last executing test programs: 5.648375639s ago: executing program 3 (id=2798): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a2ff2ab899ec", 0x0, 0xee2, 0x10013, 0x0, 0x0}) 5.576728273s ago: executing program 3 (id=2799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x8, @loopback}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440)) 4.681871091s ago: executing program 3 (id=2809): syz_mount_image$gfs2(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x8c1b, &(0x7f0000002140)=ANY=[], 0x5, 0x12871, &(0x7f0000004940)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 4.167833782s ago: executing program 4 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.037917598s ago: executing program 4 (id=2812): set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000003, 0x43a11306}) 3.862537656s ago: executing program 4 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 3.76622676s ago: executing program 4 (id=2816): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.377314737s ago: executing program 4 (id=2822): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045503, &(0x7f00000000c0)) 2.831812859s ago: executing program 1 (id=2830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) 2.745835534s ago: executing program 1 (id=2831): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=@hopopts={0x3b}, 0x8) 2.731654804s ago: executing program 1 (id=2832): unshare(0x28040680) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)={0x3, "994c65"}, 0x4) 2.613748989s ago: executing program 1 (id=2834): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc020aa00, &(0x7f0000000040)={&(0x7f000058f000/0x2000)=nil, &(0x7f00000bb000/0x1000)=nil, 0x2000}) 2.572646161s ago: executing program 1 (id=2835): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.329872061s ago: executing program 2 (id=2838): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {}, 0x42, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x6, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080018000000030006000600800a0000080002"], 0x1034}}, 0x0) 2.276675704s ago: executing program 2 (id=2839): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xd1, 0x0, 0x0) 2.185929238s ago: executing program 2 (id=2841): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4) ppoll(&(0x7f0000004e80)=[{r0, 0x2bc}], 0x1, 0x0, 0x0, 0x0) 2.058635922s ago: executing program 2 (id=2842): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x1) 1.925395168s ago: executing program 2 (id=2843): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) 1.609550422s ago: executing program 3 (id=2845): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 1.490495527s ago: executing program 4 (id=2847): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.298300945s ago: executing program 32 (id=2847): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.253075767s ago: executing program 0 (id=2850): r0 = socket$inet(0x2, 0x2, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.200035619s ago: executing program 0 (id=2851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) 1.106051024s ago: executing program 0 (id=2852): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000000600000000060015000400000014001680100008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 989.808799ms ago: executing program 2 (id=2853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000002000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) 989.675698ms ago: executing program 0 (id=2854): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 811.309536ms ago: executing program 3 (id=2855): set_mempolicy(0x3, &(0x7f00000002c0)=0x7ff, 0x99c) syz_clone(0x40000080, 0x0, 0x1100, 0x0, 0x0, 0x0) 226.670261ms ago: executing program 3 (id=2856): r0 = syz_usb_connect(0x1, 0x4a, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd9, 0x28, 0x27, 0x8, 0xdf6, 0x56, 0x65db, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x71, 0x35, 0x4, 0xdc, 0x9f, 0xf6, 0xf, [@generic={0x2, 0xb}], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x1, 0x1, 0x9}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0xa8, 0x22}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x2, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x428, 0x1, 0xc, 0x5}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0xd, 0x2f, {0x2f, 0x31, "a011fdac843bd336d6bb3045f87392b64b9e9ab72848ba7f715f97d6c2071dc123c50c2cd4dd9d732a26f94e94"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2411}}}, &(0x7f00000002c0)={0x34, &(0x7f00000000c0)={0x40, 0xb, 0x6b, "bb186f53334b6fc40d1ce65f82d463ee2b18f75fa8b413e9d735a189c62b75d40bc1a1451af6c5feea6d0712ff81023f274013e6618f8d3b4c7cdc289074471122a7cd6b91f59780d9a849e765c62fd09028081db205585349a68ac3351e599c932856bb16de81eb5a6374"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f00000001c0)={0x20, 0x0, 0x50, {0x4e, "1b5fa56dd1e42bd59a7811c34acdd921f98010b5a118aca30afbbdca80e41483b65986cf069064bf0eb70cb44bdd8b6c0a70a00ed47b33dc84409fb18e7f9f51eb5c469765e9c2084a4ba105f374"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x7f}}) 210.673202ms ago: executing program 0 (id=2865): unshare(0x28040680) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x3, @mcast1, 0x0, 0x1}, 0x20) 150.377674ms ago: executing program 0 (id=2857): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 1 (id=2858): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000680)='.\x02\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x6091, &(0x7f00000006c0)="$eJzs3V1vHFcZB/Bndtfrl9I0qlAVIi7SFEpLad4TKG9NueACkKiEck0i160CKaAkIFpFxFUuEBe8fAS46Q0X/SLlKyA+AJESripBGTT2Ocl4ss46JN5Z+/x+kjPz7Nm1n8nf4931zPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf++6PTlYRcfFX6YaDEZ+JYcQgYrmpj0Szcj7ffxQRh2JjOJ6LiOFiRPP4jX+eiTgTER8fiLhz98Zqc/OpHfZx9sT1q59+/zt//+0fbx36yVs//rA7/uZnT3/0u5sRB3/42kef3nwy2w4AAAClqOu6rtLb/MPp/f2g76YAgJnIz/91km9Xq9Vq9ROt/zCYr352Xi/FfPWjfqy6rZ7sZruIiPX2Y5rXDA7HA8Aesx6f9N0CPZJ/0UYR8VTfTQBzreq7AXbFnbs3VquUb9V+PjiyOZ5/T7kl//Xq3vUd2y2n6Z5jMqvvr1sxjGe36Wd5Rj3Mk5z/oJv/xc3xcbrfbuc/K9vlP9689Kk4Of9hN/+OLfn/KSL2bP6DifmXKuc/epT814d7eP+XPwAAAAAA+1/+/f/Bno//Lj7+puzIw47/HplRDwAAAAAAAADwpD3u/H/3mP8PAAAA5lbzXr3x5wP3b2uf699dv1BFPN25P1CYdLHMSt99AAAAAAAAAAAAAEBJRpvn8F6oIhYi4umVlbqum4+2bv2oHvfxe13p2w8l6/uHPAAAbPr4QOda/ipiKSIupL/1t7CyslLXS8sr9Uq9vJhfz44Xl+rl1vvavGxuWxzv4AXxaFw3n2yp9bi2ae+Xp413P1/ztcb1cAeNzUaPgQNARGw+G93xjLTP1PUz0ferHPYG+//+Y/9nJ/r+PgUAAAB2X13XdZX+nPfhdMx/0HdTAMAsLOXn/+5xAbVaXVy9OGf9qNXqXajb6slutouIWG8/pnnNYDp+ANhj1uOTvlugR/Iv2igiDvXdBDDXqr4bYFfcuXtjtUr5Vu3ngzS/ez4XZEv+69XG4/LjJy2n6Z5jMqvvr1sxjGe36ee5GfUwT3L+g27+FzfHx+l+u53/rGyXf7OdB3vop285/2E3/479k/9gYv6lyvmPHin/ofwBAAAAAGCO5d//H3T8N28yAAAAAAAAAOw5d+7eWM3Xvebj/5+fcL+qveb6z30j51/tOH/X/+4nOf9BN//OCTnD1vrtN+7n/6+7N1Y/vP7Pz+Xl3Oe/MBw3X3uhGgxH6ZyfeuHtuBxXYm344P1H7fE4+cD4wpbxU1PGTz8wPm7Gl/P4sViNn8eVeOve+OKUE6OWpozXU8Zz/kP7f5Fy/qPWR5P/ShqvOsvG7Q8GD+z37eWkr3P+r/958cTub85Ut2J4b9vamu072kM/G/8nT43jl9fWrh779aXr16+ejLTYcuupSIsnLOe/kD5y/i+9sDmefyS299fbH4wfOf95cStG2+b/Qmu92d6XZ9xbH3L+4/SR88/PQJP3/72c//b7/ys99AMAAAAAAAAAAAAAAAAPU9f1xiWi5yPiXLr+p69rMwGAmfr9D9JKnYR6s65ivvpRq9VqtfoJ1G31ZK+3i1ja+phzEfGbSZ8MAJhn/42If/TdBL2Rf8Hy3/trll/ouxlgpq699/5PL125snb1Wt+dAAAAAAAAAAD/rzz/55HW/M8b5wF15o3eMv/rG3Fkz87/ORgPN+Y6Txv0fLTn535whuKj8fD5v0dTvt7ClPHxlPHFKeNLU8YnXujRkvN/PmWc8z+cNqyk+V9f6qGfvuX8j6a5nnP+X+rcr51//Ze9nP9gS/7Hr7/7i+PX3nv/1cvvXnpn7Z21n508ce7M6bNnTp89e/zty1fWTmz+22PHuyvnn+e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88+s9+Zcl55/f+8i/LDn/l1Mt/7Lk/L+c6ofn/+bM+mI2cv6vpNr+X5ac/1dSLf+y5PxfTbX8y5LzP5Zq+Zcl53881fIvS84/H+GSf1ly/vnMBvmXJed/KtXyL0vO/3Sq5V+WnP+ZVMu/LDn/s6mWf1ly/udSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5luf/3/63MeOXff4uYgzasFLlSRRUPvU/fP5kAAAAAAAAAAAAAgK5ZnHLc9zYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOuszgJ+9eu0E4pIQQjBk7TjBJBvvrm+JCQZzbRpamgZCSwt1jL2+gG/1riFBqFka2oJAanr5QD+UAqIIqa0SIaSCRFGkIrXfyidQvqBWQqqlhspEUIkC2erMed93Z2ZnZ3btXfvMOb9flPzjnTMz75w5OzvPWs8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmW98686cDWZbl/zb+sznLrs//f2N2MP/j/L5rvUIAAADgSv2y8d9/uCF94eAKrtS0zb++5t+/vrCwsJB98IWLL/7lwkK6YDzLhjZkWeOy6N9+9tOF5m2CJ7OxgcGmPw/2uPuhHpcP97h8pMfloz0u39Dj8rEely/ZAUtsLH4f07ix7Y3/3Vzs0uymbKRx2fYO13pyYMPgYPxdTsNA4zoLI8eyk9mpbCabWnKdgcY/Wfatrfl9PZDF+xpsuq8tWZZd+vHHj8Q1DIR9vD1rubOG5ufuR2/Oxl/48cePfGXu+Vd2mj13w5KVZtmObfk6P5lli7+uygayDWmfxHUONq1zS4d1DrWsc6Bxvfz/29d5aYXrjI97LKzzu13WuSV87bHbsyybz5bdpt2T2WC2qe1e0/4eK46I/Dbyp/Jl2fCqjpOtKzhO8uv88PbW46T9mIz7f2vYJ8PLrKH56fjRJ0aX7PfLPU7yR12GYzW/7YfyOx0ba/7Vasuxmm/z8TuWPwY6PncdjoF0LDcdA9t6HQODo0ONY2Bwcc3bWo6B6SXXGcwGGvd18Y7ux8Dk3Olzk7OPf+yek6cPH585PnNmemrfnt179+zeu3fy2MlTM1PFf1e3S/vIpmwwHYPbwmtNPAZf27Zt8yG58MW1+z4YK8n3Qf7Y33NnvqDrB7NljvF8m0/uuPLvg/Rzv+n7YLjp+6Dja2qH74PhFXwf5Ntc2rGyn5nDTf92WsN6vRZubjoGruXPw/w+3/+65V8Lt4R1fequ1f48HFpyDMSHNRC+9/KvpPd7Y/eF/bL0uLg1v+C60cZ7u52PHZ6bOz+dhXFV3Nj0XLUfL5uaHlO25HgZXPXxcvDvf3HnrR2+vjnsq7G7uz9X+TZ7Jro/V41X9+tGswuzM+fD/hzNiv3Z8tVdWRhr7Grvz04/zfL9mbJEl/2Zb/PJe678vWDKJU2vfyO9Xv+GRoaL17+htDdGWl7/lj41Q42VZdmle1b2+jcS/r3ar383leT1L99X79/Z/RjIt/nU5GqPgeGur3+3hzkQ1vO6kBjGmnL/i43L54vDtOm57HncDA+PhONmON5j63Gze8l18lvL73vH1OUdNztub32uWt63rPy46fXrg9IcN/m++qup7sdNvs2z01f+2rEx/m/Ta8dor2NgZGg0X+9IOgiK17uFjfEY2Jkdyc5mp7Kj6Tr5s5zf18SulR0Do+Hfq/3acUtJjoF8X31uV/djIN/mO7vX9r3TjvCVtE3Te6f23y8sl/lvHV68vfbdttaZP1/n2773rvS1Thki3+b5PavNGd33093hK9d12E/t3z/LHdNHs6uzn24J6zy1t/vvpvJtbtq3wuPpYJZlz00/1/h9V/j97tcufO/rLb/37fQ75eemn3tw8uHvr2b9AABcvhcb/50fLd5rNv2N9Ur+/h8AAADoCzH3D4aZyP8AAABQGTH3D4WZyP8AAABQGTH3D4eZ1CT/n7hv/9O/fCJLnwa4EMTL42546I3FdrHjPR/+PL6wKP/6W7488vSnn1jZfQ9mWfaLB1/VcfsTb4zrKpyL63x969eXuOW2Fd3/o48sbtf8+QmX9he3Hx/PSg+D2FX+1uSuxu2OPz7dmM8+mDXmw/OferK4/eLPcfuLu4vt/yZ8aMnBYwMt198R1rM9zPHwmTIPHVzcD/mM13t6y2v+5cb3Lt5fvN7Atpc2Hubn/rC43fgZUU/dWGwfH/dy6//nz3z16Xz7x+7ovP4nBjuv/2K43R+G+bMDxfbN+/zTTev/47D+eH/xeju/9O2O63/mFcX2z4Tj4gthtq//zX/26l92er7i/Ry8v7hevP+p/93TuF68vXj77esfe2K6ZX+03/6zLxS3c+AjPxlq3j5+Pd5P9Oj9rcf3QHh+W3rkWZZ99U+ylv2cvaG43jfb1h9v79z9ndd/d9s6zw3c1rj+4uPZ3PK4Pv93uzo+3rieg/+4ueXxPPX2sP9emPxOfrsXHw7HY7j8/75b3F77h5E88/bW15u4/Rc2F9+38fYm29b/VNv652/L913v9T/wQrH+Z960oWX9B98RjqcHitlr/cf/9oaW63/xK8Xzcf6jE2fOzl44ebRprzZ/H28Y27jpuutf8tIbwmtp+58PnZ07MXN+fGp8KsvG+/AjA9d7/V8K83+KMb/291D4/k+K4+6z7yx+br32p8WfnwpffzQ8n/Hn4+f/eqTleG1/3uffVMwrXf9dYR0r9YrP/OdtK9rw4ge+deGf/uj59vcF8fGce/lY4/F9buvNjcsGni0ub3+96uU/Xt76ff2D4anG/EbYrwvhk5m33VzcX/vtx88m+ey7i+/f+E4uXj9r+zyRzUOtj+NK1/+D8D7m27e0vv7F4+MbT7R9mvPmbCBfwnx4fcjmi8vjVnF/f/bSzR3vL34OTzb/ytUsc1mzj89Onjp55sJjk3Mzs3OTs49/7NDpsxfOzB1qfHbpoQ/1uv7i9/emxvf30Zl9e7LGd/vZYqyza73+c48cOXrv1J1HZ44dvnBs7pFzM+ePH5mdPTJzdPbOw8eOzXy01/VPHj0wvWv/7nt3TRw/efTAffv3794/cfLM2XwZxaJ62Df14Ykz5w81rjJ7YM/+6b1790xNnD57dObAvVNTExd6Xb/xs2kiv/ZHJs7PnDo8d/L0zMTsyY/NHJjev2/frp6f/nj63LHZ8cnzF85MXpidOT9ZPJbxucaX8599va5PPcyeDa93bQbCu/P33b0vfT5u7sufWPamik1a355mPwqfBRV/vvX6c8z9I2EmNcn/AAAAUAcx94cP/l+8QP4HAACAyoi5f0OYifwPAAAAlRFzf5H8x9Lp3+uS/9eq//8J/f8G/X/9/0z/P9H/1//P9P/1/3vQ/y9F//+E/r/+v/4/66Vs/f+Q+7ONWebv/wEAAKCiYu7fFGYi/wMAAEBlxNx/XZiJ/A8AAACVEXP/9WEmNcn/zv+v/6//363/H7dd2/7/mP5/g/7/qvv/2/9b/38J/X/9/0z//7Jd6/58v6+/hP3/jfr/lE3Z+v8x978kzKQm+R8AAADqIOb+l4aZyP8AAABQahtWsW3M/TeEmcj/AAAAUBkx928OM6lJ/r92/f9R/X/9/4Zy9/+d/7+Z/v817/87/38H+v/6/1lt+v/FmwX9//Ksf/37/3/R9frO/08/KFv/P+b+XwkzqUn+BwAAgDqIuf9lYSbyPwAAAFRGzP03hpnI/wAAAFAZMfffFGZSk/xfz/P//zDLMv3/TP9f/79tnfr/+v/rQf9f/7+ba9v/z9/79FP/3/n/y7b+Ep7/X/+f0ilb/z/m/peHmdQk/wMAAEAdxNx/c5iJ/A8AAACVEXP/K8JM5H8AAACojJj7bwkzqUn+r2f/3/n/9f8L69D/HxjW/0/0//X/M/1//f8enP9f/7+f16//r/9Pb2Xr/8fc/8owk5rkfwAAAKiDmPtvDTOR/wEAAKAyYu5/VZiJ/A8AAACVEXP/ljCTmuR//X/9f/1/5//X/9f/X0/91f8fXPYS/f+C/n+rtev/zy8uQP+/b9av/6//T29l6//H3P/qMJOa5H8AAACog5j7XxNmIv8DAABAZcTcf1uYifwPAAAAlRFz/3iYSU3yv/6//r/+v/6//r/+/3rqr/7/8vT/C/r/rZz/X/9f/1//n+7K1v+PuX9rmAAAAED1xNy/LcykJn//DwAAAHUQc//tYSbyPwAAAFRGzP3bw0xqkv/1//X/9f/1//X/9f/Xk/6//n83+v/6//28fv1//X96K1v/P+b+O8JMapL/AQAAoA5i7r8zzET+BwAAgMqIuf+1YSbyPwAAAFRGzP07wkxqkv/1//X/9f/7uP8/pP+f6f+XXo/1/7ztx86q6f/r/2f6/5ftWvfn+339+v/6//RWtv5/zP2vCzOpSf4HAACAOoi5/64wE/kfAAAAKiPm/rvDTOR/AAAAqIyY+yfCTGqS/yve/3/+v5bZTP+/cHX6/z9f0P93/n/9f/1/5//X/+9E/1//v5/Xr/+v/09vZev/x9x/T5hJTfI/AAAA1EHM/TvDTOR/AAAAqIyY+yfDTOR/AAAAqIyY+6fCTGqS/yve/1+W/n/B+f/1/zP9f/3/dab/r//fjf6//n8/r1//X/+f3srW/4+5fzrMpCb5HwAAAOog5v5dYSbyPwAAAFRGzP27w0zkfwAAAKiMmPv3hJnUJP/3Sf9/ZypA6f/r/+v/6//r//cV/f+K9v/zFxL9f/3/s3NpB+v/6//r/zPY4Wtl6//H3L83zKQm+R8AAADqIOb+fWEm8j8AAABURsz994aZyP8AAABQGTH33xdmUpP83yf9f+f/1//X/2+i/6//30/0/yva/3f+/wb9f+f/1//X/6e7svX/Y+7fH2ZSk/wPAAAAdRBz/+vDTOR/AAAAqIyY++8PM5H/AQAAoK90Og9hFHP/G8JMapL/9f+r3v9f2KD/r/+v/999/f3R/x/O+pX+v/5/N/r/+v/9vH79f/1/eitb/z/m/gNhJjXJ/wAAAFAHMfe/McxE/gcAAIDKiLn/TWEm8j8AAABURsz9B8NMapL/9f+r3v93/n/9/6vX/x/R/3f+/w70//X/u6lk/39D9fv/4W2L/n+J+v/5MaT/TxmVrf8fc/+bw0xqkv8BAACgDmLuf0uYifwPAAAAlRFz/1vDTOR/AAAAqIyY+98WZlKT/K//r/+v/9+9/5/fsf5/wfn/9f8vh/7/uvX/Gy+F+v+FUvX/nf9f/9/5//X/ScrW/4+5/+1hJjXJ/wAAAFAHMfe/I8xE/gcAAIDKiLn/V8NM5H8AAACojJj7HwgzqUn+1//X/9f/d/5//X/9//Wk/+/8/93o/+v/9/P69f/1/+mtbP3/mPt/LcykJvkfAAAA6iDm/gfDTOR/AAAAqIyY+98ZZiL/AwAAQJ8ZXfaSmPt/PcykJvm///r/433Z/x9Mt6//r/+v/6//r/+/lvT/9f8z/f/Ldq378/2+fv1//X96K1v/P+b+3wgzqUn+BwAAgDqIuf9dYSbyPwAAAFRGzP2/GWYi/wMAAEBlxNz/UJhJTfL/Wvf/26/fyWDTdP5//X/9/8Xr6f+H51X/X/9/FfT/9f8z/f/Ldq378/2+fv1//X96K1v/P+b+3wozqUn+BwAAgDqIuf/hMBP5HwAAAErqxKqvEXP/u8NM5H8AAACojJj73xNmUpP833/n/9f/1//X/y9b/z/S/9f/70T/X/+/G/1//f9+Xr/+v/4/vZWt/x9z/yNhJjXJ/wAAAFAHMfe/N8xkJfl/w3qtCgAAAFhLMff/dpiJv/8HAACAyoi5/3fCTGqS//X/9f/1//X/nf9f/3896f8v7f/nr2H6/wX9f/3/fl6//r/+P72Vrf8fc//7wkxqkv8BAACgDmLu/90wE/kfAAAAKiPm/t8LM5H/AQAAoDJi7n9/mElN8r/+v/6//r/+v/6//v960v93/v9u9P/1//t5/fr/+v+0a39XV77+f8z9HwgzqUn+BwAAgDqIuf/3w0zkfwAAAKiMmPsPhZnI/wAAAFAZMfc/GmZSk/yv/6//r/+v/6//r/+/nvT/9f+70f/X/+/n9a+o/3/Xny97ff1/6qBs/f+Y+w+HmRxsvRsAAACgf8Xc/8Ewk5r8/T8AAADUQcz9R8JM5H8AAACojJj7j4aZ1CT/6//r/691/380XKb/r/+v/6//n+n/6//3oP+v/9/P63f+f/1/eitb/z/m/pkwk5rkfwAAAKiDmPuPhZnI/wAAAFAZMfcfDzOR/wEAAKAyYu4/EWZSk/yv/6//7/z/te3/f/drbevU/9f/Xw/6/8v1/6/X/9f/1//v8/Xr/+v/01vZ+v8x958MM6lJ/gcAAIA6iLn/Q2Em8j8AAABURsz9Hw4zkf8BAACgMmLuPxVmUpP8r/+v/6//X9v+/8rO/79x8X71//X/L4f+v/P/d6P/r//fz+vX/9f/p7ey9f9j7j8dZlKT/A8AAAB1EHP/mTAT+R8AAAAqI+b+s2Em8j8AAABURsz958JMapL/9f9X1/8fWKYbqP/fef36/xXo/zfR/9f/vxz6//r/3ej/6//38/r1//X/6a1s/f+Y+/8gzKQ5+G3/5mofJgAAAFAiMfefD/P/2bvvZUvLKo/jm2ZO01QXNbfALcwVzCXoJWiVd2DOYASzYs4Jc8KsmHPOOeeMYsRUpUWftRb04Zx3b7r37v2+z/p8/nANB6b6VaGmftXzrac0+f1/AAAA6CB3/33jFvsfAAAAhpG7/35xS5P9r//3/r/+X/+v/9f/75L+/wL7/9s2+y79/yH9/4XZdz+/9O/X/+v/WW9u/X/u/vvHLU32PwAAAHSQu/8BcYv9DwAAAMPI3f/AuMX+BwAAgGHk7n9Q3NJk/+v/9f/6f/2//l//v0v6/4W+/79a6f83oP/X/+v/9f9Mm1v/n7v/wXFLk/0PAAAAHeTuf0jcYv8DAADAMHL3PzRusf8BAABgGLn7Hxa3NNn/+n/9v/5f/6//1//vkv5/of2/9/83ov/X/+v/9f9Mm1v/n7v/4XFLk/0PAAAAHeTuf0TcYv8DAADAMHL3PzJusf8BAABgGLn7r4lbmux//b/+X/+/wP7/f/T/+v/l0P/r/6fo//X/S/5+/b/+n/Xm1v/n7r82bmmy/wEAAKCD3P2PilvsfwAAABhG7v5Hxy32PwAAAAwjd/9j4pYm+1//r//X/y+w//f+v/5/QfT/+v8p+n/9/5K/X/+v/2e9df3/FfnHcXfd/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/uvilib7f6j+PxrBlf5f/6//1//r/2dD/6//n6L/1/8v+fv1//p/1tv5+//3uP7c3bT/z91/fdzSZP8DAABAB7n7nxC32P8AAAAwjNz9T4xb7H8AAAAYRu7+J8UtTfb/UP3/yvv/F9f//+cy/b/+X/9/x8/1/9uh/9f/T9H/6/+X/P36f/0/6+28/1/T+x/949z9T45bmux/AAAA6CB3/1PiFvsfAAAAhpG7/6lxi/0PAAAAs3dmw78ud//Tjv5vNdn/+n/9v/f/9f/6f/3/Lun/Z9v/H/1H73y76/9P3/kP9P/6/yV//1T///8bfL/+nw7m1v/n7n963NJk/wMAAEAHufufEbfY/wAAADBrB3fjr83df0PcYv8DAADAMHL3PzNuabL/9f/6f/2//v/8/v9Uy/7/9p/p/3dD/z/b/n+a9/83ov/X/3v/X//PtLn1/7n7nxW3NNn/AAAA0EHu/mfHLfY/AAAADCN3/3PiFvsfAAAAhpG7/7lxS5P9r//X/+v/9f8X9f7/5WP0/97/3x39v/5/iv5f/7/k79f/6/9Zb279f+7+58UtTfY/AAAADO/Uqnb/8+MW+x8AAACGkbv/BXGL/Q8AAADDyN3/wrilyf7X/+v/9f/6/4vq/wd5/1//vzv6f/3/lE37/5X+v/697Lf/Pzjvjy6mn7/n6X18/2pr37/S/+v/2cjc+v/c/S+KW5rsfwAAABjPdXf5Se7+F8ct9j8AAAAMI3f/S+IW+x8AAACGkbv/pXFLk/2v/9f/b6n/zx/p//X/Rf+v/1/p//X/a3j/f2n9//m8/6//1/+zztz6/9z9L4tbmux/AAAA6CB3/8vjFvsfAAAAhpG7/xVxi/0PAAAAw8jd/8q45ej+P3Upv+rS2Wv/n+2G/n+E/v/Y79f/6//1//p//b/+f4r+//j+/8wJv57+f17fr//X/7Pe3Pr/3P03xi1+/x8AAACGkbv/VXGL/Q8AAADDyN3/6rjF/gcAAIBh5O5/Tdxy0v6/6lJ81aVzUv9/69nDP+/9/83o/4//fv2//l//r//X/2+v/z/u/7zp/w+N1v97/38Z36//1/+z3tz6/9z9r41b/P4/AAAADCN3/+viFvsfAAAAhpG7//Vxi/0PAAAAw8jd/4a4pcn+3/77/1fvo/+/I67T/+v/9f/6//j5Sf3/Ufr/3dL/e/9/iv5f/7/k79f/6/9Zb279f+7+N8YtTfY/AAAAdJC7/01xi/0PAAAAw8jd/+a4xf4HAACAYeTuf0vc0mT/b7//9/6//v9u9v+n9P9J/x//vXr/X/9/N+j/9f8r/f8F23c/v/Tv1//r/1lvbv1/7v6bzk29fvsfAAAAOrjp3L+eWb01brH/AQAAYBi5+98Wt9j/AAAAMIzc/W+PW5rsf/2//n/v/b/3/4v+P/573U//f/TH+v8t0f/r/6fo/xv1/6e28sn7+/5j6P/1/6w3t/4/d/874pYm+x8AAAA6yN3/zrjF/gcAAIBhxO4//H9+t/8BAABgJNXXvevcv55ZvTtuabL/G/f/V19s/3/lnf7nofr/2/+k/n9O/f9NR//e0/97/39J9P/6/yn6/0b9/w7s+/vn0//HD67R/zM/c+v/c/e/J25psv8BAACgg9z9741b7H8AAAAYRu7+m+MW+x8AAACGkbv/fXFLk/3fuP8f5P3/e98SX+D9/3H7f+//x9X/6/+Po//X/6/0/xds3/380r9/Pv2/9/+Zr7n1/7n73x+3NNn/AAAA0EHu/g/ELfY/AAAADCN3/wfjFvsfAAAAhpG7/0NxS5P9r/9fev+/g/f/9f/6//qVltj/X6P/nxn9v/5/iv5f/7/k79f/6/9Zb279f+7+D8ctTfY/AAAAdJC7/yNxi/0PAAAAw8jd/9G4xf4HAACAYeTu/1jc0mT/6//1/7vq/2//RfT/Tfr/a+fU/3v/f270//r/Kfp//f+Sv1//r/9nvbn1/7n7Px63NNn/AAAA0EHu/k/ELfY/AAAADCN3/yfjFvsfAAAAhpG7/1Nxw/9dtb9P2q6DE34evbn+X//v/X/9/1jv/+v/50b/r/+fov/X/y/5+/X/+n/Wm1v/n7v/03GL3/8HAACAYeTu/0zcYv8DAADAMHL3fzZusf8BAABgGLn7Pxe3NNn/+n/9/w76/wP9/6Ed9/9X6v/P/379/zzp//X/U/T/+v8lf7/+X//PenPr/3P3fz5uabL/AQAAoIPc/V+IW+x/AAAAGEbu/i/GLfY/AAAADCN3/5filib7/4L6/8v0/0fp/4//fv2/9//1//p//b/+f4r+X/+/3O//X/2//p8NzK3/z93/5bilyf4HAACADnL3fyVusf8BAABgGLn7vxq32P8AAAAwjNz9X4tbmux/7//r//X/+n/9v/5/ly55/39q+7/GSv+v/z+B/r9z/+/9f/0/m5hb/5+7/+txS5P9DwAAAB3k7v9G3GL/AwAAwDBy938zbrH/AQAAYBi5+78VtzTZ/yP3/1N/mf7/kP5f/7/S/x/t/0/nz/X/2+H9f/3/FP3/wP3/6a184v6+X/+v/2cr5tb/5+7/dtzSZP8DAABAB7n7vxO32P8AAAAwjNz9341b7H8AAAAYRu7+78UtTfb/yP3/FP3/If2//n+l//f+/47p//X/U/T/A/f/3v/X/8P++v+D1Qn9f+7+78ctTfY/AAAAdJC7/wdxi/0PAAAAw8jd/8O4xf4HAACAYeTu/1HcMs7+v8/NE39S/7/1/v/c30T6f/3/Sv+/w/7/8J9M/f8ytOj/z549/Iv0//r/oP9fbv9/eqX/1/+zTXN7/z93/4/jlnH2PwAAALSXu/8ncYv9DwAAAMPI3f/TuMX+BwAAgGHk7v9Z3NJk/+v/vf+v/2/V/1++2qj/z/+E59r/e/9/SVr0/97/1//r/4fp/73/r/9nu+bW/+fu/3nc0mT/AwAAQAe5+38Rt9j/AAAAMIzc/b+MW+x/AAAAGEbu/l/FLU32v/5f/6//b9X/D/L+v/5/SfT/+v8p+n/9/5K/P/v//PtO/6//567m1v/n7v913NJk/wMAAEAHuft/E7fY/wAAADCM3P2/jVvsfwAAABhG7v7fxS1N9r/+X/+v/9f/6//1/7uk/9f/T9H/6/+X/P3e/9f/s97c+v/c/bfELU32PwAAAHSQu//3cYv9DwAAAMPI3f+HuMX+BwAAgGHk7r81bmmy//X/+v8h+/8rxu3/L9f/6/8XRv+v/5+i/9f/L/n79f937f8P4s/p/0lz6/9z9/8xbmmy/wEAAKCD3P1/ilvsfwAAABhG7v4/xy32PwAAAAwjd/9f4pYm+1//P+P+/15nZ9r/H9S/79n2/97/1//r/2dj3P7/tP5f/3/R/f8NNx7+WP+/zO/X/3v/n/Xm1v/n7v9r3NJk/wMAAEAHufv/FrfY/wAAADCM3P23xS32PwAAAAwjd//f45Ym+1//P+P+3/v/+n/9/3n/eer/9f/H8f6//n+14P7f+//L/n79v/6f9ebW/+fu/0fc0mT/AwAAQAe5+/8Zt9j/AAAAMIzc/f+KW+x/AAAAGEbu/n/HLU32v/5f/6//1//r//X/u6T/1/9P0f/r/5f8/fp//T/rza3/z93/3wAAAP//DV8eBA==") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) kernel