last executing test programs: 4.650651398s ago: executing program 3 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x12, 0x48, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x67, 0x0, 0x0, 0x40000005}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) 4.606576531s ago: executing program 1 (id=3314): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000002c0)) 4.43086168s ago: executing program 3 (id=3316): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0xfffffffffffffe36, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "97aa"}, {0x10, 0x113, 0x0, "5110f3208c8d4427b326582e8fe1d50754ed7d3a9d3a096dd0f2176bc62b9241462d9a983f310ee8d78219fc7c4a7c813e1ab11ce5795b12c1ac9e06ec3c665c4b6a0ba577426d27c26f71aca9db2a9313fb0f7c58a3d9b788c06b6edd36f08897b6883a721dc64444f76be9851be1cdfb0f4b47a07a0f33e82b324baab8c3d462480be7e85f422a71cd6aff7e4bc515538c58b665c3d4395121330000000000"}, {0x10, 0x117}], 0x38}, 0x24047450) 4.27103706s ago: executing program 3 (id=3318): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/154, 0x9a}], 0x1, 0x2, 0x1) 4.068646812s ago: executing program 3 (id=3321): syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x61d3, &(0x7f0000008140)="$eJzs3c1vHGcdB/DfvvqltLV6qEqFkJuWl1KaxEkJgQJND3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0XER09FbG2vr9aLLxyyH9/9499/98Mn3vrbHwbn/vunO73XJ6139+6v/vPne0fbZgAAAChNVVVVJ33Mfz59vu+23SkAYCry63+V5OWnvv71P9/6yyz1R61Wq9XqKdRN1Xj3mkVEbDRvU79ncDgeAE6Yjfi47S7QIvkXrR8RT7TdCWCmddruAMdia3t9tZPy7TRfD5Z32/O5IPvy3+g8uL5j0vQgo+eYTOvxtRm9eGZCfxam1IdZkvPvjuZ/bbd9mNY77vynZVL+w91Ln4qT8++N5j/i9OTfHZt/qXL+/UfKvyd/AAAAAACYYfn//5daPv47d/RNOZRPOv67PKU+AAAAAAAAAMDjdtTx/x4w/h8AAADMrPqzeu03T+0tm/RdbPXyq52IJ0fWBwqTLpZZbLsfAAAAAAAAAAAAAFCS/u45vFc7EYOIeHJxsaqq+qdptH5UR739SVf69kPJ2n6SBwCAXR89NXItfydiPiKupu/6GywuLlbV/MJitVgtzOX3s8O5+Wqh8bk2T+tlc8NDvCHuD6v6l803btd00Oflg9pHf199X8Oqd4iOPSaD9Nec0NxS2ACQ7L4abXlFOmWq6ulJbz5gH/v/KbQUS20/rph9bT9MAQAAgONXVVXVSV/n/Xw65t9tu1MAwFTk1//R4wJHqrsT2iMez+9Xq9VqtVr9qeqmarx7zSIiNpq3qd8zGI4fAE6Yjfi47S7QIvkXrR8Rz7XdCWCmddruAMdia3t9tZPy7TRfD9L47vlckH35b3R2bpdvP256kNFzTKb1+NqMXjwzoT/PTqkPsyTn3x3N/9pu+zCtd9z5T8uk/Ic7l8yVJ+ffG81/xOnJvzs2/1Ll/PuPlH9P/gAAAAAAMMPy//8vOf6bNxkAAAAAAAAATpyt7fXVfN1rPv7/uTHruf7zdMr5dx41/4U0L/8TLeffHcn/yyPr9Rrz99/c2///vb2++vs7//psnh42/7k800mPrE56RHTSPXX6aXqUrXvY5qA3rO9p0On2+umcn2rwTtyIm7EW5/et201/j732lX3tdU8H+9ov7GvvP9R+cV/7IH3vQLWQ28/GavwkbsbbO+1129wB2z9/QHt1QHvOv+f5v0g5/37jp85/MbV3Rqa1+x92H9rvm9Nx93Plxud/ef74N+dAm9F7sG1N9fadaaE/O3+TJ4bxs9trt87evX7nzq2VSJN9Sy9EmjxmOf/Bzs/c3vP/i7vt+Xm/ub/e/3D4yPnPis3oT8z/xcZ8vb0vT7lvbcj5D9NPzv/t1D5+/z/J+U/e/19poT8AAAAAAAAAAAAAAADwSaqq2rlE9EpEXErX/7R1bSYAMF1XIu5Fej9Qy8vVarVarVafvrqpGu+NZhERf23e5lJE/GLcLwMAZtn/IuIfbXeC1si/YPn7/urpS213Bpiq2+9/8KPrN2+u3brddk8AAAAAAAAAgE8rj/+53Bj/+aWIWBpZb9/4r2/G8lHH/+znmQcDjD7mgb4n2OwOe93GcOMvxM743Gcnjf99Jh4e/zuPidtrbscEgwPahwe0zx3QPj926V5aYy/0aMj5v9AY77zO//mR4ddLGP91dMz7EuT8zzQez3X+XxpZr5l/9duZy3/jsCtuRndf/ufuvPfTc7ff/+DVG+9df3ft3bUfX1xZOX/x0qXLly+fe+fGzbXzu/8eT69nQM4/j33tPNCy5Pxz5vIvS87/C6mWf1ly/l9MtfzLkvPP7/fkX5acf/7sI/+y5PxfTrX8y5Lz/0qq5V+Wre31uTr/V1It/7Lk/f+rqZZ/WXL+r6Za/mXJ+Z9NtfzLkvM/l+pD5O/r4U+RnH8+wmX/L0vOfyXV8i9Lzv9CquVflpz/xVTLvyw5/9dSLf+y5Py/lmr5lyXnfynV8i9Lzv/rqZZ/WXL+l1Mt/7Lk/L+RavmXJef/zVTLvyw5/9dTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5v5Fq+Zdl7/v/zZgxYybPtP3MBAAAAAAAAAAAAACMmsbpxG1vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TevHUIMhODkb2CTmBCSJbu2E7/wb4oJrw1QCiQU+oLjetdmwW947RIokk0DJRJGpRVV04u2gFAbqaqIKi5oRWkuqr5clfaC3lRUlZAaVQEFVKS2otlq5jzP45nZ2Zld73h99jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnH+s42iKJp/Wn9tL4oXND/eOrW9ddnrrvUWAgAAAOv1v62/n7shXXBoFTdqW+ZvX/EPX19aWloq3j/6O+NfXFpKV0wVxfiWomhdFz31bx9otC8TPFZMNkbaPh8ZsPrRAdePDbh+fMD1EwOu3zLg+skB1y/bActsLX8e07qzXa0Pt5e7tLixGG9dt6vHrR5rbBkZiT/LaWm0brM0fqxYKE4U88Vsx/Llso3W8t+8tbmutxVxXSNt69rZPEJ++MmjcRsaYR/v6ljX5fuMvv+GYupHP/zk0T869+zNvebA3dBxf+V23nlbczs/HS4pt7VRbEn7JG7nSNt27uzxnIx2bGejdbvmx93b+dwqt3P08mZuqO7nfLIYaX387dZ+Gmv/sV7aTzvDZf91e1EUFy9vdvcyy9ZVjBTbOi4Zufz8TJZHZPM+mofSi4uxNR2nt67iOG3OuV2dx2n3ayI+/7eG242tsA3tT9P3PzWx7Hlf63EaNR/1Sq+V7mNw2K+VqhyD8bj4dutBP97zGNwVHv8n71j5GOx57PQ4BtPjbjsGbxt0DI5MjLa2OT0JjdZtLh+DuzuWH22tqdGaz9zR/xicOXfyzMzixz/x2oWTR47PH58/tXf37tm9+/YdOHBg5tjCifnZ8u8r3NvVt60YSa+B28K+i6+BV3ct236oLn15eK/DyT6vw+1dyw77dTjW/eAaG/OCXH5Ml6+Nh5o7ffLSSLHCa6z1/Ny1/tdhetxtr8Oxttdhz68pPV6HY6t4HTaXOXPX6r5nGWv702sbrtbXgu1tx2D39yPdx+Cwvx+pyjE4GY6Lf7lr5a8FO8P2Pj691u9HRpcdg+nhhvee5iXp+/3JA63R67i8pXnFdRPF+cX5s/c8euTcubO7izA2xEvajpXu43Vb22Mqlh2vI2s+Xg8tvOLxW3pcvj3sq8nXNv+aXPG5ai5z7z39n6vWV7fe+7Pj0j1FGEO20fuz11fz5v5MWbLP/mwu8+mZ9X8vnnJp2/vv+ArvvzH3P1+uL93VY6PjY+XrdzTtnfGO9+POp2qs9d7VaK37uZnVvR+Phz8b/X58Y5/34x1dyw77/Xi8+8HF9+PGoJ92rE/38zkZjpMTs/3fj5vL7Niz1mNyrO/78e1hNsL+f01ICikXtR07Kx23aV1jY+PhcY3FNXQep3s7lh8P2ay5rif3XNlxeuft5X2Npkd32UYdp1Ndyw77OE3vVysdp41BP327Mt3P52Q4Lm7c2/84bS7z9L3rf+/cGj9se++cGHQMjo9ONLd5PB2E5fv90tZ4DN5THC1OFyeKuda1E63jqdFa1/R9qzsGJ8KfjX6v3NHnGLyza9lhH4Pp69hKx15jbPmDH4Lu53MyHBdP3Nf/GGwu86b9w/3e9c5wSVqm7XvX7p+vrfQzr1u6dtPV/JlXczv/en//n802lzlxYK05s/9+ujtccl2P/dT9+l3pNTVXbMx+2hG289kDK++n5vY0l/niwVUeT4eKorjw0QdaP+8N/77yZ+e/8/WOf3fp9W86Fz76wA+uP/Y3a9l+ADa/58uxrfxa1/YvU6v5938AAABgU4i5fyTMRP4HAACA2oi5P/6v8ET+BwAAgNqIuX8szCST/L/jTc8uPH+hSM38pSBen3bDg+VyseM6Gz6fWrqsefkDX53/8V9cWN26R4qi+MmDv9Zz+R0Pxu0qTYXtfOrNnZcvv+GFVa3/kYcvL9feX/9SuP/4eFZ7GPSq4M4WRfHNGz7fWs/UBy615tMPPtKa77n4+GPNZZ47WH4eb//MS8rlfz+Ufw8dO9Jx+2fCfvhemLNv770/4u2+duk1O/e/7/L64u0at72w9bCf+GB5v/H35HzhsXL5uJ9X2v6//NyTX2su/+irem//hZHe2/9kuN+vhvnfLy+Xb38Omp/H230mbH9cX7zdPV/5Vs/tf+qz5fJn3lIu90iYcf13hs93veXZhfb99WjjSMfjKt5aLhfXP/ud32xdH+8v3n/39k8evtSxP7qPj6f/qbyfma7l4+VxPdGfd62/eT/tx2dc/5O/8UjHfh60/qfe88zLm/fbvf67u5Yb7bp9929s+oPPfL7n+uL2HPrTMx2P59C7w+s4rP+JD4bjMVz/P099vmO90SPv7nz/ict/afuFjscTve1H5fqfev3x1vz3qR//3nUvuP6FF1/Z3HdF8e33lvc3aP3H//B0x/Z/+aa7Ws9HvD529LvXv5K4/rMfmz51evH8wlzbXm397px3lNuzZXLrtub23hDeW7s/P3z63Ifmz07NTs0WxVR9f4XeFftKmD8ox8W13v6uh8PzecvvfnPbHf/4uXj5Pz9UXn7p7eXXrVeH5b4QLt9ePn9LjXWu/4lbb2q9vhtPl5939NiHYOeu/ziwqgXD4+/+viAe72de+qHWfmhe1/q6EV/X69z+786V9/ONsF+Xwm9mvu2my+trXz7+boRL7y1f7+vef+FtLj6vfxye73d+r7z/uF3x8X43fB/zrR2d73fx+PjGhZHu+2/9Fo+L4f2kuFheH5eK+/vSczf13Lz4e0iKize3Pv/tdD83r+lhrmTx44szJxZOnX905tz84rmZxY9/4vDJ0+dPnTvc+l2ehz886PaX35+2td6f5ub33VvMbi2K4nQxuwFvWFdn+5sfrW77zzx8dG7/7B1z88eOnD927uEz82ePH11cPDo/t3jHkWPH5j826PYLc/fv3nNw7/4908cX5u4/cPDg3oPTC6dONzej3KgB9s1+ZPrU2cOtmyzef+/B3ffdd+/s9MnTc/P375+dnT4/6Patr03TzVv/6vTZ+RNHzi2cnJ9eXPjE/P27D+7bt2fgbwM8eebY4tTM2fOnZs4vzp+dKR/L1LnWxc2vfYNuTz0t/mv5/Wy3RvmL+Ip33b0v/X7Wpq9+asW7Khfp+gWiz4bfRfP3LzpzYDWfx9w/HmaSSf4HAACAHMTcPxFmIv8DAABAbcTcvyXMRP4HAACA2oi5fzLMJJP8r/+v/7+6/n95vf5/Xv3/Mx8te6Wbvf8f+/P6/3m4xv3/da9f/1//v379/9X35zf79uv/6/+zXNX6/zH3by2KLPM/AAAA5CDm/m1hJvI/AAAA1EbM/deFmcj/AAAAUBsx978gzCST/K//v6r+/55Bhav69/+d/1//v9ic/f/45Oj/Z2PN/fv3PdTxqf5/oP+v/6//r/+v/8+6ja94TY/+f+tX81/t/n/M/deHmWSS/wEAACAHMfe/MMxE/gcAAIDaiLn/hjAT+R8AAABqI+b+7WEmmeR//X/n/9f/1/9ff/+/c42V6v+v9/z/bRuj/785OP9/f/r/A1xx/39S/38z9v/Hh7v91e7/D9x8/X+uiqqd/z/m/heFmWSS/wEAACAHMfe/OMxE/gcAAIDaiLn/JWEm8j8AAADURsz9N4aZZJL/9f/1//X/9f9rff7/9fb/+57/v/xI/79a9P/70/8fwPn/8+r/D3n7q93/H/b5/8ff3H17/X96qVr/P+b+l4aZZJL/AQAAIAcx998UZiL/AwAAQG3E3P+yMBP5HwAAAGoj5v4dYSaZ5H/9f/1//X/9f/3/3usf3P8v6f9Xi/5/f/r/A+j/6//r/6+u/9/jm9/O/n/8aqn/n7uq9f9j7r85zCST/A8AAAA5iLn/ljAT+R8AAABqI+b+/xdmIv8DAABAbcTcvzPMJJP8r/+v/6//n1f//+4J/X/9/3rT/+9P/38A/X/9f/3/VZ7/f7m1nP9/y6A7ozaq1v+Puf/lYSaZ5H8AAADIQcz9rwgzkf8BAACgNmLuf2WYifwPAAAAtRFz/1SYSSb5X/+/Xv3/P/mrJ15Z6P/r/w9Yf037//Ew0P/PnP5/f/r/A+j/6//r/29I/598VK3/H3P/rWEmmeR/AAAAyEHM/beFmcj/AAAAUBsx998eZiL/AwAAQG3E3L8rzCST/K//X6/+f6T/r//fb/017f8n+v950//voe1Fqv8/gP6//n/2/f/43a/+P8NRtf5/zP2vCjPJJP8DAABADmLuvyPMRP4HAACA2oi5/9VhJvI/AAAA1EbM/XeGmWSS//X/9f/1//X/9f97r1//f3PS/+9vrf3/Cf1//X/9/8z6/87/z3BVrf8fc/9rwkwyyf8AAACQg5j77wozkf8BAACgNuL/3yz/36v8DwAAAHUUc/90mEkm+V//X/8/p/5/Q/9f/1//v/b0//tz/v8B9P/1/ze0///9js/69P8n2g73Fen/U0VV6//H3P/aMJNM8j8AAADkIOb+e8JM5H8AAACojZj7Z8JM5H8AAACojZj7Z8NMMsn/+v/6/zn1/53/X/9f/7/+9P/70/8fQP9f/79u5/8vCv1/rqmq9f9j7t8dZpJJ/gcAAIAcxNy/J8xE/gcAAIDaiLl/b5iJ/A8AAAC1EXP/vWEmmeR//X/9f/1//X/9/97rr3j/v6H/35v+f3/6/wPo/+v/163/7/z/XGNV6//H3H9fmEkm+R8AAAByEHP/vjAT+R8AAABqI+b+/WEmIf/3+n/dAAAAwOYSc/+BMJNM/v1f/78m/f9f/7uOdev/6//3W/9w+v9b9f/DdP7/aqlp/7/7ZXHF9P8H0P/X/9f/1/9nqKrW/4+5/2CYSSb5HwAAAHIQc//rwkzkfwAAAKiNmPv/f5iJ/A8AAAC1EXP/T4WZZJL/9f9r0v/vov+v/99v/c7/r/9fZzXt/w9Nrfr/I/r/+v/V2n79f/1/lrv6/f/40er6/zH33x9mkkn+BwAAgBzE3P/TYSbyPwAAANRGzP2vDzOR/wEAAKA2Yu4/FGZSt/z/st4X6//r/+v/6/9fnf7/64tuVez/Nw8e/f960f/vr1b9f+f/1/+v2Pbr/+v/s1zVzv8fc/8bwkzqlv8BAAAgYzH3PxBmIv8DAABAbcTc/8YwE/kfAAAAaiPm/jeFmWSS//X/9f/1//X/nf+/9/r1/zcn/f/+9P8H0P/X/9f/1/9nqKrW/4+5/81hJpnkfwAAAMhBzP1vCTOR/wEAAKA2Yu5/a5iJ/A8AAAC1EXP/28JMMsn/+v/6//r/+v/6/73Xr/+/Oen/96f/P4D+v/6//r/+P0NVtf5/zP0/E2aSSf4HAACAHMTc/2CYifwPAAAAtRFz/9vDTOR/AAAAqI2Y+98RZpJJ/tf/1//X/9f/1//vvX79/81J/78//f8B9P/1//X/9f+5EltXuqJq/f+Y+98ZZpJJ/gcAAIAcxNz/s2Em8j8AAADURsz97wozkf8BAACgNmLu/7kwk0zyv/6//n+1+v9LF9pvp/+v/18Mq//fvJH+fxb0//vT/x+gR/9/i/6//r/+v/4/V6xq/f+Y+98dZpJJ/gcAAIAcxNz/njAT+R8AAABqI+b+94aZyP8AAABQGzH3PxRmkkn+1//Psv8/EnvL1ev/O/+//r/z/+v/r4/+f3/6/wM4/7/+v/6//j9DVbX+f8z9D4eZZJL/AQAAIAcx978vzET+BwAAgNqIuf/nw0zkfwAAAKiNmPvfH2aSSf7X/8+y/1/h8//Xrf8/1nF85NT/n2x7PtNxqf+v/78B9P/70/8fQP9f/7/K/f9wNG9d4fb6/1RR1fr/Mfd/IMwkk/wPAAAAOYi5/xfCTOR/AAAAqI2Y+38xzET+BwAAgNqIuf+Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Oen/96f/P4D+v/5/lfv/A+j/U0VV6//H3P/LYSYrBr8f/OcqHiYAAABQITH3fzDMJJN//wcAAIAcxNx/OMxE/gcAAIDaiLn/kTCTTPK//n93/z+eUVX/X/9f/1//X/9/Mxpe//9l1xeF/r/+v/6//r/+v/4/61G1/n/M/UfCTDLJ/wAAAJCDmPt/JcxE/gcAAIDaiLn/aJiJ/A8AAAC1EXP/XJhJJvn/Gvb/x6vZ/3f+/yvt//9E/1//P9D/703/f2M4/39/+v8D6P/r/+v/6/8zVFXr/8fcPx9mkkn+BwAAgBpLPw6Ouf9YmIn8DwAAALURc//xMBP5HwAAAGoj5v4PhZlkkv+d/1//3/n/r0X/f6xjef3/kv6//v8w6P/3p/8/gP6//r/+v/4/Q1W1/n/M/QthJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/iTCTTPK//r/+f+79/0ZRXHT+f/3/XuvX/9+c9P/70/8fQP9f/39T9f+f+K32z/T/qaKq9f9j7j8ZZpJJ/gcAAIAcxNx/Ksz/Y+8+miQ7szoOp0TbIAL4CKxZsYSV+Ahs2RHBmsAJ4ZGE9yC8N8J7GO9HMxrvNd6PxnursZqJqAlVn3PUVZV1b3dXduW973mezaE7upRZrZJafyp+c4v9DwAAAMPI3f8jcYv9DwAAAMPI3f+jcUuT/a//1/937/83e3n+/9Ffr/+/Rv+v/9+FE/39he2/7rQo/NT+/7u/5+4f1P/r//X/k/T/nv+v/+e4pfX/uft/LG5psv8BAACgg9z9Px632P8AAAAwjNz9PxG32P8AAAAwjNz9d8ctTfa//l//r//X/x/p/x/S/+v/183z/6fp/2fo//X/+n/9Pzu1tP4/d/9Pxi1N9j8AAAB0kLv/nrjF/gcAAIBh5O7/qbjF/gcAAIBh5O7/6bilyf7X/+v/9f9r6f8vef7/sc9H/6//30b/P03/P0P/r//X/+v/2aml9f+5+38mbmmy/wEAAKCD3P0/G7fY/wAAADCM3P0/F7fY/wAAADCM3P0/H7c02f9d+v9Hjv1Y/6//v/73ax39/zk9/1//r/9fuQc3T/47Qf9/kv5/xkz/v9no/6fccD+//dNbz/s/hf5f/89JS+v/c/f/QtzyfZvNpVv9JAEAAIBFyd3/i3FLk+//AwAAQAe5+++NW+x/AAAAGEbu/vvilib7v0v/f5z+X/9//e+X/l//v+319f/r5Pn/087e/3/Xd/zwD/Xt/z3/f5rn/++6/3/iK0P/z7otrf/P3X9/3NJk/wMAAEAHuft/KW6x/wEAAGAYuft/OW6x/wEAAGAYuft/JW5psv/1/6P1/99y5OOu6/8Paxf9v/5f/6//H53+f5rn/884/Nfc1fqh/l//7/n/+n/OZmn9f+7+X41bmux/AAAA6CB3/6/FLfY/AAAADCN3/6/HLfY/AAAADCN3/2/ELU32v/5/tP7/6Md5/n/1//d827Vfov/X/+v/B6f/n6b/nzHK8/9v8atm3/38Wd2u93+g/9f/c8uW1v/n7v/NuKXJ/gcAAIAOcvf/Vtxi/wMAAMAwcvf/dtxi/wMAAMAwcvf/TtzSZP/r//X/6+j/8xU8/1//f/v7/6T/Xyf9/zT9/4xR+v9bpP/3/H/9P7u2tP4/d//vxi1N9j8AAAB0kLv/9+IW+x8AAACGkbv/9+MW+x8AAACGkbv/D+KWJvtf/6//X0f/f+bn/+v/9f+e/9+E/n+a/n+G/l//r//X/7NTS+v/c/c/ELc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/+X/9/hv7/wkb/r//X/y+M/n+a/n+G/l//r//X/7NTC+r/r/uoK5s/iVua7H8AAADoIHf/n8Yt9j8AAAAMI3f/n8Ut9j8AAAAMI3f/n8ctTfa//n8x/f9hzrfw/v/g5vr/q5vNZvD+3/P/T+3/r17397O+LvX/+v9zoP+fpv+fof/X/+v/9f/s1IL6/8Mf5+7/i7ilyf4HAACADnL3/2XcYv8DAADAMHL3/1XcYv8DAADAMHL3/3Xc0mT/6/8X0/8fWnj/7/n/+v8jf13P/79G/78s+v9p+v8Z+n/9v/5f/89OLa3/z93/N3HTpYu3/CkCAAAAC5O7/2/jlibf/wcAAIAOcvf/Xdxi/wMAAMBKPXDiZ3L3/33c0mT/6/932/9fuu7n9P/6/+NfH/p//b/+//bT/0/T/8/Q/+v/9f/6f3Zqaf1/7v5/iFua7H8AAADoIHf/g3GL/Q8AAADDyN3/j3GL/Q8AAADDyN3/T3FLk/2v//f8f/2//l//v/319f/rpP+fpv+fof/X/++3/7/85P+p/2cMN9H/Hxwc3Hvb+//c/f8ctzTZ/wAAANBB7v5/iVvsfwAAABhG7v5/jVvsfwAAABhG7v5/i1ua7H/9f9P+P7/U19X/37fZ6P/1//p//f80/f80/f8M/b/+3/P/9f/s1NKe/5+7/9/jlmPD786b+iwBAACAJcnd/x9xS5Pv/wMAAEAHufv/M26x/wEAAGAYufv/K25psv/1/037f8//1//r/8+7/398o/8/F6vo/6+e/vpL7//v1//r/ye06/+//3uP/FD/r/9v6fh/uB2ztP4/d/9/xy1N9j8AAAB0kLv/f+IW+x8AAACGkbv/f+MW+x8AAACGkbv//+KmC032v/5f/6//1//r/7e//jk////SZrPR/+/AKvr/CUvv/3fz/P/TY1H9v/5/ze9f/6//56Sl9f+5+/8/bmmy/wEAAKCD3P1PiVvsfwAAABhG7v6nxi32PwAAAAwjd//T4pYm+1//r//X/+v/h+//719F/+/5/zui/5+2jP7/dPp//f+a37/+X//PjdtX/5+7/+lxS5P9DwAAAB3k7n9G3GL/AwAAwDBy9z8zbrH/AQAAYBi5+58VtzTZ//p//f/N9P/5PvX/Y/X/lxfX/1858tdr8vx//f+O6P+n6f9n6P/1//r/B/T/7NLSnv+fu//ZcUuT/Q8AAAAd5O5/Ttz6f93a/wAAADCM3P3PjVvsfwAAABhG7v7nxS1N9r/+X//v+f/6/+Gf/6//b0X/P03/P0P/r//X/3v+Pzu1tP4/d//z45Ym+x8AAAA6yN3/grjF/gcAAIBh5O5/Ydxi/wMAAMAwcvc/FLc02f/6f/2//l//r/+/9vdQ/z8G/f+08+n/r+r/9f/Vz98R/xTo//X/cx/PmJbW/+fuf1Hc0mT/AwAAQAe5+18ct9j/AAAAMIzc/Q/HLfY/AAAArNKFLT+Xu/8lcUuT/a//1/+frf8/+rr6f/3/ZqX9/7bX1/+v0176//yi0P97/n/o0/9/55Efre35/8f//NL/6//ZvaX1/7n7Xxq3NNn/AAAA0EHu/pfFLfY/AAAADCN3/8vjFvsfAAAAhpG7/xVxS5P9r//X/3v+v/5f/7/99fX/6+T5/9P0/zP0//P9/Lb/Qa2wtv5/1+9f/6//56Sl9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAAwjd/+r4xb7HwAAAIZxuPszLmu4//X/+n/9v/5f/7/99fX/66T/n6b/n6H/32s/v/b3r//X/3PS0vr/1xx+1JXNa+OWJvsfAAAAOsjd/7q4xf4HAACAYeTuf33cYv8DAADAMHL3vyFuabL/9f/6/3X0/wcHB/c26v/zHzT9/6H5/v9R/T9F/z9N/z9D/6//1//r/9mppfX/ufsfiVua7H8AAADoIHf/G+MW+x8AAACGkbv/TXGL/Q8AAADDyN3/5rilyf7X/y+g/7+i//f8f8//33j+v/5/R/T/0/T/M0bs/6/c+Ke/737+rPb9/vX/+n9OWlr/n7v/LXFLk/0PAAAAHeTuf2vcYv8DAADAMHL3vy1usf8BAABgGLn73x63NNn/+v/z6/+f+L3r8vz/q5vt71//r//X/+v/bzf9/zT9/4wR+/+bsO9+fu3vX/+v/+ek7P/vOPZn4r76/9z974hbjg6/i7fyuQIAAADLkLv/nXFLk+//AwAAQAe5+98Vt9j/AAAAMIzc/e+OW5rsf/3/Ap7/P2D/7/n/278+9P+L7v/v1P+PQf8/Tf8/Q/+v/99D/59/rozV/+dXs/6/u+z/j9tX/5+7/z1xS5P9DwAAAB3k7n9v3GL/AwAAwDBy978vbrH/AQAAYBi5+x+NW67b/9va7lHo//X/+n/9v/5/++vr/9dJ/z/tRvv/y5uz9f9J/6//1/97/r/+v7el9f+5+98ft/j+PwAAAKzOxVN+Pnf/B+IW+x8AAACGkbv/g3GL/Q8AAADDyN3/objlsTv39ZbOlf5f/z9E///wtx5+rP5f/7/R/7en/5/m+f8z9P+76Ofv0v+P0f9vNvp/zm5p/X/u/g/HLb7/DwAAAMPI3f+RuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v8z9v+Haebe+//4WP2//n+j/29P/z9N/z/jNvT/F4/+9Tv0/57/P0j/7/n/7MLS+v/c/R+PW5rsfwAAAOggd/8n4hb7HwAAAIaRu/+TcYv9DwAAAMPI3f+puKXJ/t9b/x+/1fr/1ff/y3j+f3ys/l//v9H/t6f/n6b/n+H5//p//b/+n51aWv+fu//TcUuT/Q8AAAAd5O7/TNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f+e/6//1//r//X/219f/79O+v9p+v/t6m+U/l//r//X/7NTS+v/c/d/Pm5psv8BAACgg9z9X4hb7H8AAAAYRu7+x+IW+x8AAACGkbv/i3FLk/2v/9f/6//1//r/E69/10b/v1r6/2n77P9/4NvnX9bz//fe/+db0P/r//X/7MTS+v/c/V+KW5rsfwAAAOggd/+X4xb7HwAAAIaRu/8rcYv9DwAAAMPI3f/VuKXJ/p/p/y/XL9T/T9L/H33/+v/tXx/6/9X0/4f0/+uk/5/m+f8z9P+e/6//1/+zU0vr/3P3fy1uabL/AQAAoIPc/Y/HLfY/AAAADCN3/9fjFvsfAAAAhpG7/xtxS5P97/n/a+r/79L/6//1//p//f8M/f80/f+MZfX/J/7zQv+/7Pev/9f/c9LS+v/c/d8MAAD//yBlU3A=") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000040), 0x7323, 0x0) 3.879678743s ago: executing program 1 (id=3323): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x0) 3.690712554s ago: executing program 1 (id=3326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.518375934s ago: executing program 1 (id=3328): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) chmod(0x0, 0x1) 3.368243103s ago: executing program 1 (id=3331): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.07926575s ago: executing program 2 (id=3334): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000340)) 2.885007671s ago: executing program 2 (id=3337): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.797089056s ago: executing program 3 (id=3338): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x101, @mcast2, 0x9}, 0x1c) 2.683724163s ago: executing program 2 (id=3339): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) 2.668080914s ago: executing program 0 (id=3340): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4001, &(0x7f0000000300)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x0) 2.622437237s ago: executing program 3 (id=3341): syz_mount_image$jfs(&(0x7f00000011c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYRES8=0x0], 0xfa, 0x61be, &(0x7f00000073c0)="$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") lsetxattr$security_capability(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) 2.542460242s ago: executing program 2 (id=3342): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000080)) 2.450202287s ago: executing program 0 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x0) 2.38921793s ago: executing program 2 (id=3344): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 2.21556691s ago: executing program 2 (id=3345): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfb, 0xc0, 0xc3, 0x20, 0xc72, 0xd, 0x92f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0xf3, 0x20, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0xe}, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0}) 2.171896963s ago: executing program 0 (id=3346): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@fragment={0x33, 