last executing test programs: 2m27.266596425s ago: executing program 1 (id=4261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) 2m27.191780316s ago: executing program 1 (id=4266): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4804000, &(0x7f0000000200)={[{@resuid}, {@noauto_da_alloc}, {@delalloc}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c0, &(0x7f0000000540)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m26.541160816s ago: executing program 1 (id=4286): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) 2m26.287757891s ago: executing program 1 (id=4295): r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x40405515, &(0x7f0000001340)={{0x0, 0x2, 0x0, 0xfffffffc, 'syz0\x00'}, 0x3, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0xfffffef8}) 2m26.176260482s ago: executing program 1 (id=4300): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m25.202468288s ago: executing program 1 (id=4312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) 2m10.133375108s ago: executing program 32 (id=4312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) 2.669384227s ago: executing program 5 (id=7327): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x6, 0x20, 0x4f1, 0x20, 0x1000000000}, 0x48) 2.539583849s ago: executing program 0 (id=7332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "f234b36461c3bd6f"}, 0x2}}]}, 0x44}}, 0x0) 2.530092899s ago: executing program 5 (id=7333): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0xe, 0x2718, 0x0, 0x0) 2.443029111s ago: executing program 0 (id=7336): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xfa) 2.442625961s ago: executing program 5 (id=7337): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x15, 0xf4, 0x6, 0x7f}) 2.355790703s ago: executing program 5 (id=7340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 2.349492312s ago: executing program 0 (id=7341): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}}}}) 2.265824024s ago: executing program 0 (id=7344): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f1, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) 2.082808667s ago: executing program 4 (id=7349): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0, 0x2}, 0x10) 2.023807428s ago: executing program 4 (id=7351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa7) 1.969610528s ago: executing program 5 (id=7352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) 1.817355561s ago: executing program 4 (id=7353): r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000001140)=[{' ', './file0'}], 0x1) 1.766390762s ago: executing program 3 (id=7354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.765814701s ago: executing program 5 (id=7355): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.686710013s ago: executing program 0 (id=7356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@remote, 0x4d5, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 1.587346464s ago: executing program 0 (id=7357): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000009c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb2b448310341bd4cf4f", @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="1ae3f2322b8befe929174cdf6c996cdafdf3e4d5577b117b11b5cf4168568df2ccbeddbb7e58d81226166f274b992e6c149a9b1cce5dee68e05493834b08996edd33a964a44a878932766951c2388489c411bcb4be64f7aca90174c0e369c57f82a5edb0450213874133d958ab8955a72660fa374061a62a3c8462bf5589e90e1e62de2dad54203563cb62d7b33da27dda92aa205c95b5c9cf80b5754ea193b8361f7577cd727be89e625c549b", @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$eJzs3UuPHFfZB/Cnr3PxG2eURZTXQmjihEsI8TUYQ4AkC1iwyQJ5i2xNJpGFA8g2yIksPNFsWLDiE4CQWCLEErHgA2TBlh0rVliykUBZUahmzvFUt7vdY8bT1Z7z+0njqqdO9fSp+Xf1xVXVJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+O53vne2ExGXf5oWrEX8X/QiuhErdb0eESvra3n9fkS8EDvN8XxEDJYi6tvv/PNsxOsR8cnxiHv3b2/Ui8/tsx/f/v1ff/P9Y+/85XeD0//+w83eG9PWu3XrF//6452DbTMAAACUpqqqqpM+5p9In++7bXcKAJiL/PpfJXn5ka9/+fd3/rRI/VGr1Wq1eg51UzXZnWYREVvN29TvGRyOB4CnzFZ82nYXaJH8i9aPiGNtdwJYaJ22O8ChuHf/9kYn5dtpvh6s77bnc0FG8t/qPLi+Y9p0lvFzTOb1+NqOXjw3pT8rc+rDIsn5d8fzv7zbPkzrHXb+8zIt/+HupU/Fyfn3xvMfc3Ty707Mv1Q5//5j5d+TPwAAAAAALLD8//9rLR//XTr4puzLo47/rs+pDwAAAAAAAADwpB10/L8HjP8HAAAAC6v+rF771fG9ZdO+i61efqkT8czY+kBh0sUyq233AwAAAAAAAAAAAABK0t89h/dSJ2IQEc+srlZVVf80jdeP66C3f9qVvv1Qsraf5AEAYNcnx8eu5e9ELEfEpfRdf4PV1dWqWl5ZrVarlaX8fna4tFytND7X5mm9bGm4jzfE/WFV/7Llxu2aZn1entU+/vvq+xpWvX107AkZpL/mlOaWwgaAZPfV6J5XpCOmqp6d9uYDRtj/jx77P/vR9uMUAAAAOHxVVVWd9HXeJ9Ix/27bnQIA5iK//o8fFziUOuJwf79arVar1epH1k3VZHeaRURsNW9Tv2cwHD8APGW24tO2u0CL5F+0fkS80HYngIXWabsDHIp7929vdFK+nebrQRrfPZ8LMpL/Vmfndvn2k6azjJ9jMq/H13b04rkp/Xl+Tn1YJDn/7nj+l3fbh2m9w85/XqblX2/nWgv9aVvOvzee/5ijk393Yv6lyvn3Hyv/nvwBAAAAAGCB5f//X3P8N28yAAAAAAAAADx17t2/vZGve83H/z8zYT3Xfx5NOf+O/IuU8++O5f/FsfV6jfm7b+/l/8/7tzd+e/Mf/5+n+81/Kc900iOrkx4RnXRPnX6aHmTrHrY96A3rexp0ur1+OuenGrwXV+NabMaZkXW76e+x1352pL3u6WCk/dxIe/+h9vMj7YP0vQPVSm4/FRvxo7gW7+60121LM7Z/eUZ7NaM959+z/xcp599v/NT5r6b2zti0dvfj7kP7fXM66X7euvrZn585/M2ZaTt6D7atqd6+ky30Z+dvcmwYP7mxef3UrSs3b14/G2kysvRcpMkTlvMf7Pws7T3/v7Tbnp/3m/vr3Y+Hj53/otiO/tT8X2rM19v7ypz71oac/zD95PzfTe2T9/+nOf/p+/+rLfQHAAAAAAAAAAAAAAAAHqWqqp1LRN+KiAvp+p+2rs0EAOYrv/5XSV6uVqvVarX66NVN1WRvNouI+HPzNvV7hp9N+mUAwCL7T0T8re1O0Br5Fyx/3189fbntzgBzdePDj35w5dq1zes32u4JAAAAAAAAAPC/yuN/rjfGf345ItbG1hsZ//XtWD/o+J/9PPNggNEnPND3FNvdYa/bGG78xdgZn/vUtPG/T8ajx//uz7i/wYz24Yz2pRntyxOX7qU18UKPhpz/i43xzuv8T4wNv17C+K/jY96XIOd/svF4rvP/wth6zfyrXy9c/lv7XXE7uiP5n775wY9P3/jwo9eufnDl/c33N394/uzZM+cvXLh48eLp965e2zyz++/h9HoB5Pzz2NfOAy1Lzj9nLv+y5Pw/l2r5lyXn//lUy78sOf/8fk/+Zcn5588+8i9Lzv+VVMu/LDn/L6Va/mXJ+b+aavmXJef/5VTLvyw5/9dSLf+y5PxPpVr+Zcn5n071PvL39fBHSM4/H+Gy/5cl55/PbJB/WXL+51It/7Lk/M+nWv5lyfm/nmr5lyXn/5VUy78sOf8LqZZ/WXL+X021/MuS87+YavmXJef/tVTLvyw5/6+nWv5lyfm/kWr5lyXn/41Uy78sOf9vplr+Zcn5fyvV8i9Lzv/NVMu/LHvf/2/GjBkzeabtZyYAAAAAAAAAAAAAYNw8TiduexsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1rjFxnfT/wM3ux1w4hBkJw8jewSYwxzpJdX+IL/7qYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqpi/aAkJtpKrCqnhBK0rzourlVWlf0DcVVSWkRlVAAQmprShbzZzneTwznp2z9o7Xs+f5fKT45905M+fMmWdm97vOdwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2975x7rONoiia/7X+2FQUL2j+fcPkptbnXnerjxAAAABYqf9t/fn8HekTh5ZxpbZt/u4V//j1xcXFxeL9o787/sXFxXTBZFGMry+K1mXRlX//QKN9m+CJYqIx0vbxSMXuRysuH6u4fLzi8nUVl6+vuHyi4vJrTsA1NpQ/j2nd2NbWXzeVp7S4sxhvXba1x7WeaKwfGYk/y2lptK6zOH68mC9OFnPFTMf25baN1vbfvLe5r7cVcV8jbfva0lwhP/zksXgMjXCOt3bs6+ptRt9/QzH5ox9+8tgfn3/u7l6z8jR03F55nNvvax7np8NnymNtFOvTOYnHOdJ2nFt6PCajHcfZaF2v+ffu43x+mcc5evUwV1X3Yz5RjLT+/u3WeRpr/7FeOk9bwuf+6/6iKC5dPezuba7ZVzFSbOz4zMjVx2eiXJHN22gupRcXY9e1Tu9dxjptztmtneu0+zkRH/97w/XGljiG9ofp+59ad83jfr3rNGre66WeK91rcNDPlWFZg3FdfLt1p5/suQa3hvv/yW1Lr8Gea6fHGkz3u20N3le1BkfWjbaOOT0IjdZ1rq7BnR3bj7b21GjNZ7f1X4PT50+dnV74+CdeO3/q6Im5E3Ond+/cObN77979+/dPH58/OTdT/nmDZ3v4bSxG0nPgvnDu4nPg1V3bti/VxS8P7nk40ed5uKlr20E/D8e671xjdZ6Q167p8rnxaPOkT1weKZZ4jrUenx0rfx6m+932PBxrex72/JrS43k4toznYXObszuW9z3LWNt/vY7hZn0t2NS2Bru/H+leg4P+fmRY1uBEWBf/umPprwVbwvE+OXW934+MXrMG090Nrz3Nz6Tv9yf2t0avdXlP84Lb1hUXFubOPfj40fPnz+0swlgVL2lbK93rdWPbfSquWa8j171eD82/4sl7enx+UzhXE69t/jGx5GPV3GbPg/0fq9ZXt97ns+Ozu4owBmy1z2evr+bN85myZJ/z2dzm09Mr/1485dK219/xJV5/Y+7/abm/dFNPjI6Plc/f0XR2xjtejzsfqrHWa1ejte/np5f3ejwe/lvt1+M7+7web+7adtCvx+Pddy6+HjeqftqxMt2P50RYJydn+r8eN7fZvOt61+RY39fj+8NshPP/mpAUUi5qWztLrdu0r7Gx8XC/xuIeOtfp7o7tx0M2a+7r6V03tk6331/e1mi6d1et1jqd7Np20Os0vV4ttU4bVT99uzHdj+dEWBd37u6/TpvbPLNn5a+dG+Jf214711WtwfHRdc1jHk+LsHy9X9wQ1+CDxbHiTHGymG1duq61nhqtfU09tLw1uC78t9qvlZv7rMHtXdsOeg2mr2NLrb3G2LV3fgC6H8+JsC6eeqj/Gmxu86Z9g/3edXv4TNqm7XvX7p+vLfUzr3u6TtPN/JlX8zj/Zl//n802tzm5/3pzZv/z9ED4zG09zlP383ep59RssTrnaXM4zuf2L32emsfT3OaLB5a5ng4VRXHxow+3ft4b/n3lzy985+sd/+7S6990Ln704R/cfvxvr+f4AVj7flqOjeXXurZ/mVrOv/8DAAAAa0LM/SNhJvI/AAAA1EbM/fH/Ck/kfwAAAKiNmPvHwkwyyf+b3/Tc/E8vFqmZvxjEy9NpeKTcLnZcZ8LHk4tXNT//8FfnfvyXF5e375GiKH7yyG/03H7zI/G4SpPhOK+8ufPz117x4rL2f+Sxq9u199e/FG4/3p/lLoNeFdyZoii+ecfnW/uZ/MDl1nzmkSOt+Z5LTz7R3Ob5A+XH8frPvqTc/g9C+ffQ8aMd1382nIfvhTnz9t7nI17va5dfs2Xf+67uL16vcd8LW3f7qQ+Wtxt/T84Xnii3j+d5qeP/q889/bXm9o+/qvfxXxzpffxPh9v9apj//fJy+/bHoPlxvN5nwvHH/cXrPfiVb/U8/iufLbc/+5ZyuyNhxv1vDx9vfctz8+3n6/HG0Y77Vby13C7uf+Y7v926PN5evP3u4584fLnjfHSvj2f+ubyd6a7t4+fjfqK/6Np/83ba12fc/9O/daTjPFft/8p7nn1583a79/9A13ajXdfv/o1Nf/iZz/fcXzyeQ392tuP+HHp3eB6H/T/1wbAew+X/c+XzHfuNjry78/Unbv+lTRc77k/0th+V+7/y+hOt+R+TP/79215w+wsvvbJ57ori2+8tb69q/yf+6EzH8X/5rh2txyNeHjv63ftfStz/uY9NnT6zcGF+tu2stn53zjvK41k/sWFj83jvCK+t3R8fPnP+Q3PnJmcmZ4pisr6/Qu+GfSXMH5Tj0vVef8dj4fG85/e+uXHbP30ufv5fHi0/f/nt5detV4ftvhA+v6l8/BYbK9z/U/fe1Xp+N54pP+7osQ/Alq3/uX9ZG4b73/19QVzvZ1/6odZ5aF7W+roRn9crPP7vzpa3841wXhfDb2a+766r+2vfPv5uhMvvLZ/vKz5/4WUuPq5/Eh7vd36vvP14XPH+fjd8H/OtzZ2vd3F9fOPiSPftt36Lx6XwelJcKi+PW8Xzffn5u3oeXvw9JMWlu1sf/066nbuv624uZeHjC9Mn509feHz6/NzC+emFj3/i8KkzF06fP9z6XZ6HP1x1/auvTxtbr0+zc3v3FDMbiqI4U8yswgvWzTn+5t+Wd/xnHzs2u29m2+zc8aMXjp9/7OzcuRPHFhaOzc0ubDt6/Pjcx6quPz97cOeuA7v37Zo6MT97cP+BA7sPTM2fPtM8jPKgKuyd+cjU6XOHW1dZOLjnwM6HHtozM3XqzOzcwX0zM1MXqq7f+to01bz2r0+dmzt59Pz8qbmphflPzB3ceWDv3l2Vvw3w1NnjC5PT5y6cnr6wMHduurwvk+dbn25+7au6PvW08G/l97PdGuUv4ive9cDe9PtZm776qSVvqtyk6xeIPhd+F80/vOjs/uV8HHP/eJhJJvkfAAAAchBz/7owE/kfAAAAaiPm/vVhJvI/AAAA1EbM/RNhJpnkf/1//f/l9f/Ly/X/8+r/n/1o2Std6/3/2J/X/8/DLe7/r3j/+v/6//Xr/y+/P7/Wj1//X/+faw1b/z/m/g1FkWX+BwAAgBzE3L8xzET+BwAAgNqIuf+2MBP5HwAAAGoj5v4XhJlkkv/1/5fV/99VVbiqf//f+//r/xdrs/8fHxz9/2xcd//+fY92fKj/H+j/6//r/+v/6/+zYuNLXnKr+v8x998eZpJJ/gcAAIAcxNz/wjAT+R8AAABqI+b+O8JM5H8AAACojZj7N4WZZJL/9f+9/7/+v/5/rfv/K33//7aD0f9fG7z/f3/6/xVuuP8/of+/Fvv/44M9/uHu/1cevv4/N8Wwvf9/zP0vCjPJJP8DAABADmLuf3GYifwPAAAAtRFz/0vCTOR/AAAAqI2Y++8MM8kk/+v/6//r/+v/6//33n/1+/+Xf9P/Hy76//3p/1fw/v959f8HfPzD3f8f9Pv/j7+5+/r6//QybP3/mPtfGmaSSf4HAACAHMTcf1eYifwPAAAAtRFz/8vCTOR/AAAAqI2Y+zeHmWSS//X/9f/1//X/9f9777+6/1/S/x8u+v/96f9X0P/X/9f/X17/v8c3v/r/9DJs/f+Y++8OM8kk/wMAAEAOYu6/J8xE/gcAAIDaiLn//4WZyP8AAABQGzH3bwkzyST/6//r/+v/59X/f2Cd/r/+f73p//en/19B/1//X/9/me//f63r6f+vr7oxamPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAADURsz9rwwzkf8BAACgNmLunwwzyST/6//Xq///p3/91CsL/X/9/4r917T/H5eB/n/m9P/70/+voP+v/6//vyr9f/IxbP3/mPvvDTPJJP8DAABADmLuvy/MRP4HAACA2oi5//4wE/kfAAAAaiPm/q1hJpnkf/3/evX/I/1//f9++69p/z/R/8+b/n8PbU9S/f8K+v/6/9n3/+N3v/r/DMaw9f9j7n9VmEkm+R8AAAByEHP/tjAT+R8AAABqI+b+V4eZyP8AAABQGzH3bw8zyST/6//r/+v/6//r//fev/7/2qT/35/+fwX9f/3/7Pv/3v+fwRq2/n/M/a8JM8kk/wMAAEAOYu7fEWYi/wMAAEBtxP9/s/z/XuV/AAAAqKOY+6fCTDLJ//r/+v859f8b+v/6//r/taf/35/+fwX9f/1//X/9fwZq2Pr/Mfe/Nswkk/wPAAAAOYi5/8EwE/kfAAAAaiPm/ukwE/kfAAAAaiPm/pkwk0zyv/6//n9O/X/v/6//r/9ff/r//en/V9D/1/+vW/+/KPT/uaWGrf8fc//OMJNM8j8AAADkIOb+XWEm8j8AAADURsz9u8NM5H8AAACojZj794SZZJL/9f/1//X/9f/1/3vvX/9/bdL/70//v4L+v/5/3fr/3v+fW2zY+v8x9z8UZpJJ/gcAAIAcxNy/N8xE/gcAAIDaiLl/X5iJ/A8AAAC1EXP//jCTTPK//n9N+v+/+fcd+9b/1//vt//B9P836P+Hqf8/XGra/+9+Wtww/f8K+v/6//r/+v8M1LD1/2PuPxBmkkn+BwAAgBzE3P+6MBP5HwAAAGoj5v7/H2Yi/wMAAEBtxNz/M2EmmeR//f+a9P+76P/r//fbv/f/1/+vs5r2/wdG/7+C/r/+v/6//j8DdfP7//Fvy+v/x9x/MMwkk/wPAAAAOYi5/2fDTOR/AAAAqI2Y+18fZiL/AwAAQG3E3H8ozCST/K//r/+v/6//f3P6/68vug1j/7+5ePT/60X/vz/9/wr6//r/+v/6/wzUsL3/f8z9bwgzyST/AwAAQA5i7n84zET+BwAAgNqIuf+NYSbyPwAAANRGzP1vCjPJJP/r/+v/6/+vTv9/PLv+v/f/76b/vzr0//vT/6+g/6//r/+v/89ADVv/P+b+N4eZZJL/AQAAIAcx978lzET+BwAAgNqIuf+tYSbyPwAAANRGzP1vCzPJJP/r/+v/6/97/3/9/9771/9fm/T/+9P/L40sdQD6//r/+v/6/wzUsPX/Y+7/uTCTTPI/AAAA5CDm/kfCTOR/AAAAqI2Y+98eZiL/AwAAQG3E3P+OMJNM8r/+v/6//r/+v/5/7/3r/69N+v/96f9X0P/X/9f/1/9noIat/x9z/zvDTDLJ/wAAAJCDmPt/PsxE/gcAAIDaiLn/XWEm8j8AAADURsz9vxBmkkn+1//X/9f/1/8feP+/KIpLw9b/b15J/z8L+v/96f9X6NH/X6//r/+v/6//zw0btv5/zP3vDjPJJP8DAABADmLuf0+YifwPAAAAtRFz/3vDTOR/AAAAqI2Y+x8NM8kk/+v/Z9n/T3dZ/7+k/+/9/3vtX/9/bdL/70//v4L3/9f/1//X/2eghq3/H3P/Y2EmmeR/AAAAyEHM/e8LM5H/AQAAoDZi7v/FMBP5HwAAAGoj5v73h5lkkv/1/7Ps/3v//1Xr/491rI+c+v8TbY9nWpf6//r/q0D/vz/9/wr6//r/w9z/D6t5wxLX1/9nGA1b/z/m/g+EmWSS/wEAACAHMff/UpiJ/A8AAAC1EXP/L4eZyP8AAABQGzH3/0qYSSb5X/9f/1//3/v/e///3vvX/1+b9P/70/+voP+v/z/M/f8K+v8Mo2Hr/8fc/6thJpnkfwAAAMhBzP0fDDOR/wEAAKA2Yu4/HGYi/wMAAEBtxNx/JMwkk/yv/9/d/4/vqKr/r/+v/6//r/+/Fg2u//+y24tC/1//X/9f/1//X/+flRi2/n/M/UfDTDLJ/wAAAJCDmPt/LcxE/gcAAIDaiLn/WJiJ/A8AAAC1EXP/bJhJJvlf/9/7/w+q//8T/X/9/0D/vzf9/9Xh/f/70/+voP+v/6//r//PQA1b/z/m/rkwk0zyPwAAANRY+nFwzP3Hw0zkfwAAAKiNmPtPhJnI/wAAAFAbMfd/KMwkk/yv/6//7/3/b0X/f6xje/3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/yTCTTPK//r/+f+79/0ZRXPL+//r/vfav/7826f/3p/9fQf9f/1//X/+fgRq2/n/M/afCTDLJ/wAAAJCDmPtPh5nI/wAAAFAbMfefCTOR/wEAAKA2Yu4/G2aSSf7X/9f/z73/X9yS9///P/buo0nOs+rjcNslW9IKPgJrVixhA1+BLTuqWFIsAJODMTmDyTmYnHNOJuecs8k5mmioEsXonKPQraclTXv6ee5zXZvzSoXcIzSvXX9cv7rP/c/r/0/T/+v/d2Gtvz92ab/+gv3/He54zd31/zvo/zf9E/MM/b/+f8lfv/5f/8+6ufX/ufvvHbc02f8AAADQQe7++8Qt9j8AAAAMI3f/feMW+x8AAACGkbv/mrilyf7X/+v/9f/6/3P6/xv1//r/ZfP+/7T99//T9P/6/yV//fp//T/r5tb/5+6/X9zSZP8DAABAB7n77x+32P8AAAAwjNz9D4hb7H8AAAAYRu7+B8YtTfa//l//r//X/3v/f/Pn6/+XSf8/Tf+/hf5f/6//1/+zU3Pr/3P3PyhuabL/AQAAoIPc/Q+OW+x/AAAAGEbu/ofELfY/AAAADCN3/0Pjlib7X/+v/9f/6//1/5s/X/+/TDeszvw9Qf+/Tv+/xZb+f7XS/0+56H5+829vOV//Bej/9f+sm1v/n7v/YXFLk/0PAAAAHeTuf3jcYv8DAADAMHL3Xxu32P8AAAAwjNz9j4hbmux//b/+X/+v/9f/b/58/f8yef9/2uH7/9vf9l736Nv/e/9/mvf/9f/6f843t/4/d/91cUuT/Q8AAAAd5O5/ZNxi/wMAAMAwcvc/Km6x/wEAAGAYufsfHbc02f/6/zb9/0Htov/X/+v/9f+j0/9P8/7/Fgd/mztZP9T/6//1//p/Dmdu/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAAMPI3f+4uMX+BwAAgGHk7n983NJk/+v/2/T/3v/X/+v/9f8t6P+n6f+3GOX9/8v8rtl3P39Y+/769f/6f9bNrf/P3f+EuKXJ/gcAAIAOcvc/MW6x/wEAAGAYufufFLfY/wAAADCM3P1Pjlua7H/9v/5/Gf1/foL+X/+v/9f/T9P/T9P/bzFK/3+Z9t3PL/3r1//r/1k3t/4/d/9T4pYm+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv/1//r/ZfT/3v/X/+v/9f8XR/8/Tf+/hf5f/6//1/+zU3Pr/3P3Xx+3NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2o/z/rV51YPTtuabL/AQAAoIPc/c+JW+x/AAAAGEbu/ufGLfY/AAAADCN3//Pilib7X/8/m/7/IOcbq/8/uVqt9P+rpv3/ybP+POv7Uv+v/z8C+v9pnfr/O+v/L9m++/mlf/36f/0/62bU/x/8OHf/8+OWJvsfAAAAOsjd/4K4xf4HAACAYeTuf2HcYv8DAADAMHL3vyhuabL/9f+z6f8PjNX/e////O+PTv2/9//X6f+Phv5/Wqf+/3I+X/+v/9f/6//Zrbn1/7n7Xxw3XX3VZf8WAQAAgJnJ3f+SuKXJv/8HAACADnL3vzRusf8BAABgoa5f+5nc/S+LW5rsf/3/bvv/q8/6Of2//v/87w/9v/5f/3/r0/9P0/9vof/X/+v/9f/s1Nz6/9z9L49bmux/AAAA6CB3/w1xi/0PAAAAw8jd/4q4xf4HAACAYeTuf2Xc0mT/6/+9/6//1//r/zd/vv5/mfT/0/T/W+j/9f/77f+Pn/k/9f+M4RL6/1OnTl17q/f/uftfFbc02f8AAADQQe7+V8ct9j8AAAAMI3f/a+IW+x8AAACGkbv/tXFLk/2v/2/a/+e3uv7/gP5f/7/p8/X/y6T/n6b/30L/r//3/r/+n52a2/v/uftfF7c02f8AAADQQe7+18ct9j8AAAAMI3f/G+IW+x8AAACGkbv/jXFLk/2v/2/a/3v/X/+v/z/q/v+Wlf7/SCyi/z954c+fe/9/nf5f/z+hXf9/1zud80P9v/6fdXPr/3P3vyluabL/AQAAoIPc/W+OW+x/AAAAGEbu/rfELfY/AAAADCN3/1vjpmNN9r/+X/+v/9f/6/83f/4Rv/9/9Wq10v/vwCL6/wlz7/+9/6//n9Ku/z+P/l//z7q59f+5+98WtzTZ/wAAANBB7v63xy32PwAAAAwjd/874hb7HwAAAIaRu/+dcUuT/a//1//r//X/w/f/1y2i//f+/47o/6fp/7fQ/+v/9f/6f47Evvr/3P3vilua7H8AAADoIHf/u+MW+x8AAACGkbv/PXGL/Q8AAADDyN3/3rilyf7X/+v/9f/6/+Oz6/9PnPPXa/L+v/5/R/T/0/T/W+j/9f/6/+v1/+zS3N7/z93/vrilyf4HAACADnL3vz9u/U+39j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1/8O//6//b0X/P03/v4X+X/+v//f+Pzs1t/4/d/+H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvffGLc02f/6f/2//l//r/8//Weo/x+D/n/a0fT/J/X/+v/q56+I/y/Q/+v/t/16xjS3/j93/0fjlib7HwAAADrI3f+xuMX+BwAAgGHk7v943GL/AwAAwCId2/Bzufs/Ebc02f/6f/2//n8u/f+JtT9H/f9p3v/X/18K/f807/9vof+/xH7+duf8aGnv/5//zy/9v/6f3Ztb/5+7/5NxS5P9DwAAAB3k7v9U3GL/AwAAwDBy9386brH/AQAAYBi5+z8TtzTZ//p//b/+fy79v/f/9f/6/13Q/0/T/2+h/9/r+/lL//r1//p/1s2t/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBi5+z8ft9j/AAAAMIyD3Z9xWcP9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2t///Cwa86sfpi3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+X/+/jP7/1KlT1+r/9f/n/n7O9P836f8p+v9p+v8t9P/6f/2//p+dmlv/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADAMHL3fz1usf8BAABgGLn7vxG3NNn/+v8Z9P8n9P/e/9f/r7z/r//fEf3/NP3/FiP2/ycu/re/737+sPb99ev/9f+sm1v/n7v/m3FLk/0PAAAAHeTu/1bcYv8DAADAMHL3fztusf8BAABgGLn7vxO3NNn/+v+j6////99dl/f/T642f/36f/2//l//f2vT/0/T/28xYv9/Cfbdzy/969f/6/9ZN7f+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAYeTu/37cYv8DAADAMHL3/yBuabL/9f8zeP9/wP7f+/+bvz/0/7Pu/6/U/49B/z9N/7+F/l//r//fUf+f3836/+7m1v/n7v9h3NJk/wMAAEAHuft/FLfY/wAAADCM3P0/jlvsfwAAABhG7v6b4paz9v+mtnsU+n/9v/5f/6//3/z5+v9l0v9Pu9j+//jqcP1/0v/r//X/Xft/7/9z2tz6/9z9P4lb/Pt/AAAAWJyrLvDzuft/GrfY/wAAADCM3P0/i1vsfwAAABhG7v6fxy03X7mvL+lI6f/1//p//b/+f/Pn6/+XSf8/zfv/W+j/d9HP30X/P0b/v1rp/zm8ufX/uft/Ebf49/8AAAAwjNz9v4xb7H8AAAAYRu7+X8Ut9j8AAAAMI3f/r+OWJvtf/6//P2T/f5Bm6v9P0/+fpv/fTP9/NPT/0/T/W+j/vf+v//f+Pzs1t/4/d/9v4pYm+x8AAAA6yN3/27jF/gcAAIBh5O7/Xdxi/wMAAMAwcvf/Pm5psv/31v/Hf9X6/8X3/97/1//r//X/s6L/n6b/30L/r//X/+v/2alL6f9PTv+ldtL/5+7/Q9zSZP8DAABAB7n7/xi32P8AAAAwjNz9f4pb7H8AAAAYRu7+P8ctTfa/9//1//p//b/+f/Pn6/+XSf8/Tf+/Wf1B6f/1//p//T87Nbf3/3P3/yVuabL/AQAAoIPc/X+NW+x/AAAAGEbu/pvjFvsfAAAAhpG7/29xS5P937f/P7bS/+v/k/5f/7/p8/X/y6T/n7bP/v9ut9n+sd7/33v/n1+C/l//r/9nJ+bW/+fu/3vc0mT/AwAAQAe5+/8Rt9j/AAAAMIzc/f+MW+x/AAAAGEbu/n/FLU32/5b+/3j9B4fr/73/v9L/F/2//n/T5+v/l0n/P837/1vo/73/r//faf9/hf6/vcvp/++5+S+1k/4/d/+/45Ym+x8AAAA6yN1/S9xi/wMAAMAwcvf/J26x/wEAAGAYufv/G7c02f993//X/6/0/0X/r//f9Pn6/2XS/0/T/2+h/9f/6/+9/89Oze39/9z9/wsAAP//wqZYgw==") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.583241575s ago: executing program 4 (id=7358): creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 1.435660257s ago: executing program 4 (id=7359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) 1.343271938s ago: executing program 4 (id=7360): inotify_init() syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 751.288648ms ago: executing program 3 (id=7361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001400030076657468305f766c616e00000000000008000a00", @ANYBLOB="1c0016801800018014"], 0x58}, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) 484.268832ms ago: executing program 2 (id=7362): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x0, 0x1}) 382.341463ms ago: executing program 2 (id=7363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002c80)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 331.671524ms ago: executing program 3 (id=7364): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 226.807536ms ago: executing program 3 (id=7365): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa6}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.005666ms ago: executing program 2 (id=7366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x5a0}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 175.012957ms ago: executing program 3 (id=7367): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) 129.244938ms ago: executing program 2 (id=7368): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000380)=0x20) 94.836748ms ago: executing program 2 (id=7369): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) 9.20557ms ago: executing program 3 (id=7370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) 0s ago: executing program 2 (id=7371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@loopback={0xffffffffffff0000}, @private2, @remote, 0x1, 0x0, 0x40, 0x0, 0x0, 0x10200}) kernel console output (not intermixed with test programs): ile: nlink 4, error=-117 [ 341.668130][T16328] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.005069][T16301] loop5: detected capacity change from 0 to 32768 [ 342.182754][T16352] loop0: detected capacity change from 0 to 64 [ 342.302421][T16352] attempt to access beyond end of device [ 342.302421][T16352] loop0: rw=0, want=65536, limit=64 [ 342.369058][T16354] loop4: detected capacity change from 0 to 4096 [ 342.391029][T16352] Buffer I/O error on dev loop0, logical block 32767, async page read [ 342.408940][T16352] attempt to access beyond end of device [ 342.408940][T16352] loop0: rw=0, want=65536, limit=64 [ 342.460991][T16352] Buffer I/O error on dev loop0, logical block 32767, async page read [ 342.558318][T16370] netlink: 'syz.3.5470': attribute type 1 has an invalid length. [ 342.617891][T16370] netlink: 'syz.3.5470': attribute type 9 has an invalid length. [ 343.061523][T16393] kAFS: Can only specify source 'none' with -o dyn [ 343.745883][T16429] loop3: detected capacity change from 0 to 512 [ 343.776539][T16385] loop5: detected capacity change from 0 to 32768 [ 343.827338][T16385] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.5476 (16385) [ 343.844493][T16439] loop4: detected capacity change from 0 to 64 [ 343.929250][T16429] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 343.948193][T16385] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 344.065706][T16385] BTRFS info (device loop5): using free space tree [ 344.072593][T16429] ext4 filesystem being mounted at /1083/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.084752][ T2286] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 344.093374][T16385] BTRFS info (device loop5): has skinny extents [ 344.285462][T16469] netlink: 22 bytes leftover after parsing attributes in process `syz.4.5509'. [ 344.306327][T16469] netlink: 22 bytes leftover after parsing attributes in process `syz.4.5509'. [ 344.318602][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5509'. [ 344.531070][ T2286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 344.548202][T16385] BTRFS info (device loop5): enabling ssd optimizations [ 344.684282][T16495] dlm: no locking on control device [ 344.731082][ T2286] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 344.758992][ T2286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.785182][ T2286] usb 3-1: Product: syz [ 344.811360][ T2286] usb 3-1: Manufacturer: syz [ 344.816055][ T2286] usb 3-1: SerialNumber: syz [ 344.883595][ T2286] usb 3-1: config 0 descriptor?? [ 344.991301][ T2286] usbtouchscreen: probe of 3-1:0.0 failed with error -32 [ 345.165415][ T2286] usb 3-1: USB disconnect, device number 26 [ 345.356038][T16524] Cannot find del_set index 286 as target [ 345.461016][ T5419] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 345.508540][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5537'. [ 345.518011][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5537'. [ 345.784644][T16536] loop0: detected capacity change from 0 to 4096 [ 345.871080][ T5419] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 345.885516][ T5419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.910939][ T5419] usb 4-1: config 0 descriptor?? [ 345.976471][ T5419] cp210x 4-1:0.0: cp210x converter detected [ 346.141114][ T2286] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 346.184555][ T5419] usb 4-1: cp210x converter now attached to ttyUSB0 [ 346.412077][ T5423] usb 4-1: USB disconnect, device number 33 [ 346.434720][ T5423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 346.440877][ T4294] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 346.443281][ T2286] usb 3-1: Using ep0 maxpacket: 32 [ 346.471520][ T5423] cp210x 4-1:0.0: device disconnected [ 346.704776][T16576] loop0: detected capacity change from 0 to 2048 [ 346.801234][ T2286] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 346.819652][T16576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.848287][ T2286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.865328][T16576] ext4 filesystem being mounted at /1146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.887760][ T2286] usb 3-1: Product: syz [ 346.900198][ T2286] usb 3-1: Manufacturer: syz [ 346.915774][ T2286] usb 3-1: SerialNumber: syz [ 346.943838][ T2286] usb 3-1: config 0 descriptor?? [ 346.995206][ T4294] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 347.010043][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.019480][ T4294] usb 5-1: Product: syz [ 347.024241][ T4294] usb 5-1: Manufacturer: syz [ 347.028956][ T4294] usb 5-1: SerialNumber: syz [ 347.089802][ T4294] usb 5-1: config 0 descriptor?? [ 347.118363][T16590] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5567'. [ 347.152109][ T4294] ch341 5-1:0.0: ch341-uart converter detected [ 347.172739][T16593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5568'. [ 347.174388][T16594] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 347.221123][ T2286] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 347.251286][ T2286] eb 9a 47 80 9b f8 7a f0 [ 347.255856][ T2286] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 347.304394][T16600] netlink: 'syz.0.5571': attribute type 7 has an invalid length. [ 347.438822][ T2286] usb 3-1: USB disconnect, device number 27 [ 347.591096][ T4294] usb 5-1: failed to send control message: -71 [ 347.597483][ T4294] ch341-uart: probe of ttyUSB0 failed with error -71 [ 347.634253][ T4294] usb 5-1: USB disconnect, device number 28 [ 347.640983][T16614] loop3: detected capacity change from 0 to 1024 [ 347.651711][ T4294] ch341 5-1:0.0: device disconnected [ 347.705157][T16614] hfsplus: catalog name length corrupted [ 347.840922][ T6510] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 347.890289][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5583'. [ 348.051023][ T5422] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 348.080894][ T6510] usb 6-1: Using ep0 maxpacket: 32 [ 348.114655][T16634] loop3: detected capacity change from 0 to 16 [ 348.165939][T16634] erofs: (device loop3): mounted with root inode @ nid 36. [ 348.201016][ T6510] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.232128][ T6510] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.281343][ T6510] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 348.294330][ T6510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.310499][ T6510] usb 6-1: config 0 descriptor?? [ 348.321023][ T5422] usb 1-1: Using ep0 maxpacket: 8 [ 348.385482][ T6510] usb 6-1: bad CDC descriptors [ 348.418397][ T6510] usb 6-1: bad CDC descriptors [ 348.423953][ T6510] cdc_acm 6-1:0.0: Zero length descriptor references [ 348.449303][ T6510] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 348.572973][T16653] netlink: 'syz.3.5597': attribute type 2 has an invalid length. [ 348.594813][ T6510] usb 6-1: USB disconnect, device number 5 [ 348.666821][ T5422] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 348.676107][ T5423] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 348.692349][ T5422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 348.708204][ T5422] usb 1-1: Product: syz [ 348.714095][ T5422] usb 1-1: Manufacturer: syz [ 348.718809][ T5422] usb 1-1: SerialNumber: syz [ 348.732632][ T5422] usb 1-1: config 0 descriptor?? [ 348.741179][ T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 348.783784][ T5422] usbtest 1-1:0.0: FX2 device [ 348.788526][ T5422] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 348.964066][T16669] loop3: detected capacity change from 0 to 64 [ 348.994962][ T6510] usb 1-1: USB disconnect, device number 26 [ 349.001262][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 349.009355][T16669] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 349.038686][T16669] minix_free_inode: bit 4 already cleared [ 349.101052][ T5423] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 349.109439][ T5423] usb 3-1: config 0 has no interface number 0 [ 349.116022][ T5423] usb 3-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 349.127395][ T5423] usb 3-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 349.165431][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.180480][T16671] netlink: 'syz.5.5607': attribute type 1 has an invalid length. [ 349.280098][ T7] usb 5-1: config 129 has an invalid interface number: 249 but max is 0 [ 349.299840][ T7] usb 5-1: config 129 has no interface number 0 [ 349.309736][ T7] usb 5-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 349.350083][ T7] usb 5-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 349.369288][ T7] usb 5-1: config 129 interface 249 has no altsetting 0 [ 349.443938][T16677] (syz.5.5609,16677,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 349.461970][T16677] (syz.5.5609,16677,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 349.521203][ T5423] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 349.530439][ T5423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.531388][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 349.555950][ T5423] usb 3-1: Product: syz [ 349.560182][ T5423] usb 3-1: Manufacturer: syz [ 349.576264][ T5423] usb 3-1: SerialNumber: syz [ 349.606717][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.607772][ T5423] usb 3-1: config 0 descriptor?? [ 349.635464][ T7] usb 5-1: Product: syz [ 349.639689][ T7] usb 5-1: Manufacturer: syz [ 349.646428][T16683] netlink: 'syz.0.5612': attribute type 8 has an invalid length. [ 349.654786][T16642] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 349.681595][ T7] usb 5-1: SerialNumber: syz [ 349.706553][T16683] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5612'. [ 349.712726][T16645] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 349.925376][ T5423] kaweth 3-1:0.58: Firmware present in device. [ 349.958866][T16645] udc-core: couldn't find an available UDC or it's busy [ 350.000828][T16645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.091459][ T7] smsc95xx v2.0.0 [ 350.110963][ T7] smsc95xx 5-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 350.110963][ T5423] kaweth 3-1:0.58: Error reading configuration (-71), no net device created [ 350.111087][ T7] smsc95xx: probe of 5-1:129.249 failed with error -71 [ 350.140304][ T5423] kaweth: probe of 3-1:0.58 failed with error -5 [ 350.160529][ T5423] usb 3-1: USB disconnect, device number 28 [ 350.241613][ T7] usb 5-1: USB disconnect, device number 29 [ 350.480805][ T5422] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 350.539969][T16731] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 350.570575][T16731] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 350.760971][ T5422] usb 4-1: Using ep0 maxpacket: 8 [ 350.806873][T16744] loop5: detected capacity change from 0 to 512 [ 350.901143][ T5422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 350.938765][T16744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 350.948629][ T5422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.957206][T16744] System zones: 1-12 [ 350.968195][T16755] netlink: 'syz.4.5648': attribute type 40 has an invalid length. [ 350.977362][T16755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.994100][T16744] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5642: invalid indirect mapped block 8 (level 2) [ 351.011052][ T5422] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.014690][T16744] EXT4-fs (loop5): Remounting filesystem read-only [ 351.027621][T16744] EXT4-fs (loop5): 1 truncate cleaned up [ 351.033448][T16744] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 351.080994][ T5422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 351.120766][ T5422] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 351.167953][ T5422] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 351.206830][ T5422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.235317][ T5422] usb 4-1: config 0 descriptor?? [ 351.263504][T16710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 351.529944][T16786] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 351.553174][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 351.601405][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5663'. [ 351.613830][T16787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5663'. [ 351.724948][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 351.744195][T16797] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 351.757038][ T5422] usb 4-1: USB disconnect, device number 34 [ 351.884140][T16801] device netdevsim0 entered promiscuous mode [ 351.935382][T16801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 352.000869][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 352.121223][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.149522][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.331200][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 352.349626][T16829] loop3: detected capacity change from 0 to 512 [ 352.360810][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.397204][ T7] usb 1-1: Product: syz [ 352.417436][ T7] usb 1-1: Manufacturer: syz [ 352.437752][ T7] usb 1-1: SerialNumber: syz [ 352.466953][ T7] r8152-cfgselector 1-1: config 0 descriptor?? [ 352.558829][T16829] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,bsdgroups,. Quota mode: writeback. [ 352.587782][T16829] ext4 filesystem being mounted at /1125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.739487][T16829] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 18: comm syz.3.5684: lblock 23 mapped to illegal pblock 18 (length 1) [ 352.771404][ T7] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 352.781546][T16829] EXT4-fs (loop3): Remounting filesystem read-only [ 352.930399][T16821] loop5: detected capacity change from 0 to 32768 [ 353.065526][T11390] usb 1-1: USB disconnect, device number 27 [ 353.089377][T16821] XFS (loop5): Mounting V5 Filesystem [ 353.096782][T16834] loop2: detected capacity change from 0 to 32768 [ 353.186864][T16821] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 353.201941][T16856] loop3: detected capacity change from 0 to 512 [ 353.212384][T16834] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 353.249129][T16821] XFS (loop5): Starting recovery (logdev: internal) [ 353.328220][T16856] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5690: bg 0: block 248: padding at end of block bitmap is not set [ 353.357727][T16821] XFS (loop5): Ending recovery (logdev: internal) [ 353.389105][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 353.408409][T16856] Quota error (device loop3): write_blk: dquota write failed [ 353.416127][T16856] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 353.427559][T16856] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.5690: Failed to acquire dquot type 1 [ 353.448477][T16856] EXT4-fs (loop3): 1 truncate cleaned up [ 353.510830][T16856] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.592443][T16856] ext4 filesystem being mounted at /1126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.693998][T14595] XFS (loop5): Unmounting Filesystem [ 353.703676][T16868] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 353.802061][ T9] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 353.830866][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 1 [ 354.019189][T16880] loop3: detected capacity change from 0 to 64 [ 354.399409][T16898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.596559][T16907] device veth1_virt_wifi entered promiscuous mode [ 354.618465][T16907] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5716'. [ 354.666426][T16912] loop4: detected capacity change from 0 to 2048 [ 354.709575][T16912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.834011][T16923] rdma_rxe: ignoring netdev event = 23 for lo [ 354.851610][T16923] rdma_rxe: lo changed mtu to 105321 [ 354.861496][T16922] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 354.871883][T16923] infiniband syz2: set active [ 354.875012][T16926] program syz.4.5722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.877024][ T7] lo speed is unknown, defaulting to 1000 [ 355.172057][T16941] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 355.247598][T16949] loop0: detected capacity change from 0 to 64 [ 356.007209][T16982] netlink: 'syz.0.5744': attribute type 2 has an invalid length. [ 356.063478][T16984] netlink: 'syz.5.5746': attribute type 12 has an invalid length. [ 356.077190][T16984] netlink: 'syz.5.5746': attribute type 12 has an invalid length. [ 356.085301][T16982] netlink: 'syz.0.5744': attribute type 1 has an invalid length. [ 356.104539][T16984] netlink: 'syz.5.5746': attribute type 12 has an invalid length. [ 356.199991][T16986] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5747'. [ 356.391074][T16998] netlink: 'syz.5.5752': attribute type 1 has an invalid length. [ 356.421259][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5752'. [ 356.574397][T17007] trusted_key: encrypted_key: insufficient parameters specified [ 356.670245][T17020] loop0: detected capacity change from 0 to 256 [ 356.725427][T17020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 356.861039][ T4294] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 356.959038][T17042] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 357.080949][ T5419] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 357.109305][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5771'. [ 357.241000][ T4294] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 357.249205][ T4294] usb 5-1: config 0 has no interface number 0 [ 357.310781][ T4294] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.361047][ T5419] usb 1-1: Using ep0 maxpacket: 16 [ 357.491083][ T5419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.520796][ T5419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 357.521020][ T4294] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 357.571433][ T5419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 4432, setting to 1024 [ 357.591057][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.621152][ T4294] usb 5-1: Product: syz [ 357.623701][ T5419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 357.625533][ T4294] usb 5-1: Manufacturer: syz [ 357.692809][T17073] loop2: detected capacity change from 0 to 4096 [ 357.699352][ T5419] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 357.719626][ T4294] usb 5-1: SerialNumber: syz [ 357.759093][ T4294] usb 5-1: config 0 descriptor?? [ 357.762707][T17073] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 357.834141][ T4294] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 357.871305][ T5419] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.890052][ T5419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.969929][ T5419] usb 1-1: SerialNumber: syz [ 358.031285][T17020] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 358.056262][ T5419] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 358.269401][ T5419] usb 1-1: USB disconnect, device number 28 [ 358.388777][ T7] usb 5-1: USB disconnect, device number 30 [ 358.432329][ T7] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 359.381309][T17165] NILFS (nullb0): couldn't find nilfs on the device [ 359.392075][T17170] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.689141][T17189] cgroup: Unknown subsys name 'noxattr' [ 359.836523][T17194] loop3: detected capacity change from 0 to 512 [ 359.873072][T17194] EXT4-fs (loop3): Ignoring removed nobh option [ 359.908804][T17194] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 359.925123][T17194] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.5835: attempt to clear invalid blocks 2 len 1 [ 359.951179][ T5419] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 359.964429][T17194] EXT4-fs (loop3): Remounting filesystem read-only [ 359.986647][T17200] loop5: detected capacity change from 0 to 512 [ 359.995468][T17194] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 360.029855][T17200] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 360.037799][T17194] EXT4-fs (loop3): Remounting filesystem read-only [ 360.074307][T17194] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5835: invalid indirect mapped block 1819239214 (level 0) [ 360.099857][T17194] EXT4-fs (loop3): Remounting filesystem read-only [ 360.115431][T17194] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5835: invalid indirect mapped block 1819239214 (level 1) [ 360.168830][T17194] EXT4-fs (loop3): Remounting filesystem read-only [ 360.176294][T17194] EXT4-fs (loop3): 1 truncate cleaned up [ 360.182803][T17194] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 360.220350][T17200] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.255328][T17200] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 360.268093][T17200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=184ec01c, mo2=0002] [ 360.303778][T17200] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 360.314707][T17200] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 360.330957][T17200] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,quota,jqfmt=vfsv0,barrier=0x000000000000d95a,usrjquota=,,errors=continue. Quota mode: writeback. [ 360.405944][ T5419] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 360.406382][T17200] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.5837: dx entry: limit 65535 != root limit 120 [ 360.415403][ T5419] usb 1-1: config 0 has no interface number 0 [ 360.434038][ T5419] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 360.475347][ T5419] usb 1-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 360.527234][T17200] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.5837: Corrupt directory, running e2fsck is recommended [ 360.568650][T17209] loop4: detected capacity change from 0 to 4096 [ 360.696047][ T5419] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 360.724651][ T5419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.727460][T17209] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 360.771050][ T5419] usb 1-1: Product: syz [ 360.780991][ T5419] usb 1-1: Manufacturer: syz [ 360.795935][ T5419] usb 1-1: SerialNumber: syz [ 360.817192][ T5419] usb 1-1: config 0 descriptor?? [ 360.851253][T17187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 360.911488][T17209] ntfs3: loop4: failed to convert "c46c" to macinuit [ 361.111957][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5854'. [ 361.125397][ T5419] kaweth 1-1:0.58: Firmware present in device. [ 361.330900][ T5419] kaweth 1-1:0.58: Error reading configuration (-71), no net device created [ 361.351417][ T5419] kaweth: probe of 1-1:0.58 failed with error -5 [ 361.400409][ T5419] usb 1-1: USB disconnect, device number 29 [ 361.569838][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5864'. [ 362.146580][T17290] IPv6: sit1: Disabled Multicast RS [ 362.337254][T17298] loop3: detected capacity change from 0 to 512 [ 362.370648][T17294] loop2: detected capacity change from 0 to 4096 [ 362.408768][T17300] loop0: detected capacity change from 0 to 512 [ 362.468349][T17298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.491297][T17300] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 362.537026][T17294] ntfs: volume version 3.1. [ 362.577519][T17298] EXT4-fs (loop3): 1 truncate cleaned up [ 362.599208][T17298] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 362.634186][T17300] EXT4-fs (loop0): Remounting filesystem read-only [ 362.679498][T17300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5885: invalid indirect mapped block 4278190080 (level 0) [ 362.743237][T17302] loop5: detected capacity change from 0 to 4096 [ 362.777152][T17300] EXT4-fs (loop0): Remounting filesystem read-only [ 362.790974][T17300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5885: invalid indirect mapped block 1 (level 1) [ 362.848021][T17300] EXT4-fs (loop0): Remounting filesystem read-only [ 362.861872][T17300] EXT4-fs (loop0): 1 truncate cleaned up [ 362.880176][T17300] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 363.101643][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5889'. [ 363.111437][T17300] EXT4-fs error (device loop0): __ext4_iget:4894: inode #12: block 2: comm syz.0.5885: invalid block [ 363.148424][T17300] EXT4-fs (loop0): Remounting filesystem read-only [ 363.203121][T14595] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 363.209643][T14595] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 363.453601][T11390] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 363.558622][T17316] loop4: detected capacity change from 0 to 2048 [ 363.636894][T17316] loop4: p1 < > p3 [ 363.654693][T17329] xt_l2tp: missing protocol rule (udp|l2tpip) [ 363.676927][T17316] loop4: p3 size 134217728 extends beyond EOD, truncated [ 363.753085][ T5419] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 363.829942][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5904'. [ 363.861321][T11390] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.880263][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 363.882541][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 363.948647][T11390] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.987048][T11390] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 364.040847][T11390] usb 4-1: config 1 interface 0 has no altsetting 1 [ 364.074617][T17344] loop0: detected capacity change from 0 to 1764 [ 364.121496][T17350] delete_channel: no stack [ 364.181308][ T5419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8 [ 364.201302][T11390] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 364.207314][ T5419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 364.211418][T11390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.238792][ T5419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.259296][ T5419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 152, changing to 4 [ 364.278517][T11390] usb 4-1: Product: syz [ 364.283123][T11390] usb 4-1: Manufacturer: syz [ 364.295499][T11390] usb 4-1: SerialNumber: syz [ 364.302918][ T5419] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 364.331271][ T5419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.333526][T17356] loop4: detected capacity change from 0 to 1024 [ 364.347659][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5914'. [ 364.353713][T11390] smsusb:smsusb_probe: board id=8, interface number 0 [ 364.377036][ T5419] usb 6-1: config 0 descriptor?? [ 364.431406][T17322] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 364.570983][T11390] smsusb:smsusb_probe: Device initialized with return code -19 [ 364.699801][ T5419] usb 6-1: USB disconnect, device number 6 [ 364.795713][ T5423] usb 4-1: USB disconnect, device number 35 [ 364.828426][T17376] loop4: detected capacity change from 0 to 512 [ 364.866032][T17379] loop2: detected capacity change from 0 to 256 [ 364.944260][T17376] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 364.971183][T17376] ext4 filesystem being mounted at /1213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.990864][ T2286] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 365.213666][ T26] audit: type=1107 audit(1752869836.725:2181): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 365.351539][T17397] x_tables: duplicate entry at hook 1 [ 365.391405][ T2286] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 365.400233][ T2286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.473475][ T2286] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.521171][ T2286] usb 1-1: config 1 has no interface number 1 [ 365.544770][ T2286] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.588540][ T2286] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 365.767197][T17417] loop4: detected capacity change from 0 to 2048 [ 365.821017][ T2286] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.841136][ T2286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.849236][ T2286] usb 1-1: Product: syz [ 365.882219][ T2286] usb 1-1: Manufacturer: syz [ 365.905330][ T2286] usb 1-1: SerialNumber: syz [ 365.910555][T17417] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 365.958981][T17425] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.049904][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.062491][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.083459][T17417] Remounting filesystem read-only [ 366.105272][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.116145][T11390] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 366.131089][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.160280][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.181096][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.193966][T17429] device geneve3 entered promiscuous mode [ 366.201473][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.220924][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.241416][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.261594][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.281204][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.292249][ T2286] usb 1-1: MIDIStreaming interface descriptor not found [ 366.313525][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.343655][ T2286] usb 1-1: USB disconnect, device number 30 [ 366.351229][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.360810][T11390] usb 6-1: Using ep0 maxpacket: 16 [ 366.411040][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.441747][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.481470][T11390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 366.512421][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.525615][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.546476][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.659097][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.681011][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.696462][T11390] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 366.706051][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.721305][T11390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.729342][T11390] usb 6-1: Product: syz [ 366.732738][ T4414] udevd[4414]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.769089][T11390] usb 6-1: Manufacturer: syz [ 366.770208][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.781828][T11390] usb 6-1: SerialNumber: syz [ 366.811935][T11390] usb 6-1: config 0 descriptor?? [ 366.817054][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.846848][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.898952][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 366.935351][T11390] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 366.952755][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.983362][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 367.016315][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 367.036172][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 367.046740][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 367.074049][T17417] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 367.082365][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5959'. [ 367.100934][T17417] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 367.120876][T11390] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 367.130141][ T26] audit: type=1800 audit(1752869838.635:2182): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5939" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 367.194626][T17417] syz.4.5939 (17417) used greatest stack depth: 19336 bytes left [ 367.403967][T17475] UBIFS error (pid: 17475): cannot open "", error -22 [ 367.491020][T11390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 367.551004][T11390] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 367.579088][T11390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 367.610155][T11390] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 367.610198][T17486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5972'. [ 367.656274][ T2286] usb 6-1: USB disconnect, device number 7 [ 367.661307][ T9] usb 6-1: Failed to submit usb control message: -71 [ 367.669689][ T9] usb 6-1: unable to send the bmi data to the device: -71 [ 367.692194][ T9] usb 6-1: unable to get target info from device [ 367.699379][T17489] IPVS: length: 94 != 8 [ 367.707814][ T9] usb 6-1: could not get target info (-71) [ 367.723408][ T9] usb 6-1: could not probe fw (-71) [ 367.801355][T11390] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 367.830437][T11390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.860833][T11390] usb 3-1: Product: syz [ 367.884125][T11390] usb 3-1: Manufacturer: syz [ 367.884203][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 367.888774][T11390] usb 3-1: SerialNumber: syz [ 367.915942][T11390] usb 3-1: config 0 descriptor?? [ 367.949203][T17502] xt_connbytes: Forcing CT accounting to be enabled [ 367.971695][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 367.971715][T11390] kvaser_usb 3-1:0.0: Cannot get software info, error -90 [ 367.998658][T11390] kvaser_usb: probe of 3-1:0.0 failed with error -90 [ 368.033179][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'. [ 368.077611][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'. [ 368.111098][T17500] loop3: detected capacity change from 0 to 4096 [ 368.223523][ T7] usb 3-1: USB disconnect, device number 29 [ 368.325437][ T4195] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 368.366310][ T4195] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 368.381398][ T2286] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 368.660973][T11390] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 368.811767][ T2286] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 368.830356][ T2286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.852265][T17539] loop2: detected capacity change from 0 to 256 [ 368.863975][ T2286] usb 6-1: config 0 descriptor?? [ 368.912071][ T2286] cp210x 6-1:0.0: cp210x converter detected [ 368.923050][T17540] loop4: detected capacity change from 0 to 4096 [ 368.937024][T17539] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 369.180906][T11390] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.190084][T11390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.226466][T11390] usb 1-1: Product: syz [ 369.230673][T11390] usb 1-1: Manufacturer: syz [ 369.235809][T11390] usb 1-1: SerialNumber: syz [ 369.261717][T17554] loop3: detected capacity change from 0 to 128 [ 369.273893][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 369.280369][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 369.296054][T11390] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.363732][ T2286] usb 6-1: cp210x converter now attached to ttyUSB0 [ 369.401015][ T2286] usb 6-1: USB disconnect, device number 8 [ 369.458566][ T2286] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 369.478724][ T2286] cp210x 6-1:0.0: device disconnected [ 369.848143][T17573] loop3: detected capacity change from 0 to 4096 [ 369.891155][T11390] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.943390][T17573] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 370.105430][T17573] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 370.257032][ T4195] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 370.271722][ T4195] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 370.297707][ T6510] usb 1-1: USB disconnect, device number 31 [ 370.409322][T17603] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6030'. [ 370.664174][T17613] loop5: detected capacity change from 0 to 1024 [ 370.716569][T17613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 370.730897][T17613] System zones: 0-1, 3-36 [ 370.737666][T17613] EXT4-fs (loop5): orphan cleanup on readonly fs [ 370.771899][T17617] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.783246][T17613] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 370.790864][ T4294] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 370.823135][T17617] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.873007][T17613] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 370.899599][T17617] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.913657][T17613] EXT4-fs error (device loop5): __ext4_iget:4894: inode #12: block 13: comm syz.5.6035: invalid block [ 370.931092][T17617] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.940591][T17613] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.6035: couldn't read orphan inode 12 (err -117) [ 370.972258][ T4230] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 370.992068][T11390] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 370.999206][T11390] ath9k_htc: Failed to initialize the device [ 371.010767][T17613] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 371.023046][ T6510] usb 1-1: ath9k_htc: USB layer deinitialized [ 371.064877][T17613] kAFS: No cell specified [ 371.070856][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 371.192266][ T4294] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 371.210803][ T4294] usb 4-1: config 0 has no interface number 0 [ 371.411200][ T4294] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 371.430560][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.461597][ T4294] usb 4-1: Product: syz [ 371.465822][ T4294] usb 4-1: Manufacturer: syz [ 371.470656][ T4294] usb 4-1: SerialNumber: syz [ 371.525380][ T4294] usb 4-1: config 0 descriptor?? [ 371.533148][ T6510] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 371.573240][ T4294] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 371.590229][ T4294] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 371.791066][ T4294] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 371.894990][T17654] XFS (nullb0): Invalid superblock magic number [ 371.929696][ T6510] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.940191][T17633] loop4: detected capacity change from 0 to 32768 [ 371.944913][T17661] loop5: detected capacity change from 0 to 1024 [ 371.960790][ T6510] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 371.983319][ T6510] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 170, setting to 64 [ 371.990076][T17633] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 372.001029][ T4294] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 372.027249][ T4294] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 372.035433][ T6510] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 372.061971][ T4294] usb 4-1: USB disconnect, device number 36 [ 372.118173][ T4294] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 372.162518][ T154] hfsplus: b-tree write err: -5, ino 4 [ 372.201161][ T6510] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 372.227732][ T6510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.248252][ T6510] usb 1-1: SerialNumber: syz [ 372.296071][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 372.301441][T17623] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 372.315745][T17623] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 372.328251][T17666] delete_channel: no stack [ 372.382053][ T6510] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 372.612010][ T6510] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 372.631450][ T6510] usb 1-1: USB disconnect, device number 32 [ 372.686480][T17679] loop2: detected capacity change from 0 to 256 [ 372.828324][T17689] loop3: detected capacity change from 0 to 8 [ 373.280952][T17707] netlink: 'syz.2.6078': attribute type 32 has an invalid length. [ 373.379417][T17715] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.6080'. [ 373.531350][T17722] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6084'. [ 373.610891][T17728] loop3: detected capacity change from 0 to 512 [ 373.706237][T17728] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 373.768446][T17728] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 373.826164][T17728] EXT4-fs (loop3): 1 truncate cleaned up [ 373.836143][T17728] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 373.977654][T17749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6097'. [ 374.489036][T17786] loop0: detected capacity change from 0 to 256 [ 374.582564][T17786] exfat: Deprecated parameter 'utf8' [ 374.588084][T17786] exfat: Deprecated parameter 'utf8' [ 374.676425][T17786] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 374.788820][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6125'. [ 374.890897][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6129'. [ 375.058845][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6134'. [ 375.139213][T17829] netlink: 'syz.4.6136': attribute type 9 has an invalid length. [ 375.158132][T17822] loop0: detected capacity change from 0 to 4096 [ 375.181097][ T5423] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 375.220364][T17822] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 375.284531][T17835] xt_nat: multiple ranges no longer supported [ 375.461303][ T5423] usb 3-1: Using ep0 maxpacket: 16 [ 375.581185][ T5423] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.603770][ T5423] usb 3-1: config 0 has no interface number 0 [ 375.821225][ T5423] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 375.847023][ T5423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.883916][T17858] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 375.902383][ T5423] usb 3-1: Product: syz [ 375.906604][ T5423] usb 3-1: Manufacturer: syz [ 375.941560][ T5423] usb 3-1: SerialNumber: syz [ 375.961852][ T5423] usb 3-1: config 0 descriptor?? [ 376.087577][T17870] device veth0_macvtap left promiscuous mode [ 376.250329][ T5423] usb 3-1: USB disconnect, device number 30 [ 376.514199][T17889] netlink: 'syz.0.6166': attribute type 21 has an invalid length. [ 376.561128][T17889] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6166'. [ 376.890802][ T2286] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 376.944635][T17912] loop3: detected capacity change from 0 to 64 [ 376.995932][ T6510] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 377.321261][ T2286] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 377.340841][ T2286] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 377.461049][ T4230] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 377.542078][T17944] loop2: detected capacity change from 0 to 512 [ 377.542573][ T2286] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 377.551210][ T6510] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 377.567913][ T2286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.585886][ T2286] usb 6-1: Product: syz [ 377.591557][ T2286] usb 6-1: Manufacturer: syz [ 377.596206][ T2286] usb 6-1: SerialNumber: syz [ 377.599853][ T6510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.610108][ T6510] usb 1-1: Product: syz [ 377.614598][ T6510] usb 1-1: Manufacturer: syz [ 377.619271][ T6510] usb 1-1: SerialNumber: syz [ 377.641561][ T2286] usb 6-1: config 0 descriptor?? [ 377.645769][ T6510] usb 1-1: config 0 descriptor?? [ 377.688874][T17944] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 377.709669][ T6510] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 377.735360][T17944] ext4 filesystem being mounted at /1323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.826586][T17944] EXT4-fs error (device loop2): ext4_xattr_block_find:1866: inode #15: comm syz.2.6193: corrupted xattr block 19 [ 377.840988][ T4230] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 377.849212][ T4230] usb 4-1: config 0 has no interface number 0 [ 377.877357][T17957] netlink: 'syz.4.6198': attribute type 13 has an invalid length. [ 377.893315][ T4230] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 377.905244][T17944] EXT4-fs (loop2): Remounting filesystem read-only [ 377.921233][ T3547] bcm5974 1-1:0.0: could not read from device [ 377.950832][ T4230] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 377.958486][ T2286] usb 6-1: USB disconnect, device number 9 [ 377.982321][ T4230] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 377.993702][ T4230] usb 4-1: config 0 interface 128 has no altsetting 0 [ 378.020972][ T3547] bcm5974 1-1:0.0: could not read from device [ 378.031309][ T6510] usb 1-1: USB disconnect, device number 33 [ 378.070323][ T3547] bcm5974 1-1:0.0: could not read from device [ 378.181354][ T4230] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 378.197040][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.210940][ T4230] usb 4-1: Product: syz [ 378.215262][ T4230] usb 4-1: Manufacturer: syz [ 378.220036][ T4230] usb 4-1: SerialNumber: syz [ 378.242911][ T4230] usb 4-1: config 0 descriptor?? [ 378.251013][T17965] netlink: 736 bytes leftover after parsing attributes in process `syz.2.6202'. [ 378.281089][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6203'. [ 378.286629][ T4230] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 378.319658][ T4230] radio-si470x: probe of 4-1:0.128 failed with error -5 [ 378.348400][ T4230] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 378.413656][T17973] netlink: 'syz.4.6206': attribute type 1 has an invalid length. [ 378.437585][T17973] netlink: 'syz.4.6206': attribute type 2 has an invalid length. [ 378.450078][T17973] netlink: 'syz.4.6206': attribute type 2 has an invalid length. [ 378.467080][T17973] netlink: 'syz.4.6206': attribute type 1 has an invalid length. [ 378.502664][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541475][ T5419] usb 4-1: USB disconnect, device number 37 [ 378.696426][T17991] bond0: Error: Cannot enslave bond to itself. [ 378.911371][T18007] netlink: 'syz.5.6222': attribute type 4 has an invalid length. [ 379.164300][T18013] loop0: detected capacity change from 0 to 2048 [ 379.276211][T18013] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 379.326323][T18013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.330345][T18027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6233'. [ 379.509470][T18036] netlink: 'syz.4.6236': attribute type 7 has an invalid length. [ 379.542097][T18036] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6236'. [ 379.578188][T18042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6238'. [ 379.628302][T18042] openvswitch: netlink: EtherType 0 is less than min 600 [ 379.931734][T18061] loop0: detected capacity change from 0 to 512 [ 379.985919][T18061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 380.070745][T18061] EXT4-fs (loop0): 1 truncate cleaned up [ 380.076460][T18061] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 380.098893][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.110846][ T4230] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 380.370810][ T4230] usb 6-1: Using ep0 maxpacket: 8 [ 380.395355][T18078] device gtp0 entered promiscuous mode [ 380.491028][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 380.526589][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.541664][T18058] loop3: detected capacity change from 0 to 32768 [ 380.560805][ T4230] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.578246][T18084] CIFS mount error: No usable UNC path provided in device string! [ 380.578246][T18084] [ 380.587089][ T4230] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 380.598765][ T4230] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 380.608169][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.620848][T18084] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.637320][T18058] XFS (loop3): Mounting V5 Filesystem [ 380.638235][ T4230] usb 6-1: config 0 descriptor?? [ 380.661306][T18051] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.720569][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 380.731261][T18095] loop2: detected capacity change from 0 to 256 [ 380.850422][T18095] FAT-fs (loop2): Directory bread(block 64) failed [ 380.886592][T18095] FAT-fs (loop2): Directory bread(block 65) failed [ 380.931371][T18095] FAT-fs (loop2): Directory bread(block 66) failed [ 380.957274][T18095] FAT-fs (loop2): Directory bread(block 67) failed [ 380.965628][T18058] XFS (loop3): Ending clean mount [ 380.991425][T18095] FAT-fs (loop2): Directory bread(block 68) failed [ 381.038843][T18095] FAT-fs (loop2): Directory bread(block 69) failed [ 381.053516][T18106] CIFS mount error: No usable UNC path provided in device string! [ 381.053516][T18106] [ 381.060933][T18095] FAT-fs (loop2): Directory bread(block 70) failed [ 381.090981][T18106] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.121968][ T4195] XFS (loop3): Unmounting Filesystem [ 381.130383][T18095] FAT-fs (loop2): Directory bread(block 71) failed [ 381.150909][T18095] FAT-fs (loop2): Directory bread(block 72) failed [ 381.157834][T18095] FAT-fs (loop2): Directory bread(block 73) failed [ 381.165668][ T4230] usb 6-1: USB disconnect, device number 10 [ 381.176972][T18108] loop4: detected capacity change from 0 to 1024 [ 381.210001][T18108] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 381.238270][T18108] EXT4-fs error (device loop4): ext4_get_journal_inode:5158: inode #32: comm syz.4.6268: iget: special inode unallocated [ 381.261127][T18108] EXT4-fs (loop4): no journal found [ 381.266540][T18108] EXT4-fs (loop4): can't get journal size [ 381.332666][T18108] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,noblock_validity,sysvgroups,,errors=continue. Quota mode: none. [ 381.393738][T18108] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.6268: bad inode number: 12 [ 381.751522][T18125] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 382.024462][T18145] loop4: detected capacity change from 0 to 64 [ 382.052169][T18146] device veth0_macvtap left promiscuous mode [ 382.593504][T18187] netlink: 'syz.4.6304': attribute type 1 has an invalid length. [ 382.704473][T18190] device veth0_macvtap left promiscuous mode [ 382.786700][T18196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.811403][T18196] device batadv_slave_0 entered promiscuous mode [ 382.830318][ T26] audit: type=1400 audit(1752869854.335:2183): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18201 comm="syz.4.6314" [ 382.862607][T18196] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 383.120545][T18218] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6323'. [ 383.282178][ T5422] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 383.389362][T18232] loop3: detected capacity change from 0 to 4096 [ 383.518540][T18232] ntfs: volume version 3.1. [ 383.541202][ T5422] usb 1-1: Using ep0 maxpacket: 32 [ 383.691201][ T5422] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.844079][T18254] infiniband syz2: set active [ 383.891061][ T5422] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 383.900240][ T5422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.923534][T18254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.974867][T18254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.981531][ T5422] usb 1-1: Product: syz [ 383.996370][ T5422] usb 1-1: Manufacturer: syz [ 384.020929][ T5422] usb 1-1: SerialNumber: syz [ 384.023709][T18254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.041968][ T5422] usb 1-1: config 0 descriptor?? [ 384.071144][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6344'. [ 384.103341][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6344'. [ 384.114581][ T5422] usb 1-1: bad CDC descriptors [ 384.119962][ T5422] usb 1-1: unsupported MDLM descriptors [ 384.165812][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6344'. [ 384.184633][T18223] loop2: detected capacity change from 0 to 32768 [ 384.201926][T18254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 384.209630][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6344'. [ 384.277352][ T6510] lo speed is unknown, defaulting to 1000 [ 384.327837][ T5422] usb 1-1: USB disconnect, device number 34 [ 384.384442][T18274] device veth0_macvtap left promiscuous mode [ 384.431976][T18223] XFS (loop2): Mounting V5 Filesystem [ 384.629341][T18223] XFS (loop2): Ending clean mount [ 384.650351][T18223] XFS (loop2): Quotacheck needed: Please wait. [ 384.751759][T18223] XFS (loop2): Quotacheck: Done. [ 384.825175][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6355'. [ 384.874733][ T4187] XFS (loop2): Unmounting Filesystem [ 385.201523][T18306] overlayfs: unrecognized mount option "smackfsfloor=]**\(\%&:{@" or missing value [ 385.485453][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6370'. [ 385.517320][T18282] loop4: detected capacity change from 0 to 32768 [ 385.792014][T18336] netlink: ct family unspecified [ 385.797140][T18336] openvswitch: netlink: Actions may not be safe on all matching packets [ 385.935262][T18340] loop0: detected capacity change from 0 to 64 [ 386.251071][ T6510] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 386.370827][T11390] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 386.552255][T18371] loop0: detected capacity change from 0 to 4096 [ 386.597611][T18371] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 386.621915][ T6510] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 386.630151][T11390] usb 3-1: Using ep0 maxpacket: 8 [ 386.650393][ T6510] usb 5-1: config 0 has no interface number 0 [ 386.669605][ T6510] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 386.688433][ T6510] usb 5-1: config 0 interface 11 has no altsetting 0 [ 386.696000][ T6510] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 386.700271][T18371] ntfs: volume version 3.1. [ 386.705980][ T4294] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 386.717812][ T6510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.737839][ T6510] usb 5-1: config 0 descriptor?? [ 386.761200][T18348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.768496][T11390] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 386.779809][T18348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 386.788458][T11390] usb 3-1: config 0 has no interface number 0 [ 386.822603][ T6510] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 386.833837][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 386.850643][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 386.866103][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 386.879576][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 386.888805][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 386.898910][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 386.915299][ T6510] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 386.927739][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 386.936147][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 386.944694][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 386.952946][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 386.961084][T11390] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 2.a2 [ 386.978432][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 386.987723][T11390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.004632][ T6510] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 387.013227][T11390] usb 3-1: Product: syz [ 387.017451][T11390] usb 3-1: Manufacturer: syz [ 387.028678][T11390] usb 3-1: SerialNumber: syz [ 387.033735][ T6510] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 387.080429][T11390] usb 3-1: config 0 descriptor?? [ 387.091203][ T4294] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 387.100606][ T4294] usb 4-1: config 0 has no interface number 0 [ 387.109803][ T6510] usb 5-1: USB disconnect, device number 31 [ 387.132931][ T4294] usb 4-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 387.152701][ T6510] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 387.164883][T11390] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 387.197692][T11390] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.207112][ T4294] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.222602][ T6510] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 387.232825][ T4294] usb 4-1: config 0 interface 113 has no altsetting 0 [ 387.241157][ T6510] keyspan 5-1:0.11: device disconnected [ 387.251591][T11390] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 387.282199][T11390] usb 3-1: media controller created [ 387.299384][T11390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.391172][ T4294] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 387.400407][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.419576][T11390] DVB: Unable to find symbol mt352_attach() [ 387.425766][ T4294] usb 4-1: Product: syz [ 387.430273][ T4294] usb 4-1: Manufacturer: syz [ 387.447858][ T4294] usb 4-1: SerialNumber: syz [ 387.456492][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6406'. [ 387.503404][ T4294] usb 4-1: config 0 descriptor?? [ 387.519598][T11390] DVB: Unable to find symbol nxt6000_attach() [ 387.529573][T11390] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 387.541625][ T4294] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 387.592501][T11390] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 387.643800][T11390] dvb-usb: schedule remote query interval to 1000 msecs. [ 387.668021][T11390] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 387.699381][T11390] dvb-usb: bulk message failed: -22 (7/0) [ 387.716412][T11390] dvb-usb: bulk message failed: -22 (7/0) [ 387.739659][T11390] usb 3-1: USB disconnect, device number 31 [ 387.794153][ T5422] usb 4-1: USB disconnect, device number 38 [ 387.871641][T11390] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 387.922852][T18415] overlayfs: missing 'workdir' [ 388.099223][T18424] program syz.4.6420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.137646][T18424] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 388.294938][T18434] xt_socket: unknown flags 0xc [ 388.322563][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6426'. [ 388.574423][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6436'. [ 388.606210][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6436'. [ 388.651768][T18451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.716620][T18463] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6439'. [ 388.761940][T18464] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6440'. [ 388.857042][T18470] loop4: detected capacity change from 0 to 1024 [ 389.001004][T18470] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 389.888808][T18530] loop0: detected capacity change from 0 to 256 [ 389.965934][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.970400][T11390] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 390.016126][T18530] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.016779][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.057804][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.120260][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.232460][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.240196][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.301298][T11390] usb 5-1: Using ep0 maxpacket: 32 [ 390.341382][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.368562][T18533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.421060][T11390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.456185][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6481'. [ 390.483125][T18504] loop3: detected capacity change from 0 to 32768 [ 390.587059][T18504] XFS (loop3): Mounting V5 Filesystem [ 390.611141][T11390] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 390.638738][T11390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.738458][T11390] usb 5-1: Product: syz [ 390.757996][T11390] usb 5-1: Manufacturer: syz [ 390.785672][T11390] usb 5-1: SerialNumber: syz [ 390.823063][T18504] XFS (loop3): Ending clean mount [ 390.831778][T11390] usb 5-1: config 0 descriptor?? [ 390.876828][T11390] usb 5-1: bad CDC descriptors [ 390.898364][T11390] usb 5-1: unsupported MDLM descriptors [ 390.961760][ T4195] XFS (loop3): Unmounting Filesystem [ 391.042157][T18581] loop0: detected capacity change from 0 to 1024 [ 391.096007][ T5423] usb 5-1: USB disconnect, device number 32 [ 391.250678][T18588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6498'. [ 391.476333][T18596] loop0: detected capacity change from 0 to 1024 [ 391.641136][ T5422] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 391.659783][T18604] loop3: detected capacity change from 0 to 64 [ 391.690838][ T4230] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 391.861089][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6510'. [ 391.950876][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 391.975880][T18618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6512'. [ 392.073581][ T4230] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 392.097053][ T4230] usb 6-1: config 4 has no interface number 0 [ 392.138537][ T4230] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.147713][T18627] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6517'. [ 392.187972][ T4230] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.240824][ T4230] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.250605][ T5422] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 392.267228][ T5422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.279283][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.315324][ T5422] usb 3-1: Product: syz [ 392.319549][ T5422] usb 3-1: Manufacturer: syz [ 392.329542][ T5422] usb 3-1: SerialNumber: syz [ 392.342668][ T5422] usb 3-1: config 0 descriptor?? [ 392.352219][ T4230] hub 6-1:4.128: USB hub found [ 392.408836][ T4189] Bluetooth: hci6: urb ffff8881480a3d00 submission failed (2) [ 392.571157][ T4230] hub 6-1:4.128: 2 ports detected [ 392.576596][ T4230] hub 6-1:4.128: Using single TT (err -22) [ 392.605425][ T5423] usb 3-1: USB disconnect, device number 32 [ 392.790863][ T4230] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 392.807111][ T4230] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 392.885310][ T4230] usb 6-1: USB disconnect, device number 11 [ 393.368778][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6546'. [ 393.688772][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6557'. [ 393.806728][T18717] openvswitch: netlink: Actions may not be safe on all matching packets [ 393.898431][T18719] loop5: detected capacity change from 0 to 1764 [ 394.002596][T18735] QAT: Device 8 not found [ 394.149033][T18734] loop2: detected capacity change from 0 to 4096 [ 394.240858][T18745] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.711117][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 394.771140][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6585'. [ 395.434688][T18763] loop4: detected capacity change from 0 to 32768 [ 395.449905][T18795] netlink: 'syz.3.6599': attribute type 2 has an invalid length. [ 395.472585][ T5423] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 395.517507][T18765] loop2: detected capacity change from 0 to 32768 [ 395.578375][T18763] XFS (loop4): Mounting V5 Filesystem [ 395.615552][T18765] XFS (loop2): Mounting V5 Filesystem [ 395.660961][ T2286] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 395.754030][T18763] XFS (loop4): Ending clean mount [ 395.764195][T18765] XFS (loop2): Ending clean mount [ 395.815228][T18817] ax25_connect(): syz.3.6602 uses autobind, please contact jreuter@yaina.de [ 395.892456][ T4187] XFS (loop2): Unmounting Filesystem [ 395.920942][ T2286] usb 1-1: Using ep0 maxpacket: 32 [ 395.939429][ T4192] XFS (loop4): Unmounting Filesystem [ 396.041602][ T2286] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 396.049859][ T2286] usb 1-1: config 0 has no interface number 0 [ 396.065846][ T2286] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 396.071333][T18821] xt_TCPMSS: Only works on TCP SYN packets [ 396.076895][ T5423] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 396.091593][ T5423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.099626][ T5423] usb 6-1: Product: syz [ 396.104161][ T5423] usb 6-1: Manufacturer: syz [ 396.108775][ T5423] usb 6-1: SerialNumber: syz [ 396.115609][ T5423] usb 6-1: config 0 descriptor?? [ 396.300072][T18825] loop3: detected capacity change from 0 to 1024 [ 396.351113][ T2286] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 396.360347][ T2286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.403600][ T2286] usb 1-1: Product: syz [ 396.407932][ T2286] usb 1-1: Manufacturer: syz [ 396.447102][ T2286] usb 1-1: SerialNumber: syz [ 396.457003][ T2286] usb 1-1: config 0 descriptor?? [ 396.491398][T18791] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 396.508069][ T6510] usb 6-1: USB disconnect, device number 12 [ 396.526005][ T2286] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 396.541706][ T2286] usb 1-1: Detected FT-X [ 396.730369][T18833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6610'. [ 396.751210][ T2286] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 396.791189][ T2286] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 396.821023][ T2286] ftdi_sio 1-1:0.151: GPIO initialisation failed: -71 [ 396.857287][ T2286] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 396.870952][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6613'. [ 396.909648][ T2286] usb 1-1: USB disconnect, device number 35 [ 396.916550][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6613'. [ 396.951810][ T2286] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 396.964566][ T2286] ftdi_sio 1-1:0.151: device disconnected [ 397.168183][T18858] loop5: detected capacity change from 0 to 256 [ 397.201109][T18862] loop4: detected capacity change from 0 to 64 [ 397.259547][T18858] MINIX-fs: mounting file system with errors, running fsck is recommended [ 397.333699][T18868] loop3: detected capacity change from 0 to 8 [ 397.382092][T18868] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 397.422465][T18872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6630'. [ 397.463044][ T4519] udevd[4519]: incorrect cramfs checksum on /dev/loop3 [ 397.481280][T18876] cgroup: noprefix used incorrectly [ 397.546297][T18878] loop0: detected capacity change from 0 to 2048 [ 397.650412][T18878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.684524][T18889] netlink: 'syz.4.6636': attribute type 9 has an invalid length. [ 397.809943][T18896] netlink: 'syz.5.6641': attribute type 30 has an invalid length. [ 397.899407][T18894] loop3: detected capacity change from 0 to 4096 [ 397.971544][T18904] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 398.059217][T18894] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 398.094965][T18910] overlayfs: empty lowerdir [ 398.206484][ T4195] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 398.253838][ T4195] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 398.264015][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6654'. [ 398.624710][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6666'. [ 398.781256][T18959] netlink: set zone limit has 8 unknown bytes [ 398.922266][T18969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.973875][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6677'. [ 399.020900][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6677'. [ 399.061379][T18973] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6677'. [ 399.165976][ T264] block nbd4: Attempted send on invalid socket [ 399.172425][ T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.523381][T18999] overlayfs: missing 'workdir' [ 399.650081][T18991] loop2: detected capacity change from 0 to 4096 [ 399.657417][ T4294] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 399.713756][T18991] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 399.719763][T19005] loop0: detected capacity change from 0 to 22 [ 399.792666][T19005] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 399.820959][T19005] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 399.862228][T19005] MTD: Couldn't look up './file0': -13 [ 399.877065][T18991] ntfs3: loop2: failed to convert "c46c" to cp864 [ 399.885705][T19005] ./file0: Can't open blockdev [ 400.030980][ T4294] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 400.040165][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.090309][ T4294] usb 6-1: config 0 descriptor?? [ 400.173228][ T4294] pwc: Philips SPC 900NC USB webcam detected. [ 400.187124][T19025] netlink: 'syz.2.6701': attribute type 1 has an invalid length. [ 400.390891][ T4294] pwc: Failed to set LED on/off time (-71) [ 400.411051][ T4294] pwc: send_video_command error -71 [ 400.416638][ T4294] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 400.443817][T19035] cgroup: noprefix used incorrectly [ 400.459355][ T4294] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 400.501765][ T4294] usb 6-1: USB disconnect, device number 13 [ 400.621115][T19045] loop2: detected capacity change from 0 to 1024 [ 400.732396][ T6083] hfsplus: b-tree write err: -5, ino 4 [ 400.816639][T19051] device netdevsim0 entered promiscuous mode [ 401.076217][T19066] loop5: detected capacity change from 0 to 512 [ 401.208248][T19066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.220317][T19075] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6725'. [ 401.273141][T19066] EXT4-fs (loop5): 1 truncate cleaned up [ 401.278835][T19066] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000007,init_itable,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 401.306068][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.306785][T19075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 401.367202][T19066] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.6722: corrupted in-inode xattr [ 401.389862][T19083] loop2: detected capacity change from 0 to 16 [ 401.451051][T19083] erofs: (device loop2): mounted with root inode @ nid 36. [ 401.451200][T19066] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1760: inode #15: comm syz.5.6722: unable to update i_inline_off [ 401.534973][T19066] EXT4-fs error (device loop5): ext4_xattr_ibody_get:603: inode #15: comm syz.5.6722: corrupted in-inode xattr [ 401.912674][T19110] loop3: detected capacity change from 0 to 8 [ 401.982068][T19112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.987476][T19114] openvswitch: netlink: Actions may not be safe on all matching packets [ 402.001893][T19110] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 402.097772][T19110] cramfs: bad data blocksize 3221485570 [ 402.123952][T19110] cramfs: bad data blocksize 3221485570 [ 402.165769][ T26] audit: type=1800 audit(1752869873.675:2184): pid=19110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6743" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 402.322718][ T4293] udevd[4293]: incorrect cramfs checksum on /dev/loop3 [ 402.567455][T19134] loop4: detected capacity change from 0 to 8192 [ 402.627715][T19141] netlink: 'syz.0.6758': attribute type 21 has an invalid length. [ 402.674422][T19141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6758'. [ 402.924841][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6764'. [ 402.997640][T19159] nfs4: Bad value for 'source' [ 403.023028][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6766'. [ 403.160433][T19165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6770'. [ 403.302112][T19171] loop3: detected capacity change from 0 to 1024 [ 403.355790][T19131] loop2: detected capacity change from 0 to 32768 [ 403.446442][T19131] XFS: attr2 mount option is deprecated. [ 403.490940][ T5414] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 403.636074][T19131] XFS (loop2): Mounting V5 Filesystem [ 403.680911][ T2286] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 403.712933][T19193] loop4: detected capacity change from 0 to 2048 [ 403.751388][ T5414] usb 6-1: Using ep0 maxpacket: 32 [ 403.757039][T19131] XFS (loop2): Ending clean mount [ 403.810231][T19131] XFS (loop2): Quotacheck needed: Please wait. [ 403.834730][T19193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.871673][ T5414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 213, changing to 7 [ 403.886995][ T5414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42437, setting to 1024 [ 403.924321][T19131] XFS (loop2): Quotacheck: Done. [ 403.950920][ T2286] usb 4-1: Using ep0 maxpacket: 16 [ 404.053029][ T4187] XFS (loop2): Unmounting Filesystem [ 404.066255][T19207] loop0: detected capacity change from 0 to 1024 [ 404.081309][ T2286] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 404.091975][ T5414] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 404.138306][ T5414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.147571][ T2286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 404.170873][ T5414] usb 6-1: Product: syz [ 404.175191][ T5414] usb 6-1: Manufacturer: syz [ 404.180002][ T5414] usb 6-1: SerialNumber: syz [ 404.185885][ T2286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 404.196786][ T2286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 404.212580][ T5414] usb 6-1: config 0 descriptor?? [ 404.217874][T19209] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6786'. [ 404.233661][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6786'. [ 404.263344][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6786'. [ 404.301163][ T5414] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 404.311081][ T2286] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.320173][ T2286] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.330542][ T2286] usb 4-1: Manufacturer: syz [ 404.352144][ T2286] usb 4-1: config 0 descriptor?? [ 404.372649][T19171] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 404.477173][ T5423] usb 6-1: USB disconnect, device number 14 [ 404.480969][ T154] usb 6-1: Failed to submit usb control message: -71 [ 404.495222][ T154] usb 6-1: unable to send the bmi data to the device: -71 [ 404.504821][ T154] usb 6-1: unable to get target info from device [ 404.511383][ T154] usb 6-1: could not get target info (-71) [ 404.520871][ T154] usb 6-1: could not probe fw (-71) [ 404.638214][ T23] usb 4-1: USB disconnect, device number 39 [ 405.089485][T19248] loop5: detected capacity change from 0 to 256 [ 405.146823][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 405.191180][T19248] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xe77c1788, utbl_chksum : 0xe619d30d) [ 405.223625][T19248] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 405.275867][T19258] loop0: detected capacity change from 0 to 64 [ 405.353575][T19262] ipt_REJECT: ECHOREPLY no longer supported. [ 405.364435][T19248] exFAT-fs (loop5): hint_cluster is invalid (65538) [ 405.393950][T19248] exFAT-fs (loop5): error, failed to bmap (inode : ffff88807034b560 iblock : 24, err : -5) [ 405.412388][T19248] exFAT-fs (loop5): Filesystem has been set read-only [ 405.434727][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6815'. [ 405.488277][T19248] exFAT-fs (loop5): error, invalid access to FAT (entry 0x0000ffff) [ 405.515846][T19248] exFAT-fs (loop5): error, invalid access to FAT (entry 0x0000ffff) [ 405.524452][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6815'. [ 405.541295][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6815'. [ 405.650022][T19277] loop3: detected capacity change from 0 to 512 [ 405.720618][T19277] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 405.733839][T19277] ext4 filesystem being mounted at /1347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.062308][T19308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6833'. [ 406.491123][ T4230] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 406.497946][T19330] loop4: detected capacity change from 0 to 8192 [ 406.537128][T19342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6850'. [ 406.637612][T19330] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 406.669502][T19330] REISERFS (device loop4): using ordered data mode [ 406.690281][T19330] reiserfs: using flush barriers [ 406.695542][ T5423] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 406.702910][T19353] binder: 19352:19353 ioctl c0046209 e0ffff00000000 returned -22 [ 406.733045][T19330] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 406.741063][ T4230] usb 6-1: Using ep0 maxpacket: 8 [ 406.814005][T19330] REISERFS (device loop4): checking transaction log (loop4) [ 406.844866][T19330] REISERFS (device loop4): Using r5 hash to sort names [ 406.859873][T19330] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 406.881098][ T4230] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.957615][T19330] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 406.970891][ T5423] usb 3-1: Using ep0 maxpacket: 32 [ 407.071227][ T4230] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 407.080397][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.121117][ T5423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 407.121566][ T4230] usb 6-1: Product: syz [ 407.170325][ T4230] usb 6-1: Manufacturer: syz [ 407.186121][ T4230] usb 6-1: SerialNumber: syz [ 407.226288][ T4230] usb 6-1: config 0 descriptor?? [ 407.253497][T19367] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 37335 - 0 [ 407.281177][T19367] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 37335 - 0 [ 407.302044][ T4230] cdc_phonet 6-1:0.0: skipping garbage [ 407.307599][ T4230] cdc_phonet 6-1:0.0: invalid descriptor buffer length [ 407.345326][T19367] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 37335 - 0 [ 407.355285][ T5423] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 407.370633][ T5423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.375083][ T4230] cdc_phonet: probe of 6-1:0.0 failed with error -22 [ 407.390990][ T5423] usb 3-1: Product: syz [ 407.401615][ T5423] usb 3-1: Manufacturer: syz [ 407.414759][ T5423] usb 3-1: SerialNumber: syz [ 407.416427][T19367] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 37335 - 0 [ 407.430495][ T5423] usb 3-1: config 0 descriptor?? [ 407.484910][T19367] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 58582 - 0 [ 407.502848][ T5423] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 407.539158][T19367] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 58582 - 0 [ 407.577766][ T4230] usb 6-1: USB disconnect, device number 15 [ 407.604074][T19367] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 58582 - 0 [ 407.620948][T19367] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 58582 - 0 [ 407.634997][T19367] device geneve3 entered promiscuous mode [ 407.708855][ T5414] usb 3-1: USB disconnect, device number 33 [ 407.754001][T19374] loop4: detected capacity change from 0 to 16 [ 407.811600][T19374] erofs: (device loop4): mounted with root inode @ nid 36. [ 407.874768][T19381] overlayfs: missing 'lowerdir' [ 407.962008][T19383] device wlan0 entered promiscuous mode [ 407.987009][T19379] loop0: detected capacity change from 0 to 4096 [ 408.110063][T19391] loop4: detected capacity change from 0 to 512 [ 408.110880][T19379] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 408.179440][T19391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 408.190936][T19391] EXT4-fs error (device loop4): ext4_quota_enable:6415: inode #15: comm syz.4.6874: iget: bad i_size value: 360287970189639690 [ 408.205782][T19391] EXT4-fs error (device loop4): ext4_quota_enable:6418: comm syz.4.6874: Bad quota inode: 15, type: 2 [ 408.228370][T19391] EXT4-fs warning (device loop4): ext4_enable_quotas:6459: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 408.246442][T19391] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 408.254823][T19391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 408.270482][T19391] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.6874: inode #15: comm syz.4.6874: iget: illegal inode # [ 408.313485][T19379] ntfs3: loop0: Failed to load $Extend. [ 408.408489][T19397] loop2: detected capacity change from 0 to 1764 [ 408.465110][T19402] xt_TCPMSS: Only works on TCP SYN packets [ 409.071631][T19435] loop5: detected capacity change from 0 to 64 [ 409.089681][T19437] loop4: detected capacity change from 0 to 16 [ 409.181125][T19437] erofs: (device loop4): mounted with root inode @ nid 36. [ 409.193939][T19437] attempt to access beyond end of device [ 409.193939][T19437] loop4: rw=0, want=15300821032, limit=16 [ 409.223980][T19437] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 409.333976][T19445] loop0: detected capacity change from 0 to 4096 [ 409.398687][T19449] loop4: detected capacity change from 0 to 256 [ 409.466836][ T5423] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 409.475262][T19451] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.490497][T19449] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xe77c1788, utbl_chksum : 0xe619d30d) [ 409.536656][T19445] NILFS error (device loop0): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 409.548271][T19449] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 409.599514][T19445] Remounting filesystem read-only [ 409.642707][T19449] exFAT-fs (loop4): hint_cluster is invalid (65538) [ 409.663282][T19449] exFAT-fs (loop4): error, failed to bmap (inode : ffff88807034c260 iblock : 24, err : -5) [ 409.730811][T19449] exFAT-fs (loop4): Filesystem has been set read-only [ 409.741164][ T5423] usb 3-1: Using ep0 maxpacket: 16 [ 409.777672][T19449] exFAT-fs (loop4): error, invalid access to FAT (entry 0x0000ffff) [ 409.784022][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6904'. [ 409.787064][T19458] netlink: 'syz.5.6905': attribute type 3 has an invalid length. [ 409.831398][T19449] exFAT-fs (loop4): error, invalid access to FAT (entry 0x0000ffff) [ 409.871310][ T5423] usb 3-1: config 0 has no interfaces? [ 409.993780][T19465] loop0: detected capacity change from 0 to 256 [ 410.040939][ T5423] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 410.063748][ T5423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.105755][T19465] FAT-fs (loop0): Directory bread(block 64) failed [ 410.124038][ T5423] usb 3-1: Product: syz [ 410.128260][ T5423] usb 3-1: Manufacturer: syz [ 410.144378][T19465] FAT-fs (loop0): Directory bread(block 65) failed [ 410.166575][ T5423] usb 3-1: SerialNumber: syz [ 410.181073][T19465] FAT-fs (loop0): Directory bread(block 66) failed [ 410.209501][T19476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6915'. [ 410.212399][ T5423] r8152-cfgselector 3-1: config 0 descriptor?? [ 410.240837][T19465] FAT-fs (loop0): Directory bread(block 67) failed [ 410.247487][T19465] FAT-fs (loop0): Directory bread(block 68) failed [ 410.250989][T19476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6915'. [ 410.276624][T19465] FAT-fs (loop0): Directory bread(block 69) failed [ 410.296310][T19465] FAT-fs (loop0): Directory bread(block 70) failed [ 410.341191][T19465] FAT-fs (loop0): Directory bread(block 71) failed [ 410.347879][T19465] FAT-fs (loop0): Directory bread(block 72) failed [ 410.440921][T19465] FAT-fs (loop0): Directory bread(block 73) failed [ 410.532999][ T5423] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 410.700867][ T4230] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 410.753907][ T23] usb 3-1: USB disconnect, device number 34 [ 411.061216][ T4230] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 411.069456][ T4230] usb 6-1: config 0 has no interface number 0 [ 411.086383][ T4230] usb 6-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 411.119927][ T4230] usb 6-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 411.146496][ T4230] usb 6-1: config 0 interface 7 has no altsetting 0 [ 411.153837][ T4230] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 411.164118][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.211169][ T5423] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 411.226837][ T4230] usb 6-1: config 0 descriptor?? [ 411.271176][T19486] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 411.426300][T19534] netlink: 'syz.3.6944': attribute type 5 has an invalid length. [ 411.531020][ T4230] usb 6-1: string descriptor 0 read error: -71 [ 411.559514][T19540] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6947'. [ 411.561677][ T4230] usb 6-1: Error in usbnet_get_endpoints (-22) [ 411.615785][ T4230] usb 6-1: USB disconnect, device number 16 [ 411.636478][ T5423] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 411.661010][ T5423] usb 1-1: config 0 has no interface number 0 [ 411.831018][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 411.861924][ T5423] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 411.881319][ T5423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.898179][ T5423] usb 1-1: Product: syz [ 411.910927][ T5423] usb 1-1: Manufacturer: syz [ 411.921035][ T5423] usb 1-1: SerialNumber: syz [ 411.940309][ T5423] usb 1-1: config 0 descriptor?? [ 412.081117][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 412.130532][T19569] loop2: detected capacity change from 0 to 64 [ 412.172757][T19571] netlink: 'syz.4.6962': attribute type 1 has an invalid length. [ 412.193011][T19571] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6962'. [ 412.232328][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6964'. [ 412.350529][ T5423] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 412.360847][ T5423] usb 1-1: No valid video chain found. [ 412.385813][ T5423] usb 1-1: USB disconnect, device number 36 [ 412.831065][ T23] usb 4-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 412.850424][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.873124][T19599] loop2: detected capacity change from 0 to 2048 [ 412.881679][ T23] usb 4-1: config 0 descriptor?? [ 412.920986][ T4230] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 412.931906][ T23] cdc_acm 4-1:0.0: Zero length descriptor references [ 412.938781][ T23] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 413.143593][ T4294] usb 4-1: USB disconnect, device number 40 [ 413.170834][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 413.452055][ T4230] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 413.466545][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.483935][ T4230] usb 5-1: Product: syz [ 413.488996][ T4230] usb 5-1: Manufacturer: syz [ 413.498974][ T4230] usb 5-1: SerialNumber: syz [ 413.511469][ T4230] usb 5-1: config 0 descriptor?? [ 413.647115][T19599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.771065][ T4230] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 413.778604][ T4230] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 413.916209][T19621] loop5: detected capacity change from 0 to 128 [ 413.994995][ T6510] usb 5-1: USB disconnect, device number 33 [ 414.050569][T19631] loop0: detected capacity change from 0 to 256 [ 414.068123][T19621] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 414.143084][T19621] ext4 filesystem being mounted at /409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.262439][T19631] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.366230][T19621] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.6987: No space for directory leaf checksum. Please run e2fsck -D. [ 414.416619][T19621] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.6987: checksumming directory block 0 [ 415.671059][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7018'. [ 415.829109][T19698] loop3: detected capacity change from 0 to 1024 [ 416.024950][T19698] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 416.201912][T19698] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #11: comm syz.3.7024: directory missing '..' [ 416.221154][T19717] netlink: 'syz.4.7032': attribute type 1 has an invalid length. [ 416.237346][T19716] netlink: 'syz.0.7031': attribute type 10 has an invalid length. [ 416.272605][T19716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.346944][T19661] loop2: detected capacity change from 0 to 32768 [ 416.426609][T19721] xt_CONNSECMARK: invalid mode: 0 [ 416.976038][T19756] syz.3.7051 (19756): attempted to duplicate a private mapping with mremap. This is not supported. [ 417.095503][ T26] audit: type=1326 audit(1752869888.605:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19758 comm="syz.4.7053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x0 [ 417.221029][ T6510] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 417.304883][T19773] device ipvlan1 left promiscuous mode [ 417.537988][T19786] loop3: detected capacity change from 0 to 256 [ 417.581204][ T6510] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 417.600393][ T6510] usb 3-1: config 8 interface 0 has no altsetting 0 [ 417.650982][ T4294] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 417.665494][T19786] FAT-fs (loop3): Directory bread(block 64) failed [ 417.673979][T19786] FAT-fs (loop3): Directory bread(block 65) failed [ 417.680648][T19786] FAT-fs (loop3): Directory bread(block 66) failed [ 417.728095][T19786] FAT-fs (loop3): Directory bread(block 67) failed [ 417.753716][T19786] FAT-fs (loop3): Directory bread(block 68) failed [ 417.753867][T19792] tmpfs: Bad value for 'mpol' [ 417.760299][T19786] FAT-fs (loop3): Directory bread(block 69) failed [ 417.760410][T19786] FAT-fs (loop3): Directory bread(block 70) failed [ 417.779559][T19786] FAT-fs (loop3): Directory bread(block 71) failed [ 417.789231][T19786] FAT-fs (loop3): Directory bread(block 72) failed [ 417.796138][T19786] FAT-fs (loop3): Directory bread(block 73) failed [ 417.821035][ T6510] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 417.830119][ T6510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.868852][ T6510] usb 3-1: Product: syz [ 417.878982][ T6510] usb 3-1: Manufacturer: syz [ 417.886631][ T6510] usb 3-1: SerialNumber: syz [ 417.930977][ T4294] usb 5-1: Using ep0 maxpacket: 8 [ 417.973234][T19797] trusted_key: encrypted_key: keyword 'bew' not recognized [ 418.051041][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.081064][ T4294] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 418.234773][ T6510] usb 3-1: USB disconnect, device number 35 [ 418.251330][ T4294] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 418.260475][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.299694][ T4294] usb 5-1: Product: syz [ 418.312081][ T4294] usb 5-1: Manufacturer: syz [ 418.316909][ T4294] usb 5-1: SerialNumber: syz [ 418.335081][T19813] loop5: detected capacity change from 0 to 8 [ 418.361210][ T4294] usb 5-1: config 0 descriptor?? [ 418.458675][T19813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 418.495489][T19813] SQUASHFS error: Failed to read block 0x9b: -5 [ 418.512347][T19813] SQUASHFS error: Unable to read metadata cache entry [99] [ 418.519644][T19813] SQUASHFS error: Unable to read inode 0x127 [ 418.815855][T19836] loop2: detected capacity change from 0 to 16 [ 418.840111][ T2286] usb 5-1: USB disconnect, device number 34 [ 418.916677][T19836] erofs: (device loop2): mounted with root inode @ nid 36. [ 418.958103][T19836] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 419.005996][T19836] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 419.050300][T19836] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 419.842460][T19888] netlink: 'syz.2.7115': attribute type 1 has an invalid length. [ 420.592760][T19879] loop5: detected capacity change from 0 to 32768 [ 420.650748][T19930] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.799337][ T26] audit: type=1326 audit(420.750:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.2.7141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d0a249a9 code=0x0 [ 420.875526][T19945] device ip6erspan0 entered promiscuous mode [ 420.993722][T19951] program syz.3.7147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.105263][T19958] loop5: detected capacity change from 0 to 1024 [ 421.172290][T19962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.369961][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7159'. [ 421.420644][T19975] loop5: detected capacity change from 0 to 2048 [ 421.453854][T19980] loop3: detected capacity change from 0 to 1024 [ 421.507064][T19975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.543689][T19982] vcan0 speed is unknown, defaulting to 1000 [ 421.649055][T19992] netlink: 'syz.0.7166': attribute type 1 has an invalid length. [ 421.657637][T19992] netlink: 'syz.0.7166': attribute type 2 has an invalid length. [ 421.705443][T19992] netlink: 'syz.0.7166': attribute type 1 has an invalid length. [ 421.880953][ T23] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 422.093602][T20012] rdma_rxe: ignoring netdev event = 10 for lo [ 422.149009][T20012] device lo entered promiscuous mode [ 422.161006][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 422.183560][T20012] infiniband syz2: set down [ 422.212608][T20012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.216649][T20016] openvswitch: netlink: Missing key (keys=40, expected=80) [ 422.284909][T19982] lo speed is unknown, defaulting to 1000 [ 422.291784][ T6510] lo speed is unknown, defaulting to 1000 [ 422.328061][ T6510] lo speed is unknown, defaulting to 1000 [ 422.451307][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 422.470951][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.479088][ T23] usb 3-1: Product: syz [ 422.498567][T20021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7181'. [ 422.549156][ T23] usb 3-1: Manufacturer: syz [ 422.574645][ T23] usb 3-1: SerialNumber: syz [ 422.591758][ T23] usb 3-1: config 0 descriptor?? [ 422.731271][ T6510] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 422.808580][T19982] lo speed is unknown, defaulting to 1000 [ 422.814978][ T23] msi2500 3-1:0.0: Registered as swradio24 [ 422.840921][ T23] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 422.951084][T19989] loop2: detected capacity change from 0 to 2048 [ 423.101222][ T6510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.105074][T19989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 423.130790][ T6510] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 423.142193][ T6510] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 423.151648][ T6510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.170555][ T6510] usb 4-1: config 0 descriptor?? [ 423.203906][ T4294] usb 3-1: USB disconnect, device number 36 [ 423.231462][T20054] kAFS: unable to lookup cell '' [ 423.540364][T20061] loop5: detected capacity change from 0 to 1024 [ 423.643246][ T6510] Bluetooth: Can't get version to change to load ram patch err [ 423.671313][ T6510] Bluetooth: Loading patch file failed [ 423.698713][ T6510] ath3k: probe of 4-1:0.0 failed with error -71 [ 423.758426][ T6510] usb 4-1: USB disconnect, device number 41 [ 424.035020][ T26] audit: type=1326 audit(423.990:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.126786][ T26] audit: type=1326 audit(424.030:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.217567][T20091] loop0: detected capacity change from 0 to 128 [ 424.238835][ T26] audit: type=1326 audit(424.050:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.340492][ T26] audit: type=1326 audit(424.050:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.400590][ T26] audit: type=1326 audit(424.050:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.433445][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7217'. [ 424.489823][ T26] audit: type=1326 audit(424.050:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.538651][ T26] audit: type=1326 audit(424.050:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.589314][ T26] audit: type=1326 audit(424.050:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.613080][ T26] audit: type=1326 audit(424.050:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.637338][ T26] audit: type=1326 audit(424.050:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5559e119a9 code=0x50000 [ 424.810779][ T2286] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 425.070820][ T2286] usb 4-1: Using ep0 maxpacket: 16 [ 425.209942][ T2286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 425.222785][ T2286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 425.241372][ T2286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 425.257404][T20091] FAT-fs (loop0): count of clusters too big (2147483774) [ 425.275846][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7222'. [ 425.320785][T20091] FAT-fs (loop0): Can't find a valid FAT filesystem [ 425.331221][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7222'. [ 425.348125][T20113] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7222'. [ 425.451029][ T2286] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 425.484297][ T2286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.504947][ T2286] usb 4-1: Product: syz [ 425.519605][ T2286] usb 4-1: Manufacturer: syz [ 425.542376][ T2286] usb 4-1: SerialNumber: syz [ 425.562136][ T2286] usb 4-1: config 0 descriptor?? [ 425.601311][T20107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 425.626716][ T2286] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 425.653339][ T2286] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 425.700822][ T2286] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 425.721469][ T2286] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 425.748570][ T2286] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 425.794220][ T6510] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 425.875278][ T5565] usb 4-1: USB disconnect, device number 42 [ 425.900278][ T5565] mcba_usb 4-1:0.0 can0: device disconnected [ 425.950950][ T2286] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 426.029413][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 426.060931][ T6510] usb 1-1: Using ep0 maxpacket: 16 [ 426.066649][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 426.096584][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 426.115301][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 426.182884][ T6510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 426.217305][ T2286] usb 6-1: Using ep0 maxpacket: 8 [ 426.226035][ T6510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 426.250800][ T6510] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 426.280474][ T6510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.318560][ T6510] usb 1-1: config 0 descriptor?? [ 426.351030][T20091] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 426.373193][ T6510] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 426.396283][ T6510] usb 1-1: No valid video chain found. [ 426.420038][ T2286] usb 6-1: unable to get BOS descriptor or descriptor too short [ 426.531108][ T2286] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 426.556296][ T2286] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 426.594156][ T6510] usb 1-1: USB disconnect, device number 37 [ 426.601010][ T2286] usb 6-1: config 4 has no interface number 0 [ 426.807338][T20152] loop2: detected capacity change from 0 to 8 [ 426.836828][ T2286] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 426.854263][ T2286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.877864][ T2286] usb 6-1: Product: syz [ 426.884730][ T2286] usb 6-1: Manufacturer: syz [ 426.893303][ T2286] usb 6-1: SerialNumber: syz [ 426.968999][T20152] SQUASHFS error: Failed to read block 0x738: -5 [ 426.991814][T20152] SQUASHFS error: Unable to read metadata cache entry [736] [ 427.116351][T20161] loop3: detected capacity change from 0 to 2048 [ 427.166520][T20161] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 427.241166][T20161] NILFS (loop3): mounting unchecked fs [ 427.247857][T20161] NILFS (loop3): invalid segment: Sequence number mismatch [ 427.259687][T20167] device lo entered promiscuous mode [ 427.311776][T20167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.325037][T20161] NILFS (loop3): unable to fall back to spare super block [ 427.401249][ T2286] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 427.407852][ T6510] lo speed is unknown, defaulting to 1000 [ 427.408356][ T2286] usb 6-1: No valid video chain found. [ 427.450890][T20161] NILFS (loop3): error -22 while searching super root [ 427.508568][ T2286] usb 6-1: USB disconnect, device number 17 [ 427.716923][ T150] block nbd4: Attempted send on invalid socket [ 427.723222][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.059608][T20204] sctp: [Deprecated]: syz.0.7256 (pid 20204) Use of int in max_burst socket option. [ 428.059608][T20204] Use struct sctp_assoc_value instead [ 428.530757][ T5565] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 428.753257][T20245] netlink: 'syz.3.7273': attribute type 21 has an invalid length. [ 428.790898][T20245] __nla_validate_parse: 44 callbacks suppressed [ 428.790915][T20245] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7273'. [ 428.812217][T20245] netlink: 'syz.3.7273': attribute type 4 has an invalid length. [ 428.852709][T20245] netlink: 'syz.3.7273': attribute type 3 has an invalid length. [ 428.911103][ T5565] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 428.926206][ T5565] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 428.942542][T20245] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7273'. [ 428.961623][ T5565] usb 5-1: config 0 has no interface number 0 [ 428.987926][ T5565] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 428.994158][T20256] netlink: 'syz.2.7278': attribute type 29 has an invalid length. [ 429.024406][ T5565] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.055559][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7279'. [ 429.062058][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7278'. [ 429.080746][ T5565] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 429.120448][ T5565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.140825][T20261] netlink: zone id is out of range [ 429.146141][T20261] netlink: zone id is out of range [ 429.162686][ T5565] usb 5-1: config 0 descriptor?? [ 429.188972][T20256] netlink: 'syz.2.7278': attribute type 29 has an invalid length. [ 429.203778][T20261] netlink: zone id is out of range [ 429.239554][T20261] netlink: zone id is out of range [ 429.270114][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7278'. [ 429.300605][T20261] netlink: zone id is out of range [ 429.320933][T20261] netlink: zone id is out of range [ 429.326110][T20261] netlink: zone id is out of range [ 429.369678][T20261] netlink: zone id is out of range [ 429.397458][T20261] netlink: zone id is out of range [ 429.643298][ T5565] usb 5-1: USB disconnect, device number 35 [ 429.672171][T20281] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7291'. [ 429.762454][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7293'. [ 429.805829][T20285] loop2: detected capacity change from 0 to 2048 [ 429.811375][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7293'. [ 429.891246][T20285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.967942][T20285] Invalid option length (0) for dns_resolver key [ 430.054968][T20297] netlink: 'syz.3.7299': attribute type 12 has an invalid length. [ 430.728697][T20341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7321'. [ 430.885805][ T26] kauditd_printk_skb: 2973 callbacks suppressed [ 430.885824][ T26] audit: type=1400 audit(430.840:5170): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=20350 comm="syz.5.7327" [ 431.003459][T20362] nft_compat: unsupported protocol 5 [ 431.255899][T20386] loop0: detected capacity change from 0 to 16 [ 431.455102][T20386] erofs: (device loop0): mounted with root inode @ nid 36. [ 431.471154][ T4230] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 431.494305][T20399] device netdevsim0 left promiscuous mode [ 431.509485][T20386] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 431.535515][ T4189] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 431.585257][T20386] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 431.668997][ T26] audit: type=1800 audit(431.620:5171): pid=20386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7344" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 431.851256][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.873655][ T4230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 432.040834][ T5414] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 432.091165][ T4230] usb 3-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 432.111876][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 432.152300][ T4230] usb 3-1: Product: syz [ 432.156521][ T4230] usb 3-1: Manufacturer: syz [ 432.190413][ T4230] usb 3-1: SerialNumber: syz [ 432.211276][ T4230] usb 3-1: config 0 descriptor?? [ 432.330877][ T5414] usb 6-1: Using ep0 maxpacket: 8 [ 432.470575][ T4230] usb 3-1: USB disconnect, device number 37 [ 432.480979][ T23] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 432.488789][ T5414] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 432.500972][ T5414] usb 6-1: config 0 has an invalid interface number: 255 but max is 2 [ 432.520734][ T5414] usb 6-1: config 0 has no interface number 0 [ 432.526875][ T5414] usb 6-1: config 0 has no interface number 1 [ 432.533492][ T5414] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 432.550748][ T5414] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 432.580743][ T5414] usb 6-1: config 0 interface 255 has no altsetting 0 [ 432.587635][ T5414] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 432.611154][ T5414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.621921][ T5414] usb 6-1: config 0 descriptor?? [ 432.750938][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 432.787292][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7361'. [ 432.870931][ T5414] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 432.880812][ T23] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 432.889043][ T23] usb 5-1: config 0 has no interface number 0 [ 432.913264][ T5414] usb 6-1: selecting invalid altsetting 0 [ 432.919054][ T5414] usb 6-1: Could not set interface, error -22 [ 432.925604][ T23] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 432.938386][ T23] usb 5-1: config 0 interface 196 has no altsetting 0 [ 432.974752][T20421] net_ratelimit: 336 callbacks suppressed [ 432.974772][T20421] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 433.121105][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 433.134689][ T4230] usb 6-1: USB disconnect, device number 18 [ 433.141062][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.141898][ T4230] qcserial 6-1:0.2: device disconnected [ 433.149093][ T23] usb 5-1: Product: syz [ 433.207924][ T23] usb 5-1: Manufacturer: syz [ 433.231221][ T23] usb 5-1: SerialNumber: syz [ 433.259366][ T23] usb 5-1: config 0 descriptor?? [ 433.291093][T20417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 433.350909][T20433] loop3: detected capacity change from 0 to 8 [ 433.435857][T20419] loop0: detected capacity change from 0 to 32768 [ 433.551513][ T27] INFO: task syz-executor:4190 blocked for more than 143 seconds. [ 433.583078][ T27] Not tainted 5.15.189-syzkaller #0 [ 433.588848][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.600176][T20419] jfs_strtoUCS: char2uni returned -22. [ 433.608397][ T23] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 433.616879][T20419] charset = iso8859-3, char = 0xbe [ 433.621556][ T23] ipheth: probe of 5-1:0.196 failed with error -71 [ 433.644786][ T27] task:syz-executor state:D stack:21984 pid: 4190 ppid: 1 flags:0x00004004 [ 433.667602][ T27] Call Trace: [ 433.675355][ T23] usb 5-1: USB disconnect, device number 36 [ 433.686953][ T27] [ 433.696812][ T27] __schedule+0x11b8/0x43b0 [ 433.724490][ T27] ? verify_lock_unused+0x140/0x140 [ 433.729950][ T27] ? release_firmware_map_entry+0x190/0x190 [ 433.758457][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 433.771556][ T27] ? lock_chain_count+0x20/0x20 [ 433.777922][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 433.783608][ T27] schedule+0x11b/0x1e0 [ 433.787973][ T27] io_schedule+0x7c/0xd0 [ 433.792699][ T27] wait_on_page_bit_common+0x815/0xe00 [ 433.798295][ T27] ? wait_on_page_bit+0x50/0x50 [ 433.803549][ T27] ? rcu_lock_release+0x20/0x20 [ 433.808729][ T27] truncate_inode_pages_range+0x97f/0xef0 [ 433.816192][ T27] ? invalidate_inode_page+0x360/0x360 [ 433.822038][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 433.828146][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 433.833683][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 433.838999][ T27] evict+0x498/0x870 [ 433.843399][ T27] ? proc_nr_inodes+0x320/0x320 [ 433.848324][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 433.853891][ T27] evict_inodes+0x604/0x690 [ 433.858441][ T27] ? __dentry_kill+0x530/0x650 [ 433.864479][ T27] ? clear_inode+0x150/0x150 [ 433.869129][ T27] ? sync_filesystem+0x103/0x220 [ 433.874359][ T27] generic_shutdown_super+0x93/0x300 [ 433.879705][ T27] kill_block_super+0x7c/0xe0 [ 433.884556][ T27] deactivate_locked_super+0x93/0xf0 [ 433.889875][ T27] cleanup_mnt+0x418/0x4d0 [ 433.899232][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 433.904759][ T27] task_work_run+0x125/0x1a0 [ 433.909382][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 433.915543][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 433.922403][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 433.927909][ T27] do_syscall_64+0x58/0xa0 [ 433.932628][ T27] ? clear_bhb_loop+0x30/0x80 [ 433.937333][ T27] ? clear_bhb_loop+0x30/0x80 [ 433.942481][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.948808][ T27] RIP: 0033:0x7f64dfa44cd7 [ 433.953515][ T27] RSP: 002b:00007ffcedff2468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 433.962365][ T27] RAX: 0000000000000000 RBX: 00007f64dfac5b55 RCX: 00007f64dfa44cd7 [ 433.970459][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcedff2520 [ 433.978875][ T27] RBP: 00007ffcedff2520 R08: 0000000000000000 R09: 0000000000000000 [ 433.987648][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcedff35b0 [ 433.995887][ T27] R13: 00007f64dfac5b55 R14: 00000000000465c6 R15: 00007ffcedff35f0 [ 434.004523][ T27] [ 434.010199][ T27] [ 434.010199][ T27] Showing all locks held in the system: [ 434.027072][ T27] 1 lock held by khungtaskd/27: [ 434.036177][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 434.046955][ T27] 1 lock held by udevd/3562: [ 434.051662][ T27] 2 locks held by getty/3950: [ 434.056358][ T27] #0: ffff88802be09098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 434.066441][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 434.076681][ T27] 2 locks held by syz-executor/4183: [ 434.082257][ T27] #0: ffff88801fd50518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 434.110276][ T27] #1: ffff888020246468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 434.120015][ T27] 1 lock held by syz-executor/4190: [ 434.125506][ T27] #0: ffff88807f7ca0e0 (&type->s_umount_key#86){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 434.139151][ T27] 2 locks held by kworker/0:4/4230: [ 434.144487][ T27] 3 locks held by kworker/u4:7/6083: [ 434.149789][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 434.161111][ T27] #1: ffffc9000340fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 434.173826][ T27] #2: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 434.183585][ T27] [ 434.186400][ T27] ============================================= [ 434.186400][ T27] [ 434.195155][ T27] NMI backtrace for cpu 1 [ 434.199527][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 434.207616][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.217697][ T27] Call Trace: [ 434.220993][ T27] [ 434.223966][ T27] dump_stack_lvl+0x168/0x230 [ 434.228670][ T27] ? show_regs_print_info+0x20/0x20 [ 434.234143][ T27] ? load_image+0x3b0/0x3b0 [ 434.238655][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 434.243783][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 434.248761][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 434.254920][ T27] ? _printk+0xcc/0x110 [ 434.259087][ T27] ? load_image+0x3b0/0x3b0 [ 434.263608][ T27] ? load_image+0x3b0/0x3b0 [ 434.268145][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 434.274251][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 434.280259][ T27] watchdog+0xe0f/0xe50 [ 434.284447][ T27] kthread+0x436/0x520 [ 434.288544][ T27] ? hungtask_pm_notify+0x40/0x40 [ 434.293585][ T27] ? kthread_blkcg+0xd0/0xd0 [ 434.298201][ T27] ret_from_fork+0x1f/0x30 [ 434.302646][ T27] [ 434.306625][ T27] Sending NMI from CPU 1 to CPUs 0: [ 434.311936][ C0] NMI backtrace for cpu 0 [ 434.311950][ C0] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.189-syzkaller #0 [ 434.311968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.311979][ C0] Workqueue: bat_events batadv_nc_worker [ 434.312004][ C0] RIP: 0010:lock_release+0x584/0x870 [ 434.312027][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 434.312042][ C0] RSP: 0018:ffffc900010afa00 EFLAGS: 00000206 [ 434.312055][ C0] RAX: 0000000000000001 RBX: c422640388757846 RCX: de12ae8e4dd87600 [ 434.312068][ C0] RDX: 0000000000000002 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 434.312079][ C0] RBP: ffffc900010afb20 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 434.312092][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff888018fe0b40 [ 434.312105][ C0] R13: dffffc0000000000 R14: ffff888018fe0ae0 R15: 1ffff92000215f4c [ 434.312118][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 434.312132][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.312144][ C0] CR2: 00007f6a1e3b82d8 CR3: 000000007d8b6000 CR4: 00000000003506f0 [ 434.312168][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.312189][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.312199][ C0] Call Trace: [ 434.312205][ C0] [ 434.312212][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 434.312232][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 434.312253][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 434.312288][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 434.312305][ C0] ? __rwlock_init+0x140/0x140 [ 434.312324][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 434.312343][ C0] _raw_spin_unlock_bh+0x17/0x30 [ 434.312362][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 434.312382][ C0] batadv_nc_purge_paths+0x316/0x3b0 [ 434.312408][ C0] batadv_nc_worker+0x327/0x5c0 [ 434.312429][ C0] process_one_work+0x863/0x1000 [ 434.312455][ C0] ? worker_detach_from_pool+0x240/0x240 [ 434.312471][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 434.312490][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 434.312508][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 434.312528][ C0] ? wq_worker_running+0x97/0x170 [ 434.312545][ C0] worker_thread+0xaa8/0x12a0 [ 434.312562][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 434.312582][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 434.312598][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 434.312623][ C0] kthread+0x436/0x520 [ 434.312638][ C0] ? rcu_lock_release+0x20/0x20 [ 434.312653][ C0] ? kthread_blkcg+0xd0/0xd0 [ 434.312669][ C0] ret_from_fork+0x1f/0x30 [ 434.312693][ C0] [ 434.425773][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 434.611810][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 434.619916][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.629982][ T27] Call Trace: [ 434.633288][ T27] [ 434.636225][ T27] dump_stack_lvl+0x168/0x230 [ 434.640916][ T27] ? show_regs_print_info+0x20/0x20 [ 434.646141][ T27] ? load_image+0x3b0/0x3b0 [ 434.650677][ T27] panic+0x2c9/0x7f0 [ 434.655032][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 434.660681][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 434.665308][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 434.670984][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 434.677160][ T27] watchdog+0xe4e/0xe50 [ 434.681332][ T27] kthread+0x436/0x520 [ 434.685417][ T27] ? hungtask_pm_notify+0x40/0x40 [ 434.690551][ T27] ? kthread_blkcg+0xd0/0xd0 [ 434.695145][ T27] ret_from_fork+0x1f/0x30 [ 434.699584][ T27] [ 434.702863][ T27] Kernel Offset: disabled [ 434.707241][ T27] Rebooting in 86400 seconds..