console output (not intermixed with test programs): =7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1234" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 112.386050][ T7073] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.397318][ T4289] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.431467][ T7007] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.442228][ T7073] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.474061][ T7007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.651547][ T7095] Cannot find del_set index 3 as target [ 112.804473][ T7101] device wlan0 entered promiscuous mode [ 112.929440][ T4289] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 112.938504][ T4289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.972553][ T4289] usb 5-1: Product: syz [ 112.986922][ T4289] usb 5-1: Manufacturer: syz [ 113.011190][ T4289] usb 5-1: SerialNumber: syz [ 113.028442][ T4289] usb 5-1: config 0 descriptor?? [ 113.090901][ T4289] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 113.265242][ T7129] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.400879][ T7137] loop2: detected capacity change from 0 to 2048 [ 113.426885][ T7140] loop3: detected capacity change from 0 to 164 [ 113.447470][ T3560] Alternate GPT is invalid, using primary GPT. [ 113.459516][ T3560] loop2: p2 p3 p7 [ 113.467575][ T7140] rock: directory entry would overflow storage [ 113.482280][ T7140] rock: sig=0x66, size=4, remaining=3 [ 113.500244][ T7140] rock: directory entry would overflow storage [ 113.511544][ T7140] rock: sig=0x66, size=4, remaining=3 [ 113.519233][ T4289] (null): failure reading functionality [ 113.538312][ T7137] Alternate GPT is invalid, using primary GPT. [ 113.544831][ T4289] i2c i2c-1: failure reading functionality [ 113.556386][ T4289] i2c i2c-1: connected i2c-tiny-usb device [ 113.563012][ T7137] loop2: p2 p3 p7 [ 113.570341][ T4289] usb 5-1: USB disconnect, device number 12 [ 113.628632][ T7153] loop1: detected capacity change from 0 to 256 [ 113.654209][ T7152] loop0: detected capacity change from 0 to 2048 [ 113.684230][ T7155] loop3: detected capacity change from 0 to 64 [ 113.693254][ T7152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.701919][ T7153] FAT-fs (loop1): Directory bread(block 64) failed [ 113.712215][ T7153] FAT-fs (loop1): Directory bread(block 65) failed [ 113.718909][ T7153] FAT-fs (loop1): Directory bread(block 66) failed [ 113.720385][ T7152] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 113.725949][ T7153] FAT-fs (loop1): Directory bread(block 67) failed [ 113.753652][ T7152] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 113.766744][ T7153] FAT-fs (loop1): Directory bread(block 68) failed [ 113.774640][ T7155] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 113.787217][ T7153] FAT-fs (loop1): Directory bread(block 69) failed [ 113.814405][ T7153] FAT-fs (loop1): Directory bread(block 70) failed [ 113.821821][ T7153] FAT-fs (loop1): Directory bread(block 71) failed [ 113.842708][ T7153] FAT-fs (loop1): Directory bread(block 72) failed [ 113.872203][ T7159] xt_connbytes: Forcing CT accounting to be enabled [ 113.874041][ T7153] FAT-fs (loop1): Directory bread(block 73) failed [ 114.007342][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 114.039466][ T7166] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1287'. [ 114.054147][ T5657] udevd[5657]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 114.092358][ T7166] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 114.119748][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 114.150800][ T7174] loop1: detected capacity change from 0 to 512 [ 114.269560][ T7174] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 114.306654][ T7190] loop4: detected capacity change from 0 to 512 [ 114.314336][ T7174] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.368103][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.373998][ T7190] EXT4-fs (loop4): Ignoring removed bh option [ 114.382849][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.417115][ T7190] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.426485][ T7190] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 114.435925][ T7198] loop3: detected capacity change from 0 to 256 [ 114.465648][ T7190] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 114.488910][ T7190] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 114.516370][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 114.609131][ T4244] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 114.626758][ T7209] loop0: detected capacity change from 0 to 1024 [ 115.019151][ T4244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.037836][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 115.060096][ T7245] loop3: detected capacity change from 0 to 256 [ 115.066998][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 115.088136][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.107295][ T7243] loop0: detected capacity change from 0 to 4096 [ 115.114639][ T4244] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.127714][ T4244] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 115.149343][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.160481][ T7245] FAT-fs (loop3): Directory bread(block 64) failed [ 115.161499][ T4244] usb 2-1: config 0 descriptor?? [ 115.167016][ T7245] FAT-fs (loop3): Directory bread(block 65) failed [ 115.184258][ T7245] FAT-fs (loop3): Directory bread(block 66) failed [ 115.193029][ T7245] FAT-fs (loop3): Directory bread(block 67) failed [ 115.200169][ T7174] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.216463][ T7245] FAT-fs (loop3): Directory bread(block 68) failed [ 115.221487][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 115.224543][ T7245] FAT-fs (loop3): Directory bread(block 69) failed [ 115.239952][ T7245] FAT-fs (loop3): Directory bread(block 70) failed [ 115.246487][ T7245] FAT-fs (loop3): Directory bread(block 71) failed [ 115.255310][ T7245] FAT-fs (loop3): Directory bread(block 72) failed [ 115.263334][ T7245] FAT-fs (loop3): Directory bread(block 73) failed [ 115.301992][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 115.320213][ T4192] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.407209][ T7237] loop2: detected capacity change from 0 to 32768 [ 115.450496][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 115.462936][ T4289] usb 2-1: USB disconnect, device number 9 [ 115.588967][ T7237] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.699320][ T4192] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 115.747793][ T4192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 115.811222][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 115.958380][ T7264] loop0: detected capacity change from 0 to 64 [ 115.999815][ T4192] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 116.025157][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.040963][ T4192] usb 5-1: Product: syz [ 116.090221][ T4192] usb 5-1: Manufacturer: syz [ 116.129167][ T4192] usb 5-1: SerialNumber: syz [ 116.158527][ T4192] usb 5-1: config 0 descriptor?? [ 116.423429][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1341'. [ 116.440248][ T21] usb 5-1: USB disconnect, device number 13 [ 116.441626][ T7283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1343'. [ 116.788778][ T7303] dlm: no locking on control device [ 117.061258][ T7315] loop4: detected capacity change from 0 to 2048 [ 117.128276][ T7315] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 117.150676][ T7315] UDF-fs: Scanning with blocksize 512 failed [ 117.181714][ T7315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.235107][ T7329] loop1: detected capacity change from 0 to 512 [ 117.415414][ T7329] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 117.428465][ T7331] loop0: detected capacity change from 0 to 4096 [ 117.471637][ T7329] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.508011][ T7298] loop3: detected capacity change from 0 to 32768 [ 117.531001][ T7331] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 117.556475][ T7298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1351 (7298) [ 117.610236][ T7331] ntfs3: loop0: Failed to load $Extend. [ 117.625539][ T7345] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 117.651695][ T7347] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 117.709198][ T7298] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.746267][ T7298] BTRFS info (device loop3): using free space tree [ 117.775736][ T7298] BTRFS info (device loop3): has skinny extents [ 117.798391][ T7351] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 117.845364][ T7351] netlink: 'syz.2.1375': attribute type 2 has an invalid length. [ 117.856309][ T7356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.977779][ T7371] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 118.105163][ T7385] loop4: detected capacity change from 0 to 256 [ 118.164618][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 118.181142][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 118.192321][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 118.266957][ T7385] FAT-fs (loop4): Directory bread(block 64) failed [ 118.274636][ T7298] BTRFS info (device loop3): enabling ssd optimizations [ 118.284067][ T7385] FAT-fs (loop4): Directory bread(block 65) failed [ 118.310935][ T7385] FAT-fs (loop4): Directory bread(block 66) failed [ 118.317489][ T7385] FAT-fs (loop4): Directory bread(block 67) failed [ 118.401890][ T7385] FAT-fs (loop4): Directory bread(block 68) failed [ 118.418731][ T7385] FAT-fs (loop4): Directory bread(block 69) failed [ 118.443933][ T7385] FAT-fs (loop4): Directory bread(block 70) failed [ 118.448508][ T4244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.451559][ T7385] FAT-fs (loop4): Directory bread(block 71) failed [ 118.475567][ T7385] FAT-fs (loop4): Directory bread(block 72) failed [ 118.492637][ T7385] FAT-fs (loop4): Directory bread(block 73) failed [ 118.499588][ T4289] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 118.564232][ T4355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4355) [ 118.717094][ T4244] usb 3-1: Using ep0 maxpacket: 8 [ 118.860315][ T4289] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 118.885718][ T4289] usb 1-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 118.929607][ T4289] usb 1-1: config 0 has no interface number 0 [ 119.019376][ T4244] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 119.049208][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.067512][ T4244] usb 3-1: Product: syz [ 119.087779][ T4244] usb 3-1: Manufacturer: syz [ 119.089200][ T4289] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 119.096803][ T4244] usb 3-1: SerialNumber: syz [ 119.128700][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.166922][ T4289] usb 1-1: Product: syz [ 119.171384][ T4289] usb 1-1: Manufacturer: syz [ 119.175984][ T4289] usb 1-1: SerialNumber: syz [ 119.210148][ T4289] usb 1-1: config 0 descriptor?? [ 119.320519][ T7443] loop3: detected capacity change from 0 to 1764 [ 119.489606][ T4289] qmi_wwan: probe of 1-1:0.207 failed with error -22 [ 119.509591][ T7427] loop4: detected capacity change from 0 to 32768 [ 119.516036][ T4289] usb 1-1: USB disconnect, device number 10 [ 119.552024][ T7453] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.605407][ T7427] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 119.605407][ T7427] [ 119.615143][ T4244] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 119.634682][ T4244] mxuport: probe of 3-1:254.0 failed with error -5 [ 119.672226][ T4244] usb 3-1: USB disconnect, device number 12 [ 119.876009][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 119.884041][ T7469] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1423'. [ 119.939901][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 120.025062][ T7477] loop3: detected capacity change from 0 to 256 [ 120.084065][ T7477] FAT-fs (loop3): Directory bread(block 1285) failed [ 120.152582][ T7477] FAT-fs (loop3): Directory bread(block 1285) failed [ 120.194149][ T7477] FAT-fs (loop3): Directory bread(block 1285) failed [ 120.216377][ T7477] FAT-fs (loop3): Directory bread(block 1285) failed [ 120.621082][ T7523] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1450'. [ 120.849218][ T7543] loop3: detected capacity change from 0 to 1024 [ 120.879647][ T7550] loop2: detected capacity change from 0 to 128 [ 120.941401][ T7543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.952957][ T7543] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.976027][ T7550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 120.986131][ T7543] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.1461: directory missing '..' [ 121.038201][ T7550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.152293][ T7569] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 121.189085][ T7569] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1470'. [ 121.235293][ T7569] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1470'. [ 121.274310][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 121.384756][ T7584] loop2: detected capacity change from 0 to 256 [ 121.452747][ T7591] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.479451][ T7584] FAT-fs (loop2): Directory bread(block 64) failed [ 121.509495][ T7584] FAT-fs (loop2): Directory bread(block 65) failed [ 121.516103][ T7584] FAT-fs (loop2): Directory bread(block 66) failed [ 121.553189][ T7584] FAT-fs (loop2): Directory bread(block 67) failed [ 121.594744][ T7584] FAT-fs (loop2): Directory bread(block 68) failed [ 121.645554][ T7584] FAT-fs (loop2): Directory bread(block 69) failed [ 121.686632][ T7600] loop0: detected capacity change from 0 to 16 [ 121.690736][ T7584] FAT-fs (loop2): Directory bread(block 70) failed [ 121.709703][ T7584] FAT-fs (loop2): Directory bread(block 71) failed [ 121.724882][ T7584] FAT-fs (loop2): Directory bread(block 72) failed [ 121.744833][ T7584] FAT-fs (loop2): Directory bread(block 73) failed [ 121.759181][ T4244] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.773885][ T7600] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.797489][ T7600] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 121.850040][ T7605] loop1: detected capacity change from 0 to 8 [ 121.985867][ T7605] SQUASHFS error: xz decompression failed, data probably corrupt [ 122.044409][ T7605] SQUASHFS error: Failed to read block 0x108: -5 [ 122.078652][ T7605] SQUASHFS error: Unable to read metadata cache entry [106] [ 122.113851][ T7605] SQUASHFS error: Unable to read inode 0x101f [ 122.192181][ T4244] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 122.225480][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.245436][ T7621] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1499'. [ 122.260210][ T4244] usb 4-1: config 0 has no interface number 0 [ 122.284944][ T4244] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 122.306464][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.327632][ T4244] usb 4-1: config 0 descriptor?? [ 122.330514][ T1201] block nbd1: Attempted send on invalid socket [ 122.340689][ T1201] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.353310][ T7627] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 2, size 4096) [ 122.353465][ T7621] device gretap0 entered promiscuous mode [ 122.377996][ T150] block nbd1: Attempted send on invalid socket [ 122.385004][ T150] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.398184][ T4244] ttusbir 4-1:0.83: cannot find expected altsetting [ 122.403275][ T7627] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 16, size 4096) [ 122.509764][ T7627] REISERFS warning (device nbd1): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd1 [ 122.528336][ T7637] device gtp0 entered promiscuous mode [ 122.602237][ T4244] usb 4-1: USB disconnect, device number 10 [ 123.057624][ T7672] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 123.074840][ T7672] device syz_tun entered promiscuous mode [ 123.110160][ T7674] loop0: detected capacity change from 0 to 8 [ 123.128762][ T7672] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.171978][ T7674] SQUASHFS error: Unable to read inode 0x127 [ 123.315681][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.350821][ T7684] comedi comedi3: pcl726: I/O port conflict (0xfe,16) [ 123.372303][ T7682] loop3: detected capacity change from 0 to 1024 [ 123.434934][ T7686] device geneve3 entered promiscuous mode [ 123.500987][ T7688] loop2: detected capacity change from 0 to 256 [ 123.530262][ T7662] loop4: detected capacity change from 0 to 32768 [ 123.538006][ T154] hfsplus: b-tree write err: -5, ino 4 [ 123.565072][ T7688] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 123.578551][ T7662] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1519 (7662) [ 123.600877][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 123.688329][ T7662] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.745274][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 123.757533][ T7662] BTRFS info (device loop4): force zlib compression, level 3 [ 123.773350][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.802143][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.809141][ T7662] BTRFS info (device loop4): force clearing of disk cache [ 123.829121][ T7662] BTRFS info (device loop4): setting nodatasum [ 123.839782][ T7662] BTRFS info (device