0x0, 0x6, 0x1, 0x0, 0xc, 0x67}, 0x8) 1.745500038s ago: executing program 0 (id=3347): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 822.623482ms ago: executing program 0 (id=3348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 662.553581ms ago: executing program 1 (id=3349): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 0s ago: executing program 0 (id=3350): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @rand_addr=0xdffffc13}}) kernel console output (not intermixed with test programs): ive magic message: -32 [ 284.878244][ T6540] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 284.897351][ T6540] usb 2-1: MIDIStreaming interface descriptor not found [ 284.918940][T10625] loop2: detected capacity change from 0 to 2048 [ 284.930480][ T5788] input input24: unable to receive magic message: -32 [ 284.970731][ T6540] usb 2-1: USB disconnect, device number 17 [ 285.001045][ T5123] input input24: unable to receive magic message: -32 [ 285.017532][T10625] loop2: p1 p3 p4 [ 285.073997][ T5123] input input24: unable to receive magic message: -32 [ 285.084103][T10625] loop2: p4 size 589824 extends beyond EOD, truncated [ 285.168133][T10629] udevd[10629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.185547][ T5819] usb 4-1: USB disconnect, device number 11 [ 285.191599][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 285.202916][T10633] loop0: detected capacity change from 0 to 256 [ 285.224383][ T5819] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 285.297833][T10633] FAT-fs (loop0): Directory bread(block 64) failed [ 285.328534][T10633] FAT-fs (loop0): Directory bread(block 65) failed [ 285.344850][T10633] FAT-fs (loop0): Directory bread(block 66) failed [ 285.394110][T10633] FAT-fs (loop0): Directory bread(block 67) failed [ 285.400857][T10633] FAT-fs (loop0): Directory bread(block 68) failed [ 285.468723][T10633] FAT-fs (loop0): Directory bread(block 69) failed [ 285.503607][T10633] FAT-fs (loop0): Directory bread(block 70) failed [ 285.533504][T10633] FAT-fs (loop0): Directory bread(block 71) failed [ 285.540331][T10633] FAT-fs (loop0): Directory bread(block 72) failed [ 285.594580][T10633] FAT-fs (loop0): Directory bread(block 73) failed [ 285.638669][T10630] udevd[10630]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 285.665633][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 285.681433][T10634] udevd[10634]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 285.696979][T10638] netlink: 'syz.1.2076': attribute type 7 has an invalid length. [ 285.729256][T10638] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2076'. [ 286.857301][T10676] loop2: detected capacity change from 0 to 4096 [ 286.962472][T10683] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.017439][T10676] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 287.054127][T10676] Remounting filesystem read-only [ 287.133740][T10685] SET target dimension over the limit! [ 287.164820][T10689] loop3: detected capacity change from 0 to 8 [ 287.296934][T10691] loop1: detected capacity change from 0 to 8 [ 287.681162][T10707] loop2: detected capacity change from 0 to 24 [ 287.699473][T10705] loop3: detected capacity change from 0 to 1024 [ 287.725416][T10707] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 287.774326][T10707] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 287.848573][ T34] hfsplus: b-tree write err: -5, ino 4 [ 287.893399][T10707] romfs: read error for inode 0x8000 [ 288.022626][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 288.146608][T10719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.383516][T10729] netlink: 'syz.3.2114': attribute type 2 has an invalid length. [ 288.412743][T10729] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 288.674498][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 288.868002][T10751] loop1: detected capacity change from 0 to 256 [ 289.362507][T10764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2130'. [ 289.482139][T10768] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2132'. [ 289.672271][T10773] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 289.721149][T10754] loop0: detected capacity change from 0 to 32768 [ 289.841169][T10754] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 289.841169][T10754] [ 289.875031][T10754] ERROR: (device loop0): remounting filesystem as read-only [ 290.116066][T10780] loop3: detected capacity change from 0 to 2048 [ 290.236405][T10780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.739391][T10802] loop2: detected capacity change from 0 to 1764 [ 291.253655][T10821] loop2: detected capacity change from 0 to 256 [ 291.318871][T10823] loop3: detected capacity change from 0 to 16 [ 291.371584][T10821] FAT-fs (loop2): Directory bread(block 64) failed [ 291.381465][T10823] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.402721][T10821] FAT-fs (loop2): Directory bread(block 65) failed [ 291.419646][T10821] FAT-fs (loop2): Directory bread(block 66) failed [ 291.443383][T10821] FAT-fs (loop2): Directory bread(block 67) failed [ 291.450087][T10821] FAT-fs (loop2): Directory bread(block 68) failed [ 291.497506][T10821] FAT-fs (loop2): Directory bread(block 69) failed [ 291.518653][T10821] FAT-fs (loop2): Directory bread(block 70) failed [ 291.533323][T10821] FAT-fs (loop2): Directory bread(block 71) failed [ 291.540093][T10821] FAT-fs (loop2): Directory bread(block 72) failed [ 291.569943][T10821] FAT-fs (loop2): Directory bread(block 73) failed [ 291.624616][T10829] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 291.767478][T10829] team0: Port device wlan1 added [ 292.278923][T10849] tmpfs: Bad value for 'mpol' [ 292.839079][T10842] loop1: detected capacity change from 0 to 32768 [ 292.946058][ T28] audit: type=1800 audit(1768973753.778:45): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2169" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 293.075170][T10871] loop0: detected capacity change from 0 to 256 [ 293.450818][T10883] xt_hashlimit: size too large, truncated to 1048576 [ 293.485945][T10885] loop0: detected capacity change from 0 to 8 [ 293.513399][T10883] xt_hashlimit: max too large, truncated to 1048576 [ 293.549290][T10887] loop2: detected capacity change from 0 to 164 [ 293.586493][T10887] rock: directory entry would overflow storage [ 293.594112][T10887] rock: sig=0x66, size=4, remaining=3 [ 293.620146][T10887] rock: directory entry would overflow storage [ 293.654468][T10887] rock: sig=0x66, size=4, remaining=3 [ 293.966324][T10897] loop2: detected capacity change from 0 to 1024 [ 294.027201][T10897] syz.2.2196: attempt to access beyond end of device [ 294.027201][T10897] loop2: rw=0, sector=1835012, nr_sectors = 4 limit=1024 [ 294.059581][T10897] Buffer I/O error on dev loop2, logical block 458753, async page read [ 294.078734][T10897] hfsplus: unable to mark blocks free: error -5 [ 294.106210][T10897] hfsplus: can't free extent [ 294.113664][ T5819] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 294.322918][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.350053][ T5819] usb 1-1: not running at top speed; connect to a high speed hub [ 294.372234][ T5819] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 294.394395][ T5819] usb 1-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 294.419268][ T5819] usb 1-1: config 1 has no interface number 0 [ 294.435979][ T5819] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid maxpacket 52651, setting to 64 [ 294.483359][ T5819] usb 1-1: config 1 interface 138 has no altsetting 0 [ 294.501761][ T5819] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 294.520748][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.531954][ T5819] usb 1-1: Product: syz [ 294.552310][ T5819] usb 1-1: Manufacturer: syz [ 294.558575][ T5819] usb 1-1: SerialNumber: syz [ 294.570408][T10891] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.825020][ T5819] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 294.837574][T10923] netlink: 'syz.1.2208': attribute type 21 has an invalid length. [ 294.841310][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2209'. [ 294.863853][T10923] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2208'. [ 294.873317][T10923] netlink: 'syz.1.2208': attribute type 4 has an invalid length. [ 294.881118][T10923] netlink: 'syz.1.2208': attribute type 3 has an invalid length. [ 294.911902][T10923] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2208'. [ 294.942049][ T5819] usb 1-1: USB disconnect, device number 15 [ 295.028281][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.152576][T10927] nvme_fabrics: missing parameter 'transport=%s' [ 295.165433][T10927] nvme_fabrics: missing parameter 'nqn=%s' [ 296.135900][T10936] loop2: detected capacity change from 0 to 32768 [ 296.210773][T10936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 296.294370][T10966] loop0: detected capacity change from 0 to 512 [ 296.312038][T10936] (syz.2.2214,10936,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 296.363355][T10936] (syz.2.2214,10936,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 296.372137][T10936] (syz.2.2214,10936,0):ocfs2_mknod:298 ERROR: status = -2 [ 296.423208][T10936] (syz.2.2214,10936,0):ocfs2_mknod:502 ERROR: status = -2 [ 296.473407][T10936] (syz.2.2214,10936,0):ocfs2_create:676 ERROR: status = -2 [ 296.676524][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 297.323722][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 297.492748][T11004] loop2: detected capacity change from 0 to 512 [ 297.548086][T11004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.567037][T11004] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.627587][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'. [ 297.821819][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.853270][T11017] netlink: 'syz.3.2252': attribute type 6 has an invalid length. [ 297.999986][T11020] loop1: detected capacity change from 0 to 4096 [ 298.085327][T11024] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.150563][T11028] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.2257'. [ 298.194619][T11020] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 298.223393][ T5760] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 298.239453][T11020] Remounting filesystem read-only [ 298.463951][ T5760] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 298.472426][ T5760] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 298.492546][ T5760] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 298.507017][ T5760] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 298.535888][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 298.564411][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.595638][ T5760] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 298.631955][ T5760] usb 1-1: string descriptor 0 read error: -22 [ 298.642537][ T5760] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 298.660976][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.672676][ T5760] usb 1-1: config 0 descriptor?? [ 298.685928][ T5760] hub 1-1:0.0: bad descriptor, ignoring hub [ 298.703973][ T5760] hub: probe of 1-1:0.0 failed with error -5 [ 298.720220][ T5760] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 298.784561][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2262'. [ 299.028921][ T6596] usb 1-1: USB disconnect, device number 16 [ 299.229461][T11049] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 299.246627][T11049] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 299.371138][T11032] loop3: detected capacity change from 0 to 40427 [ 299.403369][T11032] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 299.425768][T11032] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 299.464057][T11032] F2FS-fs (loop3): invalid crc value [ 299.494451][T11032] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 299.549097][T11032] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.721635][T11032] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 299.797597][T11032] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 299.901856][T11032] F2FS-fs (loop3): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 299.973638][ C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 299.985116][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 299.992472][ T5770] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 300.100265][T11072] Zero length message leads to an empty skb [ 301.281280][T11116] loop2: detected capacity change from 0 to 1764 [ 301.376027][T11116] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 302.034468][T11142] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 302.158257][T11144] loop2: detected capacity change from 0 to 4096 [ 302.174175][T11140] loop0: detected capacity change from 0 to 4096 [ 302.192082][T11144] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 302.219728][T11140] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 302.397899][T11140] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 302.409817][T11144] ntfs3: loop2: failed to convert "c46c" to cp855 [ 302.767767][ T5778] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 303.381244][T11169] loop3: detected capacity change from 0 to 4096 [ 303.414951][T11169] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 303.489247][T11177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2329'. [ 303.636268][T11179] loop0: detected capacity change from 0 to 4096 [ 303.659463][T11169] ntfs3: loop3: failed to convert "c46c" to koi8-ru [ 303.670194][T11179] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 303.799273][T11179] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 304.084313][T11189] sctp: [Deprecated]: syz.3.2335 (pid 11189) Use of int in maxseg socket option. [ 304.084313][T11189] Use struct sctp_assoc_value instead [ 304.103259][ T5778] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 304.293439][T11191] netlink: 9188 bytes leftover after parsing attributes in process `syz.0.2336'. [ 304.491255][T11199] loop2: detected capacity change from 0 to 16 [ 304.534186][T11199] erofs: (device loop2): mounted with root inode @ nid 36. [ 304.738240][T11203] bridge4: entered promiscuous mode [ 304.968633][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 304.978178][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 305.052574][T11183] loop1: detected capacity change from 0 to 32768 [ 305.178148][T11183] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.319938][T11232] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 305.376535][T11232] team0: Cannot enslave team device to itself [ 305.426304][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 305.503314][T11183] XFS (loop1): Ending clean mount [ 305.787404][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 306.516969][T11238] loop2: detected capacity change from 0 to 40427 [ 306.530990][T11238] F2FS-fs (loop2): invalid crc value [ 306.613418][ T5760] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 306.773090][T11238] F2FS-fs (loop2): Start checkpoint disabled! [ 306.788848][T11238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 306.803614][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 306.812190][ T5760] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.843779][ T5760] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.865874][ T5760] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 306.883317][ T5760] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 306.891743][ T5760] usb 2-1: Product: syz [ 306.904081][ T5760] usb 2-1: Manufacturer: syz [ 306.927361][ T5760] hub 2-1:4.0: USB hub found [ 306.960747][T11238] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 307.020623][T11253] loop3: detected capacity change from 0 to 32768 [ 307.096412][T11253] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 307.096412][T11253] [ 307.128217][T11253] ERROR: (device loop3): remounting filesystem as read-only [ 307.168946][T11253] ialloc: diAlloc returned -5! [ 307.183831][ T5760] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 307.317152][ T28] audit: type=1326 audit(1768973768.138:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 307.403324][ T28] audit: type=1326 audit(1768973768.148:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 307.493496][ T28] audit: type=1326 audit(1768973768.178:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 307.563920][ T5760] usb 2-1: USB disconnect, device number 18 [ 307.567792][ T28] audit: type=1326 audit(1768973768.178:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 307.697702][ T28] audit: type=1326 audit(1768973768.178:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 307.907154][T11274] loop3: detected capacity change from 0 to 4096 [ 307.931661][T11274] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 308.038526][T11274] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 308.069917][ T28] audit: type=1326 audit(1768973768.898:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.2.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67539acb9 code=0x7ffc0000 [ 308.114059][T11274] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 308.149928][T11274] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 308.247173][T11274] ntfs: volume version 3.1. [ 308.412838][T11288] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 308.419444][T11288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 308.433340][T11289] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 308.439943][T11289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.488751][T11289] vhci_hcd vhci_hcd.0: Device attached [ 308.513284][T11288] vhci_hcd vhci_hcd.0: Device attached [ 308.550785][T11291] vhci_hcd: connection closed [ 308.551020][T11290] vhci_hcd: connection closed [ 308.583650][ T49] vhci_hcd: stop threads [ 308.605895][T11297] loop3: detected capacity change from 0 to 2048 [ 308.623094][T11297] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.626950][ T49] vhci_hcd: release socket [ 308.667982][ T49] vhci_hcd: disconnect device [ 308.673105][T11297] NILFS (loop3): mounting unchecked fs [ 308.685447][ T49] vhci_hcd: stop threads [ 308.702785][ T7020] udevd[7020]: incorrect nilfs2 checksum on /dev/loop3 [ 308.710822][ T49] vhci_hcd: release socket [ 308.725834][T11297] NILFS (loop3): recovery complete [ 308.727655][ T49] vhci_hcd: disconnect device [ 308.742237][T11299] loop2: detected capacity change from 0 to 764 [ 308.753835][T11300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.763965][ T5760] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 308.782895][ T5760] usb 33-1: enqueue for inactive port 0 [ 308.884309][ T5760] vhci_hcd: vhci_device speed not set [ 309.243564][T11284] loop1: detected capacity change from 0 to 32768 [ 309.331905][T11284] read_mapping_page failed! [ 309.842361][T11328] loop2: detected capacity change from 0 to 256 [ 309.946506][T11328] FAT-fs (loop2): Directory bread(block 64) failed [ 309.967696][T11328] FAT-fs (loop2): Directory bread(block 65) failed [ 309.985021][T11328] FAT-fs (loop2): Directory bread(block 66) failed [ 309.991637][T11328] FAT-fs (loop2): Directory bread(block 67) failed [ 310.002299][T11328] FAT-fs (loop2): Directory bread(block 68) failed [ 310.036866][T11328] FAT-fs (loop2): Directory bread(block 69) failed [ 310.088595][T11328] FAT-fs (loop2): Directory bread(block 70) failed [ 310.118843][T11328] FAT-fs (loop2): Directory bread(block 71) failed [ 310.138342][T11328] FAT-fs (loop2): Directory bread(block 72) failed [ 310.154613][T11328] FAT-fs (loop2): Directory bread(block 73) failed [ 310.177193][T11334] loop0: detected capacity change from 0 to 512 [ 310.220909][T11332] loop3: detected capacity change from 0 to 4096 [ 310.278002][T11334] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 310.302248][T11334] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 310.314700][T11332] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 310.349904][T11334] EXT4-fs (loop0): 1 truncate cleaned up [ 310.358181][T11334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.424899][T11334] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.801657][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 310.853583][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 310.894864][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 310.957846][T11344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.011664][T11344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.196471][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 311.255804][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 311.285049][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 311.292762][T11344] xfrm0 speed is unknown, defaulting to 1000 [ 311.887658][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 311.908318][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 311.927507][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 311.936955][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 311.972766][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.016830][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.055659][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.075212][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.123659][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.138158][T11381] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 312.236876][T11394] loop1: detected capacity change from 0 to 256 [ 312.290508][T11394] exfat: Deprecated parameter 'namecase' [ 312.398479][T11394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 313.158972][T11425] ./file0: Can't open blockdev [ 313.442797][T11412] loop0: detected capacity change from 0 to 32768 [ 313.512722][T11412] JBD2: Ignoring recovery information on journal [ 313.690221][T11412] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 313.899081][T11448] loop3: detected capacity change from 0 to 256 [ 314.175098][T11412] syz.0.2435 (11412) used greatest stack depth: 18736 bytes left [ 314.269273][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 314.771424][T11474] loop1: detected capacity change from 0 to 2048 [ 314.792278][T11474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.675635][T11481] loop2: detected capacity change from 0 to 32768 [ 315.881068][T11484] loop3: detected capacity change from 0 to 32768 [ 315.994645][T11484] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.152393][T11484] XFS (loop3): Ending clean mount [ 316.159349][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2479'. [ 316.204132][T11484] XFS (loop3): Quotacheck needed: Please wait. [ 316.366573][T11484] XFS (loop3): Quotacheck: Done. [ 316.596508][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.665772][T11526] ip6tnl3: entered allmulticast mode [ 317.438814][ T6596] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 317.459308][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465981][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.490261][T11554] validate_nla: 44 callbacks suppressed [ 317.490279][T11554] netlink: 'syz.3.2499': attribute type 16 has an invalid length. [ 317.644115][ T6596] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 317.657134][ T6596] usb 1-1: config 0 has no interface number 0 [ 317.657155][T11558] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 317.669829][T11558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.685560][ T6596] usb 1-1: config 0 interface 120 has no altsetting 0 [ 317.707895][ T6596] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 317.719849][ T6596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.728857][ T6596] usb 1-1: Product: syz [ 317.733082][ T6596] usb 1-1: Manufacturer: syz [ 317.738272][ T6596] usb 1-1: SerialNumber: syz [ 317.745813][T11558] vhci_hcd vhci_hcd.0: Device attached [ 317.754473][ T6596] usb 1-1: config 0 descriptor?? [ 317.772359][T11565] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 317.779042][T11565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.787653][T11565] vhci_hcd vhci_hcd.0: Device attached [ 317.804989][T11566] vhci_hcd: connection closed [ 317.806587][ T1309] vhci_hcd: stop threads [ 317.837770][ T1309] vhci_hcd: release socket [ 317.842337][ T1309] vhci_hcd: disconnect device [ 317.853385][T11560] vhci_hcd: connection closed [ 317.861871][ T1309] vhci_hcd: stop threads [ 317.899543][ T1309] vhci_hcd: release socket [ 317.908871][ T1309] vhci_hcd: disconnect device [ 317.923474][ T5835] vhci_hcd: vhci_device speed not set [ 317.998889][T11573] ip6t_srh: unknown srh match flags 4001 [ 318.034429][ T6596] comedi comedi5: could not switch to alternate setting 1 [ 318.042987][ T6596] usbduxfast 1-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 318.078319][ T6596] usb 1-1: USB disconnect, device number 17 [ 318.124319][T11575] loop2: detected capacity change from 0 to 164 [ 318.154091][ T5760] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 318.168232][T11575] Unsupported NM flag settings (240) [ 318.356161][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 318.370337][ T5760] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 318.380793][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 318.413418][ T5760] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 318.429879][ T5760] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 318.459890][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.492750][ T5760] usb 4-1: config 0 descriptor?? [ 318.748508][T11591] loop0: detected capacity change from 0 to 16 [ 318.755154][ T5760] hdpvr 4-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 318.755154][ T5760] 4(r¥ý [ 318.755154][ T5760] d×Å2}±dæ~ýýŠÙ­^r¤ [ 318.780441][T11591] erofs: (device loop0): mounted with root inode @ nid 36. [ 318.886228][T11591] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 318.925391][T11591] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 318.957008][ T5760] hdpvr 4-1:0.0: device init failed [ 318.962796][ T5760] hdpvr: probe of 4-1:0.0 failed with error -12 [ 318.986840][ T5760] usb 4-1: USB disconnect, device number 12 [ 319.173399][ T5784] Bluetooth: hci2: Malformed HCI Event [ 319.410187][T11606] loop0: detected capacity change from 0 to 256 [ 319.449288][T11606] exfat: Deprecated parameter 'utf8' [ 319.479526][T11606] exfat: Deprecated parameter 'utf8' [ 319.542117][T11606] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 319.949158][T11598] loop2: detected capacity change from 0 to 32768 [ 320.074239][T11598] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 320.074239][T11598] [ 320.109124][T11624] ip6t_rpfilter: unknown options [ 320.474648][T11636] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 320.600392][T11641] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 320.919443][T11644] loop2: detected capacity change from 0 to 4096 [ 320.977849][T11644] __ntfs_error: 7 callbacks suppressed [ 320.977868][T11644] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 321.027700][T11644] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 321.077937][T11644] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 321.124417][T11644] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 321.274810][T11644] ntfs: volume version 3.1. [ 321.302872][T11644] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 321.319993][T11644] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 321.359987][T11644] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 321.519792][T11662] loop3: detected capacity change from 0 to 4096 [ 321.523730][ T5760] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 321.602163][T11662] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 321.639581][T11662] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 321.726035][ T28] audit: type=1326 audit(1768973782.558:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 321.782967][ T5760] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 321.816407][ T5760] usb 2-1: config 179 has no interface number 0 [ 321.818937][ T28] audit: type=1326 audit(1768973782.558:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 321.847454][ T5760] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 321.901770][ T5760] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 321.932458][ T28] audit: type=1326 audit(1768973782.588:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11665 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7feed339acb9 code=0x7ffc0000 [ 321.945863][ T5760] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 322.001095][ T5760] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 322.066982][ T5760] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 322.106551][ T5760] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 322.138591][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.166563][T11658] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.176425][T11658] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.481286][T11682] netlink: 'syz.3.2558': attribute type 21 has an invalid length. [ 322.729880][T11685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 322.774761][ T6540] usb 2-1: USB disconnect, device number 19 [ 322.775845][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.789243][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 323.347294][T11689] loop3: detected capacity change from 0 to 32768 [ 324.039316][T11695] loop2: detected capacity change from 0 to 32768 [ 324.047214][T11715] loop0: detected capacity change from 0 to 256 [ 324.064852][T11715] exfat: Deprecated parameter 'utf8' [ 324.081617][T11695] jfs: Unrecognized mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 324.108308][T11715] exfat: Deprecated parameter 'namecase' [ 324.124773][T11715] exfat: Deprecated parameter 'namecase' [ 324.130514][T11715] exfat: Deprecated parameter 'utf8' [ 324.184958][ T1187] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 324.265125][T11715] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 324.394305][ T1187] usb 4-1: Using ep0 maxpacket: 16 [ 324.415846][ T1187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.473470][ T1187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.502785][ T1187] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.546149][ T1187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.563088][ T1187] usb 4-1: Product: syz [ 324.577784][T11723] loop2: detected capacity change from 0 to 512 [ 324.582891][ T1187] usb 4-1: Manufacturer: syz [ 324.591204][ T1187] usb 4-1: SerialNumber: syz [ 324.614289][T11723] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 324.711379][T11723] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264 [ 324.852908][ T1187] usb 4-1: cannot find UAC_HEADER [ 324.906823][ T1187] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 324.939486][ T1187] usb 4-1: USB disconnect, device number 13 [ 325.032844][T10634] udevd[10634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.381616][T11741] loop0: detected capacity change from 0 to 4096 [ 325.424501][T11741] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 325.522649][T11741] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 325.893426][T11757] loop3: detected capacity change from 0 to 8 [ 325.954189][ T6540] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.001839][T11757] SQUASHFS error: Failed to read block 0x1ec: -5 [ 326.033251][T11757] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 326.163380][ T6540] usb 2-1: Using ep0 maxpacket: 16 [ 326.180084][ T6540] usb 2-1: config index 0 descriptor too short (expected 18, got 14) [ 326.195723][ T6540] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 326.226302][T11747] loop2: detected capacity change from 0 to 32768 [ 326.243232][ T6540] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.271180][ T6540] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 326.285745][ T6540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.313468][ T6540] usb 2-1: Product: syz [ 326.322940][ T6540] usb 2-1: Manufacturer: syz [ 326.332060][T11747] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.341645][ T6540] usb 2-1: SerialNumber: syz [ 326.365109][ T6540] r8152-cfgselector 2-1: config 0 descriptor?? [ 326.552020][T11747] XFS (loop2): Ending clean mount [ 326.583811][ T6540] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 326.599449][T11747] XFS (loop2): Quotacheck needed: Please wait. [ 326.685729][T11747] XFS (loop2): Quotacheck: Done. [ 326.804763][ T5760] usb 2-1: USB disconnect, device number 20 [ 326.838009][T11784] i2c i2c-0: Invalid block read size 255 [ 326.934180][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 327.365758][T11794] loop3: detected capacity change from 0 to 4096 [ 327.512778][T11800] netlink: 'syz.1.2610': attribute type 7 has an invalid length. [ 327.533925][T11800] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2610'. [ 327.689232][T11794] ntfs3: loop3: ino=5, "/" directory corrupted [ 327.710120][T11806] bridge0: port 3(bond0) entered blocking state [ 327.731054][T11806] bridge0: port 3(bond0) entered disabled state [ 327.748640][T11806] bond0: entered allmulticast mode [ 327.767702][T11806] @ÿ: entered allmulticast mode [ 327.793696][T11806] bond_slave_1: entered allmulticast mode [ 327.816182][T11806] bond0: entered promiscuous mode [ 327.828750][T11806] @ÿ: entered promiscuous mode [ 327.841132][T11806] bond_slave_1: entered promiscuous mode [ 327.888644][T11806] bridge0: port 3(bond0) entered blocking state [ 327.897162][T11806] bridge0: port 3(bond0) entered forwarding state [ 328.053111][T11814] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 328.084520][T11814] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 328.105412][T11814] overlayfs: missing 'lowerdir' [ 328.111093][T11812] loop3: detected capacity change from 0 to 4096 [ 328.138183][T11812] __ntfs_error: 2 callbacks suppressed [ 328.138200][T11812] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 328.163475][ T5835] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 328.183523][T11812] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 328.224502][T11812] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 328.248194][T11812] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 328.274551][T11812] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 328.298948][T11812] ntfs: volume version 0.0. [ 328.303787][T11812] ntfs: (device loop3): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 328.318226][T11812] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 328.327191][T11812] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 328.348231][T11812] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 328.355811][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 328.374787][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.450488][ T5835] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 328.466767][T11812] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 328.485833][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 328.504373][ T5835] usb 3-1: SerialNumber: syz [ 328.520034][ T5835] usb 3-1: config 0 descriptor?? [ 328.550483][ T5835] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 328.572479][ T5835] usb 3-1: Failed to create links for entity 255 [ 328.587045][ T5835] usb 3-1: Failed to register entities (-22). [ 328.766469][T11827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2623'. [ 328.790114][ T5835] usb 3-1: USB disconnect, device number 9 [ 329.505793][T11833] loop3: detected capacity change from 0 to 32768 [ 329.535926][T11833] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 329.768110][ T7020] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 329.935915][T11837] loop0: detected capacity change from 0 to 32768 [ 330.051775][T11837] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 330.197656][T11837] ocfs2: Unmounting device (7,0) on (node local) [ 330.341486][T11868] x_tables: unsorted underflow at hook 3 [ 330.787677][T11874] loop3: detected capacity change from 0 to 4096 [ 330.884527][T11874] ntfs: volume version 3.1. [ 331.011872][T11886] nft_compat: unsupported protocol 1 [ 331.488757][T11904] dlm: non-version read from control device 3 [ 331.830801][T11916] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.923109][T11912] loop1: detected capacity change from 0 to 4096 [ 331.954463][T11912] ntfs: volume version 3.1. [ 332.353336][ T5760] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 332.593436][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 332.619928][ T5760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.671433][ T5760] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 332.695262][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 332.717518][ T5760] usb 1-1: SerialNumber: syz [ 332.745590][ T5760] usb 1-1: config 0 descriptor?? [ 332.758095][T11940] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 332.780808][ T5760] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 332.797535][ T5760] usb 1-1: Failed to create links for entity 255 [ 332.807514][ T5760] usb 1-1: Failed to register entities (-22). [ 332.844357][T11920] loop3: detected capacity change from 0 to 32768 [ 332.948420][T11920] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 333.060803][ T5760] usb 1-1: USB disconnect, device number 18 [ 333.088919][T11920] (syz.3.2668,11920,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 333.101449][T11920] (syz.3.2668,11920,1):ocfs2_search_one_group:1684 ERROR: status = -12 [ 333.127700][T11920] (syz.3.2668,11920,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12 [ 333.173454][T11920] (syz.3.2668,11920,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 333.203416][T11920] (syz.3.2668,11920,0):ocfs2_claim_new_inode:2226 ERROR: status = -12 [ 333.231152][T11920] (syz.3.2668,11920,0):ocfs2_claim_new_inode:2241 ERROR: status = -12 [ 333.256679][T11920] (syz.3.2668,11920,0):ocfs2_mknod_locked:639 ERROR: status = -12 [ 333.293366][T11920] (syz.3.2668,11920,0):ocfs2_symlink:1944 ERROR: status = -12 [ 333.315598][T11920] (syz.3.2668,11920,0):ocfs2_symlink:2068 ERROR: status = -12 [ 333.506831][T11932] batman_adv: batadv0: Interface deactivated: wlan0 [ 333.695373][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 333.854157][T11960] loop1: detected capacity change from 0 to 512 [ 333.899837][T11960] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.984848][T11960] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 334.060681][T11960] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2682: bg 0: block 248: padding at end of block bitmap is not set [ 334.161066][T11960] __quota_error: 31 callbacks suppressed [ 334.161085][T11960] Quota error (device loop1): write_blk: dquota write failed [ 334.203874][T11960] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 334.249408][T11960] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2682: Failed to acquire dquot type 1 [ 334.287842][T11960] EXT4-fs (loop1): 1 truncate cleaned up [ 334.334582][T11960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 334.497035][ T28] audit: type=1800 audit(1768973795.328:67): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2682" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 334.518038][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.676466][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 334.733427][ T49] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 334.743051][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 1 [ 334.822809][T11985] loop0: detected capacity change from 0 to 512 [ 334.917931][T11985] EXT4-fs (loop0): 1 truncate cleaned up [ 334.979545][T11985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.071032][T11988] bond1: entered promiscuous mode [ 335.123609][T11988] bond1: entered allmulticast mode [ 335.130363][T11988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.157686][T11985] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2691: bg 0: block 465: padding at end of block bitmap is not set [ 335.208789][T11985] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 335.229910][T11985] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2691: invalid indirect mapped block 234881024 (level 0) [ 335.402861][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.113283][ T28] audit: type=1326 audit(1768973796.938:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12031 comm="syz.3.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 336.188852][ T28] audit: type=1326 audit(1768973796.938:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12031 comm="syz.3.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 336.226495][ T28] audit: type=1326 audit(1768973796.988:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12031 comm="syz.3.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 336.232223][T12035] loop2: detected capacity change from 0 to 64 [ 336.288727][ T28] audit: type=1326 audit(1768973796.988:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12031 comm="syz.3.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 336.360383][ T28] audit: type=1326 audit(1768973796.988:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12031 comm="syz.3.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 336.603399][ T5835] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 336.817998][ T5835] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 336.847287][ T5835] usb 2-1: config 0 has no interface number 0 [ 336.889459][ T5835] usb 2-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=98.f4 [ 336.921009][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.933453][ T5835] usb 2-1: Product: syz [ 336.937712][ T5835] usb 2-1: Manufacturer: syz [ 336.953320][ T5835] usb 2-1: SerialNumber: syz [ 336.985298][ T5835] usb 2-1: config 0 descriptor?? [ 337.005114][ T5835] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 337.044144][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.079535][ T5835] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 337.100640][ T5835] usb 2-1: media controller created [ 337.170956][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.292787][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 337.318632][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 337.332797][ T5835] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 337.553692][ T5835] rc_core: IR keymap rc-avermedia-m135a not found [ 337.560215][ T5835] Registered IR keymap rc-empty [ 337.605521][ T5835] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 337.653606][ T5835] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input27 [ 337.699186][ T5835] dvb-usb: schedule remote query interval to 150 msecs. [ 337.723628][ T5835] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 337.777482][ T5835] usb 2-1: USB disconnect, device number 21 [ 337.935272][ T5835] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 338.549143][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2737'. [ 338.623300][T12116] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2737'. [ 338.648272][T12121] loop1: detected capacity change from 0 to 1024 [ 338.681127][T12122] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.738870][T12125] loop3: detected capacity change from 0 to 256 [ 338.776437][T12121] afs: Unexpected value for 'dyn' [ 338.925611][T12125] FAT-fs (loop3): Directory bread(block 64) failed [ 338.949111][T12125] FAT-fs (loop3): Directory bread(block 65) failed [ 338.977804][T12125] FAT-fs (loop3): Directory bread(block 66) failed [ 339.001341][T12125] FAT-fs (loop3): Directory bread(block 67) failed [ 339.032393][T12125] FAT-fs (loop3): Directory bread(block 68) failed [ 339.073590][T12125] FAT-fs (loop3): Directory bread(block 69) failed [ 339.080747][T12125] FAT-fs (loop3): Directory bread(block 70) failed [ 339.123283][T12125] FAT-fs (loop3): Directory bread(block 71) failed [ 339.130030][T12125] FAT-fs (loop3): Directory bread(block 72) failed [ 339.152419][T12133] ip6gretap1: entered promiscuous mode [ 339.163350][T12125] FAT-fs (loop3): Directory bread(block 73) failed [ 339.946081][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 339.955519][T12162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2754'. [ 339.974120][T12162] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 340.377419][T12176] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2758'. [ 340.909322][T12194] loop0: detected capacity change from 0 to 1024 [ 340.921635][T12194] EXT4-fs: Ignoring removed nobh option [ 340.931293][T12194] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 340.955134][T12194] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.2766: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 340.986146][T12194] EXT4-fs (loop0): Remounting filesystem read-only [ 341.005447][T12194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.292739][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.451254][T12217] loop1: detected capacity change from 0 to 256 [ 341.558373][T12217] FAT-fs (loop1): Directory bread(block 64) failed [ 341.597251][T12217] FAT-fs (loop1): Directory bread(block 65) failed [ 341.619683][T12217] FAT-fs (loop1): Directory bread(block 66) failed [ 341.651041][T12217] FAT-fs (loop1): Directory bread(block 67) failed [ 341.673642][T12217] FAT-fs (loop1): Directory bread(block 68) failed [ 341.680276][T12217] FAT-fs (loop1): Directory bread(block 69) failed [ 341.724928][T12217] FAT-fs (loop1): Directory bread(block 70) failed [ 341.731553][T12217] FAT-fs (loop1): Directory bread(block 71) failed [ 341.763424][T12217] FAT-fs (loop1): Directory bread(block 72) failed [ 341.790755][T12217] FAT-fs (loop1): Directory bread(block 73) failed [ 341.892062][T12225] XFS (nullb0): Invalid superblock magic number [ 342.223570][T12240] netlink: 'syz.1.2778': attribute type 3 has an invalid length. [ 342.231488][T12240] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 342.270722][T12240] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2778'. [ 342.505771][T12251] loop3: detected capacity change from 0 to 256 [ 342.615742][T12253] loop0: detected capacity change from 0 to 64 [ 343.058554][T12265] loop3: detected capacity change from 0 to 64 [ 343.411218][T12276] netlink: 'syz.1.2795': attribute type 1 has an invalid length. [ 343.431498][T12276] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2795'. [ 343.945820][T12293] dlm: non-version read from control device 36 [ 344.159016][T12298] loop0: detected capacity change from 0 to 64 [ 344.239985][T12301] loop3: detected capacity change from 0 to 1024 [ 344.338579][T12303] loop2: detected capacity change from 0 to 128 [ 344.403649][T12305] tmpfs: Bad value for 'mpol' [ 344.426481][T12303] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 344.465956][ T1309] hfsplus: b-tree write err: -5, ino 4 [ 344.781389][ T5771] sysv_free_block: flc_count > flc_size [ 344.798589][ T5771] sysv_free_block: flc_count > flc_size [ 344.799930][T12318] loop1: detected capacity change from 0 to 64 [ 344.811696][ T5771] sysv_free_block: flc_count > flc_size [ 344.818037][ T5771] sysv_free_block: flc_count > flc_size [ 344.824093][ T5771] sysv_free_block: flc_count > flc_size [ 344.904077][ T5771] sysv_free_block: flc_count > flc_size [ 344.954005][ T5771] sysv_free_block: flc_count > flc_size [ 344.959642][ T5771] sysv_free_block: flc_count > flc_size [ 345.000906][ T5771] sysv_free_block: flc_count > flc_size [ 345.011287][ T5771] sysv_free_block: flc_count > flc_size [ 345.022690][T12320] sock: sock_timestamping_bind_phc: sock not bind to device [ 345.044661][ T5771] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 345.387170][T12332] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2823'. [ 345.789980][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 345.955732][T12350] loop3: detected capacity change from 0 to 64 [ 346.001844][T12352] loop0: detected capacity change from 0 to 512 [ 346.087888][T12352] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 346.150054][T12352] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 346.209528][T12352] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.2833: bad orphan inode 13 [ 346.262829][T12352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.455134][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.765431][T12371] loop0: detected capacity change from 0 to 4096 [ 347.240205][T12386] loop1: detected capacity change from 0 to 256 [ 347.319139][T12388] loop3: detected capacity change from 0 to 64 [ 347.369377][T12388] hfs: filesystem is marked locked, mounting read-only. [ 347.464813][T12388] hfs: filesystem is marked locked, leaving read-only. [ 347.597065][T12395] netlink: 'syz.1.2853': attribute type 4 has an invalid length. [ 348.414664][T12397] loop3: detected capacity change from 0 to 32768 [ 348.613084][T12417] loop2: detected capacity change from 0 to 256 [ 349.178170][T12429] loop1: detected capacity change from 0 to 256 [ 349.329101][T12429] FAT-fs (loop1): Directory bread(block 64) failed [ 349.345194][T12429] FAT-fs (loop1): Directory bread(block 65) failed [ 349.393369][T12429] FAT-fs (loop1): Directory bread(block 66) failed [ 349.400018][T12429] FAT-fs (loop1): Directory bread(block 67) failed [ 349.443355][T12429] FAT-fs (loop1): Directory bread(block 68) failed [ 349.474163][T12429] FAT-fs (loop1): Directory bread(block 69) failed [ 349.480887][T12429] FAT-fs (loop1): Directory bread(block 70) failed [ 349.513501][T12429] FAT-fs (loop1): Directory bread(block 71) failed [ 349.524951][T12429] FAT-fs (loop1): Directory bread(block 72) failed [ 349.539131][T12429] FAT-fs (loop1): Directory bread(block 73) failed [ 349.629060][T12437] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2866'. [ 349.738683][T12439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2875'. [ 349.763325][T12439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2875'. [ 350.160710][T12447] loop3: detected capacity change from 0 to 4096 [ 350.188964][T12447] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 350.311318][T12425] loop2: detected capacity change from 0 to 32768 [ 350.455582][T12447] ntfs3: loop3: failed to convert "c46c" to maciceland [ 350.582638][T12425] [ 350.582638][T12425] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.582638][T12425] [ 350.600908][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 350.667841][T12425] jfs_lookup: dtSearch returned -5 [ 350.851088][ T5771] [ 350.851088][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.851088][ T5771] [ 350.897833][ T5771] [ 350.897833][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.897833][ T5771] [ 351.682656][T12489] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 352.064733][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 352.103454][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 352.313959][T12511] loop0: detected capacity change from 0 to 764 [ 352.353753][T12511] rock: directory entry would overflow storage [ 352.360145][T12511] rock: sig=0x4654, size=5, remaining=4 [ 352.423507][ T1187] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 352.638432][ T1187] usb 4-1: Using ep0 maxpacket: 8 [ 352.656085][ T1187] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 352.666088][ T1187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.680266][T12521] loop1: detected capacity change from 0 to 512 [ 352.687594][ T1187] usb 4-1: config 0 has no interface number 0 [ 352.693836][ T1187] usb 4-1: config 0 interface 52 has no altsetting 0 [ 352.704306][ T1187] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 352.720581][ T1187] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 352.731385][ T1187] usb 4-1: Manufacturer: syz [ 352.744907][ T1187] usb 4-1: config 0 descriptor?? [ 352.751376][T12521] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.2915: Invalid block bitmap block 0 in block_group 0 [ 352.772965][ T1187] hub 4-1:0.52: bad descriptor, ignoring hub [ 352.779262][T12521] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 352.780240][T12521] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2915: attempt to clear invalid blocks 983261 len 1 [ 352.802004][ T1187] hub: probe of 4-1:0.52 failed with error -5 [ 352.855915][T12521] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2915: invalid indirect mapped block 2683928664 (level 0) [ 352.883360][ T6596] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 352.896441][T12521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2915: Invalid inode table block 0 in block_group 0 [ 352.947695][T12521] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 352.959142][T12521] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 352.987344][T12521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2915: Invalid inode table block 0 in block_group 0 [ 353.011109][T12521] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 353.031032][T12521] EXT4-fs error (device loop1): ext4_truncate:4294: inode #13: comm syz.1.2915: mark_inode_dirty error [ 353.048450][T12521] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 353.058547][T12521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2915: Invalid inode table block 0 in block_group 0 [ 353.073018][T12521] EXT4-fs (loop1): 1 truncate cleaned up [ 353.080222][T12521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.094913][ T6596] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 353.105726][ T6596] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 353.116092][ T6596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.169930][ T6596] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 353.180608][T12521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2915: Invalid inode table block 0 in block_group 0 [ 353.218231][T12521] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 353.314524][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.363504][ T5826] usb 4-1: USB disconnect, device number 14 [ 353.644700][T12541] loop2: detected capacity change from 0 to 512 [ 353.692328][T12541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.736044][T12541] ext4 filesystem being mounted at /726/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.784190][T12546] loop1: detected capacity change from 0 to 4096 [ 353.829955][T12541] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 353.844921][T12541] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 353.857416][T12541] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2925: Failed to acquire dquot type 0 [ 353.910669][T12546] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 353.968015][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.234236][ T6596] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 354.446177][ T6596] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 354.478481][ T6596] stv0680 1-1:4.0: last error: 86, command = 0x70 [ 354.507021][ T6596] usb 1-1: USB disconnect, device number 19 [ 354.600133][T12560] loop3: detected capacity change from 0 to 512 [ 354.820649][T12565] comedi comedi0: dt2814: a I/O base address must be specified [ 354.946192][T12550] loop2: detected capacity change from 0 to 32768 [ 354.973705][T12550] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 355.188824][ T7020] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 355.256562][T12576] loop2: detected capacity change from 0 to 256 [ 355.267170][T12576] exfat: Deprecated parameter 'namecase' [ 355.273003][T12576] exfat: Deprecated parameter 'namecase' [ 355.344674][T12576] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 355.422219][T12577] loop1: detected capacity change from 0 to 4096 [ 355.823354][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2947'. [ 356.567952][T12586] loop0: detected capacity change from 0 to 32768 [ 356.582246][T12606] netlink: 'syz.2.2955': attribute type 11 has an invalid length. [ 356.648215][T12586] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 356.648215][T12586] [ 356.749922][T12594] loop3: detected capacity change from 0 to 32768 [ 356.785326][ T49] read_mapping_page failed! [ 356.786661][T12594] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 356.803510][ T49] ERROR: (device loop0): txCommit: [ 356.803510][ T49] [ 356.829106][ T49] jfs_write_inode: jfs_commit_inode failed! [ 357.094693][ T5783] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 357.161993][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 357.230390][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 357.303446][T12618] tc_dump_action: action bad kind [ 357.359105][T12614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.382081][T12621] set_capacity_and_notify: 1 callbacks suppressed [ 357.382099][T12621] loop3: detected capacity change from 0 to 4096 [ 357.458232][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2964'. [ 357.525077][T12621] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 357.586352][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.142578][T12639] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 358.161443][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 358.700393][T12652] loop0: detected capacity change from 0 to 4096 [ 358.733960][T12652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.786692][T12633] syz.3.2968 (12633): drop_caches: 2 [ 358.796873][T12652] EXT4-fs (loop0): Test dummy encryption mode enabled [ 358.821847][T12652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 358.833543][T12652] System zones: 0-5 [ 358.872332][T12652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.138976][ T28] audit: type=1326 audit(1768973819.958:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 359.212079][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.222610][ T28] audit: type=1326 audit(1768973819.958:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 359.301091][ T28] audit: type=1326 audit(1768973819.998:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 359.355498][T12673] loop3: detected capacity change from 0 to 64 [ 359.402592][ T28] audit: type=1326 audit(1768973819.998:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 359.473298][T12673] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 359.515168][ T28] audit: type=1326 audit(1768973819.998:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280c19acb9 code=0x7ffc0000 [ 359.813302][ T5760] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 360.029356][ T5760] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 360.046788][ T5760] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 360.075245][ T5760] usb 4-1: config 0 has no interface number 0 [ 360.087028][ T5760] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 360.103441][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.111584][ T5760] usb 4-1: Product: syz [ 360.123407][ T5760] usb 4-1: Manufacturer: syz [ 360.128098][ T5760] usb 4-1: SerialNumber: syz [ 360.140384][ T5760] usb 4-1: config 0 descriptor?? [ 360.269950][T12703] loop1: detected capacity change from 0 to 256 [ 360.355274][ T5760] qmi_wwan: probe of 4-1:0.207 failed with error -22 [ 360.382789][ T5760] usb 4-1: USB disconnect, device number 15 [ 360.528075][T12706] erspan1: entered allmulticast mode [ 360.593311][ T5835] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 360.658267][T12694] loop2: detected capacity change from 0 to 32768 [ 360.679369][T12694] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 360.802519][ T5835] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 360.835306][ T5835] usb 2-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 360.869076][ T7020] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 360.883346][ T5835] usb 2-1: config 0 has no interface number 0 [ 360.911974][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 360.933870][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.955139][ T5835] usb 2-1: Product: syz [ 360.960083][ T5835] usb 2-1: Manufacturer: syz [ 360.973393][ T5835] usb 2-1: SerialNumber: syz [ 360.985789][ T5835] usb 2-1: config 0 descriptor?? [ 361.159252][T12720] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 361.179662][T12720] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 361.192192][T12718] loop3: detected capacity change from 0 to 2048 [ 361.194779][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 361.250084][T12718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.289368][ T5835] usb 2-1: USB disconnect, device number 22 [ 361.970684][T12740] loop0: detected capacity change from 0 to 4096 [ 362.557121][T12760] loop0: detected capacity change from 0 to 1024 [ 362.577027][T12760] EXT4-fs: Ignoring removed mblk_io_submit option [ 362.599407][T12763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.650434][T12760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.804480][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.813662][ T5881] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 362.940021][T12770] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 363.007564][T12774] loop0: detected capacity change from 0 to 256 [ 363.014308][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 363.054083][ T5881] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 363.062354][ T5881] usb 4-1: config 0 has no interface number 0 [ 363.083477][ T5881] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 363.112506][T12774] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.123910][T12778] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3035'. [ 363.135315][ T5881] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 363.145769][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.156151][T12774] FAT-fs (loop0): Filesystem has been set read-only [ 363.166126][ T5881] usb 4-1: Product: syz [ 363.171589][ T5881] usb 4-1: Manufacturer: syz [ 363.178511][ T5881] usb 4-1: SerialNumber: syz [ 363.194758][T12774] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.211990][ T5881] usb 4-1: config 0 descriptor?? [ 363.235173][T12761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.273305][T12774] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.509015][T12761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.742791][ T5881] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 363.774466][ T5881] asix: probe of 4-1:0.188 failed with error -71 [ 363.804736][ T5881] usb 4-1: USB disconnect, device number 16 [ 363.986106][T12800] loop2: detected capacity change from 0 to 736 [ 364.459303][T12814] comedi comedi0: Minor 4 specified more than once! [ 364.737419][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 364.758831][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 364.864361][T12826] loop3: detected capacity change from 0 to 4096 [ 365.046984][T12826] ntfs3: loop3: ino=5, "/" directory corrupted [ 365.067675][T12826] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 365.336021][T12842] loop0: detected capacity change from 0 to 2048 [ 365.398642][T12842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.505842][T12848] loop2: detected capacity change from 0 to 16 [ 365.564670][T12848] erofs: (device loop2): mounted with root inode @ nid 36. [ 366.213503][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 366.222510][T12870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3081'. [ 366.313697][T12870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3081'. [ 366.427590][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 366.439031][T12850] loop1: detected capacity change from 0 to 32768 [ 366.485850][T12850] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 366.582055][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'. [ 366.685702][T10634] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 367.209716][T12899] loop3: detected capacity change from 0 to 16 [ 367.251855][T12899] erofs: (device loop3): mounted with root inode @ nid 36. [ 367.287976][T12898] loop1: detected capacity change from 0 to 1024 [ 367.683934][T12910] loop1: detected capacity change from 0 to 1024 [ 367.746805][T12913] SET target dimension over the limit! [ 367.794537][T12910] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 367.820717][T12910] syz.1.3100: attempt to access beyond end of device [ 367.820717][T12910] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 367.867859][T12910] Buffer I/O error on dev loop1, logical block 458752, async page read [ 367.893626][T12910] syz.1.3100: attempt to access beyond end of device [ 367.893626][T12910] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 367.943407][T12910] Buffer I/O error on dev loop1, logical block 458752, async page read [ 368.217332][T12921] netlink: 'syz.1.3106': attribute type 15 has an invalid length. [ 368.322877][T12904] loop2: detected capacity change from 0 to 32768 [ 368.837926][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'. [ 368.879375][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'. [ 369.213104][T12924] syz.0.3107 (12924): drop_caches: 2 [ 369.248893][T12904] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 369.288636][T12933] loop1: detected capacity change from 0 to 32768 [ 369.307582][T12933] (syz.1.3112,12933,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.333577][T12904] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 369.375049][T12933] (syz.1.3112,12933,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.425045][ T49] (kworker/u4:3,49,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=281474976710728, rec_len=0, name_len=0 [ 369.429386][T12904] (syz.2.3097,12904,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=6 [ 369.459897][T12904] (syz.2.3097,12904,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 369.469334][T12904] (syz.2.3097,12904,0):ocfs2_mknod:298 ERROR: status = -2 [ 369.479051][T12904] (syz.2.3097,12904,0):ocfs2_mknod:502 ERROR: status = -2 [ 369.487200][T12904] (syz.2.3097,12904,0):ocfs2_create:676 ERROR: status = -2 [ 369.502245][T12933] JBD2: Ignoring recovery information on journal [ 369.571314][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 369.598232][T12933] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 369.654406][ T6596] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 369.783707][T12948] loop2: detected capacity change from 0 to 2048 [ 369.835817][T12948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.855744][ T6596] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 369.881997][ T6596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.910057][ T6596] usb 1-1: config 0 descriptor?? [ 370.047868][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 370.143482][ T6596] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 370.152022][ T6596] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 370.338140][ T6596] [drm:udl_init] *ERROR* Selecting channel failed [ 370.405790][ T6596] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 370.442712][ T6596] [drm] Initialized udl on minor 2 [ 370.488515][T12960] bond2: entered promiscuous mode [ 370.494471][T12960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.523045][ T6596] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.586937][ T6596] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 370.605169][ T1187] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.651595][ T6596] usb 1-1: USB disconnect, device number 20 [ 370.663617][ T1187] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 370.698422][ T1187] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 370.796810][T12969] loop1: detected capacity change from 0 to 4096 [ 370.851184][T12969] ntfs: volume version 3.1. [ 371.804302][T12977] loop3: detected capacity change from 0 to 32768 [ 371.818878][T12977] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 371.883542][ T6596] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 372.052984][ T7020] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 372.105125][ T6596] usb 3-1: Using ep0 maxpacket: 8 [ 372.124196][ T6596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.155471][ T6596] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 372.183342][ T6596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.205402][ T6596] usb 3-1: Product: syz [ 372.209734][ T6596] usb 3-1: Manufacturer: syz [ 372.223263][ T6596] usb 3-1: SerialNumber: syz [ 372.244581][ T6596] usb 3-1: config 0 descriptor?? [ 372.266485][ T6596] cdc_phonet 3-1:0.0: invalid descriptor buffer length [ 372.288324][ T6596] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 372.411683][T13009] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.476340][T12991] loop0: detected capacity change from 0 to 40427 [ 372.527692][T12991] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 372.544958][ T6596] usb 3-1: USB disconnect, device number 10 [ 372.563439][T12991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 372.621054][T12991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 372.776502][T12991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 372.793346][T12991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 372.925168][T12991] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 373.410681][T13037] loop2: detected capacity change from 0 to 512 [ 373.451299][T13037] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 373.510070][T13037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3160: bg 0: block 255: padding at end of block bitmap is not set [ 373.566687][ T5881] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 373.604538][T13045] Cannot find del_set index 4 as target [ 373.685933][T13037] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 373.715880][T13037] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3160: invalid indirect mapped block 1 (level 1) [ 373.759259][T13037] EXT4-fs (loop2): 1 truncate cleaned up [ 373.771268][T13037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.783475][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 373.793486][ T5881] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 373.817980][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.836390][ T5881] usb 4-1: Product: syz [ 373.841692][ T5881] usb 4-1: Manufacturer: syz [ 373.853258][ T5881] usb 4-1: SerialNumber: syz [ 373.865764][ T5881] usb 4-1: config 0 descriptor?? [ 373.882414][ T5881] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 373.898766][ T5881] usb 4-1: Detected FT2232H [ 373.944646][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.103741][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 374.143699][ T5881] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 374.176935][ T5881] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 374.198869][ T5881] usb 4-1: USB disconnect, device number 17 [ 374.229450][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 374.271666][ T5881] ftdi_sio 4-1:0.0: device disconnected [ 374.295995][T13051] loop0: detected capacity change from 0 to 2048 [ 374.304687][T10634] udevd[10634]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 374.509812][T13043] loop1: detected capacity change from 0 to 32768 [ 374.772884][T13051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.057510][T13049] syz.2.3163 (13049): drop_caches: 2 [ 375.070068][T13043] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.186044][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 375.306232][T13072] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3169'. [ 375.355539][T13072] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.410963][T13043] XFS (loop1): Ending clean mount [ 375.444786][T13043] XFS (loop1): Quotacheck needed: Please wait. [ 375.559017][T13043] XFS (loop1): Quotacheck: Done. [ 375.848137][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.382525][T13097] loop0: detected capacity change from 0 to 512 [ 376.438793][T13098] loop2: detected capacity change from 0 to 1024 [ 376.514051][T13076] loop3: detected capacity change from 0 to 32768 [ 376.545281][T13076] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 376.617445][T13099] syz.1.3178 (13099): drop_caches: 2 [ 376.666910][T13097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.723596][T13097] ext4 filesystem being mounted at /785/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.799378][ T5783] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 376.837470][T13097] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.3183: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 376.945216][T13097] EXT4-fs error (device loop0) in ext4_free_inode:363: Filesystem failed CRC [ 377.055515][T13110] loop2: detected capacity change from 0 to 512 [ 377.104369][T13110] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3185: invalid block [ 377.142080][T13114] netlink: 'syz.3.3188': attribute type 8 has an invalid length. [ 377.172088][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.240378][T13110] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3185: invalid indirect mapped block 4294967295 (level 1) [ 377.265146][T13110] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3185: invalid indirect mapped block 4294967295 (level 1) [ 377.310925][T13110] EXT4-fs (loop2): 2 truncates cleaned up [ 377.346260][T13110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.469794][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.543313][T13122] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 377.583355][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3200'. [ 377.592541][T13122] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 377.614421][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3200'. [ 377.850689][T13132] loop1: detected capacity change from 0 to 256 [ 377.880803][T13134] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 377.995100][T13132] FAT-fs (loop1): Directory bread(block 64) failed [ 378.010895][T13132] FAT-fs (loop1): Directory bread(block 65) failed [ 378.027989][T13132] FAT-fs (loop1): Directory bread(block 66) failed [ 378.042829][T13132] FAT-fs (loop1): Directory bread(block 67) failed [ 378.066135][T13132] FAT-fs (loop1): Directory bread(block 68) failed [ 378.094551][T13138] syz.2.3199 (13138): drop_caches: 2 [ 378.122581][T13132] FAT-fs (loop1): Directory bread(block 69) failed [ 378.147766][T13132] FAT-fs (loop1): Directory bread(block 70) failed [ 378.173366][T13132] FAT-fs (loop1): Directory bread(block 71) failed [ 378.186514][T13132] FAT-fs (loop1): Directory bread(block 72) failed [ 378.203342][T13132] FAT-fs (loop1): Directory bread(block 73) failed [ 378.344567][T13144] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 378.559867][T13148] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.711098][T13154] kernel profiling enabled (shift: 5) [ 378.779914][T13158] syz.3.3210 (13158): drop_caches: 2 [ 378.881730][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.888400][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.971237][T13191] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3225'. [ 380.024457][T13157] loop1: detected capacity change from 0 to 32768 [ 380.065460][T13157] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 380.086049][T13157] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 380.201602][T13157] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 380.242192][ T6596] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 380.276160][ T6596] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 380.286555][T13200] loop2: detected capacity change from 0 to 128 [ 380.389100][T13202] loop0: detected capacity change from 0 to 24 [ 380.417317][T13202] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 380.454628][ T6596] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms [ 380.476033][T13202] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 380.482522][ T6596] gfs2: fsid=syz:syz.0: jid=0: Done [ 380.517902][T13202] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 380.539330][T13157] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 380.916745][T13208] loop2: detected capacity change from 0 to 512 [ 380.930674][T13157] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 380.930674][T13157] bh = 2051 (type: exp=14, found=8) [ 380.930674][T13157] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417 [ 380.964381][T13208] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 381.002486][T13208] EXT4-fs (loop2): invalid journal inode [ 381.023943][T13157] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 381.031649][T13208] EXT4-fs (loop2): can't get journal size [ 381.035202][T13157] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 381.073683][T13157] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 381.089868][T13157] gfs2: fsid=syz:syz.0: File system withdrawn [ 381.096663][T13157] CPU: 0 PID: 13157 Comm: syz.1.3209 Not tainted syzkaller #0 [ 381.104192][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.114288][T13157] Call Trace: [ 381.117635][T13157] [ 381.120591][T13157] dump_stack_lvl+0x18c/0x250 [ 381.125316][T13157] ? kobject_uevent_env+0x363/0x8b0 [ 381.130638][T13157] ? show_regs_print_info+0x20/0x20 [ 381.135958][T13157] ? load_image+0x400/0x400 [ 381.140533][T13157] ? kobject_uevent_env+0x363/0x8b0 [ 381.145769][T13157] gfs2_withdraw+0xb24/0x13d0 [ 381.150492][T13157] ? gfs2_lm+0x240/0x240 [ 381.154772][T13157] ? bit_wait+0xd0/0xd0 [ 381.158959][T13157] ? __wait_on_bit+0x2d0/0x2d0 [ 381.163778][T13157] ? bit_waitqueue+0x30/0x30 [ 381.168514][T13157] gfs2_metatype_check_ii+0x78/0x90 [ 381.173776][T13157] gfs2_quota_init+0xca9/0xea0 [ 381.178625][T13157] ? qd_put+0x1a0/0x1a0 [ 381.182830][T13157] ? inode_go_inval+0x12d/0x2b0 [ 381.187736][T13157] gfs2_make_fs_rw+0x411/0x580 [ 381.192543][T13157] ? gfs2_jdesc_check+0x2a0/0x2a0 [ 381.197611][T13157] ? do_raw_spin_lock+0x11f/0x2c0 [ 381.202678][T13157] ? __rwlock_init+0x150/0x150 [ 381.207489][T13157] ? do_raw_spin_unlock+0x121/0x230 [ 381.212729][T13157] gfs2_reconfigure+0x612/0xb10 [ 381.217635][T13157] reconfigure_super+0x21e/0x8a0 [ 381.222606][T13157] path_mount+0xd2f/0xff0 [ 381.227059][T13157] __se_sys_mount+0x2e7/0x3d0 [ 381.231964][T13157] ? __x64_sys_mount+0xc0/0xc0 [ 381.236761][T13157] ? lockdep_hardirqs_on+0x98/0x150 [ 381.241990][T13157] ? __x64_sys_mount+0x20/0xc0 [ 381.246804][T13157] do_syscall_64+0x55/0xa0 [ 381.251257][T13157] ? clear_bhb_loop+0x40/0x90 [ 381.255964][T13157] ? clear_bhb_loop+0x40/0x90 [ 381.260677][T13157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.266603][T13157] RIP: 0033:0x7f6a7ed9acb9 [ 381.271058][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.290694][T13157] RSP: 002b:00007f6a7fc48028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 381.299320][T13157] RAX: ffffffffffffffda RBX: 00007f6a7f015fa0 RCX: 00007f6a7ed9acb9 [ 381.307327][T13157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 381.315331][T13157] RBP: 00007f6a7ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 381.323676][T13157] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 381.331677][T13157] R13: 00007f6a7f016038 R14: 00007f6a7f015fa0 R15: 00007ffde5b6e358 [ 381.339689][T13157] [ 381.357419][T13157] gfs2: unable to remount read-write [ 381.381049][T13208] EXT4-fs (loop2): 1 truncate cleaned up [ 381.390127][T13208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.426661][T13189] loop3: detected capacity change from 0 to 32768 [ 381.498180][T13189] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 381.588623][T13189] XFS (loop3): Ending clean mount [ 381.597277][T13189] XFS (loop3): Quotacheck needed: Please wait. [ 381.739186][T13189] XFS (loop3): Quotacheck: Done. [ 381.809143][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.889657][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 382.110122][T13228] netlink: 'syz.2.3240': attribute type 2 has an invalid length. [ 382.239508][T13230] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3238'. [ 382.638778][T13238] netlink: 'syz.2.3243': attribute type 2 has an invalid length. [ 382.666430][T13226] loop0: detected capacity change from 0 to 32768 [ 382.710807][T13226] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 382.733498][T13226] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 382.742835][T13226] BTRFS info (device loop0): force zlib compression, level 3 [ 382.773500][T13226] BTRFS info (device loop0): force clearing of disk cache [ 382.780708][T13226] BTRFS info (device loop0): setting nodatasum [ 382.814039][T13226] BTRFS info (device loop0): allowing degraded mounts [ 382.843202][T13226] BTRFS info (device loop0): enabling disk space caching [ 382.853948][ T28] audit: type=1326 audit(1768973843.678:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7ed9acb9 code=0x7ffc0000 [ 382.882616][T13226] BTRFS info (device loop0): disk space caching is enabled [ 382.918341][ T28] audit: type=1326 audit(1768973843.678:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7ed9acb9 code=0x7ffc0000 [ 382.942130][ T28] audit: type=1326 audit(1768973843.718:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6a7ed9acb9 code=0x7ffc0000 [ 382.964375][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.043386][ T28] audit: type=1326 audit(1768973843.718:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7ed9acb9 code=0x7ffc0000 [ 383.183230][ T28] audit: type=1326 audit(1768973843.718:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7ed9acb9 code=0x7ffc0000 [ 383.326459][T13226] BTRFS info (device loop0): auto enabling async discard [ 383.400130][T13226] BTRFS info (device loop0): rebuilding free space tree [ 383.481150][T13277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3256'. [ 383.576533][T13226] BTRFS info (device loop0): disabling free space tree [ 383.603483][T13226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 383.655367][T13226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 383.686301][T13281] loop1: detected capacity change from 0 to 1024 [ 383.854809][T13226] BTRFS info (device loop0): balance: start -d -m [ 383.872895][T13226] BTRFS info (device loop0): balance: ended with status: 0 [ 383.884487][ T12] hfsplus: b-tree write err: -5, ino 4 [ 384.018004][ T5778] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 384.170392][ T7020] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop0 scanned by udevd (7020) [ 384.377008][T13298] loop1: detected capacity change from 0 to 256 [ 384.780741][T13306] loop1: detected capacity change from 0 to 2048 [ 384.863274][T13309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.008990][T13306] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 385.054553][T13306] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 385.090512][T13311] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 385.106947][T13306] Remounting filesystem read-only [ 385.115157][T13306] NILFS (loop1): error -5 truncating bmap (ino=16) [ 385.198210][ T5773] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 385.223241][ T5773] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 385.253370][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.287738][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.312846][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.340269][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 385.353236][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 385.370342][ T5773] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 385.383238][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.402458][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.422818][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.438746][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 385.466062][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.496827][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.517935][ T5773] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 385.543570][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 385.594392][T13296] loop0: detected capacity change from 0 to 32768 [ 385.634665][T13296] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.3262 (13296) [ 385.708340][T13296] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 385.733232][T13296] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 385.742058][T13296] BTRFS info (device loop0): enabling ssd optimizations [ 385.783211][T13296] BTRFS info (device loop0): not using ssd optimizations [ 385.805481][T13304] loop3: detected capacity change from 0 to 32768 [ 385.812222][T13296] BTRFS info (device loop0): turning off barriers [ 385.826025][T13296] BTRFS info (device loop0): using free space tree [ 385.918073][T13304] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 386.262123][ T5778] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 386.610677][T13349] loop1: detected capacity change from 0 to 2048 [ 386.714799][T13349] loop1: p1 p3 < > p4 < p5 > [ 386.719595][T13349] loop1: partition table partially beyond EOD, truncated [ 386.794118][T13349] loop1: p1 size 33024 extends beyond EOD, truncated [ 386.809532][T10634] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (10634) [ 386.822448][T13349] loop1: p3 start 4284289 is beyond EOD, truncated [ 386.866846][T13349] loop1: p5 size 33024 extends beyond EOD, truncated [ 387.178403][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 387.223692][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 387.232724][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3289'. [ 387.409803][T13371] overlayfs: unescaped trailing colons in lowerdir mount option. [ 387.504838][ T7020] udevd[7020]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 387.542858][T13373] loop3: detected capacity change from 0 to 1024 [ 388.109202][T13390] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 388.287213][T13393] netlink: 'syz.0.3303': attribute type 21 has an invalid length. [ 388.317333][T13393] netlink: 'syz.0.3303': attribute type 6 has an invalid length. [ 388.343289][T13393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3303'. [ 388.501637][T13377] loop1: detected capacity change from 0 to 32768 [ 388.596405][T13377] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 388.849854][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 388.910884][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 388.933051][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 388.954454][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 389.531067][T13434] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 390.191366][T13452] loop1: detected capacity change from 0 to 8 [ 390.258119][T13452] SQUASHFS error: xz decompression failed, data probably corrupt [ 390.268336][T13452] SQUASHFS error: Failed to read block 0x108: -5 [ 390.278449][T13452] SQUASHFS error: Unable to read metadata cache entry [106] [ 390.287611][T13452] SQUASHFS error: Unable to read inode 0x11f [ 390.357617][T13432] loop3: detected capacity change from 0 to 32768 [ 390.370684][ T7020] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.793390][ T6596] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 391.008609][ T6596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 391.039275][ T6596] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 391.070039][ T6596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 391.102023][ T6596] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 391.143652][ T6596] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 391.166145][ T6596] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 391.199141][ T6596] usb 2-1: Manufacturer: syz [ 391.211686][ T6596] usb 2-1: config 0 descriptor?? [ 391.234318][T13452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.252753][ T6596] smsusb:smsusb_probe: board id=9, interface number 0 [ 391.297358][ T6596] smsusb:siano_media_device_register: media controller created [ 391.320105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.327637][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.335012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.342385][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.349748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.363342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.370893][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.378234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.385575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.392908][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.418064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.425431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.432767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.440101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.447439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.458303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.465676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.472999][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.480599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.487939][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.495265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.502580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.510276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.517626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.525075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.532402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.539724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.548298][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.555615][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.562883][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.570162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.577420][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.585353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.592670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.599984][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.607311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.614633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.622653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.630027][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.637389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.644755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.652105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.659444][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.667554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.674925][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.682294][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.689639][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.697971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.705309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.712710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.720027][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.727342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.734664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.742706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.750045][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.757517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.764791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.772141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.779417][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.786687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.794228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.801501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.809134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.816465][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.824068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.831410][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.838815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.846131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.853455][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.860761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.868128][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.875452][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.883217][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.890650][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.897987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.905415][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.912755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.920088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.927485][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.934816][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.944618][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.951972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.959302][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.966622][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.974327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.981742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.989070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 391.996780][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.004114][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.011523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.018989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.026323][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.033887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.041315][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.048633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.055952][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.063643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.070979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.078303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.085670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.092975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.100489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.108121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.115546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.122929][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.130251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.137887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.145239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.152559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.159896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.167326][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.174658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.182392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.189742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.197048][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.204347][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.211637][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.218915][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.226673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.234016][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.241337][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.248682][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.256616][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.264132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.271473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.278792][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.286161][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.293479][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.301173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.308513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.315848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.323251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.330989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.338540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.345814][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.354855][ T6596] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 392.363305][ T6596] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 392.370476][ T6596] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 392.378223][ T6596] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 392.386376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.393755][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 392.401584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.409303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.417022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.425866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.433494][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.443456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.451025][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.458577][ T1187] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 392.458650][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.473979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.481643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.489243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.497049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.504735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.512281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.520241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.527905][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.543452][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.551212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.573384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.581034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.589816][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.597437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.605071][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.612640][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.620939][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.628959][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.636724][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.644334][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.651884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.659835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.667554][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.675165][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.682727][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.690212][ T1187] usb 3-1: Using ep0 maxpacket: 32 [ 392.695818][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.703422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.711214][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.718909][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.726518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.734141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.741518][ T1187] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 392.749770][ T1187] usb 3-1: config 0 has no interface number 0 [ 392.756218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.763819][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.771473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.780723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.788585][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.796433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.804295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.811855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.833365][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.840961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.848572][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.856377][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.863973][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.871507][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.879206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.886927][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.894540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.902107][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.909743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.917616][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.925256][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.932847][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.940844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.948482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.956370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.964123][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.971673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.979419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.987069][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 392.994671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.002314][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.009991][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.017748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.025497][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.033089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.040753][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.048714][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.056418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.064010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.071657][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.079352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.087358][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.095173][ T1187] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 393.104329][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.112361][ T1187] usb 3-1: Product: syz [ 393.116995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.124889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.132387][ T1187] usb 3-1: Manufacturer: syz [ 393.137091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.144748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.152286][ T1187] usb 3-1: SerialNumber: syz [ 393.152359][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.164591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.172142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.179761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.187486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.195239][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.202856][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.210495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.218154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.225888][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.233658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.241229][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.248948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.256591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.264242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.271792][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.279999][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.287710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.295377][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.302921][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.310549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.318411][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.326128][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.333684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.341335][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.348919][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.356602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.364290][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.371930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.379556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.387218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.394833][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.402615][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.410372][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.419787][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.427430][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.435094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.443602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.451468][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.459463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.467245][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.474897][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.482546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.490207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.497948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.505614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.513202][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.520803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.528530][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.536277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.543925][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.551525][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.559232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.579608][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.593783][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.601700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.609374][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.617207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.624988][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.632735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.640493][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.647986][ T6596] smsmdtv:smscore_unregister_device: exiting although not all buffers released. [ 393.660024][ T6596] ------------[ cut here ]------------ [ 393.665617][ T6596] ODEBUG: free active (active state 0) object: ffff88805d4ee9e8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 393.678528][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.686200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 393.694086][ T6596] WARNING: CPU: 0 PID: 6596 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 393.704228][ T6596] Modules linked in: [ 393.708184][ T6596] CPU: 0 PID: 6596 Comm: kworker/0:8 Not tainted syzkaller #0 [ 393.715942][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.726107][ T6596] Workqueue: usb_hub_wq hub_event [ 393.731201][ T6596] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 393.737677][ T6596] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 393.757945][ T6596] RSP: 0018:ffffc9001a386b38 EFLAGS: 00010282 [ 393.764324][ T6596] RAX: de87890081f5a000 RBX: ffffffff974be248 RCX: 0000000000100000 [ 393.772352][ T6596] RDX: ffffc900172a9000 RSI: 0000000000067bf3 RDI: 0000000000067bf4 [ 393.780429][ T6596] RBP: ffffffff8ac9f640 R08: ffffc9001a386727 R09: 1ffff92003470ce4 [ 393.788780][ T6596] R10: dffffc0000000000 R11: fffff52003470ce5 R12: ffff88805d4ef000 [ 393.796875][ T6596] R13: ffffffff871f3860 R14: ffff88805d4ee000 R15: ffff88805d4ee9e8 [ 393.804961][ T6596] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 393.814398][ T6596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.821050][ T6596] CR2: 00007feed414da08 CR3: 0000000062549000 CR4: 00000000003506f0 [ 393.829138][ T6596] Call Trace: [ 393.832471][ T6596] [ 393.835502][ T6596] slab_free_freelist_hook+0xd2/0x1a0 [ 393.841031][ T6596] ? smsusb_term_device+0x1ac/0x220 [ 393.846400][ T6596] __kmem_cache_free+0xba/0x1e0 [ 393.851330][ T6596] smsusb_term_device+0x1ac/0x220 [ 393.856467][ T6596] smsusb_probe+0x17a0/0x1e50 [ 393.861249][ T6596] ? s2255_print_cfg+0x1b0/0x1b0 [ 393.866331][ T6596] ? smsusb1_detectmode+0x260/0x260 [ 393.871601][ T6596] ? pm_runtime_enable+0xa7/0x2c0 [ 393.876772][ T6596] ? __pm_runtime_set_status+0x8ab/0xb80 [ 393.882581][ T6596] usb_probe_interface+0x5c9/0xb20 [ 393.887816][ T6596] ? usb_register_driver+0x3d0/0x3d0 [ 393.893200][ T6596] really_probe+0x25b/0xb20 [ 393.897775][ T6596] ? pm_runtime_barrier+0x14b/0x1c0 [ 393.903050][ T6596] __driver_probe_device+0x18c/0x330 [ 393.908614][ T6596] driver_probe_device+0x4f/0x420 [ 393.913912][ T6596] __device_attach_driver+0x2ca/0x510 [ 393.919359][ T6596] bus_for_each_drv+0x252/0x2e0 [ 393.924354][ T6596] ? coredump_store+0x90/0x90 [ 393.929084][ T6596] ? bus_find_device+0x300/0x300 [ 393.934184][ T6596] __device_attach+0x2c2/0x420 [ 393.939020][ T6596] ? device_attach+0x20/0x20 [ 393.943692][ T6596] ? __kmem_cache_free+0xba/0x1e0 [ 393.948791][ T6596] ? do_raw_spin_unlock+0x121/0x230 [ 393.954121][ T6596] bus_probe_device+0x180/0x260 [ 393.959049][ T6596] device_add+0x85b/0xc20 [ 393.963491][ T6596] usb_set_configuration+0x1a79/0x20c0 [ 393.969050][ T6596] usb_generic_driver_probe+0x8d/0x150 [ 393.974620][ T6596] usb_probe_device+0x13d/0x270 [ 393.979551][ T6596] ? usb_register_device_driver+0x230/0x230 [ 393.985544][ T6596] really_probe+0x25b/0xb20 [ 393.990109][ T6596] ? pm_runtime_barrier+0x14b/0x1c0 [ 393.995419][ T6596] __driver_probe_device+0x18c/0x330 [ 394.000769][ T6596] driver_probe_device+0x4f/0x420 [ 394.005944][ T6596] __device_attach_driver+0x2ca/0x510 [ 394.011384][ T6596] bus_for_each_drv+0x252/0x2e0 [ 394.016349][ T6596] ? coredump_store+0x90/0x90 [ 394.021089][ T6596] ? bus_find_device+0x300/0x300 [ 394.026153][ T6596] __device_attach+0x2c2/0x420 [ 394.030985][ T6596] ? device_attach+0x20/0x20 [ 394.035667][ T6596] ? __kmem_cache_free+0xba/0x1e0 [ 394.040768][ T6596] ? do_raw_spin_unlock+0x121/0x230 [ 394.046181][ T6596] bus_probe_device+0x180/0x260 [ 394.051114][ T6596] device_add+0x85b/0xc20 [ 394.055553][ T6596] usb_new_device+0xa3c/0x1660 [ 394.060410][ T6596] ? usb_disconnect+0x8a0/0x8a0 [ 394.065364][ T6596] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.070623][ T6596] ? lockdep_hardirqs_on+0x98/0x150 [ 394.075917][ T6596] hub_event+0x29bf/0x49f0 [ 394.080452][ T6596] ? hub_post_resume+0x120/0x120 [ 394.085537][ T6596] ? read_lock_is_recursive+0x20/0x20 [ 394.090982][ T6596] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.096294][ T6596] ? process_scheduled_works+0x96f/0x15d0 [ 394.102085][ T6596] ? process_scheduled_works+0x96f/0x15d0 [ 394.107971][ T6596] process_scheduled_works+0xa5d/0x15d0 [ 394.113654][ T6596] ? assign_work+0x430/0x430 [ 394.118328][ T6596] ? assign_work+0x3d0/0x430 [ 394.122995][ T6596] worker_thread+0xa55/0xfc0 [ 394.127733][ T6596] kthread+0x2fa/0x390 [ 394.131864][ T6596] ? pr_cont_work+0x560/0x560 [ 394.136754][ T6596] ? kthread_blkcg+0xd0/0xd0 [ 394.141404][ T6596] ret_from_fork+0x48/0x80 [ 394.146159][ T6596] ? kthread_blkcg+0xd0/0xd0 [ 394.150905][ T6596] ret_from_fork_asm+0x11/0x20 [ 394.155926][ T6596] [ 394.158982][ T6596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 394.166439][ T6596] CPU: 0 PID: 6596 Comm: kworker/0:8 Not tainted syzkaller #0 [ 394.173945][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.184068][ T6596] Workqueue: usb_hub_wq hub_event [ 394.189254][ T6596] Call Trace: [ 394.192575][ T6596] [ 394.195555][ T6596] dump_stack_lvl+0x18c/0x250 [ 394.200309][ T6596] ? show_regs_print_info+0x20/0x20 [ 394.205695][ T6596] ? load_image+0x400/0x400 [ 394.210268][ T6596] panic+0x2dc/0x730 [ 394.215000][ T6596] ? bpf_jit_dump+0xd0/0xd0 [ 394.219586][ T6596] ? ret_from_fork_asm+0x11/0x20 [ 394.224576][ T6596] __warn+0x2e0/0x470 [ 394.228588][ T6596] ? debug_check_no_obj_freed+0x446/0x540 [ 394.234346][ T6596] ? debug_check_no_obj_freed+0x446/0x540 [ 394.240198][ T6596] report_bug+0x2be/0x4f0 [ 394.244655][ T6596] ? debug_check_no_obj_freed+0x446/0x540 [ 394.250424][ T6596] ? debug_check_no_obj_freed+0x446/0x540 [ 394.256177][ T6596] ? debug_check_no_obj_freed+0x448/0x540 [ 394.261929][ T6596] handle_bug+0xcf/0x120 [ 394.266390][ T6596] exc_invalid_op+0x1a/0x50 [ 394.270927][ T6596] asm_exc_invalid_op+0x1a/0x20 [ 394.275834][ T6596] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 394.282208][ T6596] Code: 4c 8b 4d 00 48 c7 c7 a0 8a 1c 8b 48 c7 c6 00 87 1c 8b 48 c7 c2 20 8c 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 3e 56 20 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 8d 5a [ 394.301848][ T6596] RSP: 0018:ffffc9001a386b38 EFLAGS: 00010282 [ 394.307951][ T6596] RAX: de87890081f5a000 RBX: ffffffff974be248 RCX: 0000000000100000 [ 394.315951][ T6596] RDX: ffffc900172a9000 RSI: 0000000000067bf3 RDI: 0000000000067bf4 [ 394.323954][ T6596] RBP: ffffffff8ac9f640 R08: ffffc9001a386727 R09: 1ffff92003470ce4 [ 394.331954][ T6596] R10: dffffc0000000000 R11: fffff52003470ce5 R12: ffff88805d4ef000 [ 394.339957][ T6596] R13: ffffffff871f3860 R14: ffff88805d4ee000 R15: ffff88805d4ee9e8 [ 394.347957][ T6596] ? smsusb_onresponse+0x890/0x890 [ 394.353123][ T6596] ? smsusb_onresponse+0x890/0x890 [ 394.358322][ T6596] slab_free_freelist_hook+0xd2/0x1a0 [ 394.363818][ T6596] ? smsusb_term_device+0x1ac/0x220 [ 394.369052][ T6596] __kmem_cache_free+0xba/0x1e0 [ 394.373950][ T6596] smsusb_term_device+0x1ac/0x220 [ 394.379019][ T6596] smsusb_probe+0x17a0/0x1e50 [ 394.383746][ T6596] ? s2255_print_cfg+0x1b0/0x1b0 [ 394.388722][ T6596] ? smsusb1_detectmode+0x260/0x260 [ 394.393972][ T6596] ? pm_runtime_enable+0xa7/0x2c0 [ 394.399148][ T6596] ? __pm_runtime_set_status+0x8ab/0xb80 [ 394.404831][ T6596] usb_probe_interface+0x5c9/0xb20 [ 394.409998][ T6596] ? usb_register_driver+0x3d0/0x3d0 [ 394.415319][ T6596] really_probe+0x25b/0xb20 [ 394.419855][ T6596] ? pm_runtime_barrier+0x14b/0x1c0 [ 394.425440][ T6596] __driver_probe_device+0x18c/0x330 [ 394.430772][ T6596] driver_probe_device+0x4f/0x420 [ 394.436026][ T6596] __device_attach_driver+0x2ca/0x510 [ 394.441442][ T6596] bus_for_each_drv+0x252/0x2e0 [ 394.446345][ T6596] ? coredump_store+0x90/0x90 [ 394.451050][ T6596] ? bus_find_device+0x300/0x300 [ 394.456058][ T6596] __device_attach+0x2c2/0x420 [ 394.460853][ T6596] ? device_attach+0x20/0x20 [ 394.465466][ T6596] ? __kmem_cache_free+0xba/0x1e0 [ 394.470527][ T6596] ? do_raw_spin_unlock+0x121/0x230 [ 394.475763][ T6596] bus_probe_device+0x180/0x260 [ 394.480663][ T6596] device_add+0x85b/0xc20 [ 394.485027][ T6596] usb_set_configuration+0x1a79/0x20c0 [ 394.490539][ T6596] usb_generic_driver_probe+0x8d/0x150 [ 394.496031][ T6596] usb_probe_device+0x13d/0x270 [ 394.500919][ T6596] ? usb_register_device_driver+0x230/0x230 [ 394.506847][ T6596] really_probe+0x25b/0xb20 [ 394.511381][ T6596] ? pm_runtime_barrier+0x14b/0x1c0 [ 394.516615][ T6596] __driver_probe_device+0x18c/0x330 [ 394.521939][ T6596] driver_probe_device+0x4f/0x420 [ 394.527050][ T6596] __device_attach_driver+0x2ca/0x510 [ 394.532454][ T6596] bus_for_each_drv+0x252/0x2e0 [ 394.537352][ T6596] ? coredump_store+0x90/0x90 [ 394.542055][ T6596] ? bus_find_device+0x300/0x300 [ 394.547031][ T6596] __device_attach+0x2c2/0x420 [ 394.551823][ T6596] ? device_attach+0x20/0x20 [ 394.556438][ T6596] ? __kmem_cache_free+0xba/0x1e0 [ 394.561585][ T6596] ? do_raw_spin_unlock+0x121/0x230 [ 394.566820][ T6596] bus_probe_device+0x180/0x260 [ 394.571706][ T6596] device_add+0x85b/0xc20 [ 394.576074][ T6596] usb_new_device+0xa3c/0x1660 [ 394.581057][ T6596] ? usb_disconnect+0x8a0/0x8a0 [ 394.585943][ T6596] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.591164][ T6596] ? lockdep_hardirqs_on+0x98/0x150 [ 394.596393][ T6596] hub_event+0x29bf/0x49f0 [ 394.600970][ T6596] ? hub_post_resume+0x120/0x120 [ 394.605954][ T6596] ? read_lock_is_recursive+0x20/0x20 [ 394.611360][ T6596] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.616582][ T6596] ? process_scheduled_works+0x96f/0x15d0 [ 394.622358][ T6596] ? process_scheduled_works+0x96f/0x15d0 [ 394.628106][ T6596] process_scheduled_works+0xa5d/0x15d0 [ 394.633703][ T6596] ? assign_work+0x430/0x430 [ 394.638329][ T6596] ? assign_work+0x3d0/0x430 [ 394.642958][ T6596] worker_thread+0xa55/0xfc0 [ 394.647599][ T6596] kthread+0x2fa/0x390 [ 394.651688][ T6596] ? pr_cont_work+0x560/0x560 [ 394.656395][ T6596] ? kthread_blkcg+0xd0/0xd0 [ 394.661013][ T6596] ret_from_fork+0x48/0x80 [ 394.665456][ T6596] ? kthread_blkcg+0xd0/0xd0 [ 394.670074][ T6596] ret_from_fork_asm+0x11/0x20 [ 394.674881][ T6596] [ 394.678541][ T6596] Kernel Offset: disabled [ 394.682976][ T6596] Rebooting in 86400 seconds..