.237148][ T27] audit: type=1326 audit(1751379873.537:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.268511][ T6265] usb 2-1: Using ep0 maxpacket: 32 [ 237.280671][ T6265] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 237.311364][ T27] audit: type=1326 audit(1751379873.537:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.328262][ T6265] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 237.364179][ T6265] usb 2-1: config 0 has no interface number 1 [ 237.376385][ T27] audit: type=1326 audit(1751379873.537:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.402845][ T27] audit: type=1326 audit(1751379873.537:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.3.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde13b8e929 code=0x50000 [ 237.407401][ T9477] loop4: detected capacity change from 0 to 128 [ 237.426518][ T6265] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 237.439229][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2333'. [ 237.440897][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.478277][ T6265] usb 2-1: Product: syz [ 237.502886][ T6265] usb 2-1: Manufacturer: syz [ 237.515733][ T9477] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.527231][ T6265] usb 2-1: SerialNumber: syz [ 237.544836][ T6265] usb 2-1: config 0 descriptor?? [ 237.555889][ T9477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.605897][ T9480] rtc_cmos 00:00: Alarms can be up to one day in the future [ 237.608079][ T6265] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 237.698106][ T6265] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 237.944297][ T6265] usb 2-1: USB disconnect, device number 11 [ 237.995790][ T9491] loop0: detected capacity change from 0 to 2048 [ 238.068978][ T9491] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 238.129954][ T9491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.638439][ T9513] loop0: detected capacity change from 0 to 512 [ 238.648648][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 238.736207][ T9513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.838091][ T9513] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.043773][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 239.118374][ T6265] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.190353][ T9538] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 239.213540][ T52] block nbd0: Attempted send on invalid socket [ 239.219834][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.309056][ T6265] usb 5-1: Using ep0 maxpacket: 16 [ 239.316618][ T6265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.337270][ T6265] usb 5-1: config 0 has no interfaces? [ 239.360121][ T6265] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 239.388844][ T6265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.396984][ T6265] usb 5-1: Product: syz [ 239.422018][ T6265] usb 5-1: Manufacturer: syz [ 239.438521][ T6265] usb 5-1: SerialNumber: syz [ 239.460638][ T6265] r8152-cfgselector 5-1: config 0 descriptor?? [ 239.668892][ T9529] loop2: detected capacity change from 0 to 32768 [ 239.697117][ T6265] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 239.813518][ T9529] XFS (loop2): Mounting V5 Filesystem [ 239.823425][ T9554] loop0: detected capacity change from 0 to 2048 [ 239.864541][ T9554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.912454][ T6265] usb 5-1: USB disconnect, device number 14 [ 240.026868][ T9529] XFS (loop2): Ending clean mount [ 240.181902][ T4256] XFS (loop2): Unmounting Filesystem [ 240.631890][ T9585] loop3: detected capacity change from 0 to 256 [ 240.788558][ T6265] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 240.937055][ T9592] tmpfs: Bad value for 'mpol' [ 241.008458][ T6265] usb 2-1: Using ep0 maxpacket: 16 [ 241.017428][ T6265] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 241.055124][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.088603][ T6265] usb 2-1: Product: syz [ 241.092825][ T6265] usb 2-1: Manufacturer: syz [ 241.126696][ T6265] usb 2-1: SerialNumber: syz [ 241.143715][ T6265] r8152-cfgselector 2-1: config 0 descriptor?? [ 241.173552][ T9600] loop3: detected capacity change from 0 to 128 [ 241.337865][ T4257] sysv_free_block: flc_count > flc_size [ 241.337934][ T9577] loop0: detected capacity change from 0 to 32768 [ 241.366785][ T6265] r8152-cfgselector 2-1: Unknown version 0x0000 [ 241.388797][ T9577] (syz.0.2375,9577,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.424012][ T4257] sysv_free_block: flc_count > flc_size [ 241.424022][ T9577] (syz.0.2375,9577,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.455750][ T4257] sysv_free_block: flc_count > flc_size [ 241.496048][ T4257] sysv_free_block: flc_count > flc_size [ 241.511547][ T4257] sysv_free_block: flc_count > flc_size [ 241.538054][ T9577] (syz.0.2375,9577,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 241.539654][ T4257] sysv_free_block: flc_count > flc_size [ 241.567300][ T9577] JBD2: Ignoring recovery information on journal [ 241.581546][ T6265] r8152-cfgselector 2-1: Unknown version 0x0000 [ 241.592539][ T6265] r8152-cfgselector 2-1: bad CDC descriptors [ 241.595684][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 241.602273][ T4257] sysv_free_block: flc_count > flc_size [ 241.613608][ T6265] r8152-cfgselector 2-1: Unknown version 0x0000 [ 241.621511][ T6265] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 241.713147][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 241.722963][ T4257] sysv_free_block: flc_count > flc_size [ 241.738138][ T4257] sysv_free_block: flc_count > flc_size [ 