loop4): disabling tree log [ 123.846036][ T7662] BTRFS info (device loop4): enabling disk space caching [ 123.889108][ T7662] BTRFS info (device loop4): disk space caching is enabled [ 123.896326][ T7662] BTRFS info (device loop4): has skinny extents [ 124.009392][ T7] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 124.025735][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.069089][ T7] usb 2-1: Product: syz [ 124.073314][ T7] usb 2-1: Manufacturer: syz [ 124.106911][ T7] usb 2-1: SerialNumber: syz [ 124.135909][ T7] usb 2-1: config 0 descriptor?? [ 124.201733][ T7] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 124.205340][ T7662] BTRFS info (device loop4): clearing free space tree [ 124.228380][ T7732] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 124.250914][ T7662] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.289072][ T7662] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.367118][ T7732] team0: Port device wlan1 added [ 124.416811][ T7] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 124.424540][ T1107] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.436424][ T7] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 124.446409][ T7] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 124.534572][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1550'. [ 124.554275][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 124.631526][ T7] usb 2-1: USB disconnect, device number 10 [ 124.709255][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 124.864986][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.084325][ T1107] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 125.094820][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.108336][ T1107] usb 1-1: Product: syz [ 125.113241][ T1107] usb 1-1: Manufacturer: syz [ 125.117849][ T1107] usb 1-1: SerialNumber: syz [ 125.140203][ T1107] usb 1-1: config 0 descriptor?? [ 125.219866][ T1107] usb 1-1: bad CDC descriptors [ 125.226680][ T1107] usb 1-1: unsupported MDLM descriptors [ 125.350929][ T7796] __nla_validate_parse: 2 callbacks suppressed [ 125.350945][ T7796] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1572'. [ 125.414931][ T1107] usb 1-1: USB disconnect, device number 11 [ 125.496763][ T7806] loop4: detected capacity change from 0 to 256 [ 125.524955][ T7808] tmpfs: Bad value for 'mpol' [ 125.579389][ T7806] FAT-fs (loop4): Directory bread(block 64) failed [ 125.598773][ T7806] FAT-fs (loop4): Directory bread(block 65) failed [ 125.616815][ T7806] FAT-fs (loop4): Directory bread(block 66) failed [ 125.624204][ T7806] FAT-fs (loop4): Directory bread(block 67) failed [ 125.636634][ T7806] FAT-fs (loop4): Directory bread(block 68) failed [ 125.682771][ T7806] FAT-fs (loop4): Directory bread(block 69) failed [ 125.725635][ T7806] FAT-fs (loop4): Directory bread(block 70) failed [ 125.749262][ T7806] FAT-fs (loop4): Directory bread(block 71) failed [ 125.755878][ T7806] FAT-fs (loop4): Directory bread(block 72) failed [ 125.786633][ T7806] FAT-fs (loop4): Directory bread(block 73) failed [ 126.046751][ T7840] loop2: detected capacity change from 0 to 512 [ 126.194758][ T7840] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.245102][ T7840] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.272268][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 126.334837][ T7840] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1594: corrupted xattr block 32 [ 126.489196][ T6026] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.604172][ T1107] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.638114][ T7878] loop1: detected capacity change from 0 to 4096 [ 126.692329][ T7878] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 126.752670][ T7889] loop2: detected capacity change from 0 to 2048 [ 126.799053][ T7878] ntfs3: loop1: failed to convert "c46c" to macgaelic [ 126.803943][ T7893] loop4: detected capacity change from 0 to 2048 [ 126.830818][ T7889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.879197][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 126.899250][ T6026] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.923504][ T7894] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.989383][ T6026] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.087068][ T7902] netlink: 'syz.1.1623': attribute type 3 has an invalid length. [ 127.096254][ T7902] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 127.179178][ T6026] usb 4-1: New USB device found, idVendor=04b8, idProduct=1222, bcdDevice= 0.40 [ 127.179328][ T1107] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 127.188262][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.205801][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.205824][ T1107] usb 1-1: Product: syz [ 127.205837][ T1107] usb 1-1: Manufacturer: syz [ 127.205850][ T1107] usb 1-1: SerialNumber: syz [ 127.228584][ T1107] usb 1-1: config 0 descriptor?? [ 127.238299][ T6026] usb 4-1: Product: syz [ 127.247772][ T6026] usb 4-1: Manufacturer: syz [ 127.268244][ T6026] usb 4-1: SerialNumber: syz [ 127.357547][ T7917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1630'. [ 127.456654][ T7924] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 127.504773][ T1107] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 127.519066][ T1107] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 127.545413][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 127.584435][ T6026] usb 4-1: USB disconnect, device number 11 [ 127.624759][ T7932] binder: 7931:7932 ioctl c0046209 e0ffff00000000 returned -22 [ 127.717328][ T7] usb 1-1: USB disconnect, device number 12 [ 127.831273][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'. [ 127.853517][ T7948] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 127.895250][ T7950] vivid-000: disconnect [ 127.920319][ T7949] vivid-000: reconnect [ 128.113767][ T7958] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 128.130528][ T7958] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1651'. [ 128.236514][ T7968] overlayfs: missing 'lowerdir' [ 128.264801][ T7944] loop2: detected capacity change from 0 to 32768 [ 128.327262][ T7974] loop1: detected capacity change from 0 to 512 [ 128.414395][ T7972] loop0: detected capacity change from 0 to 4096 [ 128.484680][ T7972] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 128.502014][ T7974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.563619][ T7974] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.584964][ T7980] loop2: detected capacity change from 0 to 4096 [ 128.671466][ T7974] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 128.698096][ T7974] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.711997][ T7974] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1659: Failed to acquire dquot type 0 [ 128.790259][ T7996] netlink: 'syz.4.1670': attribute type 2 has an invalid length. [ 128.809349][ T7996] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 128.980749][ T8010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.028483][ T8016] program syz.0.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.141897][ T8022] xt_nfacct: accounting object `syz1' does not exist [ 129.316868][ T8038] netlink: 'syz.4.1690': attribute type 10 has an invalid length. [ 129.330221][ T8040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1692'. [ 129.369099][ T8038] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1690'. [ 129.378214][ T8040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1692'. [ 129.398803][ T8038] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.559710][ T8053] loop4: detected capacity change from 0 to 64 [ 129.619332][ T7761] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.855652][ T8025] loop0: detected capacity change from 0 to 32768 [ 129.879255][ T7761] usb 4-1: Using ep0 maxpacket: 8 [ 129.912082][ T8063] loop4: detected capacity change from 0 to 512 [ 129.917913][ T8064] loop2: detected capacity change from 0 to 2048 [ 129.943896][ T8063] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 129.951903][ T8063] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 129.961306][ T8064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.999603][ T7761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.009271][ T8063] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 130.019393][ T7761] usb 4-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 130.033400][ T7761] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.042046][ T8025] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.047254][ T7761] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.177372][ T8063] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 130.198066][ T8025] (syz.0.1683,8025,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=288, inode=0, rec_len=0, name_len=0 [ 130.200008][ T8063] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 130.222627][ T7761] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 130.232161][ T7761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.240831][ T7761] usb 4-1: Product: syz [ 130.244993][ T7761] usb 4-1: Manufacturer: syz [ 130.249678][ T7761] usb 4-1: SerialNumber: syz [ 130.263850][ T7761] usb 4-1: config 0 descriptor?? [ 130.269636][ T8025] (syz.0.1683,8025,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 130.278236][ T8025] (syz.0.1683,8025,1):ocfs2_mknod:298 ERROR: status = -2 [ 130.282368][ T8063] EXT4-fs (loop4): 1 truncate cleaned up [ 130.285900][ T8025] (syz.0.1683,8025,1):ocfs2_mknod:502 ERROR: status = -2 [ 130.298370][ T8025] (syz.0.1683,8025,1):ocfs2_create:676 ERROR: status = -2 [ 130.311477][ T7761] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 130.318842][ T8063] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,nomblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 130.339285][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.346702][ T6026] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.393322][ T8063] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 4: comm syz.4.1702: lblock 0 mapped to illegal pblock 4 (length 1) [ 130.418788][ T8063] EXT4-fs (loop4): Remounting filesystem read-only [ 130.462345][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 130.537781][ T8081] overlayfs: unrecognized mount option "\" or missing value [ 130.599107][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 130.639202][ T8089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1710'. [ 130.686862][ T8091] loop2: detected capacity change from 0 to 64 [ 130.719993][ T7761] snd_usb_toneport 4-1:0.0: set_interface failed [ 130.726369][ T7761] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 130.734226][ T6026] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 130.739612][ T8089] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1710'. [ 130.743013][ T6026] usb 2-1: config 0 has no interface number 0 [ 130.758619][ T8089] netlink: 'syz.4.1710': attribute type 6 has an invalid length. [ 130.776734][ T7761] snd_usb_toneport: probe of 4-1:0.0 failed with error -71 [ 130.787339][ T6026] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 130.808296][ T7761] usb 4-1: USB disconnect, device number 12 [ 130.809864][ T8089] netlink: 'syz.4.1710': attribute type 5 has an invalid length. [ 130.847273][ T6026] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 130.853484][ T8089] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1710'. [ 130.867651][ T6026] usb 2-1: config 0 interface 126 has no altsetting 0 [ 130.981943][ T8099] syz.0.1717 (8099): drop_caches: 0 [ 130.987861][ T8102] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.005403][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1719'. [ 131.039255][ T6026] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 131.048306][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.079105][ T6026] usb 2-1: Product: syz [ 131.101772][ T6026] usb 2-1: Manufacturer: syz [ 131.106397][ T6026] usb 2-1: SerialNumber: syz [ 131.129689][ T6026] usb 2-1: config 0 descriptor?? [ 131.151515][ T8072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.158581][ T8072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.316227][ T8122] loop2: detected capacity change from 0 to 64 [ 131.399199][ T7759] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.470113][ T6026] ir_usb 2-1:0.126: IR Dongle converter detected [ 131.498640][ T6026] usb 2-1: IRDA class descriptor not found, device not bound [ 131.530516][ T6026] usb 2-1: USB disconnect, device number 11 [ 131.639937][ T8143] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 131.647966][ T8143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1740'. [ 131.668361][ T8143] nbd: couldn't find a device at index 1024 [ 131.760194][ T7759] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 131.775868][ T8152] loop0: detected capacity change from 0 to 22 [ 131.790383][ T7759] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.813383][ T8152] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 131.826293][ T7759] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.829841][ T8152] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 131.889469][ T7759] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.898510][ T7759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.051846][ T7759] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 132.122937][ T5657] udevd[5657]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.214244][ T7759] usb 5-1: USB disconnect, device number 14 [ 132.348692][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 132.381096][ T8192] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 132.439780][ T8192] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1764'. [ 132.562229][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.568579][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939091][ T4289] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.184128][ T4289] usb 2-1: Using ep0 maxpacket: 8 [ 133.329284][ T4289] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 133.339529][ T4289] usb 2-1: config 0 has no interface number 0 [ 133.345624][ T4289] usb 2-1: config 0 interface 96 has no altsetting 0 [ 133.360178][ T8248] device veth3 entered promiscuous mode [ 133.451626][ T8256] netlink: 'syz.2.1791': attribute type 21 has an invalid length. [ 133.508030][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 133.529263][ T4289] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 133.548081][ T4289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.559065][ T4289] usb 2-1: Product: syz [ 133.563232][ T4289] usb 2-1: Manufacturer: syz [ 133.578087][ T4289] usb 2-1: SerialNumber: syz [ 133.595787][ T4289] usb 2-1: config 0 descriptor?? [ 133.630380][ T8228] loop3: detected capacity change from 0 to 32768 [ 133.643449][ T4289] usbhid 2-1:0.96: couldn't find an input interrupt endpoint [ 133.659083][ T7761] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.659534][ T8228] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1778 (8228) [ 133.705802][ T8264] x_tables: unsorted underflow at hook 4 [ 133.760635][ T8228] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.779095][ T8228] BTRFS info (device loop3): force zlib compression, level 3 [ 133.786505][ T8228] BTRFS info (device loop3): force clearing of disk cache [ 133.839136][ T8228] BTRFS info (device loop3): setting nodatasum [ 133.845356][ T8228] BTRFS info (device loop3): allowing degraded mounts [ 133.857668][ T4289] usb 2-1: USB disconnect, device number 12 [ 133.881068][ T8228] BTRFS info (device loop3): enabling disk space caching [ 133.888217][ T8228] BTRFS info (device loop3): disk space caching is enabled [ 133.901381][ T8228] BTRFS info (device loop3): has skinny extents [ 133.918838][ T8267] loop0: detected capacity change from 0 to 2048 [ 133.994659][ T8267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.024509][ T8267] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.079278][ T7761] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.140597][ T8228] BTRFS info (device loop3): clearing free space tree [ 134.147578][ T8228] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.169409][ T7761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.178286][ T7761] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.186753][ T8228] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.249118][ T7761] usb 5-1: config 1 interface 0 has no altsetting 1 [ 134.409548][ T7761] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 134.418616][ T7761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.453901][ T7761] usb 5-1: Product: syz [ 134.458119][ T7761] usb 5-1: Manufacturer: syz [ 134.478808][ T7761] usb 5-1: SerialNumber: syz [ 134.539545][ T7761] smsusb:smsusb_probe: board id=8, interface number 0 [ 134.567214][ T8301] loop0: detected capacity change from 0 to 8192 [ 134.616917][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.657464][ T8301] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 134.673782][ T8299] bond0: (slave rose0): Enslaving as an active interface with an up link [ 134.697872][ T8301] REISERFS (device loop0): using ordered data mode [ 134.705933][ T8301] reiserfs: using flush barriers [ 134.712911][ T8301] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.729165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 134.729747][ T8301] REISERFS (device loop0): checking transaction log (loop0) [ 134.748043][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1801'. [ 134.761443][ T7761] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 134.770027][ T7761] smsusb: probe of 5-1:1.0 failed with error -71 [ 134.795581][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1801'. [ 134.840675][ T7761] usb 5-1: USB disconnect, device number 15 [ 134.964071][ T8301] REISERFS (device loop0): Using tea hash to sort names [ 135.022223][ T8301] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.135173][ T8314] loop3: detected capacity change from 0 to 4096 [ 135.164282][ T8323] netlink: 'syz.1.1808': attribute type 21 has an invalid length. [ 135.173079][ T8323] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.182016][ T8323] IPv6: Can't replace route, no match found [ 135.237546][ T8328] loop2: detected capacity change from 0 to 512 [ 135.260561][ T8314] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 135.360098][ T8328] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.405130][ T8328] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.451944][ T8314] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 135.453536][ T8328] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 135.482470][ T8338] syz.4.1815 uses obsolete (PF_INET,SOCK_PACKET) [ 135.527983][ T8328] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 135.553314][ T8328] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 135.676877][ T8328] EXT4-fs (loop2): 1 truncate cleaned up [ 135.741584][ T8328] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,nomblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 135.957648][ T8328] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 4: comm syz.2.1810: lblock 0 mapped to illegal pblock 4 (length 1) [ 136.019961][ T8370] overlayfs: conflicting options: userxattr,redirect_dir=off [ 136.037313][ T8369] loop0: detected capacity change from 0 to 1024 [ 136.084001][ T8328] EXT4-fs (loop2): Remounting filesystem read-only [ 136.225568][ T8387] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 136.307985][ T8387] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 136.367645][ T8384] loop1: detected capacity change from 0 to 4096 [ 136.710848][ T8424] loop0: detected capacity change from 0 to 64 [ 136.801431][ T8429] deleting an unspecified loop device is not supported. [ 136.813511][ T8432] loop1: detected capacity change from 0 to 256 [ 136.839229][ T8437] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 136.886997][ T8439] loop3: detected capacity change from 0 to 8 [ 137.008854][ T8439] SQUASHFS error: Failed to read block 0x1ec: -5 [ 137.027693][ T8439] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 137.079253][ T8456] __nla_validate_parse: 1 callbacks suppressed [ 137.079266][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 137.281416][ T8475] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1867'. [ 137.366891][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 137.430717][ T8484] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1872'. [ 137.679058][ T8493] loop0: detected capacity change from 0 to 4096 [ 137.696491][ T8509] netlink: 'syz.4.1882': attribute type 21 has an invalid length. [ 137.856052][ T8521] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1889'. [ 137.999166][ T7759] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.178032][ T8548] loop0: detected capacity change from 0 to 2048 [ 138.181121][ T8553] IPv6: Can't replace route, no match found [ 138.245656][ T8548] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 138.268636][ T8548] UDF-fs: Scanning with blocksize 512 failed [ 138.328976][ T8548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.369261][ T7759] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 138.399242][ T7759] usb 3-1: config 0 has no interface number 1 [ 138.405352][ T7759] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 138.427582][ T8570] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 138.439873][ T7759] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 138.447131][ T8570] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 138.559736][ T7759] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 138.579178][ T7759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.614903][ T7759] usb 3-1: SerialNumber: syz [ 138.641093][ T7759] usb 3-1: config 0 descriptor?? [ 138.662146][ T8578] loop1: detected capacity change from 0 to 4096 [ 138.712480][ T8578] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 138.799970][ T8578] ntfs3: loop1: ino=5, "/" directory corrupted [ 138.806492][ T8578] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 138.917339][ T8601] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1929'. [ 138.936858][ T4182] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 138.943228][ T7759] usb 3-1: Found UVC 0.00 device (0002:0000) [ 138.951305][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 138.953885][ T7759] usb 3-1: No valid video chain found. [ 138.972793][ T4182] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 138.982631][ T8601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.017521][ T7759] usb 3-1: USB disconnect, device number 13 [ 139.259216][ T1107] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.324521][ T8618] loop1: detected capacity change from 0 to 1764 [ 139.329232][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.554100][ T8621] device ~ÿ entered promiscuous mode [ 139.579108][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 139.629295][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 139.749295][ T21] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 139.799804][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.824396][ T1107] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 139.830576][ T21] usb 4-1: config 0 has no interface number 0 [ 139.863001][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 139.898310][ T1107] usb 1-1: Product: syz [ 139.934742][ T1107] usb 1-1: config 0 descriptor?? [ 139.990197][ T8614] loop4: detected capacity change from 0 to 32768 [ 140.022998][ T8633] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.051618][ T21] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 140.072499][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.096012][ T21] usb 4-1: Product: syz [ 140.116131][ T21] usb 4-1: Manufacturer: syz [ 140.127400][ T21] usb 4-1: SerialNumber: syz [ 140.145477][ T21] usb 4-1: config 0 descriptor?? [ 140.168733][ T8614] XFS (loop4): Mounting V5 Filesystem [ 140.204926][ T21] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 140.210032][ T1107] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 140.218623][ T8640] loop1: detected capacity change from 0 to 4096 [ 140.243867][ T21] usb 4-1: No valid video chain found. [ 140.310122][ T8614] XFS (loop4): Ending clean mount [ 140.313906][ T8640] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 140.320750][ T8614] XFS (loop4): Quotacheck needed: Please wait. [ 140.431761][ T8614] XFS (loop4): Quotacheck: Done. [ 140.445119][ T1107] usb 1-1: USB disconnect, device number 13 [ 140.546734][ T7759] usb 4-1: USB disconnect, device number 13 [ 140.570248][ T4194] XFS (loop4): Unmounting Filesystem [ 140.715632][ T8665] cgroup: name respecified [ 141.119142][ T7759] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.138722][ T8690] ALSA: mixer_oss: invalid OSS volume 'u' [ 141.239216][ T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.456322][ T8709] loop0: detected capacity change from 0 to 4096 [ 141.479361][ T7759] usb 3-1: config index 0 descriptor too short (expected 29, got 18) [ 141.499817][ T8719] binder: 8718:8719 ioctl c018620c 200000000080 returned -22 [ 141.507318][ T7759] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.536890][ T7759] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 141.557762][ T8709] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.572121][ T7759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.584741][ T8709] ntfs3: loop0: Failed to load $Extend. [ 141.610998][ T21] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 141.631343][ T8709] ntfs3: loop0: ino=5, "/" directory corrupted [ 141.635915][ T7759] usb 3-1: config 0 descriptor?? [ 141.648713][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.660595][ T8725] netlink: 'syz.3.1987': attribute type 3 has an invalid length. [ 141.677870][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.691441][ T21] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 141.699715][ T8725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1987'. [ 141.705824][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.758637][ T21] usb 5-1: config 0 descriptor?? [ 141.820080][ T21] usb-storage 5-1:0.0: USB Mass Storage device detected [ 141.838906][ T8735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1992'. [ 141.848264][ T21] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 141.959325][ T7759] usb 3-1: string descriptor 0 read error: -71 [ 141.965557][ T7759] ldusb 3-1:0.0: Interrupt in endpoint not found [ 142.017707][ T7759] usb 3-1: USB disconnect, device number 14 [ 142.081153][ T4261] usb 5-1: USB disconnect, device number 16 [ 142.092108][ T8752] overlayfs: missing 'workdir' [ 142.452431][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2008'. [ 142.478344][ T8755] loop1: detected capacity change from 0 to 32768 [ 142.533363][ T8777] loop2: detected capacity change from 0 to 8 [ 142.585562][ T8755] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2000 (8755) [ 142.631967][ T8777] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.646820][ T8755] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 142.663554][ T8777] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.679760][ T8755] BTRFS info (device loop1): force zlib compression, level 3 [ 142.687264][ T8777] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.705617][ T8787] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2016'. [ 142.715414][ T8755] BTRFS info (device loop1): force clearing of disk cache [ 142.719568][ T8777] SQUASHFS error: Unable to read inode 0x127 [ 142.733335][ T8755] BTRFS info (device loop1): setting nodatasum [ 142.748042][ T8790] loop0: detected capacity change from 0 to 164 [ 142.756382][ T8755] BTRFS info (device loop1): allowing degraded mounts [ 142.766538][ T8755] BTRFS info (device loop1): enabling disk space caching [ 142.787621][ T8755] BTRFS info (device loop1): disk space caching is enabled [ 142.795813][ T8755] BTRFS info (device loop1): has skinny extents [ 142.822362][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2020'. [ 142.843576][ T8790] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.115571][ T8755] BTRFS info (device loop1): clearing free space tree [ 143.125456][ T8755] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.147835][ T8755] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.701297][ T8850] PKCS8: Unsupported PKCS#8 version [ 143.969183][ T8871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2047'. [ 144.204536][ T8892] device gtp0 entered promiscuous mode [ 144.253153][ T8884] loop2: detected capacity change from 0 to 4096 [ 144.360937][ T8884] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 144.389429][ T8884] ntfs3: loop2: Failed to load $Extend. [ 144.407523][ T8903] misc userio: No port type given on /dev/userio [ 144.445531][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2064'. [ 144.532065][ T8905] IPv6: sit1: Disabled Multicast RS [ 144.600029][ T8911] device vlan0 entered promiscuous mode [ 145.225377][ T8959] loop0: detected capacity change from 0 to 1764 [ 145.311612][ T8968] 9pnet: Could not find request transport: 0xffffffffffffffff [ 145.353691][ T8959] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 145.731208][ T8927] loop4: detected capacity change from 0 to 40427 [ 145.767794][ T8927] F2FS-fs (loop4): invalid crc value [ 145.785449][ T8927] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 145.823649][ T8927] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.939116][ T21] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 145.955753][ T8927] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 145.975643][ T8927] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 146.042178][ T8927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.061914][ T8970] loop2: detected capacity change from 0 to 32768 [ 146.064824][ T9002] xt_l2tp: unknown flags: 3b [ 146.094577][ T8970] (syz.2.2096,8970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.126077][ T8997] loop3: detected capacity change from 0 to 8192 [ 146.144179][ T8970] (syz.2.2096,8970,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.204450][ T8970] JBD2: Ignoring recovery information on journal [ 146.277121][ T9007] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.299885][ T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 70, setting to 64 [ 146.319539][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.357787][ T8970] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 146.422781][ T8970] (syz.2.2096,8970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 146.489406][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.529444][ T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.549588][ T21] usb 1-1: Product: syz [ 146.553767][ T21] usb 1-1: Manufacturer: syz [ 146.558359][ T21] usb 1-1: SerialNumber: syz [ 146.569236][ T8970] (syz.2.2096,8970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 146.630016][ T21] usb 1-1: config 0 descriptor?? [ 146.639649][ T8970] (syz.2.2096,8970,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 146.692308][ T21] usb 1-1: selecting invalid altsetting 0 [ 146.703941][ T8970] (syz.2.2096,8970,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 146.759634][ T8970] (syz.2.2096,8970,0):ocfs2_quota_read:201 ERROR: status = -5 [ 146.769653][ T9028] loop1: detected capacity change from 0 to 256 [ 146.817825][ T8970] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 3 [ 146.850010][ T8970] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 146.874787][ T8970] (syz.2.2096,8970,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 146.897136][ T8985] usb 1-1: selecting invalid altsetting 0 [ 146.898986][ T8970] (syz.2.2096,8970,0):ocfs2_mknod:314 ERROR: status = -5 [ 146.940694][ T8985] usb 1-1: 0:0: usb_set_interface failed (-22) [ 146.954354][ T8985] usb 1-1: selecting invalid altsetting 0 [ 146.969761][ T8970] (syz.2.2096,8970,1):ocfs2_mknod:502 ERROR: status = -5 [ 146.980474][ T8985] usb 1-1: 0:0: usb_set_interface failed (-22) [ 146.986737][ T8985] usb 1-1: selecting invalid altsetting 0 [ 146.998530][ T8970] (syz.2.2096,8970,1):ocfs2_mkdir:659 ERROR: status = -5 [ 147.002897][ T8985] usb 1-1: 0:0: usb_set_interface failed (-22) [ 147.024191][ T7761] usb 1-1: USB disconnect, device number 14 [ 147.031324][ T9037] loop4: detected capacity change from 0 to 8 [ 147.123801][ T9042] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 147.146318][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 147.165046][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 147.229367][ T9044] netlink: 'syz.1.2131': attribute type 3 has an invalid length. [ 147.346756][ T9050] loop3: detected capacity change from 0 to 512 [ 147.403602][ T9050] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 147.477217][ T9050] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.2134: inode has both inline data and extents flags [ 147.506527][ T9050] EXT4-fs (loop3): get root inode failed [ 147.519149][ T9050] EXT4-fs (loop3): mount failed [ 147.559277][ T9062] program syz.2.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.813852][ T9080] loop4: detected capacity change from 0 to 256 [ 147.863833][ T9076] loop1: detected capacity change from 0 to 4096 [ 147.882902][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'. [ 147.899195][ T9086] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 147.928201][ T9076] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 147.974148][ T9076] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 148.052029][ T9076] ntfs: volume version 3.1. [ 148.056586][ T9076] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 148.137565][ T9076] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 148.178038][ T9076] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 148.209181][ T9076] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 148.499284][ T7759] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.749258][ T7759] usb 1-1: Using ep0 maxpacket: 16 [ 148.905704][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 149.029236][ T7759] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 149.053156][ T7759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.089097][ T7759] usb 1-1: Product: syz [ 149.093586][ T7759] usb 1-1: Manufacturer: syz [ 149.098186][ T7759] usb 1-1: SerialNumber: syz [ 149.121433][ T7759] usb 1-1: config 0 descriptor?? [ 149.242945][ T9179] IPVS: length: 104 != 24 [ 149.353985][ T4237] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.379240][ T7759] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 149.390415][ T7759] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 149.397998][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 149.587800][ T7761] usb 1-1: USB disconnect, device number 15 [ 149.629786][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 149.808355][ T9222] loop1: detected capacity change from 0 to 8 [ 149.869732][ T9222] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 149.926411][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop1 [ 149.964326][ T4237] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 149.964356][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.964376][ T4237] usb 4-1: Product: syz [ 149.964391][ T4237] usb 4-1: Manufacturer: syz [ 149.964405][ T4237] usb 4-1: SerialNumber: syz [ 149.966036][ T4237] usb 4-1: config 0 descriptor?? [ 150.010114][ T4237] cdc_ether 4-1:0.0: skipping garbage [ 150.010131][ T4237] cdc_ether 4-1:0.0: skipping garbage [ 150.010148][ T4237] usb 4-1: bad CDC descriptors [ 150.010459][ T4237] usb 4-1: unsupported MDLM descriptors [ 150.010770][ T4237] cdc_acm 4-1:0.0: skipping garbage [ 150.010786][ T4237] cdc_acm 4-1:0.0: skipping garbage [ 150.186670][ T9241] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 150.232256][ T4237] usb 4-1: USB disconnect, device number 14 [ 150.482991][ T9213] loop4: detected