last executing test programs: 5m54.513474236s ago: executing program 3 (id=1796): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x5, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @remote, 0xa32}, 0x1c) 5m53.793245416s ago: executing program 3 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) 5m52.918744162s ago: executing program 3 (id=1804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x8, '0'}, @global=@item_012={0x2, 0x1, 0x3, '+\x00'}]}}, 0x0}, 0x0) 5m50.161706526s ago: executing program 3 (id=1814): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000240)={[{@inode_readahead_blks}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 5m48.21828922s ago: executing program 3 (id=1821): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x40) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 5m46.99455388s ago: executing program 3 (id=1828): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) close(0x3) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 5m43.726204224s ago: executing program 32 (id=1828): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) close(0x3) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 5m25.633655549s ago: executing program 4 (id=1895): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file0\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2ce, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0xa1, @auto='\x00\x00&\x00'}}) 5m24.356878087s ago: executing program 4 (id=1899): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 5m23.349399384s ago: executing program 4 (id=1904): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) 5m22.57828585s ago: executing program 4 (id=1907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m21.686695114s ago: executing program 4 (id=1911): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 5m20.96739475s ago: executing program 4 (id=1914): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 5m5.653029008s ago: executing program 33 (id=1914): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 5.80218818s ago: executing program 6 (id=3150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000600)=0x8000, 0x4) 5.56475748s ago: executing program 2 (id=3151): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.542824772s ago: executing program 1 (id=3152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) mmap(&(0x7f0000270000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0x17c6a000) 5.227283834s ago: executing program 5 (id=3154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)='@', 0x1) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x5, 0x4) 5.132463108s ago: executing program 6 (id=3155): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2000006, &(0x7f0000000dc0)=ANY=[@ANYBLOB='check=strict,shortname=win95,debug,uni_xlate=1,codepage=857,shortname=winnt,shortname=mixed,shortname=mixed,iocharset=iso8859-6,shortname=mixed,uni_xlate=0,iocharset=koi8-ru,nocase,utf8=0,uni_xlate=0,shortname=win95,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365740400000000000000616e641c2c6d61736b3d4d41595f415050454e030066736d616769633d3078303030303030303030303030306434312c6d6561737572652c7375626a5f74be97653d73686f7274090000003d77296e39352c736d61636b6673726f6f743dab5b5d2c00"], 0x25, 0x34f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 4.780236349s ago: executing program 0 (id=3156): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 4.73592644s ago: executing program 1 (id=3157): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$vhost_msg_v2(r0, &(0x7f0000001700)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) 4.525357771s ago: executing program 2 (id=3158): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 4.052219999s ago: executing program 1 (id=3159): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) 3.767796792s ago: executing program 0 (id=3160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 3.699383974s ago: executing program 5 (id=3161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b114900000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 3.629009671s ago: executing program 2 (id=3162): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 3.319558462s ago: executing program 6 (id=3163): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$read(0xb, r0, &(0x7f0000000300)=""/207, 0x1001) 3.139381746s ago: executing program 1 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a090400000000000000000200000058000480180001800d00010073796e70726f787900000000040002803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a3200"], 0xac}}, 0x0) 2.962526548s ago: executing program 0 (id=3165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x300}}, 0x20) 2.958561681s ago: executing program 5 (id=3166): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000e7919e1d4c7c588a600000f63f0400"], 0x28}}], 0x2, 0x0) 2.78134799s ago: executing program 2 (id=3167): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="013f5e0c4eaa6035b286a05ad2cbf6ceb6b4f8857887209c639f55bd4ca21768b42eeee1fe270b10650dec195399e97b5c92203937a3783cb425f2e75f5b798de95c5127ab7b7d5dcc5a7d075fa0c84271bd431467c0a9182239a790"], 0x1, 0x1fb, &(0x7f0000000280)="$eJzskk9rE08Yxz+zu0n296OlQaKiCEUtWg9tNqnGPwcFLwb1JBVqQTAkaQ2m/mkCNaGHCEIRL4JVaBEPoqSIB/ENmIOn3hSKt1LouYcevEjryuxOtpN34GE+h/3uzDzP99nn2blbe1RLALvb80VIInFI8V0IHGBQBFuU7FBdpdeVxtX5FSvUjtLfSnfPNicmQVSOreeszsHSUZGkL/VrdYMiA7c5//bapx83Yotr+7Y+fJXxV282viBOlgbevfn84vJSf2Avbk3qPnbnyLIrjYCXOxPrG84hUl2vyuLafvfPgdWn7Y+5Z7KD11MIb9kFRr+NLF30+p9byrPWaN4rVKvl2dqlJxZbQamf2/NF+XInAb7v+0HvQB7QY2T7K+zFHHZgHLDxoxiHPdL1mYfpWqM5UpkpTJeny/ez2bGcd9rzzmTTU5Xq+1fyWfaEVkJNEKmnAPmb/tPOY8COivkfWlo1hPZp6lzouXHt1w0fpwdLy+2qoBPlJlScHME4J5CjnWsJbXcocHEIWsojsOfCRcbRvi+s5QYHo8UH1dICAtFNa+NEHplNYtEiqy/GzkVtLygdUppX2la6qXTQ7b2pTuBgqfs83II4jwv1+mwmDit9KkvtZeXgwrdkSx+YrJq0e5u7YGMwGAwGg8FgMBgM/wx/AwAA//+2K50Q") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.446906291s ago: executing program 6 (id=3168): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) sendto$inet6(r0, 0x0, 0x0, 0x400a048, 0xffffffffffffffff, 0x0) 2.332023771s ago: executing program 1 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.262262629s ago: executing program 5 (id=3170): io_setup(0x401, &(0x7f0000000100)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x100, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) 2.182841112s ago: executing program 0 (id=3171): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000580)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) close_range(r0, 0xffffffffffffffff, 0x0) 1.824444098s ago: executing program 2 (id=3172): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 1.627414034s ago: executing program 1 (id=3173): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "77852c8b"}]}}, 0x0}, 0x0) 1.582307051s ago: executing program 6 (id=3174): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 1.438287678s ago: executing program 0 (id=3175): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0xd787) listen(r0, 0x100) 1.290563783s ago: executing program 5 (id=3176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f0000005e80), &(0x7f0000000000)='./file1\x00', 0xa08050, &(0x7f0000000400)=ANY=[@ANYBLOB='data_checksum=xxhash,str_hash=crc64?norecovery,read_only,metadata_checksum=xxhash,fix_errors=exit,errors=continue,reconstruct_alloc,journal_transaction_names,gc_reserve_bytes=0\x00\x00\x00\x0000000000000e8,no_data_io,verbose,inodes_use_key_cache,compression=lz4,very_degraded,hash,\x00'], 0x1, 0x592a, &(0x7f0000000540)="$eJzs3X+QHFWdAPDXM7PZyW5+bAJIBNksgSiCmg2/Cn+URs9fBUjFwlLCRWEhG4wmIZUEgYASPPCgAAstLUX9Ay2kDo0WVXBKpMQARzhFKU6PukLq9A79wyvkSAnkOMtzr3a332S2d3p7dmY2JPD5VLI9703P973uftPT3zezOwEAAIBXhN3Xbtl71hHv+dlnh1+46v0/2nB16C2P1VfjCn3p8rKXqofsT92VRWPL7Lh43RXf+f3Ahe/66Z09337xoTVHr/31uw+58N5PnL7zlq/f//zcu//6VFHcOJ6O31dOnklCqP54z5c/99Ajh4/WJSGEctK3PYQFycL7FySZEIN/DiGsSQuHVCbeedcLJ60dXV59Q/eE+vmZIMb7K1s1HWfb9l56QvjNO1dd84vF3/9e146nt+9bJanWjacQ5p1f//iuEMLs9P+oONoWxQeny5UhhJ66x51W0K9jmuz/spzykelyVrrsLYgT71+SKZcy62XLUVdm2VPQXrvy+tHqekXmZMrZk1G78voZ6xekyx+my+OnGb8c/yehlIRKrfvrk31jJNQdtyQkY8eyWiuXasc2pNufKSeZcilTLndltmus3XSglZNkYn1cL1MfT8eVtP7o+nN1A2fn1L86XVbTJ+qLsRyyN8b1TrpR264xsV97pujL/lCqOwc1qq8d+PRg9KZ1vcnCSY8ZaaA2IFfduLS8+oHdfTn9SO5M0vjJ9OKntv18wZyPfff6SxblxT+/lMYvtRT/t2c8+uy513/ra7nxb47xyy3FP/G+nmfOePDaJbn7Z0/cP5WW4g899fBNiw+9YEdu/2+N8astxV+x89HuuXvv25Xb/8G4f2a3FP/Jt773d3c8fs/TufFDjN/TUvzVOzd9vrt/73G58XfF/dPb2vh5bsepT/T3/2EgL/5jMf7cluLfvv2Wt9w2/4bTc4/vyrh/+lqKf+ax914zZ+89R+WdO5NbO/XKCfDKdEh6jXVdWm41z2xXXb7w1YHK+DXfnPT/3E42lLn4HG1nXifjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4bAT/vl9//nhvmcqabk7vfFkaXwZ62eFkMwOIWzZOrR567qNFw184uJLNm8cWj8wtHVgeOPWzZcPnPyGgc3Dm9YPXT567+AbTxp/3MKQjC+Toya13T0yMlLqm1gX2/ubY3f8Zulp//XHEAYP+1V/Jbf/y27ZcNuhDX5mJCtG3rHhkrN+dco30+3qS/vV16BfIyMjIyGnX/99zl9u++Ke3x8XwuCrpurXw0++/ScTOjRWsS9OqtQdxjvUnfQ07Eet12l/4v6qrF23fnhw6v07+vhyznb87RVP/3ntZV/4y/j+reZuR5P7d/aKkfWlr6w68/++cuV4RVG/XqrjXrS/41bE/sX9V03397x0u+blbFclZ7uu/cWux398xPXPbw+DlecWT267aLu60gHQlby6qXZjCz3Jggn11XT9eMTj45Zt3bBp2ZbLt71x3Yahi4YvGt745uUnLz918JRTT1k2tuXLOrz9sf3XNrn9+2c8zf/U9h/Gn82Np6J+Fe2P0X4V74/6HuU9/3rO/tyX3nzLg2eNVxSN87h27XySLntGj/PyUDfeJu+rRttVtB9CCAON9sOzz58eDv+3ddcUnYfqj0z9z4xkxcgjS/70zdO+seht4xX75Txf36EWz/O1Xu/rz9j+qqbHY+QA3b/doZxuV2/Dfi1/5MGuG3f/8dO1/s2aFS4b2rp18/Lxn3PSns5JjmzYr2xt3K7FYz/LId0toTZMG4zXUV1hvH/Z82dcPbtXe9P7epOFDbcrK9730Kobl5ZXP7A7b08nd463ODvMHV8mr8lZc33mgeVahxu1f6A+/4rGR//7vnH3h+/+wcmTxseJ4z+LtivJ2a7vP377l779hb//Qee2631vf7TvT//+8aXjFQfLeaXW67Q/Sf155cQQip5/i0Pj7ch9/pUab0/R8y/bzr71G8cbyJR7Q7mF52spnHhfzzNnPHjtktzn655mn69XTiiVC56vB8r4yT6/ksrEfszc82vCQElWjPz0ukO233/VyiPGK4rGdW3tRuP6pCbyj5zt+sm5T/RfPPB3/9q588Z33nDXeb8eWvGZ8YrWj3vsS2eOezXdv9Wc/Vvrdcw76/fvmy68eP2a8foD9/o3XRbkP/FUsuXybZ8cWr9+ePOW5rar2dfT2E52L7f6ehrPbgsLtqs0abtm7kYz+6vZ51vs/5qW99fE51tvSFq6jtv28wVzPvbd6y/pm/SotKHzS2n8Ukvxf3vGo8+ee/23vpYb/+YYv9JS/KGnHr5p8aEX7MiNf2uSxq+2FH/Fzke75+69b1du/MHY/9ktxX/yre/93R2P3/N0bvwQ4/e2tv+f23HqE/39f8iN/1iStjN6jRTCXS+ctHa8nISu9PkW+9E1oV8hW04y5VKmXK4vl8bnWmsNlJNkYn1cL60/uq4vjXwkpz5ehVUXjS9fjOWQvTF1/YGmVHfub1RfdJ0KAPByF9//j9eg8f3/4fRCKX+mAfZpNw9blBM35mH75nNmTbh/URo/Pj7OA/a/KQyOLq8eGL/Qn+77CPH5kJ3njO0cd8zEGK3OcxbNvy/JlGO/xufLK3V5aNg1OzTMayqhifn3ye1MPf+e2fzi+fGB6yZ1a6Bu3ip7/LrSGbNGn3fI9LcyGiFvfGTnxeLnOfrnhZVj7TU5PrKfo4nHIfs5mtjOEZkTZ6ufo2l3fMRuT5H3jnW5+P2NyccvTLF/9x2/xtGyx28ax7s6uv5Mvz/bgXnDhqe0/Tdv2Mr7YaHp98NewfOSpWbmJQ/0ecNYH7ej0uR84odz6js1nxhPF7Ffe6boy/5gPhF4uYr5f3yNGM3/Ry/A/yezXtF1aPaqMcbL/ZxQuXF/ivKOyZ/T62npdXz1zk2f7+7fe1zudc6uZj/3s2lCqafgcz9F+3Fpply4H3MmaIryvWw7Rfs9+7mM3jC3pf1++/Zb3nLb/BtOz93vK8dfSIv3+5cmlOYW7PeDIF9oHF++cLDnC/vlcwxF82cvWT6SfvBppvKRD+XUTzcf6Zl0o7ZdYw66fKRr//YLADh4xPy/9v5Zmv//R1whvY4oyluPz5RjvNy8Nef6JC9v/UC6vCyzfm/6GxXTvW4+89h7r5mz956jcvOWW5vNQ/9hQqmvMA9tL2/OzSNWdubz4rl5RC3Pai9PzO1/LU9sL0/PjV/L09vLo3P3Ty2Pbm8eIDd+bR7gYM9zC+brMo3FYrPzdS/bPDr99dmZyqPPzqmfbh7dO+lGbbvGyKMBAF5aMf+Pl3Ex/38ws16777Pn5gUdum7P/j2QWvzH9ldeOdN530znrTOd18/0vMSUefH/5sU/cPLimZ4Xmtl5sld8Xpw2Ki8GAOBAFvP/2Wk5P/9vLz9plL91TchP5OcN478y8vPc+AdOfn6wz3/J/70vXkz+DwDw8hbz//hrj/Hv//1TWs7+3Xp5ek58ebo8farx03Se3vl5tuBzAC/tPMDsfeubBwAA4KXQNZYpTf49+4+my+zv2ef9Xv65Oes3q5JeHl+wdfPw8HmXbFoztHX4vI0Xrxnect6lm9dt3Tq8cXy9dvPG3LwlzRu7QiXdH43Xy+Zt89O/hzA/5+8hZNePYY8cuzH57yFkm51d8HcE9h2/5vqbd/xKU6zfaHzkHe+8+B/JWT+qHf8LP37ieWu3nLdu47qt64bWr9s2PHG90ay1Zxrfmxl3y7S+LzXzY5LS9L+/szP9KE3qR1e6P/K+nz3J9GNB2pMFed9/kNPvn/3LFz917Mhf7ghh8LDya9raf8mKkX88Z/gDW3f/atNo/0tT9r+2Ztqvou8rza4ft6ey/uItW09Ye/ElG7PfKNmaOJ9RqpVnaD4jffqXi+Yn0kOyOqe/0/2cQnnSjQNT0/MTAABMEN//j9ez8f3DL6QXULG++Ty9vfePc/P0weby9Oz3khXl6dn14/Y2m6dX28zTs+0X5emN1m+Up+fl3XnxP5Sz/nQ1P07a+5xH7jg5v7lxkv0+g6Jxkl1/uuMkaXOcZNsvGieN1m80TvKOe178D+asn6f58dDe53Jyx8PNzY2H12fKReMhu/50x0OpzfGQbb9oPDRav9F4yDu+efHPylm/WRPHx+jAGBsXw+ddevHmT9atN9Pff9F+/2b2+z9a1Xz/Z/ZzXzPf/5n9XNnM97+9z5Xl9v+x9mbCmu//zH6/S6ty5mu7993fofna9MNmRZ8/K/qc2aqc+unO486adOPAZB4XXjox/49v98T8/4Z02em3gQ7+70nzPWYN43foe8yKrmP22/uvXs9b4vUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDndlUVjy93Xbtl71hHv+dlnh1+46v0/2nD16674zu8HLnzXT+/s+faLD605eu2v333Ihfd+4vSdt3z9/ufn3v3XpwoD9439rByfFqshJM8kIVR/vOfLn3vokcNH65IQQjnp2x7CgmTh/QuSTITBP4cQ1tT6OfHOu144ae3o8uobuifUz88EyW5X6C3H/tT3M4TLCreIg1A1HWfb9l56QvjNO1dd84vF3/9e146nt+9bJanWjacQ5p1f//iuEMLs9P+oONoWxQeny5UhhJ66x51W0K9jmuz/spzykelyVrrsLYgT71+SKZcy62XLUVdm2VPQXrvy+tHqekXmZMrZk1G78voZ6xekyx+my+OnGb8c/yehlIRKrfvrk31jJNQdtyQkY8eyWiuXasc2pNufKSeZcilTLndltmus3XSglZNkYn1cL1MfT8eVtP7o+nN1A2fn1L86XVbTJ+qLsRyyN8b1TrpR264xsV97pujL/lCqOwc1qq8d+PRg9KZ1vcnCSY8ZaSDe99CqG5eWVz+wuy+nH8mdSRo/aSn+tp8vmPOx715/yaK8+OeX0villuL/9oxHnz33+m99LTf+zTF+uaX4J97X88wZD167JHf/7In7p9JS/KGnHr5p8aEX7Mjt/60xfrWl+Ct2Pto9d+99u3L7Pxj3z+yW4j/51vf+7o7H73k6N36I8Xtair9656bPd/fvPS43/q64f3pbGz/P7Tj1if7+PwzkxX8sxp/bUvzbt9/yltvm33B67vFdGfdPX0vxzzz23mvm7L3nqLxzZ3Jrp145AV6ZDkmvsa5Ly63mme2qyxe+OlAZv+abk/6f28mGMkbbmTeD8QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHn65ZUnf/Scd3xwVSUJIclZZ6SBeF951ooVAy20O/TUwzctPvSCHfV1i1qIAwAAABSLeXipVlMNi8KlyexwZMP14xzBkbGUTKzPziHEONk5glbjlDoUp9yhOJUOxenqUJxZHYrT3aE41YI41dBcnNlTxKmMjoom+9MzZX+aj9PboThzOhRnbofizOtQnPkditM3ZZzmx+GCDsVZ2KE4h3QozqEdinNYh+K8qkNxDu9QnOyc8nTH4dx0zSPy4ozdKBfGqSTl2h2N5tMPT9s5qs12egvamVv0etxkO7ObbOeYzONK02yn2mQ7r22znaTJdl7fZjulgnbiuL0s27/YTiw1Of4v71CcbR2Kc0VdTTtxruxQfz7doTif6VCcq9qMA9CsmP/vy/f6QnflbaEnPeNkZwFivrt47Ofk17u8E1KM95pM/ayieNlEPRNv8XT7l51AyMRbkqnvmhCvUstHpohXrY+3NHNn4fZmJxQy/Ts+U99dFC87sQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+iXV5780XPe8cFVIQmj/xoaaSDeV561YsVAC+0+tOrGpeXVD+yur+uutBAIAAAAKBTz8K5aTTV0V5aH7mTWhPWq6TxANS2X+8aX/fPCytFlMlAaK/ckC6Z8XCV93LKtGzYt23L5tjeu2zB00fBFwxvfvPzk5acOnnLqKcvWrls/PDj+M4TugnghhLHphy2Xb/vk0Pr1w5u3jFdm+78ofdyitJykj+t/UxgcXV6d9n9hQXulSe3N3I3iowcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/+zaXYicV/0H8PPMzM5Mt80/+6dv09BshryUqEWTuJVUS/cBwUKbhCwFma2uJdgEi5smtEmJdWwDtjVBEVoCIZILI7HYWrzpiy1iXwhEajTgxiBt0V7ohdJqJS25kJSR7M6ZnZmdyaxjadr4+VzMM3PO75zfc+Zi4fvsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHa6o6MlEZHRsfTEJIutTUOohz2Xyalvvo++Xnt3+/MHx6ZfNYIdfHRgAAAEBPMYcPNEaKoZDLhmy4avrT0tA0EWZzPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L9nqjoyURkdG784CSHpUlPrIM5l82la7qPvG+88+ZlXh4f/2jxW6mMfAAAAoLeYwzONkWIohWVhILmqpS4+G1jUtr69Lu6zeJ517c8OutUtm2fdNfOs+1iPug31664AAAAAH30x/+caI0OhkFvQNf/3yvWxbklbXbZ+7ee3AgAAAMB/J+b/QmOkFAq5UiOvzzfvL22ri+t7/d8+rl/RZX2v/+evr1/9nx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjqmqiMTldGx8WwSQtKlptZBnMvm07TcR981Lwz+/ZYjDy1tHivk+tgIAAAA6Cnm8NnoXQyF3GAYCBdP5/7hmw4+/cWnnx0JIczE/Hw+7Nq0Y8fda2ZeY93qY0cGvnf0rW/NqVs983reDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxvpqojE5XRsfGLkhCSLjW1DuJcNp+m5T76vv65L/z58ZPPvdk8VupjHwAAAKC3mMNns38xlEI+5MMV05+as/5Zmbb13Z4ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeOe75x39c3TU5uvtsbb7zxpvHmfP9lAgAA3m9LQhJq/6ErN57vuwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4MpqojE5XRsfFiEkLSpabWQZzL5tO0PK9OtWzzp/T544UFp194qXms1N8RAAAAgB5iDp/N/sVQCgNhIFw+/anTM4Hp/D/0Ad4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KEyVR2ZqIyOjS9IQki61NQ6iHPZfJqW++j72O4Dnz288Ls3N48Vcn1sBAAAAPQUc3i+MVIMhdzHQyFcXf882bogydavnZ8LzK7b3rJscN7rqi3rsvNet6ftZLn6aWbWFeN+QzPXxrry3HXlpnWl0GhfblkX9rWsWtDjPgMAAACcRzH/FxojQ6GQKzTl3J+01A/JuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAF1PVkYnK6Nh4koSQdKmpdRDnsvk0LffR977f/P8lX/np3p3NY6U+9gEAAAB6izl8NvsXQyksDv8XFk/n/jDUWh/r/lE5c/jRf/5lZQirrjgxnGvf9ofxza9ev/HF9pcQMq3VmRAW1vslXfr9+neP3ru8dubxEFZdnr16Tr9w7n6tW6a1Zyqb1+84emJ7jy8HAAAALhAx/w80RoZCIXdX1/wfk3eP/N8wHcAX3rv755fVX+uJvG1FZqjeL9Ol3+eXP/mnFWv/9tbZ/H+ufp86sPXwZS0NZ0baJGltdOvODSeuO5SJp57pn23rH7+XL33zzX9t2fXImZn+xVCsjy/Kdeo/97XNRWltMrN/fN17+6ut/XNdzv/Qb186+ctFe9892/+dJYON/tec4/zn7j9468P7rj9wZENr/xBCuVP/t9+9OVz5hzsfbD//YNvGzd9882ubJK0dW3rq0NqDpRta+ydt/eP3/7OTj+378SPfeTb2j78VWblsvv0zbf1f2XPp7pcf2LiotX+my/lfvO3V4W3lb/++/fx3tOya63oXc8//xLVP3f7apvT+9ikAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIALy1R1ZKIyOjaeSUJIutTUOohz2Xyalvvo+8Ytx9++be+PftA8VupjHwAAAKC3mMNns38xlEI+5MPgdO5/prJ5/Y6jJ7aHoZnZpH7NTW67Z8cntmzbedcd5+nOAQAAgPmK+T/XGBkKhdzyMFDP/6Nbd244cd2hTMz/mZj/t9w5uXlVaNS9sufS3S8/sHFR4zlBCNM/Cyierfv0bN1NNx4fOvXHr63oWLdmtu7Y0lOH1h4s3RDrQnPd6tB4PvHEtU/d/tqm9P7G/TXXffKr2ybrjyfivoO3Przv+gNHNjTOUb8O1veNdZOZ/ePr3ttfjXXZ+rVYPzcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNdUdWSiMjo2HrIhJF1qah3EuWw+Tct99F23/BcPXnL6ucXNY4VcHxsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJ+3YTGVfVxAD5nJnkzzSRt0r5gVEzTqih1YVEQ0Y2KirQiBVeVItXWLkRBEFHqwlRasVTFjWB1U0QFNUpBwcZiaZVU/CpuXKigUF0IpRjQDsWFSmbOnU5u5zp6UwX1eWA4OWfu/d3/PefMnQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCPMtA31mwP77i/ccs5N3z06F0nHrnpnXu3XfTwq99NbLruw72DL52c2bxiy5fXL9u0/+4107ufP/TT8Fu/HO0Z/FCrWZW6tRDi8RhC7d3ZZx6b+fisubEYQqjGkckQRuPSQ6Mxl7D65xDC5nad899888TlW+babbsG5o0vyYXk7yvUq1k9LSPz6+XfpZb22dbGg5eEr69dv/3T5W+83j91bPLUIbHWsZ9CWLyx8/z+EMKi9JqT7bax7OTUrgshDHacd2WPus7/g/VfWtA/N7X/S229R072/spcv5I7Lt/P9OfawR7XW6iiOsoe18tQrp97GI0sNL+ozmx8NLVvp3bVn8yvZq8YKjH0tcu/J57aI6Fj3WKIzbWstfuV9tqGdP+5fsz1K7l+tT93X83rpo1WjXH+eHZcbjyb6L40vqLzWd3FrQXjZ6e2lj6oJ7N+yP/RUj/tj/Z9NWV1zf5OLX+HSsczqNt4e+HTYtTTWD0uPe2cX7vI3ptZ/8SF1Q3vHS7a+HFvTPmxVP7WT0aHbn9t5wNjRfkbKym/Uir/m7VHfrht5wvPFeY/neVXS+VfdmDw+Nr3d6wsnJ/ZbH76SuXfcfSDJ5f//86pbmvdzN+T5ddK5V8zfWRguHHgYGH9q7P5WVQq/6urb/z2lc/3HSvMD1n+YKn8DdP3PTUw3ri4MP9g66NQb+7QEvvnx6krvhgf/36iKP+zbP6Hu+THnvkvT+6+6sUlu9YU7s912fyMlKr/5gv2bx9q7Duv6NkZ95ypb06A/6Zl6X+sx1O/7O/Mher4vfDsRF/rG2govYbP5IVy5q6z+C/MBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8r1KIs=") 976.834804ms ago: executing program 2 (id=3177): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c00000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 728.081048ms ago: executing program 6 (id=3178): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x900, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 440.960458ms ago: executing program 0 (id=3179): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) 0s ago: executing program 5 (id=3180): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 672.228657][T10395] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree alloc level 0/0 [ 672.228812][T10395] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 672.228926][T10395] node offset 16/24 bset u64s 0: unsupported bset version 3.519 [ 672.265074][T10395] bcachefs (loop2): flagging btree alloc lost data [ 672.265232][T10395] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 672.322629][T10395] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 672.451682][T10395] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree freespace level 0/0 [ 672.451807][T10395] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 672.451931][T10395] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 672.452025][T10395] error not marked as autofix and not in fsck [ 672.452108][T10395] run fsck, and forward to devs so error can be marked for self-healing [ 672.452202][T10395] inconsistency detected - emergency read only at journal seq 10 [ 672.521742][T10395] bcachefs (loop2): flagging btree freespace lost data [ 672.532990][T10395] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 672.583302][T10395] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree backpointers level 0/0 [ 672.583436][T10395] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 672.583561][T10395] node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 18446744073709551615 + 0 > 4294967295 [ 672.583671][T10395] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 255:0, 0:0, btree topology error: [ 672.635994][T10395] bcachefs (loop2): flagging btree backpointers lost data [ 672.645823][T10395] bcachefs (loop2): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 672.689561][T10395] bcachefs (loop2): check_topology... done [ 672.697048][T10395] bcachefs (loop2): accounting_read... done [ 672.787954][T10395] bcachefs (loop2): alloc_read... done [ 672.794322][T10395] bcachefs (loop2): snapshots_read... done [ 672.806590][T10395] bcachefs (loop2): done starting filesystem [ 672.899949][ T5798] bcachefs (loop2): shutting down [ 673.142595][ T5798] bcachefs (loop2): shutdown complete [ 673.322341][T10412] loop5: detected capacity change from 0 to 40427 [ 673.338980][T10412] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 673.346632][T10412] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 673.363599][T10412] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3fffff [ 673.375667][T10412] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 673.384942][T10412] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1 [ 673.433805][T10412] F2FS-fs (loop5): invalid crc value [ 673.813755][T10412] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 673.821400][T10412] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 674.444006][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.586484][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.664527][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.672241][ T9713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.928664][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.936407][ T9713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.722728][T10434] loop1: detected capacity change from 0 to 4096 [ 676.979065][T10439] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.167307][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.915675][T10444] loop5: detected capacity change from 0 to 256 [ 677.991688][T10444] exfat: Deprecated parameter 'namecase' [ 677.997792][T10444] exfat: Deprecated parameter 'utf8' [ 678.282149][T10444] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 680.160928][T10240] veth0_vlan: entered promiscuous mode [ 680.257777][T10240] veth1_vlan: entered promiscuous mode [ 680.587510][T10240] veth0_macvtap: entered promiscuous mode [ 680.633230][T10240] veth1_macvtap: entered promiscuous mode [ 680.856384][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.992870][T10481] loop2: detected capacity change from 0 to 512 [ 681.000063][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.059785][T10481] EXT4-fs: Ignoring removed nobh option [ 681.131643][T10240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.141021][T10240] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.150076][T10240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.159377][T10240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.303797][T10481] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2039: invalid indirect mapped block 256 (level 2) [ 681.444578][T10481] EXT4-fs (loop2): 2 truncates cleaned up [ 681.454317][T10481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.651762][T10481] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 682.119498][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.337269][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 682.337345][ T30] audit: type=1326 audit(682.339:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.5.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 682.368372][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.374933][ T30] audit: type=1326 audit(682.339:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.5.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 682.400661][ T30] audit: type=1326 audit(682.349:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.5.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 682.422521][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.620578][ T30] audit: type=1326 audit(682.509:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.5.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 682.646407][ T30] audit: type=1326 audit(682.509:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.5.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 682.668514][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.472846][T10511] loop2: detected capacity change from 0 to 256 [ 683.679056][T10514] loop5: detected capacity change from 0 to 16 [ 683.699139][T10507] loop1: detected capacity change from 0 to 2048 [ 683.778815][T10514] erofs (device loop5): mounted with root inode @ nid 36. [ 683.908444][T10511] FAT-fs (loop2): Directory bread(block 64) failed [ 683.915733][T10511] FAT-fs (loop2): Directory bread(block 65) failed [ 683.925203][T10511] FAT-fs (loop2): Directory bread(block 66) failed [ 683.932949][T10511] FAT-fs (loop2): Directory bread(block 67) failed [ 683.940022][T10511] FAT-fs (loop2): Directory bread(block 68) failed [ 683.947067][T10511] FAT-fs (loop2): Directory bread(block 69) failed [ 683.954404][T10511] FAT-fs (loop2): Directory bread(block 70) failed [ 683.962134][T10511] FAT-fs (loop2): Directory bread(block 71) failed [ 683.969108][T10511] FAT-fs (loop2): Directory bread(block 72) failed [ 683.979813][T10511] FAT-fs (loop2): Directory bread(block 73) failed [ 684.085963][T10516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.618274][T10521] loop5: detected capacity change from 0 to 256 [ 684.941111][T10521] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 685.331143][T10528] loop2: detected capacity change from 0 to 64 [ 686.860648][ T5855] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 687.107075][ T5855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.119144][ T5855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.197864][ T5855] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.207720][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.216359][ T5855] usb 6-1: Product: syz [ 687.220915][ T5855] usb 6-1: Manufacturer: syz [ 687.225777][ T5855] usb 6-1: SerialNumber: syz [ 687.613160][ T5855] usb 6-1: 0:2 : does not exist [ 687.705691][ T5855] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 687.864474][ T5855] usb 6-1: USB disconnect, device number 2 [ 688.274713][ T6714] udevd[6714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.238567][T10571] loop1: detected capacity change from 0 to 64 [ 689.424198][T10571] hfs: request for non-existent node 56 in B*Tree [ 689.431442][T10571] hfs: request for non-existent node 56 in B*Tree [ 689.438968][T10571] hfs: request for non-existent node 57 in B*Tree [ 689.446405][T10571] hfs: request for non-existent node 57 in B*Tree [ 689.475090][T10575] loop2: detected capacity change from 0 to 164 [ 689.542978][T10575] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 689.698850][T10575] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 689.907454][T10306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.918799][T10306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.228824][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.237149][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.147397][T10589] loop6: detected capacity change from 0 to 32768 [ 692.294771][T10589] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 692.779878][T10589] XFS (loop6): Starting recovery (logdev: internal) [ 692.912770][T10589] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x422 dinode [ 692.925633][T10589] XFS (loop6): Unmount and run xfs_repair [ 692.938294][T10589] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 692.946156][T10589] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 692.955486][T10589] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 692.964800][T10589] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f 41 c3 20 ..e.....4.Xh.A. [ 692.974203][T10589] 00000030: 34 f7 58 68 7f 41 c3 20 00 00 00 00 00 00 00 00 4.Xh.A. ........ [ 692.983519][T10589] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 692.997191][T10589] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 693.006533][T10589] 00000060: ff ff ff ff 4d 6e 96 d4 00 00 00 00 00 00 00 02 ....Mn.......... [ 693.015865][T10589] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 693.025272][T10589] XFS (loop6): metadata inode 0x422 type 6 is corrupt [ 693.032733][T10589] XFS (loop6): failed to read RT inodes [ 693.042951][T10589] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 693.109393][T10611] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 693.120040][T10611] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 693.129413][T10611] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 693.143563][T10611] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 693.154766][T10611] geneve2: entered allmulticast mode [ 693.905159][T10616] loop6: detected capacity change from 0 to 256 [ 693.994428][T10616] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 694.274351][T10621] loop5: detected capacity change from 0 to 1024 [ 694.292969][ T1887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 694.327241][T10621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 694.460579][T10621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.601884][ T1887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.613487][ T1887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.623973][ T1887] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 694.636241][ T1887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.822316][ T1887] usb 3-1: config 0 descriptor?? [ 695.119786][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.198284][ T5855] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 695.327481][ T1887] cypress 0003:04B4:DE61.0009: global environment stack underflow [ 695.335786][ T1887] cypress 0003:04B4:DE61.0009: item 0 4 1 11 parsing failed [ 695.451809][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 695.524250][ T5855] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 695.526818][ T1887] cypress 0003:04B4:DE61.0009: parse failed [ 695.534251][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.534515][ T5855] usb 7-1: Product: syz [ 695.534639][ T5855] usb 7-1: Manufacturer: syz [ 695.534760][ T5855] usb 7-1: SerialNumber: syz [ 695.571074][ T1887] cypress 0003:04B4:DE61.0009: probe with driver cypress failed with error -22 [ 695.662176][ T5855] r8152-cfgselector 7-1: Unknown version 0x0000 [ 695.669019][ T5855] r8152-cfgselector 7-1: config 0 descriptor?? [ 695.814577][ T1887] usb 3-1: USB disconnect, device number 8 [ 696.187292][ T1887] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 697.465733][T10640] loop1: detected capacity change from 0 to 1764 [ 697.837794][ T5855] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 698.070549][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 698.082166][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 698.093686][ T5855] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 698.103234][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.265696][T10648] loop6: detected capacity change from 0 to 4096 [ 698.330707][ T5855] usb 3-1: config 0 descriptor?? [ 698.338286][T10646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.350035][T10648] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 698.908475][ T5855] greenasia 0003:0E8F:0012.000A: unknown main item tag 0x0 [ 698.918342][ T5855] greenasia 0003:0E8F:0012.000A: unknown main item tag 0x0 [ 699.049192][T10648] ntfs3(loop6): failed to convert "c46c" to cp775 [ 699.080816][ T5855] greenasia 0003:0E8F:0012.000A: hidraw0: USB HID v0.04 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 699.092722][ T5855] greenasia 0003:0E8F:0012.000A: no inputs found [ 699.120723][T10648] ntfs3(loop6): ino=20, mi_enum_attr [ 699.126570][T10648] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 699.185332][ T5855] usb 3-1: USB disconnect, device number 9 [ 699.390939][T10660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 699.968680][T10661] fido_id[10661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 700.311345][T10667] RDS: rds_bind could not find a transport for ::c000:0:20:0, load rds_tcp or rds_rdma? [ 700.713621][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 701.991120][T10692] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 702.021455][T10692] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 708.370008][T10758] netlink: 'syz.0.2157': attribute type 3 has an invalid length. [ 708.378183][T10758] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2157'. [ 708.610489][ T1887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 708.818716][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.831085][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.843276][ T1887] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 708.852846][ T1887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.934408][ T1887] usb 2-1: config 0 descriptor?? [ 709.144474][T10766] team_slave_0: entered promiscuous mode [ 709.150724][T10766] team_slave_1: entered promiscuous mode [ 709.156984][T10766] macsec1: entered promiscuous mode [ 709.162667][T10766] team0: entered promiscuous mode [ 709.253290][T10766] team0: left promiscuous mode [ 709.262765][T10766] team_slave_0: left promiscuous mode [ 709.268481][T10766] team_slave_1: left promiscuous mode [ 709.497239][ T1887] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 709.671028][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 709.710084][ T1887] usb 2-1: USB disconnect, device number 7 [ 709.921044][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 709.941488][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 710.015587][ T5847] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 710.026075][ T5847] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 710.038259][ T5847] usb 3-1: Product: syz [ 710.044053][ T5847] usb 3-1: Manufacturer: syz [ 710.048935][ T5847] usb 3-1: SerialNumber: syz [ 710.085991][T10774] loop6: detected capacity change from 0 to 256 [ 710.271445][T10771] fido_id[10771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 710.361653][T10777] xt_hashlimit: size too large, truncated to 1048576 [ 710.589459][ T5847] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 710.599004][ T5847] visor 3-1:1.0: probe with driver visor failed with error -110 [ 712.414358][T10795] QAT: Invalid ioctl 21531 [ 712.684822][ T11] usb 3-1: USB disconnect, device number 10 [ 712.993994][T10799] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2175'. [ 713.132298][T10804] netlink: 'syz.6.2177': attribute type 2 has an invalid length. [ 713.932207][T10817] sp0: Synchronizing with TNC [ 714.814301][T10826] loop2: detected capacity change from 0 to 1024 [ 715.885023][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 716.097267][T10841] netlink: 'syz.1.2195': attribute type 18 has an invalid length. [ 717.090017][T10845] loop6: detected capacity change from 0 to 32768 [ 717.100630][T10845] btrfs: Deprecated parameter 'usebackuproot' [ 717.107018][T10845] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 717.121875][T10845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2197 (10845) [ 717.146881][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2198'. [ 717.152641][T10845] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 717.170752][T10845] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 717.180281][T10845] BTRFS info (device loop6): using free-space-tree [ 717.272193][T10855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.481921][ T3900] BTRFS warning (device loop6): checksum verify failed on logical 5312512 mirror 1 wanted 0x6ee483f7 found 0x42c0e59e level 0 [ 717.496664][T10845] BTRFS error (device loop6 state C): failed to load root csum [ 717.505435][T10845] BTRFS warning (device loop6 state C): try to load backup roots slot 1 [ 717.538239][T10845] BTRFS warning (device loop6 state C): global root 2 0 already exists [ 717.547428][T10845] BTRFS error (device loop6 state C): failed to load root extent [ 717.555781][T10845] BTRFS warning (device loop6 state C): try to load backup roots slot 2 [ 717.573813][T10306] BTRFS error (device loop6 state C): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 717.586753][T10845] BTRFS warning (device loop6 state C): couldn't read tree root [ 717.594958][T10845] BTRFS warning (device loop6 state C): try to load backup roots slot 3 [ 717.614768][T10845] BTRFS warning (device loop6 state C): global root 2 0 already exists [ 717.623864][T10845] BTRFS error (device loop6 state C): failed to load root extent [ 717.693887][T10845] BTRFS error (device loop6 state C): open_ctree failed: -17 [ 718.992269][T10874] loop2: detected capacity change from 0 to 4096 [ 719.266854][T10883] loop1: detected capacity change from 0 to 16 [ 719.392270][T10883] erofs (device loop1): mounted with root inode @ nid 36. [ 720.441845][T10894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2213'. [ 720.598942][T10896] loop5: detected capacity change from 0 to 64 [ 721.022604][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.435020][T10904] loop1: detected capacity change from 0 to 256 [ 721.458768][T10904] exfat: Deprecated parameter 'namecase' [ 721.798834][T10904] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 722.257635][T10908] xt_CT: No such helper "snmp" [ 723.068407][T10923] loop1: detected capacity change from 0 to 512 [ 723.320918][ T11] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 723.398733][T10923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.550848][ T11] usb 6-1: not running at top speed; connect to a high speed hub [ 723.584708][ T11] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 723.593646][ T11] usb 6-1: config 95 has no interface number 0 [ 723.600812][ T11] usb 6-1: config 95 interface 1 has no altsetting 0 [ 723.721129][ T11] usb 6-1: string descriptor 0 read error: -22 [ 723.728081][ T11] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 723.738116][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.009299][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.101988][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 724.372989][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 724.421989][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.436501][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.447878][ T5847] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 724.458071][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.460475][ T11] usb 6-1: USB disconnect, device number 3 [ 724.564800][ T5847] usb 3-1: config 0 descriptor?? [ 724.707331][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 724.756404][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.262518][ T5847] usb 3-1: USB disconnect, device number 11 [ 726.000577][T10947] loop6: detected capacity change from 0 to 2048 [ 726.117298][T10947] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 726.281713][T10947] syz.6.2237: attempt to access beyond end of device [ 726.281713][T10947] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 726.283819][T10952] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 727.654401][ T11] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 727.893831][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.904425][ T11] usb 7-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 727.916729][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.159493][ T11] usb 7-1: config 0 descriptor?? [ 728.785952][ T11] nzxt-smart2 0003:1E71:200F.000D: unknown main item tag 0x0 [ 728.810987][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 728.873393][ T11] nzxt-smart2 0003:1E71:200F.000D: hidraw0: USB HID vff.fd Device [HID 1e71:200f] on usb-dummy_hcd.6-1/input0 [ 728.935477][T10973] loop5: detected capacity change from 0 to 256 [ 728.996306][ T11] usb 7-1: USB disconnect, device number 3 [ 729.013546][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 729.065000][ T5847] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 729.073743][ T5847] usb 2-1: config 0 has no interface number 0 [ 729.208248][ T5847] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=f7.f7 [ 729.218270][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.227063][ T5847] usb 2-1: Product: syz [ 729.231636][ T5847] usb 2-1: Manufacturer: syz [ 729.236501][ T5847] usb 2-1: SerialNumber: syz [ 729.271218][T10973] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001047b, chksum : 0x3c9d562b, utbl_chksum : 0xe619d30d) [ 729.404566][ T5847] usb 2-1: config 0 descriptor?? [ 729.459068][ T5847] sierra 2-1:0.6: Sierra USB modem converter detected [ 729.662764][ T5847] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 729.745557][ T5847] usb 2-1: USB disconnect, device number 8 [ 729.792034][ T5847] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 729.812493][ T5847] sierra 2-1:0.6: device disconnected [ 729.966392][T10978] fido_id[10978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 730.044440][T10981] tmpfs: Cannot retroactively limit size [ 730.290896][ T11] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 730.497116][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 730.508528][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 730.521080][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 730.585609][T10988] netlink: 'syz.1.2256': attribute type 2 has an invalid length. [ 730.713546][ T11] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 730.723197][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.731705][ T11] usb 3-1: Product: syz [ 730.736143][ T11] usb 3-1: Manufacturer: syz [ 730.741370][ T11] usb 3-1: SerialNumber: syz [ 730.928827][ T11] usb 3-1: config 0 descriptor?? [ 730.937458][T10982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.005818][T10982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.084065][ T11] usb 3-1: ucan: probing device on interface #0 [ 731.747689][ T11] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 731.852506][ T11] usb 3-1: USB disconnect, device number 12 [ 732.015700][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 732.212759][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 732.264276][ T5847] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 732.273879][ T5847] usb 1-1: config 179 has no interface number 0 [ 732.281452][ T5847] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 732.294028][ T5847] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 732.305900][ T5847] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 732.320515][ T5847] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 732.334007][ T5847] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 732.348040][ T5847] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 732.361925][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.543418][T10998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 733.186881][ T11] usb 1-1: USB disconnect, device number 11 [ 733.187003][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 733.204534][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 733.907242][T11018] loop2: detected capacity change from 0 to 1024 [ 735.109460][ T11] IPVS: starting estimator thread 0... [ 735.411465][T11036] IPVS: using max 192 ests per chain, 9600 per kthread [ 737.553199][T11060] loop5: detected capacity change from 0 to 1024 [ 737.758478][ T5796] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 737.758624][ T5796] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 737.766494][ T5796] Bluetooth: hci2: unknown advertising packet type: 0x6b [ 738.443432][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 738.592313][ T3677] hfsplus: b-tree write err: -5, ino 4 [ 738.631988][T11070] CUSE: unknown device info "ÿ" [ 738.641318][T11070] CUSE: zero length info key specified [ 738.991820][T11073] tmpfs: Cannot enable quota on remount [ 739.468295][T11079] loop6: detected capacity change from 0 to 512 [ 739.504282][T11080] loop1: detected capacity change from 0 to 512 [ 739.621001][T11079] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 739.702711][T11079] EXT4-fs (loop6): orphan cleanup on readonly fs [ 739.711852][T11079] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2297: invalid indirect mapped block 256 (level 2) [ 739.737681][T11080] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 739.746808][T11080] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 739.755881][T11080] System zones: 0-1, 15-15, 18-18, 34-34 [ 739.763597][T11080] EXT4-fs (loop1): orphan cleanup on readonly fs [ 739.808499][T11080] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.2298: casefold flag without casefold feature [ 739.852114][T11079] EXT4-fs (loop6): 2 truncates cleaned up [ 739.861805][T11079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 739.911045][T11080] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2298: couldn't read orphan inode 16 (err -117) [ 739.984749][T11080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 740.123098][T11079] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #2: block 13: comm syz.6.2297: lblock 0 mapped to illegal pblock 13 (length 1) [ 740.151994][T11080] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 740.160608][T11080] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 740.177633][T11079] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1053: inode #2: lblock 0: comm syz.6.2297: error -117 reading directory block [ 740.584698][T11091] loop2: detected capacity change from 0 to 256 [ 740.596000][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.660017][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.908021][T11091] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 741.158895][T11099] loop1: detected capacity change from 0 to 256 [ 741.326068][T11099] exfat: Deprecated parameter 'utf8' [ 741.691401][T11099] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 741.900943][T11105] loop2: detected capacity change from 0 to 512 [ 742.010478][T11105] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 742.021196][T11105] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 742.167360][T11105] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 742.251209][T11105] System zones: 0-2, 18-18, 34-34 [ 742.304769][T11105] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 742.400830][T11105] EXT4-fs (loop2): 1 truncate cleaned up [ 742.408986][T11105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.046236][T11120] loop6: detected capacity change from 0 to 256 [ 743.101267][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.295359][T11120] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 743.356405][T11115] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 743.488461][ T30] audit: type=1800 audit(743.469:71): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2314" name="file1" dev="loop6" ino=1048687 res=0 errno=0 [ 743.650722][T11126] loop2: detected capacity change from 0 to 512 [ 743.663258][ T30] audit: type=1804 audit(743.559:72): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2314" name="/newroot/47/file1/file1" dev="loop6" ino=1048687 res=1 errno=0 [ 743.693170][ T30] audit: type=1800 audit(743.559:73): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2314" name="file1" dev="loop6" ino=1048687 res=0 errno=0 [ 743.755237][T11126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 743.763564][T11126] EXT4-fs: Ignoring removed i_version option [ 744.047051][T11126] EXT4-fs (loop2): 1 orphan inode deleted [ 744.055839][T11126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.082687][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 744.544514][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.089595][T11142] new mount options do not match the existing superblock, will be ignored [ 747.443222][T11161] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2333'. [ 748.500531][ T5847] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 748.567429][ T5847] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 748.784484][T11172] loop6: detected capacity change from 0 to 512 [ 748.827509][T11174] pimreg: entered allmulticast mode [ 749.050643][T11172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 749.301198][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 749.527953][ T11] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 749.536757][ T11] usb 1-1: config 0 has no interface number 0 [ 749.543504][ T11] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 749.555237][ T11] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 749.569627][ T11] usb 1-1: config 0 interface 255 has no altsetting 0 [ 749.576983][ T11] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 749.586523][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.666111][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 749.844302][ T11] usb 1-1: config 0 descriptor?? [ 749.865612][ T11] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 749.886980][T11188] loop1: detected capacity change from 0 to 1024 [ 750.134884][T11189] loop5: detected capacity change from 0 to 1024 [ 750.148947][ T11] usb 1-1: USB disconnect, device number 12 [ 750.693726][T10306] hfsplus: b-tree write err: -5, ino 4 [ 750.833941][T11193] fido_id[11193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 750.963415][T10306] hfsplus: b-tree write err: -5, ino 4 [ 751.301822][T11202] loop1: detected capacity change from 0 to 128 [ 751.511364][T11202] FAT-fs (loop1): Directory bread(block 32) failed [ 751.518685][T11202] FAT-fs (loop1): Directory bread(block 33) failed [ 751.526159][T11202] FAT-fs (loop1): Directory bread(block 34) failed [ 751.534668][T11202] FAT-fs (loop1): Directory bread(block 35) failed [ 751.542342][T11202] FAT-fs (loop1): Directory bread(block 36) failed [ 751.549174][T11202] FAT-fs (loop1): Directory bread(block 37) failed [ 751.556599][T11202] FAT-fs (loop1): Directory bread(block 38) failed [ 751.567117][T11202] FAT-fs (loop1): Directory bread(block 39) failed [ 751.575437][T11202] FAT-fs (loop1): Directory bread(block 40) failed [ 751.582525][T11202] FAT-fs (loop1): Directory bread(block 41) failed [ 754.048153][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2360'. [ 755.170370][ T6714] udevd[6714]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 755.457888][T11196] udevd[11196]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 756.423044][T11262] loop6: detected capacity change from 0 to 512 [ 756.515674][T11262] EXT4-fs: Ignoring removed orlov option [ 756.586589][T11264] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 756.597571][ T5847] IPVS: starting estimator thread 0... [ 756.687211][T11262] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2375: casefold flag without casefold feature [ 756.731817][T11265] IPVS: using max 240 ests per chain, 12000 per kthread [ 756.800612][T11262] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2375: couldn't read orphan inode 15 (err -117) [ 756.849871][T11262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.047127][T11273] netlink: 'syz.5.2377': attribute type 1 has an invalid length. [ 757.406869][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.504192][T11285] loop5: detected capacity change from 0 to 256 [ 758.606405][T11284] loop1: detected capacity change from 0 to 1024 [ 758.834410][T11285] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 759.155793][ T4398] hfsplus: b-tree write err: -5, ino 4 [ 759.556839][T11287] loop6: detected capacity change from 0 to 4096 [ 759.627475][T11287] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 759.776367][T11294] loop1: detected capacity change from 0 to 512 [ 759.928331][T11294] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2389: corrupted in-inode xattr: overlapping e_value [ 760.062289][T11294] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2389: couldn't read orphan inode 15 (err -117) [ 760.173053][T11294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.240539][T11287] ntfs3(loop6): Failed to load $Extend (-22). [ 760.247119][T11287] ntfs3(loop6): Failed to initialize $Extend. [ 760.960683][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.208928][T11331] loop5: detected capacity change from 0 to 32768 [ 764.221646][T11331] XFS (loop5): Invalid device [./file0], error=-15 [ 764.792234][T11343] loop2: detected capacity change from 0 to 1024 [ 765.282068][T11351] loop6: detected capacity change from 0 to 8 [ 765.564667][ T3842] hfsplus: b-tree write err: -5, ino 4 [ 766.005146][T11355] loop1: detected capacity change from 0 to 512 [ 766.293633][T11355] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 766.531297][T11355] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 766.542566][T11355] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 766.690885][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2422'. [ 766.998479][ T5806] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 768.295301][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 768.307838][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 768.518932][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 768.543274][ T11] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.555219][ T11] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 768.573793][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 768.582118][ T11] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 768.592380][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.870546][ T11] usb 3-1: config 0 descriptor?? [ 769.472859][ T11] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 769.574366][ T11] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -38 [ 769.739038][ T11] usb 3-1: USB disconnect, device number 13 [ 770.661644][T11405] fido_id[11405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 770.895691][T11412] loop6: detected capacity change from 0 to 1024 [ 771.536676][T10306] hfsplus: b-tree write err: -5, ino 4 [ 771.954181][ T5847] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 772.206462][ T5847] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.222422][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 772.229855][ T5847] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 772.243733][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.263666][ T5847] usb 3-1: config 0 descriptor?? [ 772.822606][ T5847] kye 0003:0458:5013.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 772.892787][ T5847] kye 0003:0458:5013.0010: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 772.908645][ T5847] kye 0003:0458:5013.0010: tablet-enabling feature report not found [ 772.923385][ T5847] kye 0003:0458:5013.0010: tablet enabling failed [ 773.121358][ T5847] usb 3-1: USB disconnect, device number 14 [ 774.049926][T11435] fido_id[11435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 774.083558][T11441] loop5: detected capacity change from 0 to 256 [ 774.145232][T11441] exfat: Deprecated parameter 'utf8' [ 774.152139][T11441] exfat: Deprecated parameter 'utf8' [ 774.159771][T11441] exfat: Deprecated parameter 'namecase' [ 774.512909][T11441] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 775.415653][T11449] loop1: detected capacity change from 0 to 32768 [ 775.437775][T11449] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-16, 12-13 [ 775.437775][T11449] journal_v2 (size 40): [ 775.437775][T11449] Buckets: 9-16 12-13 [ 775.437775][T11449] [ 775.463466][T11449] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 775.875763][T11453] loop6: detected capacity change from 0 to 2048 [ 775.971063][T11456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2461'. [ 776.087187][T11453] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.2460: iget: bad extended attribute block 281474976710655 [ 776.220620][T11453] EXT4-fs (loop6): get root inode failed [ 776.226777][T11453] EXT4-fs (loop6): mount failed [ 777.229818][ T30] audit: type=1326 audit(777.219:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fcb8e969 code=0x7ffc0000 [ 777.255970][ T30] audit: type=1326 audit(777.219:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f64fcb8e969 code=0x7ffc0000 [ 777.280947][ T30] audit: type=1326 audit(777.219:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fcb8e969 code=0x7ffc0000 [ 777.357778][T11470] loop6: detected capacity change from 0 to 64 [ 777.945170][T11475] loop5: detected capacity change from 0 to 256 [ 778.075508][ T30] audit: type=1326 audit(778.069:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 778.103599][ T30] audit: type=1326 audit(778.069:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 778.272342][ T30] audit: type=1326 audit(778.139:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 778.301764][ T30] audit: type=1326 audit(778.139:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 778.605413][T11475] FAT-fs (loop5): Directory bread(block 64) failed [ 778.617327][T11475] FAT-fs (loop5): Directory bread(block 65) failed [ 778.628162][T11475] FAT-fs (loop5): Directory bread(block 66) failed [ 778.636350][T11475] FAT-fs (loop5): Directory bread(block 67) failed [ 778.647752][T11475] FAT-fs (loop5): Directory bread(block 68) failed [ 778.659547][T11475] FAT-fs (loop5): Directory bread(block 69) failed [ 778.667884][T11475] FAT-fs (loop5): Directory bread(block 70) failed [ 778.674966][T11475] FAT-fs (loop5): Directory bread(block 71) failed [ 778.685545][T11475] FAT-fs (loop5): Directory bread(block 72) failed [ 778.693649][T11475] FAT-fs (loop5): Directory bread(block 73) failed [ 779.334484][T11487] loop6: detected capacity change from 0 to 1024 [ 779.458048][T11490] loop2: detected capacity change from 0 to 1024 [ 779.749050][T11490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.847699][ T3799] hfsplus: b-tree write err: -5, ino 4 [ 780.721028][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.414602][T11500] syz.1.2481 (11500): drop_caches: 2 [ 781.643080][T11508] loop6: detected capacity change from 0 to 1024 [ 781.846299][T11508] hfsplus: bad catalog entry type [ 782.249921][ T3900] hfsplus: b-tree write err: -5, ino 4 [ 782.372553][T11517] loop1: detected capacity change from 0 to 512 [ 782.465131][T11517] EXT4-fs: Ignoring removed nobh option [ 782.479862][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.646045][T11517] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2489: corrupted in-inode xattr: overlapping e_value [ 782.781410][T11517] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2489: couldn't read orphan inode 15 (err -117) [ 782.883009][T11517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.106047][T11517] EXT4-fs error (device loop1): htree_dirblock_to_tree:1053: inode #2: comm syz.1.2489: Directory hole found for htree leaf block 0 [ 783.176135][T11527] xt_socket: unknown flags 0xd0 [ 783.569535][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.947215][T11534] program syz.2.2497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 785.139245][T11537] loop6: detected capacity change from 0 to 4096 [ 785.226624][T11537] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 785.831265][T11537] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 787.369799][T11570] loop1: detected capacity change from 0 to 512 [ 787.470728][T11570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.546810][T11570] EXT4-fs (loop1): 1 truncate cleaned up [ 787.555297][T11570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.444706][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.823833][T11589] loop6: detected capacity change from 0 to 256 [ 789.443761][T11589] FAT-fs (loop6): Directory bread(block 64) failed [ 789.454532][T11589] FAT-fs (loop6): Directory bread(block 65) failed [ 789.463467][T11589] FAT-fs (loop6): Directory bread(block 66) failed [ 789.470500][T11589] FAT-fs (loop6): Directory bread(block 67) failed [ 789.477652][T11589] FAT-fs (loop6): Directory bread(block 68) failed [ 789.484901][T11589] FAT-fs (loop6): Directory bread(block 69) failed [ 789.492124][T11589] FAT-fs (loop6): Directory bread(block 70) failed [ 789.498944][T11589] FAT-fs (loop6): Directory bread(block 71) failed [ 789.506087][T11589] FAT-fs (loop6): Directory bread(block 72) failed [ 789.513808][T11589] FAT-fs (loop6): Directory bread(block 73) failed [ 790.030881][ T30] audit: type=1326 audit(790.019:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 790.056412][ T30] audit: type=1326 audit(790.019:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 790.149873][T11601] loop5: detected capacity change from 0 to 128 [ 790.176597][ T30] audit: type=1326 audit(790.139:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d78e969 code=0x7ffc0000 [ 790.200546][ T30] audit: type=1326 audit(790.139:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d78e9a3 code=0x7ffc0000 [ 790.224101][ T30] audit: type=1326 audit(790.149:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d78d41f code=0x7ffc0000 [ 790.246187][ T30] audit: type=1326 audit(790.149:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc9d78e9f7 code=0x7ffc0000 [ 790.272269][ T30] audit: type=1326 audit(790.149:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9d78d2d0 code=0x7ffc0000 [ 790.295835][ T30] audit: type=1326 audit(790.149:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9d78e56b code=0x7ffc0000 [ 790.368077][T11601] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 790.482582][T11601] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 790.491251][T11601] FAT-fs (loop5): Filesystem has been set read-only [ 790.695186][ T30] audit: type=1326 audit(790.319:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc9d78d5ca code=0x7ffc0000 [ 790.718142][ T30] audit: type=1326 audit(790.319:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.5.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc9d78d5ca code=0x7ffc0000 [ 790.735287][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 790.887073][ T9850] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 791.680782][ T11] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 792.160940][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 792.188389][ T11] usb 2-1: no configurations [ 792.194016][ T11] usb 2-1: can't read configurations, error -22 [ 793.342088][T11625] loop5: detected capacity change from 0 to 40427 [ 793.373410][T11625] F2FS-fs (loop5): heap/no_heap options were deprecated [ 793.396174][T11625] F2FS-fs (loop5): invalid crc value [ 793.788165][T11625] F2FS-fs (loop5): Start checkpoint disabled! [ 793.839790][T11625] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 793.987386][T11635] loop1: detected capacity change from 0 to 256 [ 794.529540][T11641] loop6: detected capacity change from 0 to 128 [ 794.542253][T11638] ipvlan2: entered promiscuous mode [ 794.557533][T11638] bridge0: port 3(ipvlan2) entered blocking state [ 794.572387][T11638] bridge0: port 3(ipvlan2) entered disabled state [ 794.579701][T11638] ipvlan2: entered allmulticast mode [ 794.585563][T11638] bridge0: entered allmulticast mode [ 794.596717][T11638] ipvlan2: left allmulticast mode [ 794.602354][T11638] bridge0: left allmulticast mode [ 794.759820][T11641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 794.856260][T11635] FAT-fs (loop1): Directory bread(block 64) failed [ 794.866513][T11635] FAT-fs (loop1): Directory bread(block 65) failed [ 794.873788][T11635] FAT-fs (loop1): Directory bread(block 66) failed [ 794.883911][T11635] FAT-fs (loop1): Directory bread(block 67) failed [ 794.891259][T11641] System zones: 1-3, 19-19, 35-36 [ 794.897119][T11641] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.900569][T11635] FAT-fs (loop1): Directory bread(block 68) failed [ 794.900701][T11635] FAT-fs (loop1): Directory bread(block 69) failed [ 794.900961][T11635] FAT-fs (loop1): Directory bread(block 70) failed [ 794.942403][T11635] FAT-fs (loop1): Directory bread(block 71) failed [ 794.949429][T11635] FAT-fs (loop1): Directory bread(block 72) failed [ 794.959532][T11635] FAT-fs (loop1): Directory bread(block 73) failed [ 795.078872][ T5805] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 795.231983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 795.522325][T10240] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.619632][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 796.879198][T11663] loop5: detected capacity change from 0 to 1024 [ 796.927736][T11663] EXT4-fs: Ignoring removed oldalloc option [ 797.061990][T11667] loop6: detected capacity change from 0 to 1024 [ 797.124314][T11663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.654925][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.829595][ T3799] hfsplus: b-tree write err: -5, ino 4 [ 799.476275][T11679] loop5: detected capacity change from 0 to 32768 [ 799.490654][T11679] gfs2: Bad value for 'statfs_percent' [ 800.519105][T11692] loop2: detected capacity change from 0 to 256 [ 800.757108][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.757247][T11692] FAT-fs (loop2): Filesystem has been set read-only [ 800.757389][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.757540][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.757701][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.757870][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758016][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758165][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758330][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758476][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758626][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758800][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.758946][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759095][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759265][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759410][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759563][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759736][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.759884][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.760036][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.761413][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.761562][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.761723][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.761894][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.762041][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.864233][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.864459][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.864606][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.864764][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.864940][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865085][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865239][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865407][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865550][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865702][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.865868][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866024][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866178][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866345][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866491][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866645][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866815][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.866968][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867121][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867289][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867434][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867586][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867755][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.867905][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868054][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868218][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868367][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868519][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868829][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.868984][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869136][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869299][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869441][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869596][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869765][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.869917][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.870068][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.870782][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.870934][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871086][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871255][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871399][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871551][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871719][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.871865][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.872025][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.872192][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.872335][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.872497][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.872640][T11692] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 800.890507][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 800.890588][ T30] audit: type=1800 audit(800.879:100): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2560" name="file1" dev="loop2" ino=1048701 res=0 errno=0 [ 801.360799][T11699] loop5: detected capacity change from 0 to 256 [ 801.381456][T11699] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 801.381630][T11699] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 801.436320][T11699] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd2ee65da, utbl_chksum : 0xe619d30d) [ 801.442335][T11699] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffd5ff) [ 801.442464][T11699] exFAT-fs (loop5): Filesystem has been set read-only [ 801.442531][T11699] exFAT-fs (loop5): failed to initialize root inode [ 803.213454][T11707] loop6: detected capacity change from 0 to 40427 [ 804.155750][T11718] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2572'. [ 804.155943][T11718] netlink: 'syz.5.2572': attribute type 5 has an invalid length. [ 805.237561][T11728] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2576'. [ 806.057160][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'. [ 806.791310][ T5855] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 806.976580][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 806.989846][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.990027][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.990405][ T5855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 806.990729][ T5855] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 806.990871][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.013677][ T5855] usb 7-1: config 0 descriptor?? [ 807.588416][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 807.664235][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.664427][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.664595][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.664760][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.664925][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.665087][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.665262][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.665430][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.665604][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.665770][ T5855] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 807.696021][ T5855] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0011/input/input17 [ 807.731990][ T5855] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 807.892290][ T5855] usb 7-1: USB disconnect, device number 4 [ 808.159409][ T6008] udevd[6008]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 808.483779][ T6714] udevd[6714]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 808.898616][T11750] fido_id[11750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 809.147653][ T30] audit: type=1326 audit(809.149:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.5.2590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9d78e969 code=0x0 [ 809.407612][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 809.408088][T11765] loop2: detected capacity change from 0 to 64 [ 810.664106][ T1887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 810.980968][ T1887] usb 3-1: Using ep0 maxpacket: 16 [ 811.070951][ T1887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.082980][ T1887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.096329][ T1887] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 811.109556][ T1887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.251034][T11777] loop5: detected capacity change from 0 to 512 [ 811.338154][T11777] EXT4-fs: Ignoring removed oldalloc option [ 811.481489][T11777] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 811.969082][T11777] EXT4-fs (loop5): 1 truncate cleaned up [ 811.982775][T11777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.405779][ T1887] usb 3-1: config 0 descriptor?? [ 812.812762][T11779] loop6: detected capacity change from 0 to 32768 [ 812.920791][T11779] gfs2: fsid=[^_: Trying to join cluster "lock_nolock", "[^_" [ 812.928570][T11779] gfs2: fsid=[^_: Now mounting FS (format 1801)... [ 812.958774][T11779] gfs2: fsid=[^_.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 812.977837][T11779] gfs2: fsid=[^_.s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 812.987308][T11779] gfs2: fsid=[^_.s: H: s:SH f:eEcH e:0 p:11779 [syz.6.2600] init_journal+0x332e/0x3a30 [ 812.997995][T11779] gfs2: fsid=[^_.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 813.013054][T11779] gfs2: fsid=[^_.s: about to withdraw this file system [ 813.021446][T11779] gfs2: fsid=[^_.s: Journal recovery skipped for jid 0 until next mount. [ 813.033337][T11779] gfs2: fsid=[^_.s: Glock dequeues delayed: 0 [ 813.042143][T11779] gfs2: fsid=[^_.s: File system withdrawn [ 813.043853][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.052921][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.6.2600 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(undef) [ 813.053106][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.053216][T11779] Call Trace: [ 813.053283][T11779] [ 813.053342][T11779] __dump_stack+0x26/0x30 [ 813.053574][T11779] dump_stack_lvl+0x1df/0x270 [ 813.053796][T11779] dump_stack+0x1e/0x25 [ 813.053983][T11779] gfs2_withdraw+0x1d26/0x22e0 [ 813.054262][T11779] gfs2_consist_inode_i+0x1b2/0x250 [ 813.054495][T11779] gfs2_jdesc_check+0x170/0x440 [ 813.054751][T11779] check_journal_clean+0x1b6/0x4c0 [ 813.054962][T11779] ? init_journal+0x332e/0x3a30 [ 813.055172][T11779] ? kmsan_get_metadata+0x105/0x1b0 [ 813.055412][T11779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.055669][T11779] init_journal+0x332e/0x3a30 [ 813.055919][T11779] ? init_inodes+0x124/0x510 [ 813.056133][T11779] ? init_inodes+0x124/0x510 [ 813.056338][T11779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.056600][T11779] init_inodes+0x124/0x510 [ 813.056821][T11779] gfs2_fill_super+0x333f/0x3ee0 [ 813.057040][T11779] ? init_locking+0xed/0x500 [ 813.057286][T11779] get_tree_bdev_flags+0x6e6/0x920 [ 813.057505][T11779] ? __pfx_gfs2_fill_super+0x10/0x10 [ 813.057699][T11779] ? __pfx_gfs2_fill_super+0x10/0x10 [ 813.057888][T11779] ? __pfx_gfs2_get_tree+0x10/0x10 [ 813.058084][T11779] get_tree_bdev+0x38/0x50 [ 813.058271][T11779] gfs2_get_tree+0x57/0x350 [ 813.058478][T11779] ? __pfx_gfs2_get_tree+0x10/0x10 [ 813.058697][T11779] vfs_get_tree+0xb3/0x5c0 [ 813.058907][T11779] ? mount_capable+0x99/0x100 [ 813.059096][T11779] do_new_mount+0x738/0x1610 [ 813.059311][T11779] ? kmsan_get_metadata+0x105/0x1b0 [ 813.059552][T11779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.059824][T11779] path_mount+0x6db/0x1e90 [ 813.060039][T11779] ? user_path_at+0x32d/0x3d0 [ 813.060245][T11779] __se_sys_mount+0x6eb/0x7d0 [ 813.060456][T11779] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 813.060718][T11779] __x64_sys_mount+0xe4/0x150 [ 813.060952][T11779] x64_sys_call+0xfa7/0x3db0 [ 813.061175][T11779] do_syscall_64+0xd9/0x1b0 [ 813.061403][T11779] ? irqentry_exit+0x16/0x60 [ 813.061617][T11779] ? clear_bhb_loop+0x40/0x90 [ 813.061802][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.061999][T11779] RIP: 0033:0x7f421099010a [ 813.062141][T11779] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.062285][T11779] RSP: 002b:00007f42117b9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 813.062438][T11779] RAX: ffffffffffffffda RBX: 00007f42117b9ef0 RCX: 00007f421099010a [ 813.062563][T11779] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007f42117b9eb0 [ 813.062679][T11779] RBP: 0000200000000400 R08: 00007f42117b9ef0 R09: 0000000000200001 [ 813.062792][T11779] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000000000 [ 813.062896][T11779] R13: 00007f42117b9eb0 R14: 00000000000125f6 R15: 0000200000000080 [ 813.063043][T11779] [ 813.068326][T11779] gfs2: fsid=[^_.s: Error checking journal for spectator mount. [ 813.370291][T11790] loop1: detected capacity change from 0 to 256 [ 813.503193][ T1887] kye 0003:0458:5016.0012: control desc unexpectedly large [ 813.514239][ T1887] kye 0003:0458:5016.0012: control desc unexpectedly large [ 813.546354][ T1887] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0012/input/input18 [ 814.160530][ T1887] kye 0003:0458:5016.0012: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 814.193241][ T1887] usb 3-1: USB disconnect, device number 15 [ 814.859433][T11796] loop2: detected capacity change from 0 to 128 [ 815.156315][T11796] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 815.347534][T11796] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 815.490611][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 815.672289][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 815.702218][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 815.790578][ T5855] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.801045][ T5855] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 815.814596][ T5855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 815.821685][ T5855] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 815.831187][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.973957][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 816.010820][ T5798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.070562][ T11] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.086853][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 816.094924][ T11] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 816.104838][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.266385][ T5855] usb 6-1: config 0 descriptor?? [ 816.647609][ T11] usb 1-1: config 0 descriptor?? [ 816.785701][T11810] loop1: detected capacity change from 0 to 40427 [ 816.875246][T11810] F2FS-fs (loop1): Image doesn't support compression [ 816.941624][T11810] F2FS-fs (loop1): invalid crc value [ 816.990929][ T5855] aureal 0003:0755:2626.0013: item fetching failed at offset 4/5 [ 817.133407][ T5855] aureal 0003:0755:2626.0013: probe with driver aureal failed with error -22 [ 817.366566][T11810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 817.398105][ T5855] usb 6-1: USB disconnect, device number 4 [ 817.499064][ T11] uclogic 0003:5543:0781.0014: ignoring exceeding usage max [ 817.526506][ T11] uclogic 0003:5543:0781.0014: unbalanced collection at end of report description [ 817.725972][ T11] uclogic 0003:5543:0781.0014: parse failed [ 817.732918][ T11] uclogic 0003:5543:0781.0014: probe with driver uclogic failed with error -22 [ 817.953722][ T11] usb 1-1: USB disconnect, device number 13 [ 819.273442][T11820] fido_id[11820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 819.288061][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2620'. [ 819.488801][T11833] loop6: detected capacity change from 0 to 256 [ 822.050579][ T1887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 822.277473][ T1887] usb 3-1: Using ep0 maxpacket: 32 [ 822.306472][ T1887] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 822.318604][ T1887] usb 3-1: config 0 has no interface number 0 [ 822.356932][T11865] IPVS: stopping backup sync thread 11867 ... [ 822.360957][T11868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2634'. [ 822.380033][T11868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2634'. [ 822.426241][ T1887] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 822.439239][ T1887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.447872][ T1887] usb 3-1: Product: syz [ 822.452931][ T1887] usb 3-1: Manufacturer: syz [ 822.457803][ T1887] usb 3-1: SerialNumber: syz [ 822.541766][ T1887] usb 3-1: config 0 descriptor?? [ 822.608296][ T1887] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 822.809006][ T1887] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 822.994568][ T1887] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 823.209137][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 823.226331][ T1887] usb 3-1: USB disconnect, device number 16 [ 823.299017][ T1887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 823.358196][T11872] loop5: detected capacity change from 0 to 512 [ 823.384759][ T1887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 823.404668][ T1887] quatech2 3-1:0.51: device disconnected [ 823.499765][T11872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 823.632305][T11872] EXT4-fs (loop5): 1 truncate cleaned up [ 823.641930][T11872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.101481][ T1887] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 824.410846][ T30] audit: type=1326 audit(824.389:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.6.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7fc00000 [ 824.444367][ T1887] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 824.454113][ T1887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.463079][ T1887] usb 1-1: Product: syz [ 824.467505][ T1887] usb 1-1: Manufacturer: syz [ 824.478262][ T1887] usb 1-1: SerialNumber: syz [ 824.522710][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.623593][ T1887] usb 1-1: config 0 descriptor?? [ 824.671220][T11888] loop2: detected capacity change from 0 to 64 [ 825.184155][ T1887] airspy 1-1:0.0: Board ID: 00 [ 825.193923][ T1887] airspy 1-1:0.0: Firmware version: [ 825.423169][ T1887] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 825.529812][ T1887] airspy 1-1:0.0: Registered as swradio24 [ 825.539577][ T1887] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 825.568447][ T5847] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 825.865320][ T1887] usb 1-1: USB disconnect, device number 14 [ 825.895415][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.910441][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.924627][ T5847] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 825.934408][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.967804][T11891] loop1: detected capacity change from 0 to 32768 [ 825.978832][T11892] loop5: detected capacity change from 0 to 2048 [ 826.062118][T11891] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2645 (11891) [ 826.092643][ T5847] usb 7-1: config 0 descriptor?? [ 826.150012][T11891] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 826.162237][T11891] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 826.174000][T11891] BTRFS error (device loop1): cannot disable free-space-tree [ 826.184217][T11891] BTRFS error (device loop1): open_ctree failed: -22 [ 826.389419][T11892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.768204][ T30] audit: type=1800 audit(826.759:103): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2644" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 826.823524][ T5847] uclogic 0003:5543:0003.0015: item fetching failed at offset 5/7 [ 826.986212][ T5847] uclogic 0003:5543:0003.0015: parse failed [ 826.993193][ T5847] uclogic 0003:5543:0003.0015: probe with driver uclogic failed with error -22 [ 827.104890][ T5847] usb 7-1: USB disconnect, device number 5 [ 827.549116][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.584514][T11903] loop2: detected capacity change from 0 to 764 [ 827.758661][T11903] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 827.840706][T11903] Symlink component flag not implemented [ 827.909296][T11903] Symlink component flag not implemented (122) [ 832.385823][T11958] loop5: detected capacity change from 0 to 128 [ 832.451045][T11958] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 832.623307][T11958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.351015][ T11] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 833.597973][ T11] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 833.609679][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.696148][ T11] usb 1-1: config 0 descriptor?? [ 833.717680][T11963] loop1: detected capacity change from 0 to 4096 [ 833.759366][ T11] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 833.765297][T11963] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 833.801313][T11968] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2680'. [ 833.855189][ T30] audit: type=1326 audit(833.839:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.2681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f421098e969 code=0x0 [ 834.152882][ T11] gp8psk: usb in 137 operation failed. [ 834.158765][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 834.169822][ T11] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 834.292833][ T11] usb 1-1: USB disconnect, device number 15 [ 834.352357][T11963] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 834.490374][T11963] ntfs3(loop1): MFT: r=b, expect seq=0 instead of b! [ 835.389754][T11978] loop2: detected capacity change from 0 to 4096 [ 835.497479][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 835.613169][T11978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.105503][T11980] loop5: detected capacity change from 0 to 4096 [ 836.311818][T11980] ntfs3(loop5): mft corrupted [ 836.317200][T11980] ntfs3(loop5): Failed to load $MFT. [ 836.538462][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.085437][T12008] loop6: detected capacity change from 0 to 4096 [ 839.233956][T12008] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 839.477050][T12016] loop2: detected capacity change from 0 to 32768 [ 839.533743][T12016] syz.2.2699: attempt to access beyond end of device [ 839.533743][T12016] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=32768 [ 839.548362][T12016] Read error 10 at 0x0 [ 839.552858][T12016] read_mapping_page failed! [ 839.557668][T12016] jfs_mount: dbMount failed w/rc = -5 [ 839.567007][T12016] Mount JFS Failure: -5 [ 839.576623][T12016] jfs_mount failed w/return code = -5 [ 840.141198][T12008] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 842.324010][T12042] [U]  [ 842.951919][T12051] loop2: detected capacity change from 0 to 64 [ 842.982889][ T5805] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 843.935236][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.212305][T12066] loop6: detected capacity change from 0 to 1024 [ 845.198619][T12075] loop2: detected capacity change from 0 to 128 [ 845.343940][T12075] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 845.487032][T12075] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 846.272827][ T11] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 846.682882][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.735429][ T11] usb 3-1: config 81 has an invalid interface number: 13 but max is 0 [ 846.744951][ T11] usb 3-1: config 81 has an invalid descriptor of length 104, skipping remainder of the config [ 846.759127][ T11] usb 3-1: config 81 has no interface number 0 [ 846.766734][ T11] usb 3-1: config 81 interface 13 has no altsetting 0 [ 846.972640][ T11] usb 3-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 846.984097][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.994451][ T11] usb 3-1: Product: syz [ 847.002867][ T11] usb 3-1: Manufacturer: syz [ 847.008894][ T11] usb 3-1: SerialNumber: syz [ 847.032308][ T5805] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 847.042186][ T5805] Bluetooth: hci0: Injecting HCI hardware error event [ 847.050403][ T5805] Bluetooth: hci0: hardware error 0x00 [ 847.836875][ T11] qmi_wwan 3-1:81.13: bogus CDC Union: master=0, slave=1 [ 847.931734][ T11] qmi_wwan 3-1:81.13: probe with driver qmi_wwan failed with error -22 [ 848.062752][ T11] usb 3-1: USB disconnect, device number 17 [ 849.241140][ T5805] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 849.268153][T12101] loop2: detected capacity change from 0 to 1024 [ 849.377193][ T30] audit: type=1800 audit(849.349:105): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2738" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 849.686623][T11656] hfsplus: b-tree write err: -5, ino 4 [ 850.191804][T12112] loop6: detected capacity change from 0 to 1024 [ 850.364237][T12116] loop2: detected capacity change from 0 to 512 [ 850.463578][T12116] EXT4-fs: inline encryption not supported [ 850.663217][T12116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.909273][T11659] hfsplus: b-tree write err: -5, ino 4 [ 851.476768][ T30] audit: type=1326 audit(851.469:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.626318][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.700351][ T30] audit: type=1326 audit(851.529:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.730777][ T30] audit: type=1326 audit(851.529:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.762163][ T30] audit: type=1326 audit(851.529:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.791376][ T30] audit: type=1326 audit(851.529:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.813503][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.827781][ T30] audit: type=1326 audit(851.539:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 851.851694][ T30] audit: type=1326 audit(851.539:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421098e969 code=0x7ffc0000 [ 852.095102][T12130] loop1: detected capacity change from 0 to 1024 [ 854.161977][T12153] netlink: 'syz.2.2762': attribute type 1 has an invalid length. [ 854.173402][T12153] netlink: 'syz.2.2762': attribute type 3 has an invalid length. [ 855.036027][T12163] loop2: detected capacity change from 0 to 256 [ 855.553821][T12163] FAT-fs (loop2): Directory bread(block 64) failed [ 855.564539][T12163] FAT-fs (loop2): Directory bread(block 65) failed [ 855.576045][T12163] FAT-fs (loop2): Directory bread(block 66) failed [ 855.584988][T12163] FAT-fs (loop2): Directory bread(block 67) failed [ 855.596946][T12163] FAT-fs (loop2): Directory bread(block 68) failed [ 855.609889][T12163] FAT-fs (loop2): Directory bread(block 69) failed [ 855.618591][T12163] FAT-fs (loop2): Directory bread(block 70) failed [ 855.631501][T12163] FAT-fs (loop2): Directory bread(block 71) failed [ 855.641041][T12163] FAT-fs (loop2): Directory bread(block 72) failed [ 855.653718][T12163] FAT-fs (loop2): Directory bread(block 73) failed [ 857.774387][ T5847] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 858.026354][ T5847] usb 7-1: Using ep0 maxpacket: 16 [ 858.120798][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.136215][ T5847] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 858.145976][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.458077][T12191] loop2: detected capacity change from 0 to 32768 [ 858.490703][T12191] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (10 > 8) [ 858.490703][T12191] journal_seq_blacklist (size 2912): [ 858.490703][T12191] 0-10 8-8 21474967553-0 21474836481-0 21491613697-0 21508390913-0 21525168129-0 25769803778-2816 65795-25769803778 0-65794 25769803778-16 65796-34359738401 0-0 0-83 0-0 25-6152 248-8 2048-0 11-2816 0-1 16-240 0-0 0-0 0-0 0-0 0-0 0-0 0-0 0-30064771074 0-0 30064771074-1 1280-8589934603 1179915-0 18446744069414584320-18446744073709551615 18446744073709551615-0 14322110933576210885-16 0-0 110593-4295032843 1179915-0 18446744069414584320-18446744073709551615 18446744073709551615-0 8469488994664696954-24 0-0 155649-4295098379 1179915-0 18446744069414584320-18446744073709551615 18446744073709551615-0 11142619451731364831-24 0-0 167937-4295163915 1179915-0 18446744069414584320-18446744073709551615 18446744073709551615-0 2487609100058934834-9 0-0 126977-4295229451 1179915-0 18446744069414584320-18446744073709551615 18446744073709551615- [ 858.491988][T12191] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist [ 858.526001][ T5847] usb 7-1: config 0 descriptor?? [ 859.226778][ T5847] apple 0003:05AC:024B.0016: unknown main item tag 0x6 [ 859.242167][ T5847] apple 0003:05AC:024B.0016: invalid report_size 24312 [ 859.249381][ T5847] apple 0003:05AC:024B.0016: item 0 2 1 7 parsing failed [ 859.485383][ T5847] apple 0003:05AC:024B.0016: parse failed [ 859.496766][ T5847] apple 0003:05AC:024B.0016: probe with driver apple failed with error -22 [ 859.671774][ T5847] usb 7-1: USB disconnect, device number 6 [ 860.595056][T12208] tipc: Started in network mode [ 860.601002][T12208] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 860.619829][T12208] tipc: Enabled bearer , priority 10 [ 861.723514][T12219] overlayfs: conflicting options: nfs_export=on,index=off [ 861.735237][ T5847] tipc: Node number set to 4269801491 [ 861.772361][T12213] loop1: detected capacity change from 0 to 4096 [ 861.892054][T12221] loop6: detected capacity change from 0 to 256 [ 862.395266][T12221] FAT-fs (loop6): Directory bread(block 64) failed [ 862.402769][T12221] FAT-fs (loop6): Directory bread(block 65) failed [ 862.409893][T12221] FAT-fs (loop6): Directory bread(block 66) failed [ 862.416953][T12221] FAT-fs (loop6): Directory bread(block 67) failed [ 862.424231][T12221] FAT-fs (loop6): Directory bread(block 68) failed [ 862.431268][T12221] FAT-fs (loop6): Directory bread(block 69) failed [ 862.438468][T12221] FAT-fs (loop6): Directory bread(block 70) failed [ 862.446106][T12221] FAT-fs (loop6): Directory bread(block 71) failed [ 862.453445][T12221] FAT-fs (loop6): Directory bread(block 72) failed [ 862.463505][T12221] FAT-fs (loop6): Directory bread(block 73) failed [ 865.781677][T12244] loop5: detected capacity change from 0 to 128 [ 865.836871][T12244] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 866.086146][T12244] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 866.433703][T12244] EXT4-fs error (device loop5): __ext4_find_entry:1628: inode #2: comm syz.5.2804: checksumming directory block 0 [ 866.627925][T12245] loop6: detected capacity change from 0 to 32768 [ 866.649773][T12245] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 281474976710784, max 2147483583) [ 866.649773][T12245] members_v1 (size 64): [ 866.649773][T12245] Device: 0 [ 866.649773][T12245] Label: (none) [ 866.649773][T12245] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 866.649773][T12245] Size: 0 [ 866.649773][T12245] read errors: 0 [ 866.649773][T12245] write errors: 0 [ 866.649773][T12245] checksum errors: 0 [ 866.649773][T12245] seqread iops: 0 [ 866.649773][T12245] seqwrite iops: 0 [ 866.649773][T12245] randread iops: 0 [ 866.649773][T12245] randwrite iops: 0 [ 866.649773][T12245] Bucket size: 0 [ 866.649773][T12245] First bucket: 0 [ 866.649773][T12245] Buckets: 281474976710784 [ 866.649773][T12245] Last mount: 1714681267 [ 866.649773][T12245] Last superblock write: 0 [ 866.649773][T12245] State: rw [ 866.649773][T12245] Data allowed: journal,btree,user [ 866.649773][T12245] Has data: (none) [ 866.649773][T12245] Btree allocated bitmap blocksize:1 [ 866.649773][T12245] Btree allocated bitmap: 00000000000000000000000000000000000000000000000000000000000000 [ 866.650897][T12245] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 867.153226][T12250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2807'. [ 867.333287][ T9850] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 867.969111][T12258] loop5: detected capacity change from 0 to 256 [ 868.043469][T12258] exfat: Deprecated parameter 'utf8' [ 868.304300][T12258] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 869.004386][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 869.229327][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.229502][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.229644][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 869.229864][ T11] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.230014][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.265271][ T11] usb 7-1: config 0 descriptor?? [ 869.538438][T12270] loop1: detected capacity change from 0 to 256 [ 869.765138][ T11] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xe [ 869.765344][ T11] plantronics 0003:047F:FFFF.0017: item fetching failed at offset 12/15 [ 869.771378][ T11] plantronics 0003:047F:FFFF.0017: parse failed [ 869.795461][ T11] plantronics 0003:047F:FFFF.0017: probe with driver plantronics failed with error -22 [ 869.878474][T12270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 870.018269][ T11] usb 7-1: USB disconnect, device number 7 [ 870.491089][T12272] loop5: detected capacity change from 0 to 4096 [ 870.532650][T12272] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 872.036812][T12282] loop6: detected capacity change from 0 to 32768 [ 872.148527][T12282] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 872.202085][T12282] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 872.202085][T12282] allowing incompatible features above 0.0: (unknown version) [ 872.236237][T12282] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 872.246026][T12282] bcachefs (loop6): Version upgrade required: [ 872.246026][T12282] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 872.246026][T12282] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 872.246026][T12282] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 872.479151][T12282] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree alloc level 0/0 [ 872.479279][T12282] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 872.479407][T12282] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 872.531726][T12282] bcachefs (loop6): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:31:2048 len 0 ver 0: [ 872.531842][T12282] gen 0 oldest_gen 0 data_type btree [ 872.531916][T12282] journal_seq_nonempty 4 [ 872.531985][T12282] journal_seq_empty 0 [ 872.532056][T12282] need_discard 1 [ 872.532124][T12282] need_inc_gen 1 [ 872.532195][T12282] dirty_sectors 256 [ 872.532270][T12282] stripe_sectors 0 [ 872.532340][T12282] cached_sectors 0 [ 872.532411][T12282] stripe 0 [ 872.532478][T12282] stripe_redundancy 0 [ 872.532548][T12282] io_time[READ] 1 [ 872.532619][T12282] io_time[WRITE] 512 [ 872.532685][T12282] fragmentation 0 [ 872.532753][T12282] bp_start 8 [ 872.532816][T12282] [ 872.532878][T12282] nonzero snapshot, deleting [ 872.625611][T12282] bcachefs (loop6): flagging btree alloc lost data [ 872.625770][T12282] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 872.811505][T12282] bcachefs (loop6): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 873.322293][T12282] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree freespace level 0/0 [ 873.322416][T12282] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 873.322558][T12282] node offset 16/32 bset u64s 13 bset byte offset 120: keys out of order: u64s 5 type set 2199023255552:31:0 len 1 ver 0 > u64s 5 type deleted 0:32:0 len 0 ver 0, fixing [ 873.367108][T12282] bcachefs (loop6): btree_node_read_work: rewriting btree node at due to error [ 873.367108][T12282] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 873.420496][T12282] bcachefs (loop6): check_topology... done [ 873.429580][T12282] bcachefs (loop6): accounting_read... done [ 873.476566][T12282] bcachefs (loop6): alloc_read... done [ 873.486815][T12282] bcachefs (loop6): snapshots_read... done [ 873.494053][T12282] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 873.506968][T12282] bcachefs (loop6): done starting filesystem [ 873.955048][T10240] bcachefs (loop6): shutting down [ 874.251630][T10240] bcachefs (loop6): shutdown complete [ 874.285185][T12307] loop1: detected capacity change from 0 to 512 [ 874.392184][T12307] EXT4-fs: Ignoring removed nobh option [ 874.716901][T12307] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2830: invalid indirect mapped block 256 (level 2) [ 874.780812][T12307] EXT4-fs (loop1): 2 truncates cleaned up [ 874.789242][T12307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.721780][ T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 876.008413][ T11] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 876.018642][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.027233][ T11] usb 6-1: Product: syz [ 876.031877][ T11] usb 6-1: Manufacturer: syz [ 876.036760][ T11] usb 6-1: SerialNumber: syz [ 876.051249][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.113777][ T11] usb 6-1: config 0 descriptor?? [ 876.167426][ T11] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 876.610390][ T11] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 876.846235][ T5855] usb 6-1: USB disconnect, device number 5 [ 879.037927][T12344] CUSE: DEVNAME unspecified [ 879.303024][T12345] loop2: detected capacity change from 0 to 2048 [ 879.529127][T12345] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 879.537475][T12345] UDF-fs: Scanning with blocksize 512 failed [ 879.752428][T12345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.978008][ T30] audit: type=1800 audit(879.949:113): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2847" name="file1" dev="loop2" ino=818 res=0 errno=0 [ 880.648839][T12356] Zero length message leads to an empty skb [ 881.691712][T12367] process 'syz.0.2855' launched '/dev/fd/3' with NULL argv: empty string added [ 882.037977][T12363] loop6: detected capacity change from 0 to 32768 [ 882.064852][T12363] (syz.6.2832,12363,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 882.073517][T12363] (syz.6.2832,12363,0):ocfs2_read_locked_inode:535 ERROR: status = -12 [ 882.083580][T12363] (syz.6.2832,12363,0):ocfs2_init_global_system_inodes:452 ERROR: status = -12 [ 882.093145][T12363] (syz.6.2832,12363,0):ocfs2_init_global_system_inodes:476 ERROR: status = -12 [ 882.102629][T12363] (syz.6.2832,12363,0):ocfs2_initialize_super:2198 ERROR: status = -12 [ 882.111770][T12363] (syz.6.2832,12363,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 883.033625][ T5805] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 884.686763][T12383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2864'. [ 885.951827][ T30] audit: type=1326 audit(885.859:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.5.2871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9d78e969 code=0x0 [ 887.111080][T12406] loop2: detected capacity change from 0 to 1024 [ 889.631078][ T5847] kernel write not supported for file /adsp1 (pid: 5847 comm: kworker/1:3) [ 890.832478][T12440] loop6: detected capacity change from 0 to 1024 [ 891.626412][T11654] hfsplus: b-tree write err: -5, ino 4 [ 891.653032][T12441] loop5: detected capacity change from 0 to 4096 [ 892.237043][T12441] ntfs3(loop5): ino=1a, mi_enum_attr [ 892.243086][T12441] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 892.539215][T12457] loop2: detected capacity change from 0 to 1024 [ 892.838741][T12457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.293649][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 893.499411][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.503651][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.523849][ T5847] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 893.536902][ T5847] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 893.547854][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.788450][ T5847] usb 2-1: config 0 descriptor?? [ 893.827964][T12472] loop5: detected capacity change from 0 to 16 [ 894.544776][ T5847] Bluetooth: Can't get version to change to load ram patch err [ 894.556284][ T5847] Bluetooth: Loading sysconfig file failed [ 894.569304][ T5847] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 894.616002][T12476] loop6: detected capacity change from 0 to 128 [ 894.654177][T12476] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 894.773505][ T5847] usb 2-1: USB disconnect, device number 11 [ 894.841198][T12476] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 895.911971][T12486] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2911'. [ 897.161597][ T5796] Bluetooth: hci5: command 0x0406 tx timeout [ 897.617222][T12504] loop6: detected capacity change from 0 to 2048 [ 897.794900][T12504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.847419][T12511] loop2: detected capacity change from 0 to 64 [ 898.308790][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.741554][T12518] loop5: detected capacity change from 0 to 256 [ 899.126242][ T5847] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 899.310901][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 899.395221][ T5847] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 899.405147][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.493677][ T5847] usb 1-1: config 0 descriptor?? [ 900.977990][ T5847] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 900.989026][ T5847] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 900.996934][ T5847] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 901.006261][ T5847] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 901.023385][ T5847] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 901.220030][ T5847] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v1.01 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 901.345107][ T5847] usb 1-1: USB disconnect, device number 16 [ 902.399261][T12535] fido_id[12535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 902.688539][T12545] tipc: Started in network mode [ 902.694738][T12545] tipc: Node identity , cluster identity 4711 [ 903.041545][T12553] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2940'. [ 903.972468][T12561] netlink: 'syz.5.2944': attribute type 29 has an invalid length. [ 903.994646][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2945'. [ 904.004918][T12562] netlink: 'syz.1.2945': attribute type 2 has an invalid length. [ 904.016050][T12562] netlink: 'syz.1.2945': attribute type 1 has an invalid length. [ 904.024219][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 904.208193][T12561] netlink: 'syz.5.2944': attribute type 29 has an invalid length. [ 905.372021][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.845102][T12574] netlink: 'syz.2.2950': attribute type 16 has an invalid length. [ 905.860784][T12573] loop5: detected capacity change from 0 to 512 [ 906.117394][T12573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.712165][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.730902][T12586] loop1: detected capacity change from 0 to 128 [ 906.790972][ T5847] syz_tun: tun_net_xmit 90 [ 906.880717][T12586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.899139][ T5847] syz_tun: tun_net_xmit 90 [ 907.695479][ T5806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.470774][ T5847] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 910.679240][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.696222][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.718785][T12633] Bluetooth: MGMT ver 1.23 [ 910.763063][ T5847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.772992][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.784633][ T5847] usb 6-1: Product: syz [ 910.789063][ T5847] usb 6-1: Manufacturer: syz [ 910.796690][ T5847] usb 6-1: SerialNumber: syz [ 911.402343][ T5847] usb 6-1: cannot find UAC_HEADER [ 911.577197][ T5847] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 911.809580][ T5847] usb 6-1: USB disconnect, device number 6 [ 912.097299][T11196] udevd[11196]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.619168][T12641] loop2: detected capacity change from 0 to 40427 [ 912.631938][T12641] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 912.642047][T12641] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 912.660000][T12641] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3fffff [ 912.690762][T12641] F2FS-fs (loop2): invalid crc value [ 913.109655][T12641] F2FS-fs (loop2): Start checkpoint disabled! [ 913.126136][T12641] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 913.133760][T12641] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 913.641917][T12656] loop5: detected capacity change from 0 to 512 [ 914.163672][T12656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.294731][T12656] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #2: comm syz.5.2985: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 914.404011][T12656] EXT4-fs (loop5): Remounting filesystem read-only [ 914.953515][ T9850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.621830][T12681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2993'. [ 915.641715][T12679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2993'. [ 916.399703][T12687] loop1: detected capacity change from 0 to 256 [ 916.463117][T12687] exfat: Deprecated parameter 'namecase' [ 916.642926][T12687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 916.865166][ T5847] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 916.919595][T12687] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 917.090468][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 917.115703][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 917.201517][ T5847] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 917.211264][ T5847] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 917.219740][ T5847] usb 6-1: Product: syz [ 917.227437][ T5847] usb 6-1: Manufacturer: syz [ 917.232479][ T5847] usb 6-1: SerialNumber: syz [ 917.384443][ T5847] usb 6-1: config 0 descriptor?? [ 917.459791][ T5847] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 917.825636][ T5847] gspca_zc3xx: reg_w_i err -71 [ 918.330715][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 918.453409][ T5847] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 918.460605][ T5847] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 918.541416][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 918.563230][ T5847] usb 6-1: USB disconnect, device number 7 [ 918.604102][ T5855] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 918.612717][ T5855] usb 2-1: config 0 has no interface number 0 [ 918.711377][ T5855] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 918.721158][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.729653][ T5855] usb 2-1: Product: syz [ 918.734295][ T5855] usb 2-1: Manufacturer: syz [ 918.739166][ T5855] usb 2-1: SerialNumber: syz [ 918.936731][ T5855] usb 2-1: config 0 descriptor?? [ 919.019603][ T5855] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 919.030343][ T5855] usb 2-1: selecting invalid altsetting 1 [ 919.036353][ T5855] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 919.226899][ T5855] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 919.238437][ T5855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 919.247422][ T5855] usb 2-1: media controller created [ 919.463169][T12711] TCP: TCP_TX_DELAY enabled [ 919.550280][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 919.576017][T12714] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 919.994088][T12712] loop2: detected capacity change from 0 to 2048 [ 920.240956][T12717] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 920.361361][T12701] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 920.412275][ T5855] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 920.424425][ T5855] zl10353_read_register: readreg error (reg=127, ret==-32) [ 921.098598][ T5855] usb 2-1: USB disconnect, device number 12 [ 923.599032][T12750] netlink: 'syz.6.3026': attribute type 29 has an invalid length. [ 924.365600][T12737] Bluetooth: hci5: command 0x0406 tx timeout [ 924.415896][T12760] loop6: detected capacity change from 0 to 1024 [ 924.434537][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 924.441309][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 924.460486][T12760] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 924.473920][T12760] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 924.592119][T12760] JBD2: no valid journal superblock found [ 924.598344][T12760] EXT4-fs (loop6): Could not load journal inode [ 924.649250][T12769] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 924.708331][T12771] loop5: detected capacity change from 0 to 128 [ 924.713325][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 924.727709][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 924.824925][T12771] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 924.880918][T12771] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 925.217929][T12762] ceph: No mds server is up or the cluster is laggy [ 925.264662][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 925.271511][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 926.685550][T12788] loop6: detected capacity change from 0 to 256 [ 928.788938][T12802] loop6: detected capacity change from 0 to 4096 [ 928.873071][T12802] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 930.591413][T12819] loop1: detected capacity change from 0 to 4096 [ 930.750588][T12826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 931.604005][ T1887] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 931.816564][ T1887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.828337][ T1887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.842219][ T1887] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 931.855766][ T1887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.051667][ T1887] usb 1-1: config 0 descriptor?? [ 932.591262][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.598581][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.613639][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.622188][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.629763][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.640344][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 932.647499][ T1887] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 933.252750][ T1887] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 933.346326][ T1887] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device [ 933.357519][ T1887] arvo 0003:1E7D:30D4.0019: couldn't install keyboard [ 933.485120][ T1887] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71 [ 933.567355][ T1887] usb 1-1: USB disconnect, device number 17 [ 934.175666][T12851] fido_id[12851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 935.408738][T12873] loop1: detected capacity change from 0 to 512 [ 935.641284][T12873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.214217][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.835140][T12891] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3086'. [ 936.857792][T12889] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3086'. [ 936.923520][T12890] loop5: detected capacity change from 0 to 256 [ 937.102480][T12893] loop6: detected capacity change from 0 to 512 [ 937.173769][T12893] EXT4-fs: Ignoring removed orlov option [ 937.221365][T12890] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 937.246163][T12893] EXT4-fs (loop6): Test dummy encryption mode enabled [ 937.367055][T12893] EXT4-fs error (device loop6): dx_probe:793: inode #2: comm syz.6.3088: Attempting to read directory block (0) that is past i_size (256) [ 937.561087][T12893] EXT4-fs (loop6): Remounting filesystem read-only [ 937.567928][T12893] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 937.583171][T12893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.865079][T12901] loop1: detected capacity change from 0 to 256 [ 938.057900][T12905] loop2: detected capacity change from 0 to 256 [ 938.129638][T10240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.435296][T12905] syz.2.3093: attempt to access beyond end of device [ 938.435296][T12905] loop2: rw=2051, sector=256, nr_sectors = 288 limit=256 [ 939.034507][T12907] loop6: detected capacity change from 0 to 2048 [ 939.317622][T12907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.009459][T12913] loop1: detected capacity change from 0 to 4096 [ 940.059534][T12913] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 940.450577][T12913] ntfs3(loop1): ino=19, mi_enum_attr [ 940.456291][T12913] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 940.526140][T12913] ntfs3(loop1): ino=18, mi_enum_attr [ 940.726676][ T30] audit: type=1800 audit(940.719:115): pid=12913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3097" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 941.747157][T12934] loop6: detected capacity change from 0 to 128 [ 941.858797][T12934] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 941.937832][T12933] loop5: detected capacity change from 0 to 2048 [ 941.953275][T12933] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 942.219704][T12943] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 942.849658][T10240] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 945.657660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 946.932223][T12987] sp0: Synchronizing with TNC [ 947.228153][T12996] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.918725][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3135'. [ 948.220436][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 948.372442][T13008] loop1: detected capacity change from 0 to 128 [ 948.390666][T13006] loop2: detected capacity change from 0 to 1024 [ 948.418612][T13008] EXT4-fs: Ignoring removed nobh option [ 948.421014][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 948.501443][ T11] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 948.511702][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.520007][ T11] usb 6-1: Product: syz [ 948.525342][ T11] usb 6-1: Manufacturer: syz [ 948.530340][ T11] usb 6-1: SerialNumber: syz [ 948.623140][T13008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 948.639918][T13006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.713795][ T11] usb 6-1: config 0 descriptor?? [ 948.758920][T13012] loop6: detected capacity change from 0 to 1024 [ 948.767393][ T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 948.767537][ T11] usb 6-1: setting power ON [ 948.780364][ T30] audit: type=1800 audit(948.749:116): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3138" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 948.780794][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 948.951284][T13004] dvb-usb: bulk message failed: -22 (3/0) [ 949.064046][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 949.148684][ T11] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 949.157811][ T11] usb 6-1: media controller created [ 949.344293][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.435763][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.548276][T11659] hfsplus: b-tree write err: -5, ino 4 [ 949.573813][ T5806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 949.607533][ T11] usb 6-1: selecting invalid altsetting 6 [ 949.615485][ T11] usb 6-1: digital interface selection failed (-22) [ 949.624176][ T11] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 949.661630][ T11] usb 6-1: setting power OFF [ 949.666512][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 949.673688][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 949.683468][ T11] (NULL device *): no alternate interface [ 950.285001][ T11] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 950.470324][ T11] usb 6-1: USB disconnect, device number 8 [ 952.388649][T13050] loop6: detected capacity change from 0 to 256 [ 952.798453][T13050] FAT-fs (loop6): Directory bread(block 64) failed [ 952.807278][T13050] FAT-fs (loop6): Directory bread(block 65) failed [ 952.814640][T13050] FAT-fs (loop6): Directory bread(block 66) failed [ 952.824624][T13050] FAT-fs (loop6): Directory bread(block 67) failed [ 952.836183][T13050] FAT-fs (loop6): Directory bread(block 68) failed [ 952.844470][T13050] FAT-fs (loop6): Directory bread(block 69) failed [ 952.854586][T13050] FAT-fs (loop6): Directory bread(block 70) failed [ 952.861640][T13050] FAT-fs (loop6): Directory bread(block 71) failed [ 952.868606][T13050] FAT-fs (loop6): Directory bread(block 72) failed [ 952.875642][T13050] FAT-fs (loop6): Directory bread(block 73) failed [ 954.657874][T13076] loop2: detected capacity change from 0 to 8 [ 955.981085][ T11] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 956.919949][T13095] loop5: detected capacity change from 0 to 32768 [ 956.930566][T13095] bcachefs: bch2_fs_parse_param() Error parsing option str_hash: option_value [ 957.023037][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.033459][ T11] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 957.047496][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.153211][ T3713] ===================================================== [ 957.163910][ T3713] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 957.170798][ T11] usb 2-1: config 0 descriptor?? [ 957.172302][ T3713] n_tty_receive_buf_closing+0xfe/0x9a0 [ 957.172440][ T3713] n_tty_receive_buf_common+0x19d5/0x2540 [ 957.172562][ T3713] n_tty_receive_buf2+0x4c/0x60 [ 957.172742][ T3713] tty_ldisc_receive_buf+0xc6/0x2c0 [ 957.207764][ T3713] tty_port_default_receive_buf+0xd7/0x1a0 [ 957.214055][ T3713] flush_to_ldisc+0x44f/0xdb0 [ 957.219008][ T3713] process_scheduled_works+0xb9a/0x1d90 [ 957.228070][ T3713] worker_thread+0xedf/0x1590 [ 957.237042][ T3713] kthread+0xd5c/0xf00 [ 957.242832][ T3713] ret_from_fork+0x71/0x90 [ 957.247545][ T3713] ret_from_fork_asm+0x1a/0x30 [ 957.256186][ T3713] [ 957.258678][ T3713] Uninit was stored to memory at: [ 957.264390][ T3713] n_tty_receive_buf_closing+0xf7/0x9a0 [ 957.270280][ T3713] n_tty_receive_buf_common+0x19d5/0x2540 [ 957.276233][ T3713] n_tty_receive_buf2+0x4c/0x60 [ 957.287902][ T3713] tty_ldisc_receive_buf+0xc6/0x2c0 [ 957.294400][ T3713] tty_port_default_receive_buf+0xd7/0x1a0 [ 957.300632][ T3713] flush_to_ldisc+0x44f/0xdb0 [ 957.305586][ T3713] process_scheduled_works+0xb9a/0x1d90 [ 957.314582][ T3713] worker_thread+0xedf/0x1590 [ 957.319535][ T3713] kthread+0xd5c/0xf00 [ 957.325181][ T3713] ret_from_fork+0x71/0x90 [ 957.334225][ T3713] ret_from_fork_asm+0x1a/0x30 [ 957.339299][ T3713] [ 957.346056][ T3713] Uninit was created at: [ 957.350710][ T3713] __kmalloc_noprof+0x95f/0x1310 [ 957.355882][ T3713] __tty_buffer_request_room+0x3d4/0x7a0 [ 957.361901][ T3713] __tty_insert_flip_string_flags+0x157/0x6f0 [ 957.368242][ T3713] uart_insert_char+0x368/0x930 [ 957.376698][ T3713] serial8250_read_char+0x1ba/0x670 [ 957.382243][ T3713] serial8250_handle_irq+0x930/0x1110 [ 957.390902][ T3713] serial8250_default_handle_irq+0x116/0x2b0 [ 957.397180][ T3713] serial8250_interrupt+0xc8/0x400 [ 957.406985][ T3713] __handle_irq_event_percpu+0x11c/0xbf0 [ 957.413034][ T3713] handle_irq_event+0xe0/0x2a0 [ 957.418096][ T3713] handle_edge_irq+0x450/0xfd0 [ 957.423245][ T3713] __common_interrupt+0xa2/0x220 [ 957.428459][ T3713] common_interrupt+0x94/0xb0 [ 957.440613][ T3713] asm_common_interrupt+0x2b/0x40 [ 957.445895][ T3713] [ 957.448376][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: kworker/u8:14 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(undef) [ 957.465184][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.475630][ T3713] Workqueue: events_unbound flush_to_ldisc [ 957.481929][ T3713] ===================================================== [ 957.492166][ T3713] Disabling lock debugging due to kernel taint [ 957.498536][ T3713] Kernel panic - not syncing: kmsan.panic set ... [ 957.505149][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: kworker/u8:14 Tainted: G B 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(undef) [ 957.519338][ T3713] Tainted: [B]=BAD_PAGE [ 957.523644][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.533924][ T3713] Workqueue: events_unbound flush_to_ldisc [ 957.540022][ T3713] Call Trace: [ 957.543456][ T3713] [ 957.546537][ T3713] __dump_stack+0x26/0x30 [ 957.551114][ T3713] dump_stack_lvl+0x53/0x270 [ 957.555946][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 957.562050][ T3713] dump_stack+0x1e/0x25 [ 957.566453][ T3713] panic+0x4bd/0xd50 [ 957.570656][ T3713] kmsan_report+0x29d/0x2a0 [ 957.575445][ T3713] ? remove_rmap_item_from_tree+0x417/0x8e0 [ 957.581582][ T3713] ? __msan_warning+0x96/0x120 [ 957.586595][ T3713] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 957.592564][ T3713] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 957.598697][ T3713] ? n_tty_receive_buf2+0x4c/0x60 [ 957.603996][ T3713] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 957.609799][ T3713] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 957.616045][ T3713] ? flush_to_ldisc+0x44f/0xdb0 [ 957.621147][ T3713] ? process_scheduled_works+0xb9a/0x1d90 [ 957.627215][ T3713] ? worker_thread+0xedf/0x1590 [ 957.632333][ T3713] ? kthread+0xd5c/0xf00 [ 957.636849][ T3713] ? ret_from_fork+0x71/0x90 [ 957.641701][ T3713] ? ret_from_fork_asm+0x1a/0x30 [ 957.646904][ T3713] ? ret_from_fork_asm+0x1a/0x30 [ 957.652095][ T3713] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 957.658187][ T3713] ? update_curr_dl_se+0x1d7/0xb40 [ 957.663599][ T3713] ? kmsan_get_metadata+0x105/0x1b0 [ 957.669081][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 957.675169][ T3713] ? kmsan_get_metadata+0x105/0x1b0 [ 957.680660][ T3713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 957.686774][ T3713] ? kmsan_get_metadata+0x105/0x1b0 [ 957.692275][ T3713] __msan_warning+0x96/0x120 [ 957.697136][ T3713] n_tty_receive_buf_closing+0xfe/0x9a0 [ 957.702967][ T3713] n_tty_receive_buf_common+0x19d5/0x2540 [ 957.708924][ T3713] ? sched_clock_cpu+0x59/0xa80 [ 957.714076][ T3713] ? kmsan_get_metadata+0x105/0x1b0 [ 957.719647][ T3713] n_tty_receive_buf2+0x4c/0x60 [ 957.724800][ T3713] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 957.730640][ T3713] tty_ldisc_receive_buf+0xc6/0x2c0 [ 957.736114][ T3713] tty_port_default_receive_buf+0xd7/0x1a0 [ 957.742218][ T3713] flush_to_ldisc+0x44f/0xdb0 [ 957.747166][ T3713] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 957.753888][ T3713] ? __pfx_flush_to_ldisc+0x10/0x10 [ 957.759344][ T3713] process_scheduled_works+0xb9a/0x1d90 [ 957.765229][ T3713] worker_thread+0xedf/0x1590 [ 957.770199][ T3713] kthread+0xd5c/0xf00 [ 957.774528][ T3713] ? __pfx_worker_thread+0x10/0x10 [ 957.780126][ T3713] ? __pfx_kthread+0x10/0x10 [ 957.784997][ T3713] ret_from_fork+0x71/0x90 [ 957.789683][ T3713] ? __pfx_kthread+0x10/0x10 [ 957.794552][ T3713] ret_from_fork_asm+0x1a/0x30 [ 957.799610][ T3713] [ 957.803124][ T3713] Kernel Offset: disabled [ 957.807561][ T3713] Rebooting in 86400 seconds..