241.745641][ T9610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.753638][ T9610] IPv6: NLM_F_CREATE should be set when creating new route [ 241.761010][ T9610] IPv6: NLM_F_CREATE should be set when creating new route [ 241.778335][ T4257] sysv_free_block: flc_count > flc_size [ 241.786794][ T9577] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 241.786892][ T4257] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 242.148099][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 242.551822][ T9633] x_tables: unsorted entry at hook 2 [ 243.223541][ T6265] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.418527][ T6265] usb 4-1: Using ep0 maxpacket: 8 [ 243.427611][ T6265] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 243.456788][ T6265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.477723][ T6265] usb 4-1: Product: syz [ 243.484294][ T6265] usb 4-1: Manufacturer: syz [ 243.509996][ T6265] usb 4-1: SerialNumber: syz [ 243.549455][ T6265] usb 4-1: config 0 descriptor?? [ 243.586366][ T6265] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 243.855242][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2429'. [ 243.894848][ T9693] cgroup2: Unexpected value for 'nsdelegate' [ 243.969706][ T6265] gspca_vc032x: reg_w err -71 [ 243.977172][ T6265] vc032x: probe of 4-1:0.0 failed with error -71 [ 244.002604][ T6265] usb 4-1: USB disconnect, device number 14 [ 244.344787][ T9708] loop0: detected capacity change from 0 to 1024 [ 244.379229][ T9708] EXT4-fs: Ignoring removed orlov option [ 244.439757][ T9711] loop2: detected capacity change from 0 to 4096 [ 244.455496][ T9708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 244.493689][ T9719] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.647333][ T9711] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 244.686531][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 245.377815][ T9718] loop1: detected capacity change from 0 to 32768 [ 245.482704][ T9718] XFS (loop1): Mounting V5 Filesystem [ 245.568377][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 245.609957][ T9718] XFS (loop1): Ending clean mount [ 245.629935][ T9718] XFS (loop1): Quotacheck needed: Please wait. [ 245.756280][ T9718] XFS (loop1): Quotacheck: Done. [ 245.758408][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 245.770754][ T7] usb 3-1: config 0 has an invalid interface number: 250 but max is 2 [ 245.788443][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.808826][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 245.817738][ T7] usb 3-1: config 0 has no interface number 0 [ 245.871616][ T7] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 245.918292][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.949899][ T7] usb 3-1: Product: syz [ 245.954110][ T7] usb 3-1: Manufacturer: syz [ 245.979593][ T9764] loop4: detected capacity change from 0 to 2048 [ 245.987314][ T7] usb 3-1: SerialNumber: syz [ 246.015400][ T7] usb 3-1: config 0 descriptor?? [ 246.023461][ T4251] XFS (loop1): Unmounting Filesystem [ 246.044255][ T9764] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.275773][ T6265] usb 3-1: USB disconnect, device number 12 [ 246.542781][ T9778] loop0: detected capacity change from 0 to 512 [ 246.585950][ T9778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.678404][ T9778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.698745][ T9778] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.782573][ T9778] __quota_error: 58 callbacks suppressed [ 246.782591][ T9778] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 246.888353][ T9778] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 246.898003][ T9778] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.2467: Failed to acquire dquot type 0 [ 247.084871][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 247.278132][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 247.663024][ T9820] device vti0 entered promiscuous mode [ 248.202008][ T9838] netlink: 'syz.0.2496': attribute type 21 has an invalid length. [ 248.218627][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 248.386050][ T9807] loop4: detected capacity change from 0 to 32768 [ 248.481836][ T9807] XFS (loop4): Mounting V5 Filesystem [ 248.591863][ T9860] ptrace attach of "./syz-executor exec"[4256] was attempted by ""[9860] [ 248.601096][ T9807] XFS (loop4): Ending clean mount [ 248.617791][ T9859] loop1: detected capacity change from 0 to 64 [ 248.640454][ T9807] XFS (loop4): Quotacheck needed: Please wait. [ 248.727569][ T9807] XFS (loop4): Quotacheck: Done. [ 248.898490][ T4261] XFS (loop4): Unmounting Filesystem [ 249.273656][ T9881] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 249.463419][ T9888] loop2: detected capacity change from 0 to 256 [ 249.542250][ T9888] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d) [ 249.737860][ T9896] loop4: detected capacity change from 0 to 256 [ 249.885452][ T9896] FAT-fs (loop4): Directory bread(block 64) failed [ 249.896701][ T9896] FAT-fs (loop4): Directory bread(block 65) failed [ 249.918835][ T9896] FAT-fs (loop4): Directory bread(block 66) failed [ 249.935604][ T9896] FAT-fs (loop4): Directory bread(block 67) failed [ 249.942617][ T9896] FAT-fs (loop4): Directory bread(block 68) failed [ 249.955140][ T9896] FAT-fs (loop4): Directory bread(block 69) failed [ 249.977070][ T9896] FAT-fs (loop4): Directory bread(block 70) failed [ 250.048834][ T9896] FAT-fs (loop4): Directory bread(block 71) failed [ 250.055529][ T9896] FAT-fs (loop4): Directory bread(block 72) failed [ 250.089787][ T9896] FAT-fs (loop4): Directory bread(block 