capacity change from 0 to 32768 [ 150.517433][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2228'. [ 150.564914][ T9213] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.597744][ T9259] loop2: detected capacity change from 0 to 2048 [ 150.604447][ T9213] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.653802][ T9213] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms [ 150.674326][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2232'. [ 150.697982][ T7761] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 150.700906][ T9259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.705578][ T7761] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.798875][ T7761] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 93ms [ 150.842389][ T7761] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.864509][ T9213] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.962702][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.036341][ T9279] 9pnet: p9_fd_create_unix (9279): problem connecting socket: ./file0: -111 [ 151.427544][ T9213] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 151.427544][ T9213] bh = 2049 (type: exp=14, found=8) [ 151.427544][ T9213] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 151.493216][ T9213] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 151.519512][ T9213] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 151.575082][ T9213] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 151.606568][ T9213] gfs2: fsid=syz:syz.0: File system withdrawn [ 151.654670][ T9213] CPU: 1 PID: 9213 Comm: syz.4.2210 Not tainted syzkaller #0 [ 151.662095][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.672164][ T9213] Call Trace: [ 151.675444][ T9213] [ 151.678378][ T9213] dump_stack_lvl+0x168/0x230 [ 151.683079][ T9213] ? kobject_uevent_env+0x371/0x890 [ 151.688292][ T9213] ? show_regs_print_info+0x20/0x20 [ 151.693503][ T9213] ? load_image+0x3b0/0x3b0 [ 151.698019][ T9213] ? kobject_uevent_env+0x371/0x890 [ 151.703236][ T9213] gfs2_withdraw+0x111b/0x1460 [ 151.708017][ T9213] ? gfs2_lm+0x220/0x220 [ 151.712271][ T9213] ? gfs2_meta_ra+0x413/0x4d0 [ 151.716962][ T9213] ? gfs2_meta_buffer+0x310/0x310 [ 151.721994][ T9213] ? from_kuid_munged+0x690/0x690 [ 151.727030][ T9213] gfs2_metatype_check_ii+0x74/0x90 [ 151.732239][ T9213] gfs2_quota_init+0xc81/0xe80 [ 151.737033][ T9213] ? qd_get+0x5f0/0x5f0 [ 151.741212][ T9213] gfs2_make_fs_rw+0x3f5/0x560 [ 151.745978][ T9213] ? _raw_spin_unlock+0x24/0x40 [ 151.750830][ T9213] ? gfs2_glock_nq+0xcb0/0x1550 [ 151.755686][ T9213] ? gfs2_jdesc_check+0x290/0x290 [ 151.760726][ T9213] gfs2_reconfigure+0x771/0xcd0 [ 151.765591][ T9213] ? gfs2_get_tree+0x1e0/0x1e0 [ 151.770364][ T9213] ? gfs2_freeze_lock+0x52/0xc0 [ 151.775221][ T9213] ? __might_sleep+0xf0/0xf0 [ 151.779814][ T9213] ? hook_sb_remount+0x19/0xc0 [ 151.784584][ T9213] reconfigure_super+0x219/0x880 [ 151.789534][ T9213] path_mount+0xd3e/0x1020 [ 151.793963][ T9213] ? user_path_at_empty+0x13e/0x190 [ 151.799168][ T9213] __se_sys_mount+0x2d6/0x3c0 [ 151.803858][ T9213] ? __x64_sys_mount+0xc0/0xc0 [ 151.808630][ T9213] ? lockdep_hardirqs_on+0x94/0x140 [ 151.813836][ T9213] ? __x64_sys_mount+0x1c/0xc0 [ 151.818610][ T9213] do_syscall_64+0x4c/0xa0 [ 151.823029][ T9213] ? clear_bhb_loop+0x30/0x80 [ 151.827708][ T9213] ? clear_bhb_loop+0x30/0x80 [ 151.832390][ T9213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.838307][ T9213] RIP: 0033:0x7f5d5d7fe749 [ 151.842728][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.846399][ T9331] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2265'. [ 151.862333][ T9213] RSP: 002b:00007f5d5ba65038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.862394][ T9213] RAX: ffffffffffffffda RBX: 00007f5d5da54fa0 RCX: 00007f5d5d7fe749 [ 151.862409][ T9213] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 151.895714][ T9213] RBP: 00007f5d5d882f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.903688][ T9213] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 151.911662][ T9213] R13: 00007f5d5da55038 R14: 00007f5d5da54fa0 R15: 00007ffd89ccfc98 [ 151.919658][ T9213] [ 151.922735][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.944350][ T9213] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 151.958501][ T9213] CPU: 1 PID: 9213 Comm: syz.4.2210 Not tainted syzkaller #0 [ 151.965874][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.975924][ T9213] Call Trace: [ 151.979200][ T9213] [ 151.982128][ T9213] dump_stack_lvl+0x168/0x230 [ 151.986819][ T9213] ? show_regs_print_info+0x20/0x20 [ 151.992029][ T9213] ? load_image+0x3b0/0x3b0 [ 151.996543][ T9213] ? __lock_acquire+0x7c60/0x7c60 [ 152.001570][ T9213] ? do_raw_spin_unlock+0x11d/0x230 [ 152.006775][ T9213] gfs2_assert_warn_i+0x18f/0x2c0 [ 152.011806][ T9213] gfs2_quota_cleanup+0x4b4/0x6a0 [ 152.016848][ T9213] gfs2_quota_init+0xd2a/0xe80 [ 152.021633][ T9213] ? qd_get+0x5f0/0x5f0 [ 152.025809][ T9213] gfs2_make_fs_rw+0x3f5/0x560 [ 152.030576][ T9213] ? _raw_spin_unlock+0x24/0x40 [ 152.035430][ T9213] ? gfs2_glock_nq+0xcb0/0x1550 [ 152.040287][ T9213] ? gfs2_jdesc_check+0x290/0x290 [ 152.045333][ T9213] gfs2_reconfigure+0x771/0xcd0 [ 152.050201][ T9213] ? gfs2_get_tree+0x1e0/0x1e0 [ 152.054970][ T9213] ? gfs2_freeze_lock+0x52/0xc0 [ 152.059824][ T9213] ? __might_sleep+0xf0/0xf0 [ 152.064419][ T9213] ? hook_sb_remount+0x19/0xc0 [ 152.069188][ T9213] reconfigure_super+0x219/0x880 [ 152.074137][ T9213] path_mount+0xd3e/0x1020 [ 152.078561][ T9213] ? user_path_at_empty+0x13e/0x190 [ 152.083764][ T9213] __se_sys_mount+0x2d6/0x3c0 [ 152.088446][ T9213] ? __x64_sys_mount+0xc0/0xc0 [ 152.093216][ T9213] ? lockdep_hardirqs_on+0x94/0x140 [ 152.098419][ T9213] ? __x64_sys_mount+0x1c/0xc0 [ 152.103184][ T9213] do_syscall_64+0x4c/0xa0 [ 152.107605][ T9213] ? clear_bhb_loop+0x30/0x80 [ 152.112284][ T9213] ? clear_bhb_loop+0x30/0x80 [ 152.116973][ T9213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.122875][ T9213] RIP: 0033:0x7f5d5d7fe749 [ 152.127288][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.146892][ T9213] RSP: 002b:00007f5d5ba65038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.155305][ T9213] RAX: ffffffffffffffda RBX: 00007f5d5da54fa0 RCX: 00007f5d5d7fe749 [ 152.163282][ T9213] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 152.171248][ T9213] RBP: 00007f5d5d882f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.179216][ T9213] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 152.187185][ T9213] R13: 00007f5d5da55038 R14: 00007f5d5da54fa0 R15: 00007ffd89ccfc98 [ 152.195171][ T9213] [ 152.198235][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.206142][ T9213] gfs2: unable to remount read-write [ 152.349613][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 152.374461][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 152.412082][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 152.425933][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 152.589891][ T9366] netlink: 'syz.3.2279': attribute type 2 has an invalid length. [ 152.939370][ T9393] kernel profiling enabled (shift: 7) [ 153.026911][ T9397] loop4: detected capacity change from 0 to 8 [ 153.067303][ T9404] __nla_validate_parse: 50 callbacks suppressed [ 153.067325][ T9404] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2297'. [ 153.090492][ T9404] netlink: 'syz.2.2297': attribute type 3 has an invalid length. [ 153.168308][ T4355] udevd[4355]: inotify_add_watch(7, /dev/nbd1p4, 10) failed: No such file or directory [ 153.266888][ T9418] x_tables: unsorted entry at hook 3 [ 153.419293][ T7759] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 153.556096][ T9440] loop2: detected capacity change from 0 to 16 [ 153.577468][ T9438] loop3: detected capacity change from 0 to 4096 [ 153.608730][ T9438] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 153.623077][ T9440] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 153.736155][ T9440] cramfs: Error -3 while decompressing! [ 153.741303][ T9438] ntfs3: loop3: failed to convert "c46c" to iso8859-14 [ 153.791579][ T9440] cramfs: ffffffff961ecf68(453)->ffff888058928000(4096) [ 153.799518][ T7759] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 153.807711][ T7759] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 153.845631][ T9444] loop1: detected capacity change from 0 to 256 [ 153.857791][ T7759] usb 1-1: config 0 has no interface number 0 [ 153.863948][ T7759] usb 1-1: config 0 interface 113 altsetting 53 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 153.874991][ T7759] usb 1-1: config 0 interface 113 altsetting 53 endpoint 0x1 is Bulk; changing to Interrupt [ 153.892167][ T7759] usb 1-1: config 0 interface 113 altsetting 53 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 153.904292][ T7759] usb 1-1: config 0 interface 113 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 153.928925][ T7759] usb 1-1: config 0 interface 113 has no altsetting 0 [ 153.935791][ T7759] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 153.947817][ T9444] exfat: Deprecated parameter 'utf8' [ 153.969279][ T9444] exfat: Deprecated parameter 'namecase' [ 153.974953][ T9444] exfat: Deprecated parameter 'utf8' [ 153.992747][ T7759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.008031][ T7759] usb 1-1: config 0 descriptor?? [ 154.056106][ T9444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 154.316351][ T9472] netlink: 'syz.2.2331': attribute type 8 has an invalid length. [ 154.326972][ T9474] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.346348][ T9472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.442409][ T9480] Cannot find del_set index 286 as target [ 154.486339][ T9484] device sit0 entered promiscuous mode [ 154.550876][ T9484] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 154.572444][ T9484] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2335'. [ 154.586717][ T7759] asix 1-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 154.607606][ T7759] asix: probe of 1-1:0.113 failed with error -71 [ 154.639741][ T7759] usb 1-1: USB disconnect, device number 16 [ 154.672920][ T7761] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.939152][ T7761] usb 2-1: Using ep0 maxpacket: 16 [ 154.951635][ T25] audit: type=1400 audit(154.912:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9513 comm="syz.4.2351" [ 155.059365][ T7761] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 155.067556][ T7761] usb 2-1: config 0 has no interface number 0 [ 155.104698][ T7761] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 155.141970][ T9525] loop0: detected capacity change from 0 to 256 [ 155.309274][ T7761] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 155.338888][ T7761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.366320][ T7761] usb 2-1: Product: syz [ 155.389283][ T7761] usb 2-1: Manufacturer: syz [ 155.399645][ T7761] usb 2-1: SerialNumber: syz [ 155.421485][ T7761] usb 2-1: config 0 descriptor?? [ 155.538721][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 155.568246][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2370'. [ 155.619277][ T4261] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.763775][ T9570] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.812005][ T9572] xt_TCPMSS: Only works on TCP SYN packets [ 155.869082][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 155.909721][ T7761] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 155.933090][ T7761] usb 2-1: USB disconnect, device number 13 [ 155.991016][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.011453][ T9584] loop0: detected capacity change from 0 to 64 [ 156.032691][ T4261] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.106097][ T9584] attempt to access beyond end of device [ 156.106097][ T9584] loop0: rw=0, want=1026, limit=64 [ 156.129314][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.147476][ T9584] Buffer I/O error on dev loop0, logical block 512, async page read [ 156.157902][ T4261] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.171719][ T9584] attempt to access beyond end of device [ 156.171719][ T9584] loop0: rw=0, want=113154, limit=64 [ 156.186428][ T9584] Buffer I/O error on dev loop0, logical block 56576, async page read [ 156.206851][ T9594] loop4: detected capacity change from 0 to 256 [ 156.259462][ T4261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.270768][ T9594] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.297875][ T4261] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.314178][ T9602] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 156.489415][ T4261] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 156.516919][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.553497][ T4261] usb 3-1: Product: syz [ 156.558993][ T4261] usb 3-1: Manufacturer: syz [ 156.577600][ T4261] usb 3-1: SerialNumber: syz [ 156.594368][ T4261] usb 3-1: config 0 descriptor?? [ 156.668040][ T4261] usb 3-1: bad CDC descriptors [ 156.676010][ T4261] usb 3-1: bad CDC descriptors [ 156.719313][ T4261] cdc_acm 3-1:0.0: Zero length descriptor references [ 156.748880][ T4261] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 156.800613][ T9631] loop1: detected capacity change from 0 to 256 [ 156.831613][ T9633] loop4: detected capacity change from 0 to 256 [ 156.856414][ T4281] usb 3-1: USB disconnect, device number 15 [ 156.899829][ T9633] exfat: Deprecated parameter 'utf8' [ 156.920878][ T9633] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 157.041687][ T9646] loop1: detected capacity change from 0 to 512 [ 157.092953][ T9644] loop3: detected capacity change from 0 to 4096 [ 157.124987][ T9646] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 157.165852][ T9659] loop4: detected capacity change from 0 to 2048 [ 157.181715][ T9644] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 157.227392][ T9659] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.244776][ T9659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.663550][ T9680] overlayfs: missing 'lowerdir' [ 157.679762][ T9681] (unnamed net_device) (uninitialized): peer notification delay (1025) is not a multiple of miimon (12650), value rounded to 0 ms [ 157.679796][ T9681] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 157.780599][ T9686] netlink: 'syz.1.2433': attribute type 8 has an invalid length. [ 157.871528][ T9693] QAT: Stopping all acceleration devices. [ 157.873686][ T9694] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 157.889091][ T4252] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 157.976645][ T9699] device geneve2 entered promiscuous mode [ 158.004147][ T9701] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.134273][ T9711] tmpfs: Bad value for 'mpol' [ 158.289422][ T4252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.301604][ T9727] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2453'. [ 158.309527][ T4252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.346590][ T9727] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2453'. [ 158.351341][ T4252] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 158.384381][ T9727] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2453'. [ 158.397575][ T4252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.441229][ T4252] usb 4-1: config 0 descriptor?? [ 158.511972][ T4252] xbox_remote_probe: endpoint_in message size==0? [ 158.596268][ T9743] loop0: detected capacity change from 0 to 1024 [ 158.687440][ T9743] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 158.744435][ T9758] ipt_REJECT: TCP_RESET invalid for non-tcp [ 158.746978][ T9743] hfsplus: filesystem is marked journaled, leaving read-only. [ 158.809476][ T4252] usbhid 4-1:0.0: can't add hid device: -71 [ 158.837785][ T4252] usbhid: probe of 4-1:0.0 failed with error -71 [ 158.857219][ T4252] usb 4-1: USB disconnect, device number 15 [ 158.905552][ T9768] netlink: 'syz.4.2468': attribute type 2 has an invalid length. [ 159.203947][ T25] audit: type=1800 audit(159.182:6): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2475" name="/" dev="sockfs" ino=49402 res=0 errno=0 [ 159.301682][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2480'. [ 159.329196][ T4261] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 159.699315][ T4261] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 70, setting to 64 [ 159.711816][ T9814] loop3: detected capacity change from 0 to 64 [ 159.733718][ T4261] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.769899][ T9814] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 159.825669][ T9814] minix_free_inode: bit 4 already cleared [ 159.909344][ T4261] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.936614][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.959066][ T4261] usb 5-1: Product: syz [ 159.963619][ T4261] usb 5-1: Manufacturer: syz [ 159.968216][ T4261] usb 5-1: SerialNumber: syz [ 159.986322][ T9792] loop2: detected capacity change from 0 to 32768 [ 160.011126][ T4261] usb 5-1: config 0 descriptor?? [ 160.051929][ T4261] usb 5-1: selecting invalid altsetting 0 [ 160.112261][ T9792] ERROR: (device loop2): duplicateIXtree: [ 160.112261][ T9792] [ 160.125181][ T9824] overlayfs: conflicting options: nfs_export=on,index=off [ 160.185589][ T9792] ERROR: (device loop2): remounting filesystem as read-only [ 160.323511][ T9780] usb 5-1: selecting invalid altsetting 0 [ 160.349156][ T9780] usb 5-1: 0:0: usb_set_interface failed (-22) [ 160.369448][ T9780] usb 5-1: selecting invalid altsetting 0 [ 160.379259][ T9780] usb 5-1: 0:0: usb_set_interface failed (-22) [ 160.434949][ T9780] usb 5-1: selecting invalid altsetting 0 [ 160.446169][ T9780] usb 5-1: 0:0: usb_set_interface failed (-22) [ 160.473079][ T8848] usb 5-1: USB disconnect, device number 17 [ 160.647651][ T9817] loop0: detected capacity change from 0 to 32768 [ 160.720870][ T9833] delete_channel: no stack [ 160.898378][ T9826] loop3: detected capacity change from 0 to 32768 [ 161.006792][ T9826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2494 (9826) [ 161.048877][ T9826] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 161.072085][ T9826] BTRFS info (device loop3): using free space tree [ 161.109055][ T9826] BTRFS info (device loop3): has skinny extents [ 161.150521][ T1107] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.212598][ T9847] loop0: detected capacity change from 0 to 4096 [ 161.319900][ T9847] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 161.393899][ T9847] ntfs3: loop0: Failed to load $Extend. [ 161.437530][ T9826] BTRFS info (device loop3): enabling ssd optimizations [ 161.452169][ T9874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.610024][ T1107] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 161.618137][ T1107] usb 3-1: config 0 has no interface number 0 [ 161.659069][ T1107] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 161.694968][ T1107] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.892987][ T4355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4355) [ 161.909625][ T1107] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 161.918729][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.997539][ T1107] usb 3-1: Product: syz [ 162.001945][ T1107] usb 3-1: Manufacturer: syz [ 162.047593][ T1107] usb 3-1: SerialNumber: syz [ 162.069740][ T1107] usb 3-1: config 0 descriptor?? [ 162.089378][ T9841] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.123541][ T1107] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 162.191661][ T1107] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 162.338466][ T9906] loop4: detected capacity change from 0 to 4096 [ 162.360772][ T9913] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.442948][ T9906] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 162.594969][ T9906] ntfs3: loop4: failed to convert "c46c" to cp852 [ 162.660228][ T1107] usb 3-1: USB disconnect, device number 16 [ 162.684583][ T1107] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 162.754579][ T1107] cyberjack 3-1:0.69: device disconnected [ 162.791857][ T9927] loop0: detected capacity change from 0 to 4096 [ 162.871019][ T9937] loop4: detected capacity change from 0 to 64 [ 162.891257][ T9927] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 162.945785][ T9927] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 162.977377][ T9927] ntfs3: loop0: ino=21, "cgroup.stat" The size of extended attributes must not exceed 64KiB [ 163.484013][ T9956] loop3: detected capacity change from 0 to 4096 [ 163.518894][ T9969] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2552'. [ 163.535337][ T9967] loop2: detected capacity change from 0 to 1764 [ 163.569482][ T9971] loop0: detected capacity change from 0 to 512 [ 163.613031][ T9971] EXT4-fs (loop0): Ignoring removed oldalloc option [ 163.636093][ T9971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.638137][ T9973] AppArmor: change_hat: Invalid input 'î×' [ 163.683002][ T9956] ntfs: (device loop3): parse_options(): NLS character set cp8ƒÓ O¥¿one_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862. [ 163.698575][ T9976] loop1: detected capacity change from 0 to 1024 [ 163.726750][ T9956] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 163.787246][ T9971] EXT4-fs (loop0): 1 truncate cleaned up [ 163.805084][ T9971] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 163.826813][ T9956] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 163.899963][ T9956] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 163.974658][ T9956] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.009201][ T8302] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.051774][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2560'. [ 164.065265][ T9956] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.094023][ T9956] ntfs: volume version 3.1. [ 164.141583][ T9956] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 164.215398][ T9956] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 164.259067][ T8302] usb 3-1: Using ep0 maxpacket: 16 [ 164.326023][ T9956] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.349103][ T9956] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 164.379229][ T8302] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 164.387409][ T8302] usb 3-1: config 0 has no interface number 0 [ 164.398026][ T9998] xt_ecn: cannot match TCP bits for non-tcp packets [ 164.439699][ T8302] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 164.469344][ T8302] usb 3-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 164.535934][ T8302] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 164.582343][T10006] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2570'. [ 164.709315][ T8302] usb 3-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 164.737135][ T8302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.739220][T10016] loop4: detected capacity change from 0 to 1024 [ 164.775116][ T8302] usb 3-1: Product: syz [ 164.780573][ T8302] usb 3-1: Manufacturer: syz [ 164.812367][ T8302] usb 3-1: SerialNumber: syz [ 164.820659][ T8302] usb 3-1: config 0 descriptor?? [ 164.839411][ T9979] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.846482][ T9979] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.880270][ T8302] usb-storage 3-1:0.216: USB Mass Storage device detected [ 164.905556][T10016] hfsplus: failed to extend attributes file [ 164.936859][ T8302] scsi host1: usb-storage 3-1:0.216 [ 164.940239][T10022] loop1: detected capacity change from 0 to 1024 [ 165.059726][T10022] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 165.129753][T10031] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.236856][T10029] loop3: detected capacity change from 0 to 4096 [ 165.243152][T10022] hfsplus: filesystem is marked journaled, leaving read-only. [ 165.255522][T10033] loop4: detected capacity change from 0 to 1024 [ 165.315899][T10029] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 165.465931][T10038] device vti0 entered promiscuous mode [ 165.720681][ T1201] block nbd0: Attempted send on invalid socket [ 165.726883][ T1201] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.877861][T10060] CIFS: VFS: Malformed UNC in devname [ 165.907104][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2597'. [ 166.025230][T10069] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 166.142628][T10076] loop3: detected capacity change from 0 to 1024 [ 166.166551][T10079] loop0: detected capacity change from 0 to 64 [ 166.237072][T10079] hfs: keylen 94 too large [ 166.239143][T10027] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 166.349508][ T4237] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 166.472322][T10091] loop0: detected capacity change from 0 to 1024 [ 166.580022][T10091] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 166.684216][T10102] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 166.729460][ T4237] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 166.741277][T10102] overlayfs: missing 'lowerdir' [ 166.771122][ T4237] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 166.806590][ T4237] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 166.836139][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.865172][T10106] loop2: detected capacity change from 0 to 256 [ 166.879573][T10073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.954744][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2619'. [ 166.987173][T10106] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.019275][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2619'. [ 167.155021][ T4252] usb 3-1: USB disconnect, device number 17 [ 167.321532][T10130] openvswitch: netlink: Missing key (keys=40, expected=100) [ 167.349227][ T4237] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 167.367966][ T4237] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input18 [ 167.452114][ T4237] usb 5-1: USB disconnect, device number 18 [ 167.696925][T10152] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2639'. [ 167.735811][T10152] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2639'. [ 167.846787][T10148] loop3: detected capacity change from 0 to 4096 [ 167.874324][T10161] loop1: detected capacity change from 0 to 512 [ 167.913517][T10148] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 168.016566][T10161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.285107][T10186] capability: warning: `syz.4.2656' uses 32-bit capabilities (legacy support in use) [ 168.353751][T10190] loop0: detected capacity change from 0 to 128 [ 168.491169][T10202] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 168.517803][T10200] loop4: detected capacity change from 0 to 1024 [ 168.575095][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2665'. [ 168.620646][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2665'. [ 168.637874][T10209] loop0: detected capacity change from 0 to 64 [ 168.689054][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 168.700825][ T430] hfsplus: b-tree write err: -5, ino 4 [ 169.079211][ T8302] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.111443][T10234] No such timeout policy "syz1" [ 169.449369][ T8302] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 169.457780][ T8302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.508777][ T8302] usb 2-1: config 0 has no interface number 0 [ 169.549414][ T8302] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 169.594493][ T8302] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 169.645433][ T8302] usb 2-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.709613][ T8302] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 169.769233][ T8302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.810008][ T8302] usb 2-1: config 0 descriptor?? [ 169.833971][T10261] loop4: detected capacity change from 0 to 512 [ 169.850871][ T8302] xbox_remote_probe: Unexpected endpoint_in [ 169.901974][T10263] loop3: detected capacity change from 0 to 512 [ 169.946202][T10263] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 169.960413][T10261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.004803][T10263] EXT4-fs (loop3): inline encryption not supported [ 170.047086][T10261] EXT4-fs (loop4): 1 truncate cleaned up [ 170.053106][ T4281] usb 2-1: USB disconnect, device number 14 [ 170.059377][T10263] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.066161][T10263] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 170.073548][T10263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.099078][T10261] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none. [ 170.159427][T10263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 170.169213][T10263] System zones: 1-12 [ 170.177983][T10263] EXT4-fs (loop3): 1 truncate cleaned up [ 170.186953][T10263] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 170.413111][T10231] loop0: detected capacity change from 0 to 32768 [ 170.477004][T10231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.517307][T10231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.540322][ T150] block nbd2: Attempted send on invalid socket [ 170.546550][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.584262][T10275] vxfs: unable to read disk superblock at 1 [ 170.629455][T10231] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms [ 170.694768][ T8302] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 170.700854][ T150] block nbd2: Attempted send on invalid socket [ 170.703412][T10263] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 170.707716][ T150] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.736164][T10275] vxfs: unable to read disk superblock at 8 [ 170.745468][ T8302] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 170.806821][T10275] vxfs: can't find superblock. [ 170.934460][ T8302] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 170.946999][ T8302] gfs2: fsid=syz:syz.0: jid=0: Done [ 170.957138][T10231] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 171.465586][T10231] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 171.465586][T10231] bh = 2049 (type: exp=14, found=8) [ 171.465586][T10231] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 171.539491][T10231] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 171.566372][T10231] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 171.579217][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.604451][T10231] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 171.619223][T10231] gfs2: fsid=syz:syz.0: File system withdrawn [ 171.635498][T10231] CPU: 0 PID: 10231 Comm: syz.0.2677 Not tainted syzkaller #0 [ 171.642965][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.653016][T10231] Call Trace: [ 171.656293][T10231] [ 171.659225][T10231] dump_stack_lvl+0x168/0x230 [ 171.663907][T10231] ? kobject_uevent_env+0x371/0x890 [ 171.669111][T10231] ? show_regs_print_info+0x20/0x20 [ 171.674313][T10231] ? load_image+0x3b0/0x3b0 [ 171.678821][T10231] ? kobject_uevent_env+0x371/0x890 [ 171.684029][T10231] gfs2_withdraw+0x111b/0x1460 [ 171.688810][T10231] ? gfs2_lm+0x220/0x220 [ 171.693052][T10231] ? gfs2_meta_ra+0x413/0x4d0 [ 171.697741][T10231] ? gfs2_meta_buffer+0x310/0x310 [ 171.702771][T10231] ? from_kuid_munged+0x690/0x690 [ 171.707799][T10231] gfs2_metatype_check_ii+0x74/0x90 [ 171.713003][T10231] gfs2_quota_init+0xc81/0xe80 [ 171.717786][T10231] ? qd_get+0x5f0/0x5f0 [ 171.721989][T10231] gfs2_make_fs_rw+0x3f5/0x560 [ 171.726755][T10231] ? _raw_spin_unlock+0x24/0x40 [ 171.731604][T10231] ? gfs2_glock_nq+0xcb0/0x1550 [ 171.736458][T10231] ? gfs2_jdesc_check+0x290/0x290 [ 171.741497][T10231] gfs2_reconfigure+0x771/0xcd0 [ 171.746363][T10231] ? gfs2_get_tree+0x1e0/0x1e0 [ 171.751135][T10231] ? gfs2_freeze_lock+0x52/0xc0 [ 171.755986][T10231] ? __might_sleep+0xf0/0xf0 [ 171.760578][T10231] ? hook_sb_remount+0x19/0xc0 [ 171.765348][T10231] reconfigure_super+0x219/0x880 [ 171.770297][T10231] path_mount+0xd3e/0x1020 [ 171.774722][T10231] ? user_path_at_empty+0x13e/0x190 [ 171.779925][T10231] __se_sys_mount+0x2d6/0x3c0 [ 171.784613][T10231] ? __x64_sys_mount+0xc0/0xc0 [ 171.789384][T10231] ? lockdep_hardirqs_on+0x94/0x140 [ 171.794582][T10231] ? __x64_sys_mount+0x1c/0xc0 [ 171.799352][T10231] do_syscall_64+0x4c/0xa0 [ 171.803768][T10231] ? clear_bhb_loop+0x30/0x80 [ 171.808436][T10231] ? clear_bhb_loop+0x30/0x80 [ 171.813117][T10231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.819006][T10231] RIP: 0033:0x7ff682f7f749 [ 171.823420][T10231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.843027][T10231] RSP: 002b:00007ff6811e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.851441][T10231] RAX: ffffffffffffffda RBX: 00007ff6831d5fa0 RCX: 00007ff682f7f749 [ 171.859413][T10231] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 171.867381][T10231] RBP: 00007ff683003f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.875354][T10231] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 171.883324][T10231] R13: 00007ff6831d6038 R14: 00007ff6831d5fa0 R15: 00007ffcc6d65bb8 [ 171.891312][T10231] [ 172.259160][T10231] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 172.314932][T10231] CPU: 1 PID: 10231 Comm: syz.0.2677 Not tainted syzkaller #0 [ 172.322419][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.332477][T10231] Call Trace: [ 172.335757][T10231] [ 172.338691][T10231] dump_stack_lvl+0x168/0x230 [ 172.343379][T10231] ? show_regs_print_info+0x20/0x20 [ 172.348586][T10231] ? load_image+0x3b0/0x3b0 [ 172.353102][T10231] ? __lock_acquire+0x7c60/0x7c60 [ 172.358139][T10231] ? do_raw_spin_unlock+0x11d/0x230 [ 172.363344][T10231] gfs2_assert_warn_i+0x18f/0x2c0 [ 172.368382][T10231] gfs2_quota_cleanup+0x4b4/0x6a0 [ 172.373441][T10231] gfs2_quota_init+0xd2a/0xe80 [ 172.378227][T10231] ? qd_get+0x5f0/0x5f0 [ 172.382396][T10231] gfs2_make_fs_rw+0x3f5/0x560 [ 172.387160][T10231] ? _raw_spin_unlock+0x24/0x40 [ 172.392014][T10231] ? gfs2_glock_nq+0xcb0/0x1550 [ 172.396868][T10231] ? gfs2_jdesc_check+0x290/0x290 [ 172.401907][T10231] gfs2_reconfigure+0x771/0xcd0 [ 172.406773][T10231] ? gfs2_get_tree+0x1e0/0x1e0 [ 172.411549][T10231] ? gfs2_freeze_lock+0x52/0xc0 [ 172.416404][T10231] ? __might_sleep+0xf0/0xf0 [ 172.420999][T10231] ? hook_sb_remount+0x19/0xc0 [ 172.425769][T10231] reconfigure_super+0x219/0x880 [ 172.430716][T10231] path_mount+0xd3e/0x1020 [ 172.435142][T10231] ? user_path_at_empty+0x13e/0x190 [ 172.440341][T10231] __se_sys_mount+0x2d6/0x3c0 [ 172.445033][T10231] ? __x64_sys_mount+0xc0/0xc0 [ 172.449801][T10231] ? lockdep_hardirqs_on+0x94/0x140 [ 172.454999][T10231] ? __x64_sys_mount+0x1c/0xc0 [ 172.459764][T10231] do_syscall_64+0x4c/0xa0 [ 172.464184][T10231] ? clear_bhb_loop+0x30/0x80 [ 172.468865][T10231] ? clear_bhb_loop+0x30/0x80 [ 172.473547][T10231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.479460][T10231] RIP: 0033:0x7ff682f7f749 [ 172.483872][T10231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.503497][T10231] RSP: 002b:00007ff6811e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.503524][T10231] RAX: ffffffffffffffda RBX: 00007ff6831d5fa0 RCX: 00007ff682f7f749 [ 172.503538][T10231] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 172.503549][T10231] RBP: 00007ff683003f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.503560][T10231] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 172.503572][T10231] R13: 00007ff6831d6038 R14: 00007ff6831d5fa0 R15: 00007ffcc6d65bb8 [ 172.503598][T10231] [ 172.573394][T10318] loop4: detected capacity change from 0 to 32768 [ 172.599186][ T4237] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.619320][T10231] gfs2: unable to remount read-write [ 172.655356][T10346] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 172.655378][T10346] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 172.839205][ T4237] usb 2-1: Using ep0 maxpacket: 32 [ 172.854406][T10318] XFS (loop4): Mounting V5 Filesystem [ 172.989489][ T4237] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 172.989519][ T4237] usb 2-1: config 0 has no interface number 0 [ 172.989549][ T4237] usb 2-1: config 0 interface 12 has no altsetting 0 [ 173.099637][T10318] XFS (loop4): Ending clean mount [ 173.124474][T10318] XFS (loop4): Quotacheck needed: Please wait. [ 173.174368][ T4237] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 173.225476][T10318] XFS (loop4): Quotacheck: Done. [ 173.241653][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.241679][ T4237] usb 2-1: Product: syz [ 173.241693][ T4237] usb 2-1: Manufacturer: syz [ 173.241708][ T4237] usb 2-1: SerialNumber: syz [ 173.257750][ T4237] usb 2-1: config 0 descriptor?? [ 173.268226][T10362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2726'. [ 173.383681][ T4194] XFS (loop4): Unmounting Filesystem [ 173.584437][T10369] [U] ¹é [ 173.777638][T10375] loop2: detected capacity change from 0 to 1024 [ 173.891811][T10381] netlink: 'syz.0.2738': attribute type 3 has an invalid length. [ 174.162134][ T4237] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 174.189146][ T4237] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 174.196457][ T4237] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 174.229958][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 174.242029][ T4237] f81534: probe of 2-1:0.12 failed with error -71 [ 174.266491][ T4237] usb 2-1: USB disconnect, device number 15 [ 174.740098][T10417] device team_slave_0 entered promiscuous mode [ 174.746729][T10417] device team_slave_1 entered promiscuous mode [ 174.840280][T10417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.950088][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 174.996187][T10428] loop2: detected capacity change from 0 to 2048 [ 175.010062][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 175.085863][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 175.163178][T10428] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 175.599239][ T6018] Bluetooth: hci0: command 0x0406 tx timeout [ 175.605355][ T6018] Bluetooth: hci2: command 0x0406 tx timeout [ 175.609152][ T4237] Bluetooth: hci3: command 0x0406 tx timeout [ 175.619128][ T6026] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 175.625378][ T4237] Bluetooth: hci1: command 0x0406 tx timeout [ 175.637070][T10455] loop3: detected capacity change from 0 to 256 [ 175.967569][ T8848] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 175.989294][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.019453][ T6026] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 176.051368][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.076469][ T6026] usb 2-1: config 0 descriptor?? [ 176.407888][ T8848] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 176.439273][ T8848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.466743][ T8848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 176.518256][ T8848] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 176.527245][T10477] loop0: detected capacity change from 0 to 512 [ 176.553111][ T8848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.573481][ T6026] lg-g15 0003:046D:C222.0001: unbalanced delimiter at end of report description [ 176.582023][T10477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.590406][ T6026] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 176.640565][ T8848] usb 5-1: config 0 descriptor?? [ 176.716414][T10477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 176.758146][T10477] System zones: 1-12 [ 176.773160][ T4281] usb 2-1: USB disconnect, device number 16 [ 176.780663][T10477] EXT4-fs (loop0): 1 truncate cleaned up [ 176.786348][T10477] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 176.809541][ T4237] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 177.154944][ T8848] sony 0003:054C:042F.0002: unbalanced collection at end of report description [ 177.168488][ T8848] sony 0003:054C:042F.0002: parse failed [ 177.177542][ T8848] sony: probe of 0003:054C:042F.0002 failed with error -22 [ 177.388196][ T8302] usb 5-1: USB disconnect, device number 19 [ 177.399222][ T4237] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 177.418577][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.428710][ T4237] usb 3-1: Product: syz [ 177.433031][ T4237] usb 3-1: Manufacturer: syz [ 177.437701][ T4237] usb 3-1: SerialNumber: syz [ 177.455145][ T4237] usb 3-1: config 0 descriptor?? [ 177.472774][T10500] xt_socket: unknown flags 0xe4 [ 177.511073][ T4237] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 177.542001][T10496] loop3: detected capacity change from 0 to 32768 [ 177.688500][T10504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 177.739953][T10506] loop3: detected capacity change from 0 to 1024 [ 177.791891][T10506] hfsplus: bad catalog entry type [ 177.837498][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 177.839071][ T8848] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 177.929248][ T4237] gspca_sunplus: reg_w_riv err -71 [ 177.934617][ T4237] sunplus: probe of 3-1:0.0 failed with error -71 [ 178.007973][ T4237] usb 3-1: USB disconnect, device number 18 [ 178.277544][T10523] loop4: detected capacity change from 0 to 128 [ 178.284268][ T8848] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 178.294661][ T8848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.316663][ T8848] usb 2-1: config 0 descriptor?? [ 178.329375][T10523] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.361736][T10523] hpfs: filesystem error: improperly stopped [ 178.368572][T10523] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.383173][T10523] hpfs: You really don't want any checks? You are crazy... [ 178.393526][T10523] hpfs: hpfs_map_sector(): read error [ 178.399508][T10523] hpfs: code page support is disabled [ 178.405099][T10523] hpfs: hpfs_map_4sectors(): unaligned read [ 178.411551][T10523] hpfs: hpfs_map_4sectors(): unaligned read [ 178.417621][T10523] hpfs: filesystem error: unable to find root dir [ 178.782738][ T8848] waltop 0003:172F:0038.0003: unknown main item tag 0x0 [ 178.833503][ T8848] waltop 0003:172F:0038.0003: unknown main item tag 0x0 [ 178.859121][ T8848] waltop 0003:172F:0038.0003: unknown main item tag 0x0 [ 178.876338][ T8848] waltop 0003:172F:0038.0003: unknown main item tag 0x0 [ 178.896579][ T8848] waltop 0003:172F:0038.0003: unknown main item tag 0x0 [ 178.941306][ T8848] waltop 0003:172F:0038.0003: hidraw0: USB HID v0.05 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 178.971328][T10532] loop4: detected capacity change from 0 to 4096 [ 178.982757][ T8848] usb 2-1: USB disconnect, device number 17 [ 179.017322][T10525] loop2: detected capacity change from 0 to 32768 [ 179.053030][T10532] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 179.194091][T10525] XFS (loop2): Mounting V5 Filesystem [ 179.226977][T10532] ntfs3: loop4: failed to convert "c46c" to macinuit [ 179.277710][T10534] fido_id[10534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 179.377510][T10525] XFS (loop2): Ending clean mount [ 179.418491][T10525] XFS (loop2): Quotacheck needed: Please wait. [ 179.583409][T10525] XFS (loop2): Quotacheck: Done. [ 179.727090][ T4187] XFS (loop2): Unmounting Filesystem [ 179.820656][T10554] loop4: detected capacity change from 0 to 2048 [ 179.920776][T10554] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 179.975849][T10554] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 179.992422][T10533] loop3: detected capacity change from 0 to 32768 [ 180.023375][T10564] loop1: detected capacity change from 0 to 1024 [ 180.146318][ T4194] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /519/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 180.162106][T10533] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 180.204295][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.207111][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 180.245789][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 180.259044][T10533] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 180.284995][T10533] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms [ 180.302717][ T4252] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 180.310000][ T4252] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 180.368827][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.389427][ T4194] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /519/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 180.450784][ T4252] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 180.458408][ T4252] gfs2: fsid=syz:syz.0: jid=0: Done [ 180.463924][T10575] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 180.481561][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.488546][T10533] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 180.492530][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 180.559460][T10577] program syz.1.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.576855][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.591367][ T4194] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /519/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 180.709645][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.720972][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 180.767077][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.790312][ T4194] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /519/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 180.846524][T10593] loop0: detected capacity change from 0 to 512 [ 180.869303][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.889480][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 180.945327][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 180.954386][ T4194] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /519/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 180.975566][T10438] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 181.016069][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 181.026010][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 181.033856][T10593] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 181.046006][T10593] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 181.068927][T10593] EXT4-fs (loop0): 1 truncate cleaned up [ 181.089516][T10533] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 181.089516][T10533] bh = 2049 (type: exp=14, found=8) [ 181.089516][T10533] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 181.123815][T10593] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,usrquota,nodelalloc,journal_dev=0x0000000000000006,norecovery,,errors=continue. Quota mode: writeback. [ 181.153053][T10602] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2838'. [ 181.163163][T10602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.190810][T10533] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 181.198020][T10533] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 181.225950][T10533] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 181.232695][ T4237] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 181.248094][T10533] gfs2: fsid=syz:syz.0: File system withdrawn [ 181.259088][T10533] CPU: 0 PID: 10533 Comm: syz.3.2809 Not tainted syzkaller #0 [ 181.266549][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.276602][T10533] Call Trace: [ 181.279877][T10533] [ 181.282814][T10533] dump_stack_lvl+0x168/0x230 [ 181.287496][T10533] ? kobject_uevent_env+0x371/0x890 [ 181.292715][T10533] ? show_regs_print_info+0x20/0x20 [ 181.297921][T10533] ? load_image+0x3b0/0x3b0 [ 181.302435][T10533] ? kobject_uevent_env+0x371/0x890 [ 181.307645][T10533] gfs2_withdraw+0x111b/0x1460 [ 181.312431][T10533] ? gfs2_lm+0x220/0x220 [ 181.316677][T10533] ? gfs2_meta_ra+0x413/0x4d0 [ 181.321364][T10533] ? gfs2_meta_buffer+0x310/0x310 [ 181.326396][T10533] ? from_kuid_munged+0x690/0x690 [ 181.331429][T10533] gfs2_metatype_check_ii+0x74/0x90 [ 181.336637][T10533] gfs2_quota_init+0xc81/0xe80 [ 181.341422][T10533] ? qd_get+0x5f0/0x5f0 [ 181.345596][T10533] gfs2_make_fs_rw+0x3f5/0x560 [ 181.350360][T10533] ? _raw_spin_unlock+0x24/0x40 [ 181.355213][T10533] ? gfs2_glock_nq+0xcb0/0x1550 [ 181.360072][T10533] ? gfs2_jdesc_check+0x290/0x290 [ 181.365112][T10533] gfs2_reconfigure+0x771/0xcd0 [ 181.369975][T10533] ? gfs2_get_tree+0x1e0/0x1e0 [ 181.374745][T10533] ? gfs2_freeze_lock+0x52/0xc0 [ 181.379595][T10533] ? __might_sleep+0xf0/0xf0 [ 181.384191][T10533] ? hook_sb_remount+0x19/0xc0 [ 181.388964][T10533] reconfigure_super+0x219/0x880 [ 181.393916][T10533] path_mount+0xd3e/0x1020 [ 181.398348][T10533] ? user_path_at_empty+0x13e/0x190 [ 181.403552][T10533] __se_sys_mount+0x2d6/0x3c0 [ 181.408243][T10533] ? __x64_sys_mount+0xc0/0xc0 [ 181.413016][T10533] ? lockdep_hardirqs_on+0x94/0x140 [ 181.418214][T10533] ? __x64_sys_mount+0x1c/0xc0 [ 181.422985][T10533] do_syscall_64+0x4c/0xa0 [ 181.427406][T10533] ? clear_bhb_loop+0x30/0x80 [ 181.432089][T10533] ? clear_bhb_loop+0x30/0x80 [ 181.436774][T10533] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.442669][T10533] RIP: 0033:0x7efd66eae749 [ 181.447079][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.466676][T10533] RSP: 002b:00007efd65115038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.475077][T10533] RAX: ffffffffffffffda RBX: 00007efd67104fa0 RCX: 00007efd66eae749 [ 181.483046][T10533] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 181.491005][T10533] RBP: 00007efd66f32f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.498958][T10533] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 181.506909][T10533] R13: 00007efd67105038 R14: 00007efd67104fa0 R15: 00007ffd31996698 [ 181.514881][T10533] [ 181.528613][T10533] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 181.553216][T10533] CPU: 0 PID: 10533 Comm: syz.3.2809 Not tainted syzkaller #0 [ 181.560689][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.570743][T10533] Call Trace: [ 181.574022][T10533] [ 181.576954][T10533] dump_stack_lvl+0x168/0x230 [ 181.581640][T10533] ? show_regs_print_info+0x20/0x20 [ 181.586841][T10533] ? load_image+0x3b0/0x3b0 [ 181.591347][T10533] ? __lock_acquire+0x7c60/0x7c60 [ 181.596381][T10533] ? do_raw_spin_unlock+0x11d/0x230 [ 181.601598][T10533] gfs2_assert_warn_i+0x18f/0x2c0 [ 181.606633][T10533] gfs2_quota_cleanup+0x4b4/0x6a0 [ 181.611680][T10533] gfs2_quota_init+0xd2a/0xe80 [ 181.616454][T10533] ? qd_get+0x5f0/0x5f0 [ 181.620606][T10533] gfs2_make_fs_rw+0x3f5/0x560 [ 181.625363][T10533] ? _raw_spin_unlock+0x24/0x40 [ 181.630194][T10533] ? gfs2_glock_nq+0xcb0/0x1550 [ 181.635048][T10533] ? gfs2_jdesc_check+0x290/0x290 [ 181.640083][T10533] gfs2_reconfigure+0x771/0xcd0 [ 181.644936][T10533] ? gfs2_get_tree+0x1e0/0x1e0 [ 181.649683][T10533] ? gfs2_freeze_lock+0x52/0xc0 [ 181.654532][T10533] ? __might_sleep+0xf0/0xf0 [ 181.659104][T10533] ? hook_sb_remount+0x19/0xc0 [ 181.663865][T10533] reconfigure_super+0x219/0x880 [ 181.668787][T10533] path_mount+0xd3e/0x1020 [ 181.673185][T10533] ? user_path_at_empty+0x13e/0x190 [ 181.678363][T10533] __se_sys_mount+0x2d6/0x3c0 [ 181.683020][T10533] ? __x64_sys_mount+0xc0/0xc0 [ 181.687765][T10533] ? lockdep_hardirqs_on+0x94/0x140 [ 181.692939][T10533] ? __x64_sys_mount+0x1c/0xc0 [ 181.697679][T10533] do_syscall_64+0x4c/0xa0 [ 181.702071][T10533] ? clear_bhb_loop+0x30/0x80 [ 181.706724][T10533] ? clear_bhb_loop+0x30/0x80 [ 181.711387][T10533] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.717280][T10533] RIP: 0033:0x7efd66eae749 [ 181.721678][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.741285][T10533] RSP: 002b:00007efd65115038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.749696][T10533] RAX: ffffffffffffffda RBX: 00007efd67104fa0 RCX: 00007efd66eae749 [ 181.757661][T10533] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 181.765611][T10533] RBP: 00007efd66f32f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.773584][T10533] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 181.781541][T10533] R13: 00007efd67105038 R14: 00007efd67104fa0 R15: 00007ffd31996698 [ 181.789531][T10533] [ 181.796974][T10533] gfs2: unable to remount read-write [ 182.053857][ T1595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.079409][ T4237] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 182.087693][ T4237] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 182.109115][ T4237] usb 2-1: config 0 has no interface number 0 [ 182.115215][ T4237] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 182.137108][ T4237] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.150706][ T4237] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 182.188926][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.222928][ T4237] usb 2-1: config 0 descriptor?? [ 182.270894][ T1595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.388195][ T1595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.413246][T10631] Zero length message leads to an empty skb [ 182.465457][ T1595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.795883][T10628] chnl_net:caif_netlink_parms(): no params data found [ 182.819120][ T8848] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 182.935823][ T4237] usb 2-1: USB disconnect, device number 18 [ 183.001400][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.009592][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.028620][T10628] device bridge_slave_0 entered promiscuous mode [ 183.056099][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.064326][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.072566][T10628] device bridge_slave_1 entered promiscuous mode [ 183.079205][ T8848] usb 3-1: Using ep0 maxpacket: 32 [ 183.133266][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.156274][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.219856][ T8848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.241889][ T8848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.267138][T10628] team0: Port device team_slave_0 