73) failed [ 250.149583][ T6265] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 250.348472][ T4341] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.370147][ T6265] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 250.387233][ T6265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.415941][ T6265] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.416026][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 250.437631][ T6265] usb 3-1: config 1 has no interface number 0 [ 250.444317][ T6265] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 250.455280][ T6265] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 250.480837][ T6265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.486719][ T9922] x_tables: ip_tables: osf match: only valid for protocol 6 [ 250.497893][ T6265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.513969][ T6265] usb 3-1: Product: syz [ 250.538608][ T4341] usb 2-1: Using ep0 maxpacket: 16 [ 250.555269][ T6265] usb 3-1: Manufacturer: syz [ 250.560314][ T6265] usb 3-1: SerialNumber: syz [ 250.581317][ T4341] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 250.604297][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.622722][ T4341] usb 2-1: Product: syz [ 250.645484][ T4341] usb 2-1: Manufacturer: syz [ 250.668494][ T4341] usb 2-1: SerialNumber: syz [ 250.685072][ T4341] r8152-cfgselector 2-1: config 0 descriptor?? [ 251.014355][ T22] usb 3-1: USB disconnect, device number 13 [ 251.025323][ T9936] xt_l2tp: missing protocol rule (udp|l2tpip) [ 251.066826][ T9940] loop4: detected capacity change from 0 to 1024 [ 251.121196][ T4341] r8152-cfgselector 2-1: Unknown version 0x0000 [ 251.139381][ T4341] r8152-cfgselector 2-1: bad CDC descriptors [ 251.149049][ T9940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.208311][ T4341] r8152-cfgselector 2-1: Unknown version 0x0000 [ 251.235177][ T9940] overlayfs: failed to create directory ./file1/work (errno: 117); mounting read-only [ 251.276490][ T4341] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 251.326418][ T4261] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /494/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.372172][ T4261] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.400622][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 251.403353][ T9949] loop0: detected capacity change from 0 to 4096 [ 251.420475][ T4261] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /494/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.457306][ T9949] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 251.474558][ T4261] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.525354][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 251.537779][ T9949] ntfs3: loop0: failed to convert "c46c" to koi8-r [ 251.558625][ T4261] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /494/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.640251][ T9953] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 251.650627][ T4261] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.750302][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 251.781984][ T4261] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /494/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.875679][ T4261] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 251.966809][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 251.998793][ T4261] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /494/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 252.059254][ T9957] loop0: detected capacity change from 0 to 4096 [ 252.086446][ T4261] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=41730, rec_len=0, size=1024 fake=1 [ 252.092190][ T9957] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 252.134131][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.181370][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.215770][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.273389][ T9957] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 252.291838][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.333940][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.360364][ T4261] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 252.628436][ T9975] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.976302][ T9985] netlink: 'syz.3.2564': attribute type 2 has an invalid length. [ 252.999523][ T9985] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 253.011733][ T9987] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.019550][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 253.343595][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 253.465182][T10001] syz.3.2572 uses obsolete (PF_INET,SOCK_PACKET) [ 253.575651][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.670320][ T9997] netlink: 'syz.0.2571': attribute type 15 has an invalid length. [ 253.688363][ T9997] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2571'. [ 253.771319][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.891140][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.056840][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.454345][T10006] loop2: detected capacity change from 0 to 32768 [ 254.634541][T10006] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 254.842273][ T4258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.853086][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.861660][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.869674][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.877230][ T4258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.888379][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.902036][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.919826][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.927105][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.935212][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.942782][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.950400][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.080694][ T4256] XFS (loop2): Unmounting Filesystem [ 255.095965][T10019] loop0: detected capacity change from 0 to 32768 [ 255.188858][T10019] ERROR: (device loop0): diAllocAG: error reading iag [ 255.188858][T10019] [ 255.264953][T10019] ialloc: diAlloc returned -5! [ 255.322117][T10041] binder: 10039:10041 ioctl c018620c 0 returned -14 [ 255.520415][T10027] loop3: detected capacity change from 0 to 32768 [ 255.550424][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.556757][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.584769][T10027] [ 255.584769][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.584769][T10027] [ 255.688551][T10027] [ 255.688551][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.688551][T10027] [ 255.751478][T10027] [ 255.751478][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.751478][T10027] [ 255.826844][ T107] [ 255.826844][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.826844][ T107] [ 255.928183][T10050] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 255.974878][T10050] bridge0: port 3(team0) entered blocking state [ 255.996575][ T56] [ 255.996575][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.996575][ T56] [ 256.015800][T10050] bridge0: port 3(team0) entered disabled state [ 256.023797][ T56] [ 256.023797][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.023797][ T56] [ 256.069110][ T4257] [ 256.069110][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.069110][ T4257] [ 256.131268][ T4257] [ 256.131268][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.131268][ T4257] [ 256.218479][ T107] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 256.230245][ T107] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 256.238700][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.1.142-syzkaller #0 [ 256.246615][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.256703][ T107] RIP: 0010:lmLogSync+0x135/0x9c0 [ 256.261770][ T107] Code: ec bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 19 45 e4 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 fd 44 e4 fe 49 8b 3f e8 25 ec bc fe [ 256.281419][ T107] RSP: 0018:ffffc90002cd7c60 EFLAGS: 00010206 [ 256.287496][ T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: a380b024aa648400 [ 256.295474][ T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.303445][ T107] RBP: ffffc90002cd7d68 R08: dffffc0000000000 R09: ffffc90002cd7b84 [ 256.311420][ T107] R10: fffff5200059af79 R11: 1ffff9200059af70 R12: ffff88807a184000 [ 256.319399][ T107] R13: dffffc0000000000 R14: ffff88807620c438 R15: 0000000000000030 [ 256.327373][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 256.336308][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.342981][ T107] CR2: 0000555568d265c8 CR3: 000000002f4d8000 CR4: 00000000003506f0 [ 256.350957][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.358932][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.366939][ T107] Call Trace: [ 256.370219][ T107] [ 256.373155][ T107] ? lmWriteRecord+0x1ac0/0x1ac0 [ 256.378109][ T107] ? __rwlock_init+0x140/0x140 [ 256.382902][ T107] jfs_syncpt+0x77/0x90 [ 256.387064][ T107] txEnd+0x2e1/0x520 [ 256.390966][ T107] jfs_lazycommit+0x5a2/0xa50 [ 256.395652][ T107] ? txFreelock+0x5a0/0x5a0 [ 256.400168][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 256.406080][ T107] ? do_task_dead+0xd0/0xd0 [ 256.410596][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.416502][ T107] ? __kthread_parkme+0x162/0x1c0 [ 256.421554][ T107] kthread+0x29d/0x330 [ 256.425634][ T107] ? txFreelock+0x5a0/0x5a0 [ 256.430143][ T107] ? kthread_blkcg+0xd0/0xd0 [ 256.434741][ T107] ret_from_fork+0x1f/0x30 [ 256.439176][ T107] [ 256.442205][ T107] Modules linked in: [ 256.446703][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.598897][ T107] ---[ end trace 0000000000000000 ]--- [ 256.604413][ T107] RIP: 0010:lmLogSync+0x135/0x9c0 [ 256.609741][ T107] Code: ec bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 19 45 e4 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 fd 44 e4 fe 49 8b 3f e8 25 ec bc fe [ 256.668461][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 256.688445][ T107] RSP: 0018:ffffc90002cd7c60 EFLAGS: 00010206 [ 256.694609][ T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: a380b024aa648400 [ 256.731555][ T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.770632][ T107] RBP: ffffc90002cd7d68 R08: dffffc0000000000 R09: ffffc90002cd7b84 [ 256.799159][ T107] R10: fffff5200059af79 R11: 1ffff9200059af70 R12: ffff88807a184000 [ 256.807248][ T107] R13: dffffc0000000000 R14: ffff88807620c438 R15: 0000000000000030 [ 256.858293][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 256.867415][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.918414][ T107] CR2: 000055e26e088fb0 CR3: 00000000300a4000 CR4: 00000000003506f0 [ 256.926488][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.973619][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.988591][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 257.020875][ T107] Kernel panic - not syncing: Fatal exception [ 257.027338][ T107] Kernel Offset: disabled [ 257.031667][ T107] Rebooting in 86400 seconds..