added [ 183.291129][T10628] team0: Port device team_slave_1 added [ 183.339967][ T8848] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 183.380453][ T8848] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 183.388548][ T8848] usb 3-1: Manufacturer: syz [ 183.415907][ T8848] usb 3-1: config 0 descriptor?? [ 183.424821][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.432420][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.471617][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.564087][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.579555][T10663] [ 183.581907][T10663] ====================================================== [ 183.588914][T10663] WARNING: possible circular locking dependency detected [ 183.595939][T10663] syzkaller #0 Not tainted [ 183.600342][T10663] ------------------------------------------------------ [ 183.600479][ T8302] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 183.607349][T10663] syz.0.2857/10663 is trying to acquire lock: [ 183.607361][T10663] ffff8880740c0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 183.631857][T10663] [ 183.631857][T10663] but task is already holding lock: [ 183.639212][T10663] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 183.648879][T10663] [ 183.648879][T10663] which lock already depends on the new lock. [ 183.648879][T10663] [ 183.659271][T10663] [ 183.659271][T10663] the existing dependency chain (in reverse order) is: [ 183.668277][T10663] [ 183.668277][T10663] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 183.670882][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.676271][T10663] __mutex_lock_common+0x1eb/0x2390 [ 183.676298][T10663] mutex_lock_nested+0x17/0x20 [ 183.713082][T10663] rfkill_register+0x33/0x8a0 [ 183.718281][T10663] hci_register_dev+0x452/0x970 [ 183.723667][T10663] vhci_create_device+0x32c/0x5c0 [ 183.729213][T10663] vhci_write+0x391/0x450 [ 183.734061][T10663] vfs_write+0x712/0xd00 [ 183.737226][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.738821][T10663] ksys_write+0x14d/0x250 [ 183.738841][T10663] do_syscall_64+0x4c/0xa0 [ 183.759048][T10663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.765456][T10663] [ 183.765456][T10663] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 183.773276][T10663] __mutex_lock_common+0x1eb/0x2390 [ 183.779005][T10663] mutex_lock_nested+0x17/0x20 [ 183.784289][T10663] vhci_send_frame+0x88/0x100 [ 183.789490][T10663] hci_send_frame+0x1a9/0x2e0 [ 183.794692][T10663] hci_tx_work+0x9f9/0x1710 [ 183.799715][T10663] process_one_work+0x863/0x1000 [ 183.805170][T10663] worker_thread+0xaa8/0x12a0 [ 183.810362][T10663] kthread+0x436/0x520 [ 183.814947][T10663] ret_from_fork+0x1f/0x30 [ 183.819881][T10663] [ 183.819881][T10663] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 183.829081][T10663] __flush_work+0xdd/0x1b0 [ 183.834011][T10663] hci_dev_do_close+0x1e7/0x1030 [ 183.839465][T10663] hci_unregister_dev+0x2d7/0x580 [ 183.845008][T10663] vhci_release+0x73/0xc0 [ 183.849854][T10663] __fput+0x234/0x930 [ 183.854356][T10663] task_work_run+0x125/0x1a0 [ 183.859464][T10663] do_exit+0x61e/0x20a0 [ 183.864137][T10663] do_group_exit+0x12e/0x300 [ 183.869244][T10663] __x64_sys_exit_group+0x3b/0x40 [ 183.874790][T10663] do_syscall_64+0x4c/0xa0 [ 183.879724][T10663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.886138][T10663] [ 183.886138][T10663] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 183.893784][T10663] __mutex_lock_common+0x1eb/0x2390 [ 183.899506][T10663] mutex_lock_nested+0x17/0x20 [ 183.904795][T10663] bg_scan_update+0x44/0x3b0 [ 183.909909][T10663] process_one_work+0x863/0x1000 [ 183.915368][T10663] worker_thread+0xaa8/0x12a0 [ 183.920568][T10663] kthread+0x436/0x520 [ 183.925154][T10663] ret_from_fork+0x1f/0x30 [ 183.930088][T10663] [ 183.930088][T10663] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 183.939904][T10663] __lock_acquire+0x2c33/0x7c60 [ 183.945280][T10663] lock_acquire+0x197/0x3f0 [ 183.950314][T10663] __flush_work+0xdd/0x1b0 [ 183.955246][T10663] __cancel_work_timer+0x3ac/0x520 [ 183.960880][T10663] hci_request_cancel_all+0xcc/0x300 [ 183.966684][T10663] hci_dev_do_close+0x4e/0x1030 [ 183.972054][T10663] hci_rfkill_set_block+0x10a/0x190 [ 183.977769][T10663] rfkill_set_block+0x1c6/0x420 [ 183.983137][T10663] rfkill_fop_write+0x458/0x560 [ 183.988511][T10663] vfs_write+0x300/0xd00 [ 183.991203][ T8302] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 183.993266][T10663] ksys_write+0x14d/0x250 [ 184.006221][T10663] do_syscall_64+0x4c/0xa0 [ 184.011155][T10663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.012237][ T8302] usb 4-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 184.017564][T10663] [ 184.017564][T10663] other info that might help us debug this: [ 184.017564][T10663] [ 184.017572][T10663] Chain exists of: [ 184.017572][T10663] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 184.017572][T10663] [ 184.053344][T10663] Possible unsafe locking scenario: [ 184.053344][T10663] [ 184.060794][T10663] CPU0 CPU1 [ 184.066154][T10663] ---- ---- [ 184.066503][ T8302] usb 4-1: config 0 has no interface number 0 [ 184.071507][T10663] lock(rfkill_global_mutex); [ 184.071523][T10663] lock(&data->open_mutex); [ 184.071537][T10663] lock(rfkill_global_mutex); [ 184.071549][T10663] lock((work_completion)(&hdev->bg_scan_update)); [ 184.071559][T10663] [ 184.071559][T10663] *** DEADLOCK *** [ 184.071559][T10663] [ 184.071563][T10663] 1 lock held by syz.0.2857/10663: [ 184.071573][T10663] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 184.071623][T10663] [ 184.071623][T10663] stack backtrace: [ 184.071630][T10663] CPU: 0 PID: 10663 Comm: syz.0.2857 Not tainted syzkaller #0 [ 184.071647][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.071667][T10663] Call Trace: [ 184.071674][T10663] [ 184.071681][T10663] dump_stack_lvl+0x168/0x230 [ 184.071704][T10663] ? load_image+0x3b0/0x3b0 [ 184.091995][ T8302] usb 4-1: config 0 interface 113 altsetting 53 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 184.096822][T10663] ? show_regs_print_info+0x20/0x20 [ 184.096855][T10663] ? print_circular_bug+0x12b/0x1a0 [ 184.130317][ T8302] usb 4-1: config 0 interface 113 altsetting 53 endpoint 0x1 is Bulk; changing to Interrupt [ 184.132526][T10663] check_noncircular+0x274/0x310 [ 184.132554][T10663] ? add_chain_block+0x940/0x940 [ 184.153126][T10665] loop1: detected capacity change from 0 to 32768 [ 184.153282][T10663] ? lockdep_lock+0xdc/0x1e0 [ 184.172869][ T8302] usb 4-1: config 0 interface 113 altsetting 53 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 184.176051][T10663] ? __lock_acquire+0x12d9/0x7c60 [ 184.176081][T10663] ? lockdep_lock+0x1e0/0x1e0 [ 184.206063][ T8302] usb 4-1: config 0 interface 113 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 184.206291][T10663] ? mark_lock+0x94/0x320 [ 184.236687][ T8302] usb 4-1: config 0 interface 113 has no altsetting 0 [ 184.237637][T10663] __lock_acquire+0x2c33/0x7c60 [ 184.264249][T10663] ? verify_lock_unused+0x140/0x140 [ 184.265036][ T8302] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 184.269460][T10663] ? verify_lock_unused+0x140/0x140 [ 184.269491][T10663] lock_acquire+0x197/0x3f0 [ 184.269510][T10663] ? __flush_work+0xc1/0x1b0 [ 184.269527][T10663] ? __lock_acquire+0x7c60/0x7c60 [ 184.269548][T10663] ? read_lock_is_recursive+0x10/0x10 [ 184.269570][T10663] ? start_flush_work+0x776/0x820 [ 184.269587][T10663] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 184.269607][T10663] ? _raw_spin_unlock+0x40/0x40 [ 184.269621][T10663] __flush_work+0xdd/0x1b0 [ 184.269637][T10663] ? __flush_work+0xc1/0x1b0 [ 184.293434][ T8302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.297842][T10663] ? flush_work+0x20/0x20 [ 184.323792][ T8302] usb 4-1: config 0 descriptor?? [ 184.327837][T10663] ? try_to_grab_pending+0xf3/0x7e0 [ 184.350195][T10663] ? lockdep_hardirqs_off+0x70/0x100 [ 184.355492][T10663] ? mark_lock+0x94/0x320 [ 184.359835][T10663] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 184.365823][T10663] ? lock_chain_count+0x20/0x20 [ 184.370673][T10663] ? mark_lock+0x94/0x320 [ 184.375014][T10663] ? __cancel_work_timer+0x331/0x520 [ 184.380308][T10663] __cancel_work_timer+0x3ac/0x520 [ 184.385425][T10663] ? cancel_work_sync+0x20/0x20 [ 184.390273][T10663] ? __cancel_work+0x1f4/0x2d0 [ 184.395038][T10663] ? lockdep_hardirqs_on+0x94/0x140 [ 184.400243][T10663] ? __cancel_work+0x26f/0x2d0 [ 184.405014][T10663] ? cancel_work+0x20/0x20 [ 184.409427][T10663] ? lock_chain_count+0x20/0x20 [ 184.414283][T10663] hci_request_cancel_all+0xcc/0x300 [ 184.419569][T10663] hci_dev_do_close+0x4e/0x1030 [ 184.424422][T10663] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 184.430314][T10663] ? _raw_spin_unlock+0x40/0x40 [ 184.435165][T10663] hci_rfkill_set_block+0x10a/0x190 [ 184.440365][T10663] ? rcu_lock_release+0x20/0x20 [ 184.445220][T10663] rfkill_set_block+0x1c6/0x420 [ 184.450079][T10663] rfkill_fop_write+0x458/0x560 [ 184.454932][T10663] ? rfkill_fop_read+0x4b0/0x4b0 [ 184.459866][T10663] ? common_file_perm+0x130/0x1c0 [ 184.464889][T10663] ? fsnotify_perm+0x5d/0x560 [ 184.469563][T10663] ? security_file_permission+0x75/0xa0 [ 184.475108][T10663] ? rfkill_fop_read+0x4b0/0x4b0 [ 184.480045][T10663] vfs_write+0x300/0xd00 [ 184.484286][T10663] ? file_end_write+0x250/0x250 [ 184.489133][T10663] ? __fget_files+0x40f/0x480 [ 184.493808][T10663] ? __fdget_pos+0x1e2/0x370 [ 184.498392][T10663] ? ksys_write+0x71/0x250 [ 184.502806][T10663] ksys_write+0x14d/0x250 [ 184.507134][T10663] ? __ia32_sys_read+0x80/0x80 [ 184.511894][T10663] ? lockdep_hardirqs_on+0x94/0x140 [ 184.517090][T10663] do_syscall_64+0x4c/0xa0 [ 184.521504][T10663] ? clear_bhb_loop+0x30/0x80 [ 184.526180][T10663] ? clear_bhb_loop+0x30/0x80 [ 184.530857][T10663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.536749][T10663] RIP: 0033:0x7ff682f7f749 [ 184.541160][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.560766][T10663] RSP: 002b:00007ff6811e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.569182][T10663] RAX: ffffffffffffffda RBX: 00007ff6831d5fa0 RCX: 00007ff682f7f749 [ 184.577152][T10663] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 184.585115][T10663] RBP: 00007ff683003f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.593079][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.601043][T10663] R13: 00007ff6831d6038 R14: 00007ff6831d5fa0 R15: 00007ffcc6d65bb8 [ 184.609018][T10663] [ 184.618514][ T6970] Bluetooth: hci4: command 0x0409 tx timeout [ 184.673305][T10628] device hsr_slave_0 entered promiscuous mode [ 184.680040][T10628] device hsr_slave_1 entered promiscuous mode [ 184.686519][T10628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.706464][T10628] Cannot create hsr debugfs directory [ 184.856256][ T8848] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 184.871553][ T8302] asix 4-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.879217][ T8848] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 184.884913][ T8302] asix: probe of 4-1:0.113 failed with error -71 [ 184.922149][ T8302] usb 4-1: USB disconnect, device number 16 [ 184.977453][T10628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.986565][T10628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.998045][T10628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.012575][T10628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.061846][ T8848] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 185.078803][ T8848] ft260: probe of 0003:0403:6030.0004 failed with error -71 [ 185.109945][T10628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.116838][ T8848] usb 3-1: USB disconnect, device number 19 [ 185.140176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.150616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.168616][T10628] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.183187][T10685] fido_id[10685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 185.197863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.210223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.224731][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.231803][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.240737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.249586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.257777][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.264824][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.272724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.281106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.289616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.301827][ T1595] device hsr_slave_0 left promiscuous mode [ 185.307889][ T1595] device hsr_slave_1 left promiscuous mode [ 185.314090][ T1595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.321757][ T1595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.329251][ T1595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.336630][ T1595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.344214][ T1595] device bridge_slave_1 left promiscuous mode [ 185.350393][ T1595] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.358166][ T1595] device bridge_slave_0 left promiscuous mode [ 185.364429][ T1595] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.374123][ T1595] device veth1_macvtap left promiscuous mode [ 185.380141][ T1595] device veth0_macvtap left promiscuous mode [ 185.386172][ T1595] device veth1_vlan left promiscuous mode [ 185.622876][ T1595] team0 (unregistering): Port device team_slave_1 removed [ 185.635171][ T1595] team0 (unregistering): Port device team_slave_0 removed [ 185.646563][ T1595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.657494][ T1595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.697037][ T1595] bond0 (unregistering): Released all slaves [ 185.755031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.763458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.775044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.783002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.792218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.805288][T10628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.815897][T10628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.833845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.856398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.868529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.896757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.905238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.944784][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.955656][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.966747][T10628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.091891][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.100783][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.130232][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.138681][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.148635][T10628] device veth0_vlan entered promiscuous mode [ 186.155846][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.166085][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.177463][T10628] device veth1_vlan entered promiscuous mode [ 186.216248][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.226272][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.234635][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.251087][T10285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.273840][T10628] device veth0_macvtap entered promiscuous mode [ 186.291623][T10628] device veth1_macvtap entered promiscuous mode [ 186.316402][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.349355][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.369413][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.389088][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.402030][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.429384][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.440996][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.451893][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.464409][T10628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.482050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.491304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.500953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.510132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.520015][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.531164][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.541025][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.552710][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.562682][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.573109][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.582962][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.593380][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.604191][T10628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.616375][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.625567][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.636386][T10628] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.645635][T10628] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.654581][T10628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.664104][T10628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.724783][T10628] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 186.750315][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.753803][T10628] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 186.758130][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.776255][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.791146][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.804792][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.813148][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready