last executing test programs: 2m19.738305653s ago: executing program 4 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x1, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1e, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48074}, 0x0) 2m19.698073015s ago: executing program 4 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000300)}, 0x20) 2m19.503278675s ago: executing program 4 (id=1245): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000007c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@inode_readahead_blks}, {@noinit_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_continue}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x6a5}}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x44f, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000100)={[{@auto_da_alloc}, {@data_err_abort}]}, 0x1, 0x76a, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) 2m18.504232554s ago: executing program 4 (id=1257): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 2m17.637882877s ago: executing program 4 (id=1266): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x3a, {0x0, 0x6fd8e84b}, 0x3, 0xf0}}) 2m16.817625078s ago: executing program 4 (id=1275): unshare(0x28000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x10003, 0x7fffffffffffffff}) 2m16.637004717s ago: executing program 32 (id=1275): unshare(0x28000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x10003, 0x7fffffffffffffff}) 2m15.56584503s ago: executing program 0 (id=1281): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1b1, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80800, 0x251) read(r0, &(0x7f0000000200)=""/189, 0xbd) 2m11.72912372s ago: executing program 0 (id=1292): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @local}}}, 0x108) 2m9.643531563s ago: executing program 0 (id=1297): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 2m9.538177808s ago: executing program 0 (id=1286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 2m8.971888006s ago: executing program 0 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000880)}, 0x20) 2m7.9082466s ago: executing program 0 (id=1309): unshare(0x4020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fanotify_mark(r0, 0x2, 0x40009975, r0, 0x0) 2m7.866021701s ago: executing program 33 (id=1309): unshare(0x4020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fanotify_mark(r0, 0x2, 0x40009975, r0, 0x0) 24.860655118s ago: executing program 5 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 24.379801972s ago: executing program 5 (id=2618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0xffe4, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x301, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x7, 0x31}, @void, @val={0xc, 0x99, {0x5, 0x5d}}}}}, 0x28}}, 0x0) 24.265626298s ago: executing program 5 (id=2620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_012={0x1, 0x2, 0x1, '_'}, @main=@item_4={0x3, 0x0, 0xa, "c9aa7bc7"}, @main=@item_4={0x3, 0x0, 0xc, "0000a3ff"}, @global=@item_012={0x2, 0x1, 0x6, 'GO'}]}}, 0x0}, 0x0) 21.168225561s ago: executing program 5 (id=2659): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 20.637424137s ago: executing program 5 (id=2669): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000140)={[{@force}, {@force}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@uid}, {@uid}, {@uid}, {@nodecompose}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZq0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDopyRkLii3CNxjziwaGZn1rtr79qb+CcJzyPNzjcz3887r2dmZ2cTbQD/txbfjslWJLF4/q3NdPnBVr3xYKu+WpQjYioiShHlziyStYjks4gr0Znic+nKvLtk2DhvPvz0w3P3P653lsr5lNUvjWq3rT1ihFY+xWxETOTzMZWH9Xdtl/7ujdV10o07TdjZInFw3No7tMZpvo/zFnja3YuYmNxlfS3iRERM5/cBkV8dSkcc3oEb6yoHAAAAT6eJvSq8+CgexWbMHE04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HxIOr8ZmORTqSjPRlL8/n8lX5eqVI453tG+ssf2D24cUSAAAAAAAAAAcCg+yb+4P/MoHsVmzBTr20n2nf/r2cKp7PWFeC82YjnW40JsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy32/fylgsRUdvRcuEIdhoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Zll06miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5vOZ5L+dQjvJPvO/kn3un473Yi2asRLNaMRyXM+eBXQ+9Zf+0ao3HmzVV9NpZ8ff/vdYcWQ9RsREvD9k5Lmsxului8X4XvwgzsdsXI31WIkfxVI0Yzlmo5ruRCxFErVq5+lFrYhz93iv9C1dHYztzMDya1kk1bgRK1lsF+JaJTqPTbJ9SMd8rWe0P1YiBkZ8P81O8q3cPnN0vefv9ev8uUyu/eI++xiu/ARta9meT3YzMpfmPs/GS6NzP+ZxMjjSfJS6z6BObY+SLg6OVOT8h+Pk/EQ+T3P9i/6cH7QxH6UNZmIhSvnRF/FKf85vf/H+yf7GX/7nX6/eLK3dunlj4/wh7tKhmiwKg5mo92Ti1dFHX56JRpqJ1v4zMTm4YvoJ9uMAVfJsZJeifV4tv5uVluL1nkPw3bgey3Ep5mI+LsdcfCMWot53hJ3uy2u5vtqfk+xcK+28vlVHBH/2Sz2VfrlH5aOV5uWlnrz2Xulq2bZ8zZVfxVxPlk6OPvrGfhdIx/98Xk7H+Fn3Hedp0JeJ/NpcRPfy6Ez8tp2+bjTWbq3fXLo9pP/Bd6hz+Tw9bT/ovzb/7qD26fGkx8vJbsRZTqrF8ZJue7kbbX++Kvk3Lp12pR3bTne31WImVuL7Q8/USn4Pt7OnzrZXe7f9a/vKWcnvb4ptfXc58W40sruQAbNHk1UA9u3EGycq1YfVv1c/qv68erP61vR3pi5PfaESk38r/2niD6Xfl76ZvBEfxU9i5rgjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA58HGnbu3lhqN5fVuIaYH1zxpoTJ0rNGFKO1ZZ+uF/XUYtYjRYyV5oXKw+/4sFqpxSD1/EhEj6lSeeIhk7GNs7EJ6IB9Ih8UPp2Vr2hNjNC8XrXavU46N6WF/wantsyBqt5Ya/2n31alGzykDPOcuNldvX9y4c/erK6tL7yy/s7y2cPnS5Uv1r89/7eKNlcbyXOf1uKMEDsPGnbsTxx0DAAAAAAAAAAAAMJ78X/83H/s/M5T3qFNZ39h95DNHvasAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM2rx7ZhsRRLzcxfm0uUHW/VGOhXl7ZrliChFRPLjiOSziCvRmaLW010ybJw3H3764bn7H9e3+yoX9Uuj2u1PK59iNiIm8vnepnbpZmd/13r6az1WeEl3D9OEnS0SB8ftfwEAAP//p+75lw==") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) chdir(&(0x7f0000000000)='./file0\x00') 19.931884502s ago: executing program 5 (id=2683): unshare(0x28000600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 19.799158629s ago: executing program 34 (id=2683): unshare(0x28000600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 9.274410211s ago: executing program 3 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010046bd7000020000000c000000180001801400020076657468305f746f5f626f6e6400000018000380140003800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 9.049230101s ago: executing program 3 (id=2756): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.801579324s ago: executing program 3 (id=2757): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x1, 0x2, 0x3}) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x1, 0xb3, 0x4}) 8.624179713s ago: executing program 3 (id=2758): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3004046, &(0x7f0000000280)={[{@dioread_nolock}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@i_version}, {@data_err_ignore}, {@minixdf}, {@data_err_ignore}, {@auto_da_alloc}, {@init_itable}, {@data_err_ignore}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x555, &(0x7f0000000780)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.191200324s ago: executing program 3 (id=2760): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 7.408168713s ago: executing program 3 (id=2771): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000140)=ANY=[], 0xfa, 0x164, &(0x7f0000000440)="$eJzsz02LUlEcx/Hvufd4r5JikYEFpRCUJEEktIvwRpKQXShq0Uqo2wMohUK5S4l2LYS2LXpYFkGvQNNFNOhm5k3Mxt3AbAbucO7VceM7mP9ncRa/3zn/c86dm/OSYu32a+gE3W7wrPjAb9Qe7o5GVZM70PsT9e03nUumj/ePq/ASzVgDFph4moHnr7Z/Pj4b71lUwQW8EyZvBRbtLJAynZfTDDShCRYWlC7C5MxBGIYtKzo7WGXx2QqJaOY5DV42zq4B4Te47IB36ugr/T2zgFKOGyfnbT7Wy4XTCnpfyr9/bd2f/a9fvXIr+HS9NnTTebv8Hr7jqeS/6YsdezlnPmvc8xu+mXGjYh69LPpD9N30W3iiIFwy8xzyF/Qj+KDgc3TX4q/KAJOv+37bXT/wnV0EVUg9beYTP5q5k9bqypANdLQmN1VCCCGEEEIIIYQQQgghhBBCCCGOu8MAAAD//yI8VBo=") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 7.288612979s ago: executing program 35 (id=2771): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000140)=ANY=[], 0xfa, 0x164, &(0x7f0000000440)="$eJzsz02LUlEcx/Hvufd4r5JikYEFpRCUJEEktIvwRpKQXShq0Uqo2wMohUK5S4l2LYS2LXpYFkGvQNNFNOhm5k3Mxt3AbAbucO7VceM7mP9ncRa/3zn/c86dm/OSYu32a+gE3W7wrPjAb9Qe7o5GVZM70PsT9e03nUumj/ePq/ASzVgDFph4moHnr7Z/Pj4b71lUwQW8EyZvBRbtLJAynZfTDDShCRYWlC7C5MxBGIYtKzo7WGXx2QqJaOY5DV42zq4B4Te47IB36ugr/T2zgFKOGyfnbT7Wy4XTCnpfyr9/bd2f/a9fvXIr+HS9NnTTebv8Hr7jqeS/6YsdezlnPmvc8xu+mXGjYh69LPpD9N30W3iiIFwy8xzyF/Qj+KDgc3TX4q/KAJOv+37bXT/wnV0EVUg9beYTP5q5k9bqypANdLQmN1VCCCGEEEIIIYQQQgghhBBCCCGOu8MAAAD//yI8VBo=") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 5.882050589s ago: executing program 7 (id=2785): close(0xffffffffffffffff) chmod(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 3.675254888s ago: executing program 1 (id=2802): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 3.331986305s ago: executing program 1 (id=2803): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/38, 0x26) getdents64(r0, 0x0, 0x18) 3.298991107s ago: executing program 1 (id=2804): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000140)=ANY=[], 0x1, 0xf43, &(0x7f0000002d80)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) 3.095290337s ago: executing program 6 (id=2807): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x113602) 2.903540646s ago: executing program 1 (id=2809): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.776099253s ago: executing program 2 (id=2810): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY(r0, 0x11e, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000480), &(0x7f00000000c0)=0x68) 2.707928286s ago: executing program 7 (id=2811): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x627c, &(0x7f000000c700)="$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") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.693647747s ago: executing program 2 (id=2812): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6080f02500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff020200"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6018232500282c06fe8000000000000000000000000000bbfe8000000000000000000000000000aa84000201"], 0x0) 2.528944825s ago: executing program 2 (id=2813): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000001c0)={0xfffffffffffffffc, 0x110000002000007, 0x1, 0x0, 0x4bd}) 2.032966139s ago: executing program 6 (id=2814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000400030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 1.600594001s ago: executing program 7 (id=2815): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.520074695s ago: executing program 6 (id=2816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20040800) 1.41295667s ago: executing program 6 (id=2817): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_INPUT2(r0, &(0x7f0000000040), 0x6) 1.055367838s ago: executing program 6 (id=2818): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000d00)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000e80)={0x2, 0x4e24, @remote}, 0x10) 947.537824ms ago: executing program 2 (id=2819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 615.35046ms ago: executing program 1 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'c'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 593.161191ms ago: executing program 2 (id=2821): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c001}, 0x4004) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) 546.711293ms ago: executing program 7 (id=2822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) 506.432785ms ago: executing program 1 (id=2823): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') chmod(&(0x7f0000000540)='./file0\x00', 0x120) 275.397817ms ago: executing program 2 (id=2824): io_setup(0x6, &(0x7f00000001c0)=0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 165.442992ms ago: executing program 7 (id=2825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 45.582338ms ago: executing program 7 (id=2826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) poll(0x0, 0x0, 0x10) 0s ago: executing program 6 (id=2827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000e1ffffff00020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): dc,data_err=abort,noload,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 215.736321][ T9836] F2FS-fs (loop5): invalid crc value [ 215.764746][ T4735] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 215.826390][ T9834] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.1969: Invalid inode table block 1 in block_group 0 [ 215.854874][ T4735] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 0 [ 215.909240][ T9836] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.919455][ T9834] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 215.960525][ T4735] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 215.979952][ T9843] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 16: comm syz.3.1972: lblock 262144 mapped to illegal pblock 16 (length 8) [ 215.997735][ T9834] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.1969: mark_inode_dirty error [ 216.037508][ T4735] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 216.039296][ T4188] XFS (loop1): Unmounting Filesystem [ 216.082447][ T4735] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 0 [ 216.166345][ T9836] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 216.178003][ T4735] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:8: Invalid inode table block 1 in block_group 0 [ 216.206500][ T7928] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.232097][ T4189] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.256936][ T7928] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 216.290328][ T7928] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 216.290663][ T4189] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 216.359506][ T4189] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 216.375484][ T7616] attempt to access beyond end of device [ 216.375484][ T7616] loop5: rw=2049, want=45104, limit=40427 [ 216.782944][ T9870] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 216.861069][ T9870] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 216.895046][ T9870] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 216.921874][ T9870] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 216.950778][ T9870] ntfs: volume version 3.1. [ 217.329629][ T9880] ntfs: volume version 3.1. [ 217.643366][ T9888] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 217.679335][ T9894] EXT4-fs (loop1): Ignoring removed orlov option [ 217.703380][ T9894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.864505][ T9894] EXT4-fs (loop1): 1 orphan inode deleted [ 217.870294][ T9894] EXT4-fs (loop1): 1 truncate cleaned up [ 217.941380][ T9894] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 217.947001][ T9906] set_capacity_and_notify: 5 callbacks suppressed [ 217.947017][ T9906] loop2: detected capacity change from 0 to 1024 [ 218.027857][ T9894] EXT4-fs error (device loop1): ext4_nfs_get_inode:1435: inode #17: comm syz.1.1989: iget: bad extra_isize 42 (inode size 256) [ 218.209662][ T9920] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2000'. [ 218.233754][ T9906] hfsplus: small file entry [ 218.276742][ T9920] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2000'. [ 218.360263][ T9926] loop3: detected capacity change from 0 to 2048 [ 218.486218][ T9936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2006'. [ 218.497821][ T9926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.533292][ T9926] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.545476][ T9936] tipc: Enabling of bearer rejected, media not registered [ 218.619989][ T9944] loop1: detected capacity change from 0 to 1024 [ 218.787746][ T144] hfsplus: b-tree write err: -5, ino 25 [ 218.803466][ T144] hfsplus: b-tree write err: -5, ino 4 [ 218.813523][ T4396] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.843813][ T144] hfsplus: b-tree write err: -5, ino 2 [ 218.951401][ T9966] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 218.960978][ T9966] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 218.976729][ T9966] netlink: 'syz.2.2018': attribute type 29 has an invalid length. [ 219.047624][ T9962] loop1: detected capacity change from 0 to 8192 [ 219.054234][ T4396] usb 7-1: Using ep0 maxpacket: 8 [ 219.121675][ T9962] Dev loop1: RDB in block 1 has bad checksum [ 219.173504][ T4396] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 219.181632][ T4396] usb 7-1: config 2 has no interface number 0 [ 219.226277][ T4396] usb 7-1: config 2 interface 31 has no altsetting 0 [ 219.241268][ T9973] loop2: detected capacity change from 0 to 64 [ 219.393488][ T4396] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 219.412805][ T4396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.422144][ T4396] usb 7-1: Product: syz [ 219.427575][ T4396] usb 7-1: Manufacturer: syz [ 219.432296][ T4396] usb 7-1: SerialNumber: syz [ 219.488646][ T9980] program syz.2.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.488915][ T9961] loop3: detected capacity change from 0 to 32768 [ 219.588661][ T9961] read_mapping_page failed! [ 219.597368][ T9961] ERROR: (device loop3): txCommit: [ 219.597368][ T9961] [ 219.625557][ T9982] loop1: detected capacity change from 0 to 4096 [ 219.641047][ T4189] ERROR: (device loop3): diFree: numfree > numinos [ 219.641047][ T4189] [ 220.123589][ T4396] ch9200: probe of 7-1:2.31 failed with error -22 [ 220.159923][ T4396] usb 7-1: USB disconnect, device number 4 [ 220.182494][T10002] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 220.182494][T10002] program syz.1.2035 not setting count and/or reply_len properly [ 220.427935][T10006] loop3: detected capacity change from 0 to 4096 [ 220.512251][ T9989] loop5: detected capacity change from 0 to 32768 [ 220.545126][T10006] __ntfs_error: 25 callbacks suppressed [ 220.545145][T10006] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 220.602188][T10006] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 220.624889][ T9989] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 220.673476][T10006] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 220.701246][T10013] loop6: detected capacity change from 0 to 4096 [ 220.703523][T10006] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 220.713995][T10013] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 220.779447][ T9989] JBD2: Ignoring recovery information on journal [ 220.791497][T10013] ntfs: volume version 3.1. [ 220.855438][T10006] ntfs: volume version 3.1. [ 220.939595][ T9989] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 220.985672][T10006] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 221.007096][T10013] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 221.025240][T10006] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 221.027696][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.088574][T10013] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 221.150754][T10004] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 221.167242][T10019] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 221.200893][T10013] overlayfs: failed to resolve './bus': -2 [ 221.202675][ T7616] ocfs2: Unmounting device (7,5) on (node local) [ 221.227227][T10021] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 221.243461][T10021] NILFS (loop1): mounting unchecked fs [ 221.270056][T10004] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.316714][T10021] NILFS (loop1): recovery complete [ 221.339260][T10025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.517467][ T7928] ocfs2: Unmounting device (7,2) on (node local) [ 221.717937][T10029] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 221.739845][T10026] ntfs: volume version 3.1. [ 221.750423][T10029] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 221.794623][T10029] EXT4-fs (loop2): failed to open journal device unknown-block(8,1) -16 [ 221.993494][ T4228] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 222.142535][T10046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.236611][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 222.238053][T10046] EXT4-fs error (device loop2): ext4_lookup:1858: inode #14: comm syz.2.2050: casefold flag without casefold feature [ 222.355183][ T4228] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.490123][ T154] hfsplus: b-tree write err: -5, ino 25 [ 222.502817][ T154] hfsplus: b-tree write err: -5, ino 4 [ 222.510115][ T154] hfsplus: b-tree write err: -5, ino 2 [ 222.524076][ T154] hfsplus: b-tree write err: -5, ino 17 [ 222.541955][ T4228] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.600425][T10073] bond0: option downdelay: invalid value (18446744073709551607) [ 222.612632][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.623819][T10073] bond0: option downdelay: allowed values 0 - 2147483647 [ 222.625435][ T4228] usb 7-1: Product: syz [ 222.641163][ T4228] usb 7-1: Manufacturer: syz [ 222.646709][ T4228] usb 7-1: SerialNumber: syz [ 222.653989][ T4228] usb 7-1: config 0 descriptor?? [ 222.698784][ T4228] smsc75xx v1.0.0 [ 222.718447][ T4228] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 222.751644][ T4228] smsc75xx: probe of 7-1:0.0 failed with error -22 [ 222.909061][T10077] ntfs: volume version 3.1. [ 222.958134][T10083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.048306][T10083] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.2065: corrupted inode contents [ 223.090269][T10083] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #15: comm syz.1.2065: mark_inode_dirty error [ 223.128194][T10083] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.2065: corrupted inode contents [ 223.150552][ T4226] usb 7-1: USB disconnect, device number 5 [ 223.167539][T10083] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.2065: mark_inode_dirty error [ 223.195666][T10083] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.2065: corrupted inode contents [ 223.259242][T10083] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.2065: mark_inode_dirty error [ 223.299372][T10083] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.2065: corrupted inode contents [ 223.342357][T10083] EXT4-fs error (device loop1): ext4_truncate:4279: inode #15: comm syz.1.2065: mark_inode_dirty error [ 223.424949][T10083] EXT4-fs error (device loop1) in ext4_setattr:5626: Corrupt filesystem [ 223.458723][T10093] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #15: comm syz.1.2065: corrupted inode contents [ 223.850607][T10125] set_capacity_and_notify: 8 callbacks suppressed [ 223.850624][T10125] loop6: detected capacity change from 0 to 2048 [ 224.008656][T10125] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 224.062427][T10125] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 224.068261][T10135] netlink: 'syz.5.2090': attribute type 10 has an invalid length. [ 224.118963][T10125] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 224.141095][T10114] loop2: detected capacity change from 0 to 32768 [ 224.158895][T10125] UDF-fs: Scanning with blocksize 512 failed [ 224.180420][T10125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.208406][T10114] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2081 (10114) [ 224.224435][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 224.226792][T10114] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 224.268210][T10114] BTRFS info (device loop2): enabling auto defrag [ 224.278902][T10114] BTRFS info (device loop2): use no compression [ 224.290529][T10114] BTRFS info (device loop2): max_inline at 4096 [ 224.329089][T10114] BTRFS info (device loop2): using free space tree [ 224.352434][T10114] BTRFS info (device loop2): has skinny extents [ 224.435428][T10114] BTRFS info (device loop2): enabling ssd optimizations [ 224.607184][T10162] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 224.614844][T10162] ALSA: mixer_oss: invalid index 1374389 [ 224.940287][T10174] loop3: detected capacity change from 0 to 1024 [ 225.099004][T10168] loop5: detected capacity change from 0 to 32768 [ 225.588446][T10172] loop6: detected capacity change from 0 to 32768 [ 225.797465][T10201] loop1: detected capacity change from 0 to 2048 [ 225.830372][T10204] loop3: detected capacity change from 0 to 1024 [ 225.842122][T10172] XFS (loop6): Mounting V5 Filesystem [ 225.924388][T10204] EXT4-fs (loop3): Ignoring removed orlov option [ 225.937734][T10201] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 226.009232][T10204] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 226.013335][T10201] NILFS (loop1): mounting unchecked fs [ 226.058305][T10172] XFS (loop6): Ending clean mount [ 226.080745][T10172] XFS (loop6): Quotacheck needed: Please wait. [ 226.087738][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop1 [ 226.099345][T10201] NILFS (loop1): recovery complete [ 226.196172][T10172] XFS (loop6): Quotacheck: Done. [ 226.202382][T10218] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.319776][ T4262] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 226.366500][ T7861] XFS (loop6): Unmounting Filesystem [ 226.698090][T10232] loop3: detected capacity change from 0 to 2048 [ 226.710101][ T4262] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.720751][T10217] loop2: detected capacity change from 0 to 32768 [ 226.730886][ T4262] usb 6-1: config 0 has no interface number 0 [ 226.737706][ T4262] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 226.749778][ T4262] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 226.763632][ T4262] usb 6-1: config 0 interface 255 has no altsetting 0 [ 226.767461][T10236] loop1: detected capacity change from 0 to 1024 [ 226.770426][ T4262] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 226.770453][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.791398][T10232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.818788][T10217] (syz.2.2116,10217,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.874987][ T4262] usb 6-1: config 0 descriptor?? [ 226.879107][T10217] (syz.2.2116,10217,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.984821][ T4735] hfsplus: b-tree write err: -5, ino 25 [ 226.990547][ T4735] hfsplus: b-tree write err: -5, ino 4 [ 227.061260][ T4735] hfsplus: b-tree write err: -5, ino 2 [ 227.068712][T10217] JBD2: Ignoring recovery information on journal [ 227.141164][T10239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.153349][ T4262] usb 6-1: string descriptor 0 read error: -71 [ 227.171247][ T4262] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 227.205966][T10217] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 227.317860][ T4262] usb 6-1: USB disconnect, device number 9 [ 227.678880][T10258] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 227.712454][T10258] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.743718][T10258] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 227.757378][T10258] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 227.771298][T10258] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 227.786029][ T7928] ocfs2: Unmounting device (7,2) on (node local) [ 227.827838][T10258] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 227.846310][T10258] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 227.860478][T10258] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 227.893476][T10258] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 227.900901][T10258] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.964970][T10258] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 227.989295][T10258] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 228.000336][T10258] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 228.012133][T10258] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 228.013514][T10242] XFS (loop1): Mounting V5 Filesystem [ 228.020021][T10258] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 228.031659][T10258] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 228.074052][T10258] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 228.083447][T10258] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 228.248297][T10242] XFS (loop1): Ending clean mount [ 228.326573][T10291] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 228.504234][ T4188] XFS (loop1): Unmounting Filesystem [ 228.704622][T10301] EXT4-fs (loop6): Test dummy encryption mode enabled [ 228.751371][T10301] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 228.763357][T10301] System zones: 0-5 [ 228.830050][T10301] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,init_itable,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 229.034014][T10310] set_capacity_and_notify: 4 callbacks suppressed [ 229.034031][T10310] loop5: detected capacity change from 0 to 32768 [ 229.126321][T10310] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2154 (10310) [ 229.204358][T10310] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 229.237949][T10310] BTRFS info (device loop5): enabling auto defrag [ 229.258174][T10310] BTRFS info (device loop5): use no compression [ 229.295226][T10310] BTRFS info (device loop5): max_inline at 4096 [ 229.301523][T10310] BTRFS info (device loop5): using free space tree [ 229.329544][T10310] BTRFS info (device loop5): has skinny extents [ 229.530799][T10312] loop2: detected capacity change from 0 to 32768 [ 229.558360][T10312] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 229.558360][T10312] [ 229.602848][T10303] loop3: detected capacity change from 0 to 32768 [ 229.620658][T10312] ERROR: (device loop2): remounting filesystem as read-only [ 229.628484][T10310] BTRFS info (device loop5): enabling ssd optimizations [ 229.665460][T10312] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 229.665460][T10312] [ 229.678040][T10312] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 229.678040][T10312] [ 229.719313][ T4228] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 229.732939][T10344] raw_sendmsg: syz.6.2158 forgot to set AF_INET. Fix it! [ 229.797661][T10303] XFS (loop3): Mounting V5 Filesystem [ 230.069204][T10303] XFS (loop3): Ending clean mount [ 230.097047][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.113701][ T4228] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.122703][ T4228] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 230.169798][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.195180][ T4228] usb 2-1: config 0 descriptor?? [ 230.312253][ T4189] XFS (loop3): Unmounting Filesystem [ 230.457374][ T4406] usb 2-1: USB disconnect, device number 13 [ 230.597345][T10348] loop6: detected capacity change from 0 to 32768 [ 230.636906][T10348] XFS: attr2 mount option is deprecated. [ 230.700079][T10361] loop2: detected capacity change from 0 to 256 [ 230.755900][T10348] XFS (loop6): Mounting V5 Filesystem [ 230.785763][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 230.858773][T10348] XFS (loop6): Ending clean mount [ 230.869563][T10348] XFS (loop6): Quotacheck needed: Please wait. [ 230.881284][T10361] FAT-fs (loop2): Directory bread(block 64) failed [ 230.946849][T10361] FAT-fs (loop2): Directory bread(block 65) failed [ 230.966344][T10348] XFS (loop6): Quotacheck: Done. [ 231.007748][T10361] FAT-fs (loop2): Directory bread(block 66) failed [ 231.043727][ T7861] XFS (loop6): Unmounting Filesystem [ 231.061109][T10361] FAT-fs (loop2): Directory bread(block 67) failed [ 231.071547][T10361] FAT-fs (loop2): Directory bread(block 68) failed [ 231.135779][ T5048] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 231.151447][T10361] FAT-fs (loop2): Directory bread(block 69) failed [ 231.177807][T10361] FAT-fs (loop2): Directory bread(block 70) failed [ 231.201978][T10361] FAT-fs (loop2): Directory bread(block 71) failed [ 231.220492][T10361] FAT-fs (loop2): Directory bread(block 72) failed [ 231.233201][T10361] FAT-fs (loop2): Directory bread(block 73) failed [ 231.325189][T10381] loop5: detected capacity change from 0 to 1024 [ 231.531412][ T5048] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.553630][ T5048] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.573196][ T5048] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.581361][T10385] loop2: detected capacity change from 0 to 2048 [ 231.582259][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.619596][T10387] loop5: detected capacity change from 0 to 2048 [ 231.653635][T10375] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 231.677690][T10385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.762404][T10387] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.780247][T10389] loop6: detected capacity change from 0 to 4096 [ 231.783369][T10387] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.001877][T10389] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 232.141083][T10383] loop1: detected capacity change from 0 to 32768 [ 232.149452][T10389] ntfs3: loop6: failed to convert "0080" to koi8-ru [ 232.248637][T10383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2171 (10383) [ 232.321491][T10383] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 232.347999][T10383] BTRFS info (device loop1): enabling auto defrag [ 232.358739][T10383] BTRFS info (device loop1): use no compression [ 232.365826][T10383] BTRFS info (device loop1): max_inline at 4096 [ 232.372194][T10383] BTRFS info (device loop1): using free space tree [ 232.379277][T10383] BTRFS info (device loop1): has skinny extents [ 232.501914][T10411] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.583607][T10405] SQUASHFS error: Failed to read block 0x29b: -5 [ 232.624134][T10405] SQUASHFS error: Unable to read metadata cache entry [299] [ 232.693624][T10383] BTRFS info (device loop1): enabling ssd optimizations [ 232.744317][T10436] netlink: 'syz.2.2185': attribute type 2 has an invalid length. [ 233.027748][T10443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.321471][T10452] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.569348][T10444] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 233.771028][T10464] usb 4-1: USB disconnect, device number 15 [ 233.877409][T10468] program syz.3.2200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.100069][T10484] tipc: Started in network mode [ 234.115861][T10484] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 234.149312][T10484] tipc: Enabled bearer , priority 12 [ 234.172599][T10455] set_capacity_and_notify: 4 callbacks suppressed [ 234.172613][T10455] loop1: detected capacity change from 0 to 32768 [ 234.402574][T10455] XFS (loop1): Mounting V5 Filesystem [ 234.557679][T10455] XFS (loop1): Ending clean mount [ 234.652632][T10455] XFS (loop1): Quotacheck needed: Please wait. [ 234.772944][T10455] XFS (loop1): Quotacheck: Done. [ 234.921334][ T4188] XFS (loop1): Unmounting Filesystem [ 234.948120][T10528] binder: 10526:10528 ioctl c018620c 200000000280 returned -22 [ 235.013024][T10490] loop6: detected capacity change from 0 to 32768 [ 235.077209][T10490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2209 (10490) [ 235.140815][T10490] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 235.162048][T10490] BTRFS info (device loop6): using free space tree [ 235.172554][ T5048] tipc: Node number set to 15444650 [ 235.205970][T10490] BTRFS info (device loop6): has skinny extents [ 235.304067][ T5812] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 235.374157][T10553] loop2: detected capacity change from 0 to 256 [ 235.486418][T10490] BTRFS info (device loop6): enabling ssd optimizations [ 235.525416][T10567] loop1: detected capacity change from 0 to 256 [ 235.553723][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 235.628586][T10567] FAT-fs (loop1): Directory bread(block 64) failed [ 235.674905][T10567] FAT-fs (loop1): Directory bread(block 65) failed [ 235.681796][T10567] FAT-fs (loop1): Directory bread(block 66) failed [ 235.683723][T10553] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d) [ 235.696590][T10567] FAT-fs (loop1): Directory bread(block 67) failed [ 235.708322][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.730304][ T5812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.760756][T10567] FAT-fs (loop1): Directory bread(block 68) failed [ 235.780428][T10567] FAT-fs (loop1): Directory bread(block 69) failed [ 235.795085][ T5812] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.823695][T10567] FAT-fs (loop1): Directory bread(block 70) failed [ 235.830274][T10567] FAT-fs (loop1): Directory bread(block 71) failed [ 235.840810][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.873543][T10567] FAT-fs (loop1): Directory bread(block 72) failed [ 235.880771][T10567] FAT-fs (loop1): Directory bread(block 73) failed [ 235.881163][ T5812] usb 6-1: config 0 descriptor?? [ 235.996893][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2239'. [ 236.385422][ T5812] microsoft 0003:045E:07DA.000F: report is too long [ 236.399336][ T5812] microsoft 0003:045E:07DA.000F: item 0 4 0 8 parsing failed [ 236.443769][ T5812] microsoft 0003:045E:07DA.000F: parse failed [ 236.460252][ T5812] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 236.626169][T10591] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2246'. [ 236.665134][ T7] usb 6-1: USB disconnect, device number 10 [ 236.708535][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 236.961372][T10582] loop3: detected capacity change from 0 to 32768 [ 236.962068][T10606] loop6: detected capacity change from 0 to 1024 [ 237.108193][T10463] hid-generic 0000:0000:0000.0010: item fetching failed at offset 0/1 [ 237.185913][T10463] hid-generic: probe of 0000:0000:0000.0010 failed with error -22 [ 237.225613][T10582] XFS (loop3): Mounting V5 Filesystem [ 237.349138][T10629] nbd: couldn't find device at index 0 [ 237.390064][T10582] XFS (loop3): Ending clean mount [ 237.402612][T10582] XFS (loop3): Quotacheck needed: Please wait. [ 237.516843][T10582] XFS (loop3): Quotacheck: Done. [ 237.552340][T10638] loop6: detected capacity change from 0 to 64 [ 237.589563][T10637] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.621474][T10638] MINIX-fs: mounting file system with errors, running fsck is recommended [ 237.653744][ T4189] XFS (loop3): Unmounting Filesystem [ 237.692801][T10638] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 238.052679][T10623] loop2: detected capacity change from 0 to 32768 [ 238.072868][T10652] loop6: detected capacity change from 0 to 164 [ 238.142894][T10654] loop1: detected capacity change from 0 to 1024 [ 238.229732][T10623] XFS (loop2): Mounting V5 Filesystem [ 238.339284][T10623] XFS (loop2): Ending clean mount [ 238.377414][T10654] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.421081][T10642] JBD2: Ignoring recovery information on journal [ 238.428307][T10623] XFS (loop2): Quotacheck needed: Please wait. [ 238.474423][T10654] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 238.525476][T10642] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 238.673045][T10623] XFS (loop2): Quotacheck: Done. [ 238.793883][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 238.991433][ T7616] ocfs2: Unmounting device (7,5) on (node local) [ 239.100291][T10689] program syz.1.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.241029][T10664] set_capacity_and_notify: 1 callbacks suppressed [ 239.241045][T10664] loop3: detected capacity change from 0 to 32768 [ 239.284747][T10664] (syz.3.2265,10664,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.364985][T10664] (syz.3.2265,10664,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.487372][T10664] JBD2: Ignoring recovery information on journal [ 239.568779][T10700] loop1: detected capacity change from 0 to 8192 [ 239.600903][T10664] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 239.610862][T10713] netlink: 'syz.6.2292': attribute type 6 has an invalid length. [ 239.618591][T10713] netlink: 'syz.6.2292': attribute type 6 has an invalid length. [ 239.618764][T10713] Zero length message leads to an empty skb [ 239.706695][T10719] sctp: [Deprecated]: syz.5.2295 (pid 10719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.706695][T10719] Use struct sctp_sack_info instead [ 239.717172][T10700] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 239.734608][T10700] REISERFS (device loop1): using ordered data mode [ 239.783720][T10700] reiserfs: using flush barriers [ 239.789829][T10700] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.863650][T10700] REISERFS (device loop1): checking transaction log (loop1) [ 239.873204][T10719] 8021q: VLANs not supported on hsr0 [ 239.914358][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 239.937787][ T7928] XFS (loop2): Unmounting Filesystem [ 240.194479][T10700] REISERFS (device loop1): Using tea hash to sort names [ 240.202179][T10700] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 240.534287][T10740] loop3: detected capacity change from 0 to 2048 [ 240.572475][T10742] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2307'. [ 240.733833][T10749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.832321][T10753] loop5: detected capacity change from 0 to 512 [ 240.880249][T10753] EXT4-fs (loop5): Ignoring removed bh option [ 240.926451][T10753] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 241.068315][T10753] EXT4-fs (loop5): 1 truncate cleaned up [ 241.090429][T10753] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 241.182529][T10775] loop3: detected capacity change from 0 to 2048 [ 241.284835][T10775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.313949][T10775] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.622902][T10798] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.2330'. [ 241.771199][T10809] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 241.953841][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2340'. [ 241.963039][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2340'. [ 242.080720][T10821] loop2: detected capacity change from 0 to 1024 [ 242.135636][T10827] loop6: detected capacity change from 0 to 256 [ 242.159285][T10823] loop5: detected capacity change from 0 to 4096 [ 242.182444][T10821] EXT4-fs (loop2): invalid inodes per group: 0 [ 242.182444][T10821] [ 242.195202][T10827] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 242.264861][T10823] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 242.292001][T10827] attempt to access beyond end of device [ 242.292001][T10827] loop6: rw=524288, want=34359738496, limit=256 [ 242.421078][T10827] attempt to access beyond end of device [ 242.421078][T10827] loop6: rw=0, want=34359738496, limit=256 [ 242.484452][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 242.484467][ T26] audit: type=1800 audit(1774360871.339:27): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2344" name="file1" dev="loop6" ino=1048765 res=0 errno=0 [ 242.534790][T10815] loop3: detected capacity change from 0 to 32768 [ 242.633377][T10464] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.701408][T10850] loop5: detected capacity change from 0 to 1024 [ 242.719624][T10815] XFS (loop3): Mounting V5 Filesystem [ 242.779904][T10815] XFS (loop3): Ending clean mount [ 242.924207][ T4189] XFS (loop3): Unmounting Filesystem [ 242.996317][T10464] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.007775][T10464] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.018242][T10464] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.033352][T10464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.080303][T10829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.196394][T10858] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 243.519883][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 243.536727][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 243.558895][T10864] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2354'. [ 243.684873][T10856] XFS (loop5): Mounting V5 Filesystem [ 243.824932][T10856] XFS (loop5): Ending clean mount [ 243.839316][T10856] XFS (loop5): Quotacheck needed: Please wait. [ 243.862062][T10887] erofs: (device loop1): mounted with root inode @ nid 36. [ 243.883065][T10887] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 243.948176][T10887] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 243.965905][T10856] XFS (loop5): Quotacheck: Done. [ 243.971808][T10887] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 243.986083][T10887] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 243.997404][T10887] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 244.008830][ T4193] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 244.042053][T10887] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 244.130840][ T5048] usb 3-1: USB disconnect, device number 16 [ 244.155311][T10887] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 244.175925][T10891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 244.195051][T10891] System zones: 1-20 [ 244.199962][T10887] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 244.239342][ T26] audit: type=1800 audit(1774360873.089:28): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2365" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 244.268540][T10891] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback. [ 244.302220][ T7616] XFS (loop5): Unmounting Filesystem [ 244.768486][T10911] set_capacity_and_notify: 3 callbacks suppressed [ 244.768502][T10911] loop2: detected capacity change from 0 to 1024 [ 244.899470][ T4735] hfsplus: b-tree write err: -5, ino 25 [ 244.928907][ T4735] hfsplus: b-tree write err: -5, ino 4 [ 244.946002][ T4735] hfsplus: b-tree write err: -5, ino 2 [ 245.173619][ T5048] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 245.200330][T10914] loop6: detected capacity change from 0 to 32768 [ 245.325084][T10923] loop5: detected capacity change from 0 to 1024 [ 245.433283][ T5048] usb 4-1: Using ep0 maxpacket: 8 [ 245.488752][T10927] loop2: detected capacity change from 0 to 512 [ 245.573795][ T5048] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 245.593196][ T5048] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 245.611586][ T5048] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 245.613475][T10927] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 245.613475][T10927] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 245.613475][T10927] [ 245.638676][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.663870][ T5048] usb 4-1: config 0 descriptor?? [ 245.669157][T10927] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.706321][ T5048] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 245.718966][T10927] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026018, mo2=0000] [ 245.775925][T10927] EXT4-fs (loop2): 1 truncate cleaned up [ 245.783830][T10927] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nojournal_checksum,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,journal_ioprio=0x0000000000000002,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 245.814610][ T5048] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 245.839167][ T302] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 245.909416][ T5048] usb 4-1: USB disconnect, device number 16 [ 245.923495][ T302] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 1 [ 246.030957][T10952] netlink: 'syz.6.2392': attribute type 1 has an invalid length. [ 246.529799][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 246.956058][T10997] loop1: detected capacity change from 0 to 512 [ 247.070873][T10997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 247.089987][T10997] System zones: 1-12 [ 247.113682][T10997] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.2413: corrupted in-inode xattr [ 247.128031][T11002] loop6: detected capacity change from 0 to 256 [ 247.181397][T10983] loop5: detected capacity change from 0 to 32768 [ 247.190446][T10997] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2413: couldn't read orphan inode 15 (err -117) [ 247.213617][T10997] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 247.225525][T10977] loop3: detected capacity change from 0 to 32768 [ 247.352498][T10983] XFS (loop5): Mounting V5 Filesystem [ 247.361946][T10977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2404 (10977) [ 247.385265][T11008] loop2: detected capacity change from 0 to 512 [ 247.448649][T10983] XFS (loop5): Ending clean mount [ 247.550221][T11020] loop1: detected capacity change from 0 to 24 [ 247.599326][T11008] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.749715][T10977] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 247.763499][T10983] XFS (loop5): Quotacheck needed: Please wait. [ 247.793509][T10977] BTRFS info (device loop3): using free space tree [ 247.800065][T10977] BTRFS info (device loop3): has skinny extents [ 247.922302][T10983] XFS (loop5): Quotacheck: Done. [ 247.987125][T11027] FAT-fs (loop1): Directory bread(block 64) failed [ 248.031970][T11034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 248.057936][T11027] FAT-fs (loop1): Directory bread(block 65) failed [ 248.065109][T11027] FAT-fs (loop1): Directory bread(block 66) failed [ 248.072267][T11027] FAT-fs (loop1): Directory bread(block 67) failed [ 248.074297][ T7616] XFS (loop5): Unmounting Filesystem [ 248.084478][T11027] FAT-fs (loop1): Directory bread(block 68) failed [ 248.091243][T11027] FAT-fs (loop1): Directory bread(block 69) failed [ 248.099581][T11027] FAT-fs (loop1): Directory bread(block 70) failed [ 248.106688][T11027] FAT-fs (loop1): Directory bread(block 71) failed [ 248.122814][T11027] FAT-fs (loop1): Directory bread(block 72) failed [ 248.212110][T11027] FAT-fs (loop1): Directory bread(block 73) failed [ 248.339354][T10977] BTRFS info (device loop3): enabling ssd optimizations [ 248.530146][T11060] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 248.530146][T11060] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 248.530146][T11060] [ 248.589415][T11059] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.615983][T11060] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.664376][T11059] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.802424][T11060] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026018, mo2=0000] [ 248.957794][T11060] EXT4-fs (loop1): 1 truncate cleaned up [ 248.982287][T11060] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nojournal_checksum,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,journal_ioprio=0x0000000000000002,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 249.728468][T11091] mkiss: ax0: crc mode is auto. [ 249.843829][T11073] set_capacity_and_notify: 4 callbacks suppressed [ 249.843843][T11073] loop2: detected capacity change from 0 to 32768 [ 249.920149][T11101] loop3: detected capacity change from 0 to 256 [ 250.004890][T11082] loop5: detected capacity change from 0 to 32768 [ 250.016212][T11101] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 250.071580][T11073] XFS (loop2): Mounting V5 Filesystem [ 250.212651][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 250.242134][T11073] XFS (loop2): Ending clean mount [ 250.273799][T11082] XFS (loop5): Mounting V5 Filesystem [ 250.309867][T11073] XFS (loop2): Quotacheck needed: Please wait. [ 250.474357][T11073] XFS (loop2): Quotacheck: Done. [ 250.539800][T11082] XFS (loop5): Ending clean mount [ 250.557253][T11082] XFS (loop5): Quotacheck needed: Please wait. [ 250.653019][T11082] XFS (loop5): Quotacheck: Done. [ 250.677457][ T7928] XFS (loop2): Unmounting Filesystem [ 250.763474][T11109] loop6: detected capacity change from 0 to 32768 [ 250.796993][ T7616] XFS (loop5): Unmounting Filesystem [ 250.823390][ T4226] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 250.978540][T11127] loop1: detected capacity change from 0 to 32768 [ 251.027930][T11109] XFS (loop6): Mounting V5 Filesystem [ 251.074465][T11127] (syz.1.2451,11127,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.103236][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 251.123985][T11127] (syz.1.2451,11127,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.146412][T11109] XFS (loop6): Ending clean mount [ 251.155382][T11109] XFS (loop6): Quotacheck needed: Please wait. [ 251.206903][T11109] XFS (loop6): Quotacheck: Done. [ 251.223899][ T4226] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 251.232024][ T4226] usb 4-1: config 0 has no interface number 0 [ 251.257863][T11127] JBD2: Ignoring recovery information on journal [ 251.370341][T11127] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 251.402524][ T7861] XFS (loop6): Unmounting Filesystem [ 251.406183][T11143] ptrace attach of "./syz-executor exec"[7928] was attempted by ""[11143] [ 251.417282][ T4226] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 251.439807][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.471531][ T4226] usb 4-1: Product: syz [ 251.491794][ T4226] usb 4-1: Manufacturer: syz [ 251.499867][ T4226] usb 4-1: SerialNumber: syz [ 251.519001][ T4226] usb 4-1: config 0 descriptor?? [ 251.584537][ T4226] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 251.826860][ T4226] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 251.843000][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 251.852662][ T4226] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 252.244630][ T5038] usb 4-1: USB disconnect, device number 17 [ 252.263232][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 252.272849][ T5038] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 252.324068][ T5038] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 252.363730][ T5038] quatech2 4-1:0.51: device disconnected [ 252.389798][T11151] loop2: detected capacity change from 0 to 32768 [ 252.516689][T11151] XFS (loop2): Mounting V5 Filesystem [ 252.589818][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 252.608192][T11160] loop6: detected capacity change from 0 to 32768 [ 252.694884][T11151] XFS (loop2): Ending clean mount [ 252.715227][T11151] XFS (loop2): Quotacheck needed: Please wait. [ 252.932181][T11151] XFS (loop2): Quotacheck: Done. [ 253.039173][ T7928] XFS (loop2): Unmounting Filesystem [ 253.039798][T11196] loop6: detected capacity change from 0 to 1024 [ 253.152704][T11196] EXT4-fs (loop6): inline encryption not supported [ 253.249791][T11212] loop3: detected capacity change from 0 to 256 [ 253.279101][T11196] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.2474: lblock 2 mapped to illegal pblock 2 (length 1) [ 253.384972][T11212] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 253.397672][T11196] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 253.433242][T11196] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.2474: lblock 0 mapped to illegal pblock 48 (length 1) [ 253.474411][T11214] loop5: detected capacity change from 0 to 2048 [ 253.506321][T11196] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 253.543421][T11196] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.2474: Failed to acquire dquot type 0 [ 253.593882][T11196] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 253.611684][T11214] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 253.664227][T11196] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.2474: mark_inode_dirty error [ 253.706761][T11214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.723603][T11196] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 253.820450][T11196] EXT4-fs (loop6): 1 orphan inode deleted [ 253.840691][T11196] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 253.871147][ T144] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 253.932146][T11206] XFS (loop1): Mounting V5 Filesystem [ 253.962807][ T144] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 253.992383][T11196] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz.6.2474: Invalid inode table block 1 in block_group 0 [ 254.006764][ T144] EXT4-fs error (device loop6): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 254.054758][T11196] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 254.092908][T11206] XFS (loop1): Ending clean mount [ 254.125145][ T4188] XFS (loop1): Unmounting Filesystem [ 254.273824][T11239] exfat: Deprecated parameter 'namecase' [ 254.286754][ T4238] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.304101][T11239] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 254.353608][ T4238] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 254.362093][ T4238] EXT4-fs error (device loop6): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 254.426498][ T7861] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 254.476463][ T7861] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 254.501630][ T7861] EXT4-fs error (device loop6): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 254.759522][T11244] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.2493: bad orphan inode 15 [ 254.834308][T11244] ext4_test_bit(bit=14, block=5) = 0 [ 254.839768][T11244] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 255.038017][T11255] set_capacity_and_notify: 3 callbacks suppressed [ 255.038027][T11255] loop1: detected capacity change from 0 to 8 [ 255.063031][T11235] loop3: detected capacity change from 0 to 32768 [ 255.107237][T11255] SQUASHFS error: lzo decompression failed, data probably corrupt [ 255.127159][T11255] SQUASHFS error: Failed to read block 0x91: -5 [ 255.154016][T11235] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 255.163621][T11255] SQUASHFS error: Unable to read metadata cache entry [8f] [ 255.170850][T11255] SQUASHFS error: Unable to read inode 0x11f [ 255.177590][ T5812] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.203754][T11235] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.303548][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.348991][T11235] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 255.469865][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 255.508970][T11235] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 255.607734][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.609349][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.614171][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.694312][T11273] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 255.699480][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.719344][T11273] netlink: 'syz.1.2507': attribute type 8 has an invalid length. [ 255.733300][T11273] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.2507'. [ 255.763105][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.791375][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.816163][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.874726][ T5812] usb 3-1: config 0 descriptor?? [ 255.883886][ T7] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 255.914102][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.925476][ T7] usb 6-1: Product: syz [ 255.939047][ T7] usb 6-1: Manufacturer: syz [ 255.947734][ T7] usb 6-1: SerialNumber: syz [ 255.965143][T11283] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 255.990409][ T7] usb 6-1: config 0 descriptor?? [ 255.992633][T11280] loop1: detected capacity change from 0 to 4096 [ 256.045142][ T7] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 256.066420][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.098609][ T7] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 256.112463][ T7] usb 6-1: media controller created [ 256.123463][T11280] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 256.152314][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.178764][T11280] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 256.197608][T11280] ntfs3: loop1: Failed to load $MFT. [ 256.231688][T11291] loop6: detected capacity change from 0 to 2048 [ 256.298834][ T7] DVB: Unable to find symbol mt352_attach() [ 256.305421][T11280] exFAT-fs (loop1): invalid fs_name [ 256.310643][T11280] exFAT-fs (loop1): failed to read boot sector [ 256.316942][T11293] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.333729][ T8023] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 256.358894][T11280] exFAT-fs (loop1): failed to recognize exfat type [ 256.385500][ T5812] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 256.403674][ T5812] microsoft 0003:045E:07DA.0011: collection stack underflow [ 256.420148][ T7] DVB: Unable to find symbol nxt6000_attach() [ 256.436766][ T7] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 256.452049][ T5812] microsoft 0003:045E:07DA.0011: item 0 2 0 12 parsing failed [ 256.456726][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2517'. [ 256.468800][ T5812] microsoft 0003:045E:07DA.0011: parse failed [ 256.488884][ T5812] microsoft: probe of 0003:045E:07DA.0011 failed with error -22 [ 256.500109][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 256.539748][ T7] dvb-usb: schedule remote query interval to 1000 msecs. [ 256.560608][ T7] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 256.593633][ T8023] usb 4-1: Using ep0 maxpacket: 16 [ 256.609390][T11300] loop6: detected capacity change from 0 to 128 [ 256.625054][ T7] dvb-usb: bulk message failed: -22 (7/0) [ 256.640673][ T7] dvb-usb: bulk message failed: -22 (7/0) [ 256.655932][ T7] usb 6-1: USB disconnect, device number 11 [ 256.662130][T10464] usb 3-1: USB disconnect, device number 17 [ 256.722756][ T7] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 256.753736][ T8023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.770983][ T8023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.813629][ T8023] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 256.853648][ T8023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.886138][ T8023] usb 4-1: config 0 descriptor?? [ 257.011441][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2521'. [ 257.249288][T11310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.375441][ T8023] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 257.393914][ T8023] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 257.401614][ T8023] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 257.429926][ T8023] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 257.448257][ T8023] hid-multitouch 0003:1FD2:6007.0012: unknown main item tag 0x0 [ 257.494768][ T8023] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 257.578351][ T8023] usb 4-1: USB disconnect, device number 18 [ 257.667203][T11323] loop2: detected capacity change from 0 to 4096 [ 257.697226][T11324] fido_id[11324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 257.738531][T11323] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 257.785046][T11307] loop5: detected capacity change from 0 to 40427 [ 257.836520][T11307] F2FS-fs (loop5): invalid crc value [ 257.911368][T11307] F2FS-fs (loop5): Found nat_bits in checkpoint [ 258.036477][T11336] loop1: detected capacity change from 0 to 2048 [ 258.037788][T11307] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 258.171654][T11336] NILFS (loop1): invalid segment: Checksum error in segment payload [ 258.221300][T11336] NILFS (loop1): trying rollback from an earlier position [ 258.260205][T11336] NILFS (loop1): recovery complete [ 258.306802][T11345] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.817652][ C1] sd 0:0:1:0: tag#3158 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 258.827576][ C1] sd 0:0:1:0: tag#3158 CDB: Read(6) 08 18 4b 56 00 40 [ 258.876847][ T8023] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 259.093006][T11383] netlink: 'syz.5.2556': attribute type 8 has an invalid length. [ 259.126304][T11383] netlink: 'syz.5.2556': attribute type 3 has an invalid length. [ 259.153791][ T8023] usb 3-1: Using ep0 maxpacket: 8 [ 259.165395][T11383] netlink: 153952 bytes leftover after parsing attributes in process `syz.5.2556'. [ 259.274377][ T8023] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.295328][ T8023] usb 3-1: config 179 has no interface number 0 [ 259.319617][ T8023] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 259.362300][ T8023] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 259.409045][T11358] loop1: detected capacity change from 0 to 32768 [ 259.416296][ T8023] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.431149][ T8023] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.442013][ T8023] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.457078][ T8023] usb 3-1: config 179 interface 65 has no altsetting 0 [ 259.465468][ T8023] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 259.475820][ T8023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.613907][T11358] XFS (loop1): Mounting V5 Filesystem [ 259.623093][ T8023] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17 [ 259.671088][T11406] loop3: detected capacity change from 0 to 8192 [ 259.714578][T11358] XFS (loop1): Ending clean mount [ 259.746214][T11358] XFS (loop1): Quotacheck needed: Please wait. [ 259.859614][ T8023] usb 3-1: USB disconnect, device number 18 [ 259.865746][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 259.895228][ T8023] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 259.920761][T11358] XFS (loop1): Quotacheck: Done. [ 260.053397][ T4188] XFS (loop1): Unmounting Filesystem [ 260.099740][ T3559] loop3: AHDI p1 p3 p4 [ 260.107403][ T3559] loop3: p3 start 3996538112 is beyond EOD, truncated [ 260.186166][ T3559] loop3: p4 start 4278231049 is beyond EOD, truncated [ 260.205639][T11406] loop3: AHDI p1 p3 p4 [ 260.213422][T11406] loop3: p3 start 3996538112 is beyond EOD, truncated [ 260.229792][T11406] loop3: p4 start 4278231049 is beyond EOD, truncated [ 260.256294][ T3559] loop3: AHDI p1 p3 p4 [ 260.260683][ T3559] loop3: p3 start 3996538112 is beyond EOD, truncated [ 260.282359][ T3559] loop3: p4 start 4278231049 is beyond EOD, truncated [ 260.305029][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2573'. [ 260.320652][T11423] netem: invalid attributes len -17 [ 260.341927][T11423] netem: change failed [ 260.365474][T11425] loop6: detected capacity change from 0 to 2048 [ 260.460477][T11425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.795193][T11445] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2583'. [ 260.843405][ T8023] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 260.853337][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 261.002992][T11451] mmap: syz.6.2586 (11451) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 261.113649][ T8023] usb 6-1: Using ep0 maxpacket: 8 [ 261.233791][ T8023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 261.264652][ T8023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.295208][ T8023] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.330737][ T8023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 261.379732][ T8023] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 261.419357][T11429] loop1: detected capacity change from 0 to 32768 [ 261.428753][ T8023] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 261.463308][ T4228] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 261.474439][ T8023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.517685][ T8023] usb 6-1: config 0 descriptor?? [ 261.558375][T11435] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.577102][T11465] find_entry called with index = 0 [ 261.588066][T11465] read_mapping_page failed! [ 261.593018][T11465] ERROR: (device loop1): txCommit: [ 261.593018][T11465] [ 261.612294][T11465] ERROR: (device loop1): remounting filesystem as read-only [ 261.713228][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 261.833526][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.854888][ T4228] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 261.864939][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.878046][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.885787][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.892935][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.900202][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.907395][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.914634][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.922291][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.929624][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.936856][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.944067][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.951205][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.958435][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.962826][T11473] loop2: detected capacity change from 0 to 8 [ 261.965625][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965699][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965723][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965747][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965771][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965795][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965825][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965848][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965871][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965894][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965914][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.965933][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 261.966710][ T4228] usb 4-1: config 0 descriptor?? [ 261.972276][ T8023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 262.081523][T10589] usb 6-1: USB disconnect, device number 12 [ 262.343620][ T8023] usb 7-1: Using ep0 maxpacket: 16 [ 262.370616][T11483] loop1: detected capacity change from 0 to 512 [ 262.403884][T11483] EXT4-fs (loop1): Test dummy encryption mode enabled [ 262.455378][ T4228] bigben 0003:146B:0902.0013: unexpected rdesc, please submit for review [ 262.465009][ T4228] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 262.467931][T11483] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, [ 262.471988][ T4228] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 262.472018][ T4228] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 262.472040][ T4228] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 262.472060][ T4228] bigben 0003:146B:0902.0013: item fetching failed at offset 4/5 [ 262.472456][ T4228] bigben 0003:146B:0902.0013: parse failed [ 262.481681][T11483] block bitmap and bg descriptor inconsistent: 234 vs 220 free clusters [ 262.488983][ T4228] bigben: probe of 0003:146B:0902.0013 failed with error -22 [ 262.499727][ T8023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.550291][T11483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2601: inode #1: comm syz.1.2601: iget: illegal inode # [ 262.570325][ T8023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.583557][T11483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2601: error while reading EA inode 1 err=-117 [ 262.601835][ T8023] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 262.613099][T11483] EXT4-fs (loop1): 1 orphan inode deleted [ 262.625350][ T8023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.640481][T11483] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,resgid=0x0000000000000000,grpquota,usrjquota=,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 262.685169][ T8023] usb 7-1: config 0 descriptor?? [ 262.767455][ T5812] usb 4-1: USB disconnect, device number 19 [ 262.813061][T11479] loop2: detected capacity change from 0 to 32768 [ 262.879756][T11493] loop1: detected capacity change from 0 to 1024 [ 262.956310][T11493] hfsplus: bad catalog entry type [ 263.043835][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 263.165960][T11499] loop5: detected capacity change from 0 to 4096 [ 263.192895][ T8023] hid (null): bogus close delimiter [ 263.201341][ T8023] wacom 0003:056A:0084.0014: bogus close delimiter [ 263.220773][ T8023] wacom 0003:056A:0084.0014: item 0 4 2 10 parsing failed [ 263.229812][ T8023] wacom 0003:056A:0084.0014: parse failed [ 263.241844][ T8023] wacom: probe of 0003:056A:0084.0014 failed with error -22 [ 263.273486][T11499] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 263.308807][T11503] loop2: detected capacity change from 0 to 4096 [ 263.371668][T11503] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 263.479577][T11499] ntfs3: loop5: ntfs_sync_inode r=1e failed, -22. [ 263.504753][T11503] ntfs: volume version 3.1. [ 263.509676][T11499] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 263.523196][ T8023] usb 7-1: USB disconnect, device number 6 [ 263.642486][T11507] loop3: detected capacity change from 0 to 1024 [ 263.681470][ T4238] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 263.722801][T11507] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.749548][ T7616] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 263.798160][T11507] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000003,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 263.861451][T11513] loop2: detected capacity change from 0 to 512 [ 263.888415][T11507] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 263.942219][T11513] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.964099][T11513] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 263.999247][T11513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 264.009545][T11513] System zones: 0-2, 18-18, 34-35 [ 264.029285][T11501] F2FS-fs (loop1): invalid crc value [ 264.039062][T11513] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 264.042293][T11516] tipc: Enabled bearer , priority 10 [ 264.082998][T11513] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 264.151214][T11501] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.227709][T11513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 264.266478][T11513] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 264.287748][T11501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.358948][T11513] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.2.2615: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 264.465337][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2622'. [ 264.505920][T11513] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 264.753221][ T4228] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 264.871884][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 264.903073][T11545] delete_channel: no stack [ 265.123366][ T4228] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 265.134816][ T4228] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 265.155526][ T4228] usb 7-1: config 220 has no interface number 2 [ 265.168720][T11558] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 265.194613][ T4228] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 265.215491][ T8023] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 265.230275][ T4228] usb 7-1: config 220 interface 0 has no altsetting 0 [ 265.244299][ T4228] usb 7-1: config 220 interface 76 has no altsetting 0 [ 265.264447][ T4228] usb 7-1: config 220 interface 1 has no altsetting 0 [ 265.340239][T11568] EXT4-fs (loop1): Ignoring removed nobh option [ 265.356896][T11568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 265.387054][T11568] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.2639: invalid block [ 265.420369][T11568] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2639: couldn't read orphan inode 11 (err -117) [ 265.443466][ T4228] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 265.452543][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.458987][T11568] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 265.464684][ T4228] usb 7-1: Product: syz [ 265.489842][ T4228] usb 7-1: Manufacturer: syz [ 265.494815][ T4228] usb 7-1: SerialNumber: syz [ 265.497072][ T8023] usb 3-1: Using ep0 maxpacket: 8 [ 265.542243][T11573] ODEBUG: Out of memory. ODEBUG disabled [ 265.650068][T11576] set_capacity_and_notify: 3 callbacks suppressed [ 265.650083][T11576] loop1: detected capacity change from 0 to 64 [ 265.667136][ T8023] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 265.699018][ T8023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.721454][ T8023] usb 3-1: config 0 descriptor?? [ 265.787627][ T8023] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 265.813829][ T8023] gm12u320: probe of 3-1:0.0 failed with error -5 [ 265.863478][ T4228] usb 7-1: selecting invalid altsetting 0 [ 265.865548][ T8023] usb-storage 3-1:0.0: USB Mass Storage device detected [ 265.872359][ T4228] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 265.894085][ T4228] usb 7-1: No valid video chain found. [ 265.894396][ T8023] usb-storage 3-1:0.0: device ignored [ 265.994362][ T4228] usb 7-1: selecting invalid altsetting 0 [ 266.014498][ T4228] usbtest: probe of 7-1:220.1 failed with error -22 [ 266.040636][ T4228] usb 7-1: USB disconnect, device number 7 [ 266.087968][T11584] loop1: detected capacity change from 0 to 4096 [ 266.107167][ T8023] usb 3-1: USB disconnect, device number 19 [ 266.133397][T11584] ntfs3: loop1: ino=3, Correct links count -> 2. [ 266.282373][T11586] CUSE: unknown device info "" [ 266.289615][T11586] CUSE: unknown device info "P]FO" [ 266.325890][T11578] loop3: detected capacity change from 0 to 32768 [ 266.328494][T11586] CUSE: DEVNAME unspecified [ 266.380900][T11578] [ 266.380900][T11578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.380900][T11578] [ 266.419705][T11578] ERROR: (device loop3): dbDiscardAG: -EIO [ 266.419705][T11578] [ 266.472567][T11578] ERROR: (device loop3): remounting filesystem as read-only [ 266.484359][T11592] sp0: Synchronizing with TNC [ 266.502663][T11591] [U] è [ 266.564044][T11594] loop6: detected capacity change from 0 to 512 [ 266.599606][T11594] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 266.599606][T11594] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 266.599606][T11594] [ 266.662422][T11594] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.762699][T11600] loop1: detected capacity change from 0 to 512 [ 266.799244][T11594] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 266.824689][T11600] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.882581][T11594] EXT4-fs (loop6): 1 truncate cleaned up [ 266.906234][T11594] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 266.918480][ T4238] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 266.963061][ T4238] EXT4-fs error (device loop6): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 1 [ 267.074377][T11600] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 267.093277][T11600] FAT-fs (loop1): Filesystem has been set read-only [ 267.100347][T11600] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 267.114665][T11600] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 267.203379][T11604] loop3: detected capacity change from 0 to 32768 [ 267.401188][T11612] loop5: detected capacity change from 0 to 128 [ 267.459612][T11612] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 267.577678][T11612] overlayfs: upper fs needs to support d_type. [ 267.642398][T11626] loop6: detected capacity change from 0 to 256 [ 267.680209][T11612] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 267.708466][T11626] exfat: Deprecated parameter 'utf8' [ 267.720597][T11612] overlayfs: failed to set xattr on upper [ 267.734694][T11626] exfat: Deprecated parameter 'utf8' [ 267.751167][T11626] exfat: Deprecated parameter 'utf8' [ 267.766605][T11612] overlayfs: ...falling back to index=off,metacopy=off. [ 267.821143][T11630] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 267.837572][T11626] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 267.863271][T10464] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.062043][ T7616] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh [ 268.086704][ T7616] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh [ 268.104462][T10464] usb 3-1: Using ep0 maxpacket: 32 [ 268.223469][T10464] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 268.253200][T10464] usb 3-1: config 0 has no interface number 0 [ 268.413421][T10464] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 268.422509][T10464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.441576][T11654] netlink: 'syz.1.2679': attribute type 10 has an invalid length. [ 268.449149][T11637] loop3: detected capacity change from 0 to 32768 [ 268.470810][T10464] usb 3-1: Product: syz [ 268.471411][T11656] loop6: detected capacity change from 0 to 24 [ 268.484995][T10464] usb 3-1: Manufacturer: syz [ 268.489653][T10464] usb 3-1: SerialNumber: syz [ 268.496241][T10464] usb 3-1: config 0 descriptor?? [ 268.510479][ T4238] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.565824][T10464] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.611166][ T4238] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.775057][T10464] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 268.795417][ T4238] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.811895][T10464] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 268.813872][T11665] exfat: Deprecated parameter 'utf8' [ 268.863388][T11665] exfat: Deprecated parameter 'namecase' [ 268.884393][T11665] exfat: Deprecated parameter 'utf8' [ 268.949005][T11665] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 268.996055][ T4238] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.264395][ T4396] usb 3-1: USB disconnect, device number 20 [ 269.273188][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 269.325535][ T4396] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 269.385468][ T4396] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 269.405556][ T4396] quatech2 3-1:0.51: device disconnected [ 269.442960][ T4238] tipc: Disabling bearer [ 269.452107][ T4238] tipc: Disabling bearer [ 269.500779][ T4238] tipc: Left network mode [ 269.886691][T11660] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2682 (11660) [ 269.959587][T11671] chnl_net:caif_netlink_parms(): no params data found [ 270.014039][T11660] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 270.049042][T11660] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 270.117505][T11660] BTRFS info (device loop1): use zstd compression, level 3 [ 270.159933][T11660] BTRFS info (device loop1): using free space tree [ 270.166934][T11660] BTRFS info (device loop1): has skinny extents [ 270.303828][T11667] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 270.339918][T11667] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 270.434122][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.514314][T11671] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.522924][T11671] device bridge_slave_0 entered promiscuous mode [ 270.565853][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.586110][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 270.611180][T11671] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.633090][T11660] BTRFS info (device loop1): enabling ssd optimizations [ 270.669669][T11671] device bridge_slave_1 entered promiscuous mode [ 270.735258][T11671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.807685][T11671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.942369][T11671] team0: Port device team_slave_0 added [ 271.083596][ T4238] device hsr_slave_0 left promiscuous mode [ 271.101373][ T4238] device hsr_slave_1 left promiscuous mode [ 271.137968][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.181557][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.220920][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.253986][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.286732][T11736] set_capacity_and_notify: 3 callbacks suppressed [ 271.286748][T11736] loop3: detected capacity change from 0 to 256 [ 271.484598][T11736] FAT-fs (loop3): Directory bread(block 64) failed [ 271.504200][T11736] FAT-fs (loop3): Directory bread(block 65) failed [ 271.528809][T11736] FAT-fs (loop3): Directory bread(block 66) failed [ 271.553967][T11736] FAT-fs (loop3): Directory bread(block 67) failed [ 271.570931][T11736] FAT-fs (loop3): Directory bread(block 68) failed [ 271.591189][T11736] FAT-fs (loop3): Directory bread(block 69) failed [ 271.633322][T11736] FAT-fs (loop3): Directory bread(block 70) failed [ 271.662607][T11736] FAT-fs (loop3): Directory bread(block 71) failed [ 271.691596][ T4238] device bridge_slave_1 left promiscuous mode [ 271.703362][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.710915][T11736] FAT-fs (loop3): Directory bread(block 72) failed [ 271.790580][T11736] FAT-fs (loop3): Directory bread(block 73) failed [ 271.819166][T11725] loop2: detected capacity change from 0 to 32768 [ 271.857108][T10463] Bluetooth: hci1: command 0x0409 tx timeout [ 271.952061][ T4238] device bridge_slave_0 left promiscuous mode [ 271.994090][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.036168][ T26] audit: type=1800 audit(1774360900.889:29): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2697" name="file1" dev="loop3" ino=1048778 res=0 errno=0 [ 272.082683][ T4238] device veth1_macvtap left promiscuous mode [ 272.108662][ T4238] device veth0_macvtap left promiscuous mode [ 272.138644][ T4238] device veth1_vlan left promiscuous mode [ 272.144624][T11751] loop1: detected capacity change from 0 to 2048 [ 272.148985][ T4238] device veth0_vlan left promiscuous mode [ 272.344505][T11751] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none. [ 272.767383][T11767] loop2: detected capacity change from 0 to 512 [ 272.802086][T11767] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.860450][T11767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.935699][T11767] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 273.027644][T11772] loop1: detected capacity change from 0 to 512 [ 273.030904][T11765] loop3: detected capacity change from 0 to 8192 [ 273.062270][T11767] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.2706: corrupted inode contents [ 273.092989][T11767] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #12: comm syz.2.2706: mark_inode_dirty error [ 273.139360][T11767] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.2706: corrupted inode contents [ 273.151845][ T5193] loop3: AHDI p1 p2 p4 [ 273.162965][ T5193] loop3: p4 start 117378816 is beyond EOD, truncated [ 273.176193][T11767] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.2706: mark_inode_dirty error [ 273.190046][T11772] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.211006][ T4238] team0 (unregistering): Port device team_slave_1 removed [ 273.251034][T11767] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.2706: corrupted inode contents [ 273.269323][T11765] loop3: AHDI p1 p2 p4 [ 273.271721][T11767] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 273.274858][T11772] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2707: invalid indirect mapped block 256 (level 2) [ 273.283113][T11767] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.2706: corrupted inode contents [ 273.307605][T11765] loop3: p4 start 117378816 is beyond EOD, truncated [ 273.316139][ T4238] team0 (unregistering): Port device team_slave_0 removed [ 273.320233][T11767] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.2706: mark_inode_dirty error [ 273.341807][T11767] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 273.351505][T11767] EXT4-fs (loop2): 1 truncate cleaned up [ 273.359770][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.367686][T11767] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,i_version,journal_dev=0x0000000000000005,errors=continue,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 273.370382][T11772] EXT4-fs (loop1): 2 truncates cleaned up [ 273.411984][T11772] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 273.430648][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.481532][T11783] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980 [ 273.532109][T11772] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2707: bg 0: block 5: invalid block bitmap [ 273.560258][T11772] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.573907][T11772] EXT4-fs (loop1): This should not happen!! Data will be lost [ 273.573907][T11772] [ 273.584256][T11772] EXT4-fs (loop1): Total free blocks count 0 [ 273.590627][T11772] EXT4-fs (loop1): Free/Dirty block details [ 273.637572][T11772] EXT4-fs (loop1): free_blocks=0 [ 273.654366][T11772] EXT4-fs (loop1): dirty_blocks=2 [ 273.677881][T11772] EXT4-fs (loop1): Block reservation details [ 273.686897][ T5193] udevd[5193]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 273.702928][ T4238] bond0 (unregistering): Released all slaves [ 273.709518][T11772] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 273.764792][ T5193] udevd[5193]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 273.911443][T11671] team0: Port device team_slave_1 added [ 273.923225][T10589] Bluetooth: hci1: command 0x041b tx timeout [ 274.033385][T11671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.041604][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.097145][T11671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.171168][T11671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.184350][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.273224][T11671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.395259][T11671] device hsr_slave_0 entered promiscuous mode [ 274.516393][T11671] device hsr_slave_1 entered promiscuous mode [ 274.530622][T11810] loop6: detected capacity change from 0 to 64 [ 274.537663][T11671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.563736][T11671] Cannot create hsr debugfs directory [ 274.813901][ T144] attempt to access beyond end of device [ 274.813901][ T144] loop6: rw=1, want=268435470, limit=64 [ 274.853933][T11787] loop2: detected capacity change from 0 to 32768 [ 274.878137][ T144] Buffer I/O error on dev loop6, logical block 134217734, lost async page write [ 275.015722][T11787] XFS (loop2): Mounting V5 Filesystem [ 275.081302][T11832] loop6: detected capacity change from 0 to 8 [ 275.132279][T11671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.155570][T11832] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 275.156337][T11797] loop3: detected capacity change from 0 to 32768 [ 275.219178][T10391] udevd[10391]: incorrect cramfs checksum on /dev/loop6 [ 275.265943][T11787] XFS (loop2): Ending clean mount [ 275.277131][T11671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.342354][T11671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.398221][T11671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.461236][T11852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.505099][T11797] XFS (loop3): Mounting V5 Filesystem [ 275.635977][ T7928] XFS (loop2): Unmounting Filesystem [ 275.653527][ T8023] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.757220][T11671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.834595][T11671] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.841610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.858818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.933656][ T8023] usb 2-1: Using ep0 maxpacket: 32 [ 275.941634][T11797] XFS (loop3): Ending clean mount [ 275.951913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.972304][T11797] XFS (loop3): Quotacheck needed: Please wait. [ 276.000393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.013545][ T5812] Bluetooth: hci1: command 0x040f tx timeout [ 276.067233][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.074398][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.089557][ T8023] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.091737][T11797] XFS (loop3): Quotacheck: Done. [ 276.104410][ T8023] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.113815][ T8023] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.122787][ T8023] usb 2-1: config 1 has no interface number 0 [ 276.129803][ T8023] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.141359][ T8023] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.156301][ T8023] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.173502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.191842][ T8023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.199853][T11863] FAT-fs (loop6): Directory bread(block 64) failed [ 276.199890][T11863] FAT-fs (loop6): Directory bread(block 65) failed [ 276.199955][T11863] FAT-fs (loop6): Directory bread(block 66) failed [ 276.199984][T11863] FAT-fs (loop6): Directory bread(block 67) failed [ 276.200047][T11863] FAT-fs (loop6): Directory bread(block 68) failed [ 276.200075][T11863] FAT-fs (loop6): Directory bread(block 69) failed [ 276.200138][T11863] FAT-fs (loop6): Directory bread(block 70) failed [ 276.200165][T11863] FAT-fs (loop6): Directory bread(block 71) failed [ 276.200229][T11863] FAT-fs (loop6): Directory bread(block 72) failed [ 276.200256][T11863] FAT-fs (loop6): Directory bread(block 73) failed [ 276.303893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.312339][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.319443][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.393384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.402222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.431214][T11671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.468403][ T4189] XFS (loop3): Unmounting Filesystem [ 276.477459][ T8023] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 276.497847][T11671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.556680][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.572960][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.588519][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.604642][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.664993][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.684946][ T8023] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 276.699179][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.724292][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.748837][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.783493][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.842171][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.894883][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.243899][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.251408][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.323978][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.398627][T11891] set_capacity_and_notify: 2 callbacks suppressed [ 277.398643][T11891] loop6: detected capacity change from 0 to 512 [ 277.503514][ T13] usb 2-1: USB disconnect, device number 14 [ 277.524310][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 277.659070][T11876] loop2: detected capacity change from 0 to 40427 [ 277.667798][T11891] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2742: invalid indirect mapped block 4294967295 (level 1) [ 277.711325][T11876] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 277.725109][T11876] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 277.782087][T11876] F2FS-fs (loop2): invalid crc value [ 277.803023][T11891] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2742: invalid indirect mapped block 4294967295 (level 1) [ 277.840638][T11876] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.038430][T11876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.070232][T11891] EXT4-fs (loop6): 2 truncates cleaned up [ 278.093476][ T5038] Bluetooth: hci1: command 0x0419 tx timeout [ 278.121008][T11891] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 278.160331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.196508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.304099][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.323906][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.353027][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.376543][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.388690][ T7928] attempt to access beyond end of device [ 278.388690][ T7928] loop2: rw=2049, want=45104, limit=40427 [ 278.448394][T11671] device veth0_vlan entered promiscuous mode [ 278.505148][T11671] device veth1_vlan entered promiscuous mode [ 278.604559][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.614280][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.621720][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.634179][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.649985][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.675448][T11671] device veth0_macvtap entered promiscuous mode [ 278.709709][T11671] device veth1_macvtap entered promiscuous mode [ 278.763784][ T5812] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 278.775746][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.806723][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.825996][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.847605][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.864129][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.884295][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.903607][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 278.905295][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.939898][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.966094][T11671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.991465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.025561][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 279.035261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.054580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.065376][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 279.104306][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.120550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.123903][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.156735][ T5812] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 279.164165][T11944] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 279.167378][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 279.179102][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.195347][ T5812] usb 7-1: config 0 has no interface number 0 [ 279.196872][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.212792][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.234383][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.238696][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 279.252053][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.265426][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.275783][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.287109][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.313336][T10463] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 279.314118][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 279.321155][T11671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.358811][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.363360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.384847][ T5812] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 279.404158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.410311][ T7] usb 2-1: config 0 descriptor?? [ 279.421030][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.433870][T11671] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.453459][ T5812] usb 7-1: Product: syz [ 279.457651][ T5812] usb 7-1: Manufacturer: syz [ 279.458872][T11671] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.462241][ T5812] usb 7-1: SerialNumber: syz [ 279.497632][ T5812] usb 7-1: config 0 descriptor?? [ 279.514542][ T4193] Bluetooth: hci5: urb ffff88814b911900 submission failed (90) [ 279.537379][T11671] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.550242][T11671] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.574996][ T5812] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 279.594897][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2756'. [ 279.622553][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'. [ 279.714015][T10463] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 279.762563][T10463] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.791961][ T5812] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 279.793894][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.828198][T10463] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.838235][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.838420][ T5812] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 279.852833][T10463] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 279.922579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.955629][T10463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.967150][T11963] loop3: detected capacity change from 0 to 1024 [ 279.980076][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.007491][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.017517][T10463] usb 3-1: config 0 descriptor?? [ 280.018106][ T7] usb 2-1: USB disconnect, device number 15 [ 280.040687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.053621][T11941] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 280.184261][T11963] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.231642][ T5812] usb 7-1: USB disconnect, device number 8 [ 280.237883][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 280.259763][T11963] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,auto_da_alloc=0x0000000000000001,i_version,data_err=ignore,minixdf,data_err=ignore,auto_da_alloc,init_itable,data_err=ignore,grpjquota=,dioread_nolock,,errors=continue. Quota mode: none. [ 280.291240][ T5812] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 280.348435][ T4189] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 8(4), depth 0(0) [ 280.391363][ T5812] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 280.453790][ T4189] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 8(4), depth 0(0) [ 280.471482][ T5812] quatech2 7-1:0.51: device disconnected [ 280.525006][T10463] microsoft 0003:045E:009D.0015: unknown main item tag 0x6 [ 280.532325][T10463] microsoft 0003:045E:009D.0015: invalid report_size 26545 [ 280.558460][T10463] microsoft 0003:045E:009D.0015: item 0 2 1 7 parsing failed [ 280.573522][T10463] microsoft 0003:045E:009D.0015: parse failed [ 280.583501][T10463] microsoft: probe of 0003:045E:009D.0015 failed with error -22 [ 280.750996][T10589] usb 3-1: USB disconnect, device number 21 [ 280.817586][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2763'. [ 281.000992][ T4206] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.169613][ T4206] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.342400][ T4206] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.387896][T11999] loop1: detected capacity change from 0 to 4096 [ 281.453872][T12017] loop6: detected capacity change from 0 to 256 [ 281.467558][T11999] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 281.490878][ T4206] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.565178][T11999] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 281.619180][T12017] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 281.734500][T11999] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 281.872890][T11999] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 281.930806][T11999] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 282.013591][T11999] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 282.078367][T12034] tipc: Enabling of bearer rejected, failed to enable media [ 282.121497][T11999] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 282.214177][T11999] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 282.290519][T12041] loop7: detected capacity change from 0 to 256 [ 282.335723][T12041] exfat: Deprecated parameter 'namecase' [ 282.348650][T11999] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 282.370397][T12041] exfat: Deprecated parameter 'utf8' [ 282.411854][T12041] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 282.437446][T12026] chnl_net:caif_netlink_parms(): no params data found [ 282.530950][T11999] ntfs: volume version 3.1. [ 282.598474][T11999] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 282.719088][T12021] loop2: detected capacity change from 0 to 32768 [ 282.795855][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.803056][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.807267][T12021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2778 (12021) [ 282.866538][T12026] device bridge_slave_0 entered promiscuous mode [ 282.892236][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.902793][T12031] loop6: detected capacity change from 0 to 32768 [ 282.920349][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.933819][T12021] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 282.935364][T12026] device bridge_slave_1 entered promiscuous mode [ 282.991924][T12021] BTRFS info (device loop2): turning off barriers [ 282.999265][T12031] diRead: diIAGRead returned -5 [ 283.019390][T12057] loop1: detected capacity change from 0 to 256 [ 283.029497][T12021] BTRFS info (device loop2): setting nodatasum [ 283.042770][T12031] jfs_lookup: iget failed on inum 1048352 [ 283.046770][T12021] BTRFS info (device loop2): force zlib compression, level 3 [ 283.068924][T12021] BTRFS info (device loop2): ignoring bad roots [ 283.092748][T12021] BTRFS info (device loop2): turning on barriers [ 283.142856][T12021] BTRFS info (device loop2): unrecognized rescue option 'ignoremetacsums' [ 283.144379][T12026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.184716][T12021] BTRFS error (device loop2): unrecognized rescue value ignoremetacsums [ 283.218688][T12021] BTRFS error (device loop2): open_ctree failed: -22 [ 283.243338][T12026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.360115][T12068] loop6: detected capacity change from 0 to 512 [ 283.423060][T12026] team0: Port device team_slave_0 added [ 283.481058][T12026] team0: Port device team_slave_1 added [ 283.541164][T12068] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 283.593449][T12026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.600504][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.627745][T12068] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.662640][T12068] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.2789: Failed to acquire dquot type 1 [ 283.778310][T12068] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #16: comm syz.6.2789: corrupted inode contents [ 283.795922][T12026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.827784][T12068] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #16: comm syz.6.2789: mark_inode_dirty error [ 283.839471][T12026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.839487][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.839513][T12026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.912551][T12088] loop2: detected capacity change from 0 to 16 [ 283.919131][T12085] tipc: Cannot configure node identity twice [ 283.939344][ T5812] Bluetooth: hci3: command 0x0409 tx timeout [ 283.956178][T12026] device hsr_slave_0 entered promiscuous mode [ 283.970530][T12026] device hsr_slave_1 entered promiscuous mode [ 283.988092][T12026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.003735][T12068] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #16: comm syz.6.2789: corrupted inode contents [ 284.015473][T12026] Cannot create hsr debugfs directory [ 284.017569][T12088] erofs: (device loop2): mounted with root inode @ nid 36. [ 284.051963][T12068] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.2789: mark_inode_dirty error [ 284.122521][T12068] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #16: comm syz.6.2789: corrupted inode contents [ 284.192308][T12068] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 284.222959][T12068] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #16: comm syz.6.2789: corrupted inode contents [ 284.253632][T12068] EXT4-fs error (device loop6): ext4_truncate:4279: inode #16: comm syz.6.2789: mark_inode_dirty error [ 284.277340][ T4206] device hsr_slave_0 left promiscuous mode [ 284.290450][T12068] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 284.308273][ T4206] device hsr_slave_1 left promiscuous mode [ 284.325060][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.333658][T12068] EXT4-fs (loop6): 1 truncate cleaned up [ 284.340725][T12068] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.360317][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.411796][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.450015][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.457628][T12068] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 284.467210][ T4206] device bridge_slave_1 left promiscuous mode [ 284.487299][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.525473][ T4206] device veth1_macvtap left promiscuous mode [ 284.541732][ T4206] device veth0_macvtap left promiscuous mode [ 284.551011][ T4206] device veth1_vlan left promiscuous mode [ 284.578283][ T4206] device veth0_vlan left promiscuous mode [ 284.616943][T12092] loop1: detected capacity change from 0 to 32768 [ 284.712360][T12092] XFS (loop1): Mounting V5 Filesystem [ 284.822943][T12092] XFS (loop1): Ending clean mount [ 284.864043][ T4188] XFS (loop1): Unmounting Filesystem [ 285.025215][ T4206] team0 (unregistering): Port device team_slave_1 removed [ 285.039360][ T4206] team0 (unregistering): Port device team_slave_0 removed [ 285.071061][ T4206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.090068][ T4206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.200128][ T4206] bond0 (unregistering): Released all slaves [ 285.328848][T12124] loop1: detected capacity change from 0 to 4096 [ 285.443868][T12124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.475653][T12026] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 285.485676][T12124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 285.528107][T12026] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 285.543431][T12135] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.583673][T12026] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 285.614241][T12026] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 285.748439][T12133] loop6: detected capacity change from 0 to 8192 [ 285.877290][T12133] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 285.890890][T12026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.927580][T12133] REISERFS (device loop6): using ordered data mode [ 285.943863][T12133] reiserfs: using flush barriers [ 285.975249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.013596][ T5812] Bluetooth: hci3: command 0x041b tx timeout [ 286.013806][T10589] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 286.027927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.043244][T12133] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 286.094374][T12026] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.111671][T12133] REISERFS (device loop6): checking transaction log (loop6) [ 286.143854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.163959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.173843][T12133] REISERFS (device loop6): Using r5 hash to sort names [ 286.180994][T12133] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 286.198064][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.205185][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.230817][T12133] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 286.329316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.344185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.365501][T12133] REISERFS warning (device loop6): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 286.398138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.420111][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.427259][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.453506][T10589] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.472476][T10589] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.489245][T12148] loop7: detected capacity change from 0 to 32768 [ 286.490324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.511656][T10589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.521375][T10589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 286.552358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.575819][T12148] [ 286.575819][T12148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.575819][T12148] [ 286.590491][T10589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 286.614686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.656304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.674882][T12148] ERROR: (device loop7): dbReAlloc: the block is outside the filesystem [ 286.674882][T12148] [ 286.675000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.720078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.772127][T12148] ERROR: (device loop7): remounting filesystem as read-only [ 286.773575][T10589] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.805966][T12148] jfs_create: dtInsert returned -EIO [ 286.811414][T12148] ERROR: (device loop7): jfs_create: [ 286.811414][T12148] [ 286.813795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.850285][T10589] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.862605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.864073][T12162] netlink: 'syz.6.2814': attribute type 3 has an invalid length. [ 286.881074][T10589] usb 2-1: Product: syz [ 286.891458][T10589] usb 2-1: Manufacturer: syz [ 286.902292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.939108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.950487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.968274][T10589] cdc_wdm 2-1:1.0: skipping garbage [ 286.980276][T10589] cdc_wdm 2-1:1.0: skipping garbage [ 287.000848][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.067290][T12153] loop2: detected capacity change from 0 to 32768 [ 287.078000][T10589] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 287.103282][T10589] cdc_wdm 2-1:1.0: Unknown control protocol [ 287.180964][ T5812] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 287.221759][T12153] JBD2: Ignoring recovery information on journal [ 287.271092][ T5812] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.294225][T10589] usb 2-1: USB disconnect, device number 16 [ 287.346378][T12153] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.493050][T12181] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 287.506234][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.523997][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.541650][T12176] fido_id[12176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.596724][T12026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.596843][ T7928] ocfs2: Unmounting device (7,2) on (node local) [ 287.635496][T12181] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.833482][T12181] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.2815: Block bitmap for bg 0 marked uninitialized [ 288.166471][ T8023] Bluetooth: hci3: command 0x040f tx timeout [ 288.206892][T12206] set_capacity_and_notify: 1 callbacks suppressed [ 288.206911][T12206] loop1: detected capacity change from 0 to 512 [ 288.210204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.288736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.403395][T10589] Bluetooth: hci4: command 0x0406 tx timeout [ 288.409738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.424511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.451897][T12206] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2823: inode has both inline data and extents flags [ 288.499033][T12206] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2823: couldn't read orphan inode 15 (err -117) [ 288.531487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.543208][ C0] ================================================================== [ 288.551876][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 288.559424][ C0] Read of size 2 at addr ffff888079b0ae40 by task syz-executor/4171 [ 288.567419][ C0] [ 288.569762][ C0] CPU: 0 PID: 4171 Comm: syz-executor Not tainted syzkaller #0 [ 288.577312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.587390][ C0] Call Trace: [ 288.590681][ C0] [ 288.593532][ C0] dump_stack_lvl+0x188/0x250 [ 288.598238][ C0] ? show_regs_print_info+0x20/0x20 [ 288.603537][ C0] ? _printk+0xda/0x130 [ 288.607700][ C0] ? __nft_trace_packet+0x135/0x150 [ 288.612925][ C0] ? load_image+0x400/0x400 [ 288.617444][ C0] ? nft_synproxy_do_eval+0x304/0x570 [ 288.622828][ C0] print_address_description+0x60/0x2d0 [ 288.623518][T12206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.628381][ C0] ? __nft_trace_packet+0x135/0x150 [ 288.644539][ C0] kasan_report+0xdf/0x130 [ 288.648984][ C0] ? __nft_trace_packet+0x135/0x150 [ 288.654220][ C0] __nft_trace_packet+0x135/0x150 [ 288.659261][ C0] nft_do_chain+0x12a5/0x14f0 [ 288.663947][ C0] ? ip_vs_conn_out_get+0xa06/0xa60 [ 288.669163][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 288.675078][ C0] ? tcp_conn_schedule+0x498/0x850 [ 288.680234][ C0] ? ip_vs_in+0xbe1/0x1d20 [ 288.684668][ C0] ? nf_nat_inet_fn+0x8a3/0xad0 [ 288.689555][ C0] nft_do_chain_inet+0x25c/0x340 [ 288.694508][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 288.699385][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 288.704784][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 288.709735][ C0] nf_hook_slow+0xb9/0x200 [ 288.714257][ C0] ? NF_HOOK+0x390/0x390 [ 288.718516][ C0] NF_HOOK+0x1f2/0x390 [ 288.722593][ C0] ? NF_HOOK+0x390/0x390 [ 288.726846][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 288.731886][ C0] ? NF_HOOK+0x390/0x390 [ 288.736139][ C0] ? ip_local_deliver+0xbf/0x1a0 [ 288.741091][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 288.746131][ C0] ? ip_rcv_core+0xb60/0xb60 [ 288.750731][ C0] NF_HOOK+0x303/0x390 [ 288.754807][ C0] ? ip_rcv_core+0xb60/0xb60 [ 288.759406][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 288.764445][ C0] ? ip_rcv_core+0xb60/0xb60 [ 288.769131][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 288.774770][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 288.780411][ C0] __netif_receive_skb+0xcc/0x290 [ 288.785449][ C0] process_backlog+0x370/0x790 [ 288.790240][ C0] ? rps_trigger_softirq+0x210/0x210 [ 288.795549][ C0] __napi_poll+0xc0/0x430 [ 288.799888][ C0] ? net_rx_action+0x307/0xa10 [ 288.804663][ C0] net_rx_action+0x4d4/0xa10 [ 288.809269][ C0] ? net_tx_action+0x880/0x880 [ 288.814039][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 288.820027][ C0] ? detach_timer+0x2b0/0x2b0 [ 288.824727][ C0] handle_softirqs+0x339/0x830 [ 288.829503][ C0] ? do_softirq+0x142/0x210 [ 288.834024][ C0] ? do_softirq+0x210/0x210 [ 288.838539][ C0] do_softirq+0x142/0x210 [ 288.842957][ C0] [ 288.845883][ C0] [ 288.848813][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 288.854188][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 288.860180][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 288.861192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.865482][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 288.865513][ C0] ? local_bh_enable+0x5/0x20 [ 288.865535][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 288.865555][ C0] ? _local_bh_enable+0xa0/0xa0 [ 288.865573][ C0] ? ip_finish_output2+0x8f7/0x10a0 [ 288.865599][ C0] ip_finish_output2+0xd50/0x10a0 [ 288.865628][ C0] ? ip_fragment+0x210/0x210 [ 288.865645][ C0] ? skb_gso_validate_network_len+0x22d/0x450 [ 288.865671][ C0] ? ip_finish_output+0x1c1/0x4b0 [ 288.907341][T12026] device veth0_vlan entered promiscuous mode [ 288.907579][ C0] ip_output+0x2c0/0x3e0 [ 288.928973][ C0] __ip_queue_xmit+0x11c1/0x1c00 [ 288.933945][ C0] __tcp_transmit_skb+0x1d11/0x3200 [ 288.939182][ C0] ? __tcp_send_ack+0x5d0/0x5d0 [ 288.940869][T12026] device veth1_vlan entered promiscuous mode [ 288.944054][ C0] ? sk_forced_mem_schedule+0xe5/0x1a0 [ 288.944082][ C0] ? tcp_small_queue_check+0x201/0x400 [ 288.944106][ C0] tcp_write_xmit+0x18d3/0x6580 [ 288.966346][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 288.971748][ C0] __tcp_push_pending_frames+0x92/0x250 [ 288.977313][ C0] tcp_sendmsg_locked+0x2be6/0x3320 [ 288.982566][ C0] ? tcp_free_fastopen_req+0x70/0x70 [ 288.987879][ C0] tcp_sendmsg+0x2b/0x40 [ 288.992135][ C0] sock_write_iter+0x2a6/0x3a0 [ 288.996911][ C0] ? sock_read_iter+0x380/0x380 [ 289.001768][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 289.006813][ C0] ? memset+0x1e/0x40 [ 289.010809][ C0] ? iov_iter_init+0xb4/0x170 [ 289.015500][ C0] vfs_write+0x745/0xd60 [ 289.019765][ C0] ? file_end_write+0x250/0x250 [ 289.021093][T12026] device veth0_macvtap entered promiscuous mode [ 289.024627][ C0] ? __context_tracking_exit+0x4c/0x80 [ 289.024662][ C0] ? __fdget_pos+0x1e2/0x370 [ 289.040995][ C0] ksys_write+0x152/0x260 [ 289.045336][ C0] ? __ia32_sys_read+0x80/0x80 [ 289.050196][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 289.055414][ C0] do_syscall_64+0x4c/0xa0 [ 289.059837][ C0] ? clear_bhb_loop+0x30/0x80 [ 289.064518][ C0] ? clear_bhb_loop+0x30/0x80 [ 289.064768][T12026] device veth1_macvtap entered promiscuous mode [ 289.069199][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.069234][ C0] RIP: 0033:0x7f3613a20917 [ 289.085740][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 289.105366][ C0] RSP: 002b:00007ffe106ac600 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 289.114169][ C0] RAX: ffffffffffffffda RBX: 0000555580e30500 RCX: 00007f3613a20917 [ 289.122166][ C0] RDX: 0000000000000f50 RSI: 00007f360c4c80b0 RDI: 0000000000000003 [ 289.125367][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.130139][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.130156][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000f50 [ 289.130170][ C0] R13: 0000555580e45110 R14: 00007ffe106acba0 R15: 00007f360c4c80b0 [ 289.130205][ C0] [ 289.167559][ C0] [ 289.169659][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.169905][ C0] Allocated by task 4171: [ 289.184091][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 289.188949][ C0] slab_post_alloc_hook+0x4c/0x380 [ 289.194059][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 289.198693][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.199338][ C0] __alloc_skb+0xf4/0x750 [ 289.214058][ C0] synproxy_send_client_synack+0x16f/0xde0 [ 289.219871][ C0] nft_synproxy_eval_v4+0x347/0x4e0 [ 289.225083][ C0] nft_synproxy_do_eval+0x304/0x570 [ 289.230011][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.230276][ C0] nft_do_chain+0x48c/0x14f0 [ 289.230297][ C0] nft_do_chain_inet+0x25c/0x340 [ 289.230316][ C0] nf_hook_slow+0xb9/0x200 [ 289.254119][ C0] NF_HOOK+0x1f2/0x390 [ 289.258210][ C0] NF_HOOK+0x303/0x390 [ 289.258617][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.262285][ C0] __netif_receive_skb+0xcc/0x290 [ 289.262306][ C0] process_backlog+0x370/0x790 [ 289.262324][ C0] __napi_poll+0xc0/0x430 [ 289.262340][ C0] net_rx_action+0x4d4/0xa10 [ 289.262356][ C0] handle_softirqs+0x339/0x830 [ 289.262370][ C0] do_softirq+0x142/0x210 [ 289.262383][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 289.262399][ C0] ip_finish_output2+0xd50/0x10a0 [ 289.262415][ C0] ip_output+0x2c0/0x3e0 [ 289.262429][ C0] __ip_queue_xmit+0x11c1/0x1c00 [ 289.262445][ C0] __tcp_transmit_skb+0x1d11/0x3200 [ 289.262464][ C0] tcp_write_xmit+0x18d3/0x6580 [ 289.262481][ C0] __tcp_push_pending_frames+0x92/0x250 [ 289.262500][ C0] tcp_sendmsg_locked+0x2be6/0x3320 [ 289.262517][ C0] tcp_sendmsg+0x2b/0x40 [ 289.262532][ C0] sock_write_iter+0x2a6/0x3a0 [ 289.262548][ C0] vfs_write+0x745/0xd60 [ 289.262565][ C0] ksys_write+0x152/0x260 [ 289.262581][ C0] do_syscall_64+0x4c/0xa0 [ 289.262599][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.262618][ C0] [ 289.262623][ C0] Freed by task 4171: [ 289.262634][ C0] kasan_set_track+0x4b/0x70 [ 289.262652][ C0] kasan_set_free_info+0x1f/0x40 [ 289.262671][ C0] ____kasan_slab_free+0xd5/0x110 [ 289.262689][ C0] slab_free_freelist_hook+0xea/0x170 [ 289.262707][ C0] kmem_cache_free+0x8f/0x210 [ 289.262724][ C0] nft_synproxy_eval_v4+0x34f/0x4e0 [ 289.262741][ C0] nft_synproxy_do_eval+0x304/0x570 [ 289.262756][ C0] nft_do_chain+0x48c/0x14f0 [ 289.306152][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.306202][ C0] nft_do_chain_inet+0x25c/0x340 [ 289.321454][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.325515][ C0] nf_hook_slow+0xb9/0x200 [ 289.325538][ C0] NF_HOOK+0x1f2/0x390 [ 289.325553][ C0] NF_HOOK+0x303/0x390 [ 289.325567][ C0] __netif_receive_skb+0xcc/0x290 [ 289.340397][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.341095][ C0] process_backlog+0x370/0x790 [ 289.359944][T12026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.363014][ C0] __napi_poll+0xc0/0x430 [ 289.363041][ C0] net_rx_action+0x4d4/0xa10 [ 289.363058][ C0] handle_softirqs+0x339/0x830 [ 289.363074][ C0] do_softirq+0x142/0x210 [ 289.363089][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 289.363104][ C0] ip_finish_output2+0xd50/0x10a0 [ 289.363122][ C0] ip_output+0x2c0/0x3e0 [ 289.363136][ C0] __ip_queue_xmit+0x11c1/0x1c00 [ 289.363152][ C0] __tcp_transmit_skb+0x1d11/0x3200 [ 289.363170][ C0] tcp_write_xmit+0x18d3/0x6580 [ 289.363194][ C0] __tcp_push_pending_frames+0x92/0x250 [ 289.363212][ C0] tcp_sendmsg_locked+0x2be6/0x3320 [ 289.363228][ C0] tcp_sendmsg+0x2b/0x40 [ 289.363244][ C0] sock_write_iter+0x2a6/0x3a0 [ 289.363260][ C0] vfs_write+0x745/0xd60 [ 289.363277][ C0] ksys_write+0x152/0x260 [ 289.363293][ C0] do_syscall_64+0x4c/0xa0 [ 289.363311][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.363330][ C0] [ 289.363336][ C0] The buggy address belongs to the object at ffff888079b0adc0 [ 289.363336][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 289.363358][ C0] The buggy address is located 128 bytes inside of [ 289.363358][ C0] 232-byte region [ffff888079b0adc0, ffff888079b0aea8) [ 289.363378][ C0] The buggy address belongs to the page: [ 289.363400][ C0] page:ffffea0001e6c280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79b0a [ 289.363428][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 289.363459][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf1140 [ 289.392859][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.395470][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 289.395482][ C0] page dumped because: kasan: bad access detected [ 289.395504][ C0] page_owner tracks the page as allocated [ 289.395511][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4171, ts 288541725803, free_ts 288443937677 [ 289.395539][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 289.395564][ C0] __alloc_pages+0x1ee/0x480 [ 289.395583][ C0] new_slab+0xc0/0x4b0 [ 289.395599][ C0] ___slab_alloc+0x80a/0xdd0 [ 289.395614][ C0] kmem_cache_alloc_node+0x1c3/0x2d0 [ 289.395628][ C0] __alloc_skb+0xf4/0x750 [ 289.395645][ C0] synproxy_send_client_synack+0x16f/0xde0 [ 289.395661][ C0] nft_synproxy_eval_v4+0x347/0x4e0 [ 289.395677][ C0] nft_synproxy_do_eval+0x304/0x570 [ 289.395691][ C0] nft_do_chain+0x48c/0x14f0 [ 289.426345][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.429997][ C0] nft_do_chain_inet+0x25c/0x340 [ 289.461301][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.467825][ C0] nf_hook_slow+0xb9/0x200 [ 289.467847][ C0] NF_HOOK+0x1f2/0x390 [ 289.467862][ C0] NF_HOOK+0x303/0x390 [ 289.467876][ C0] __netif_receive_skb+0xcc/0x290 [ 289.467892][ C0] process_backlog+0x370/0x790 [ 289.467911][ C0] page last free stack trace: [ 289.467917][ C0] free_unref_page_prepare+0x637/0x6c0 [ 289.467938][ C0] free_unref_page+0x8f/0x2a0 [ 289.467954][ C0] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 289.467971][ C0] __apply_to_page_range+0x983/0xd10 [ 289.467986][ C0] kasan_release_vmalloc+0x93/0xb0 [ 289.467999][ C0] __purge_vmap_area_lazy+0xafc/0x1950 [ 289.468017][ C0] _vm_unmap_aliases+0x410/0x4a0 [ 289.468031][ C0] change_page_attr_set_clr+0x323/0xca0 [ 289.468046][ C0] set_memory_ro+0x89/0xd0 [ 289.468060][ C0] bpf_int_jit_compile+0xc6d8/0xcd80 [ 289.468077][ C0] bpf_prog_select_runtime+0x46f/0x7c0 [ 289.468093][ C0] bpf_prepare_filter+0x1020/0x11d0 [ 289.468109][ C0] sk_attach_filter+0x20/0x140 [ 289.468124][ C0] sock_setsockopt+0x16db/0x24c0 [ 289.468142][ C0] __sys_setsockopt+0x2f6/0x3d0 [ 289.468167][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 289.468186][ C0] [ 289.468191][ C0] Memory state around the buggy address: [ 289.468202][ C0] ffff888079b0ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 289.468214][ C0] ffff888079b0ad80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 289.468227][ C0] >ffff888079b0ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.468237][ C0] ^ [ 289.468248][ C0] ffff888079b0ae80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 289.468261][ C0] ffff888079b0af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.468270][ C0] ================================================================== [ 289.468279][ C0] Disabling lock debugging due to kernel taint [ 289.468406][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.485613][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.489171][ C0] CPU: 0 PID: 4171 Comm: syz-executor Tainted: G B syzkaller #0 [ 289.507175][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.508631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.512853][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.512875][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.517764][ C0] Call Trace: [ 289.517772][ C0] [ 289.517779][ C0] dump_stack_lvl+0x188/0x250 [ 289.517800][ C0] ? show_regs_print_info+0x20/0x20 [ 289.517818][ C0] ? load_image+0x400/0x400 [ 289.517836][ C0] panic+0x2e5/0x810 [ 289.517858][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 289.517877][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 289.517894][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 289.517909][ C0] ? _raw_spin_unlock+0x40/0x40 [ 289.517922][ C0] ? print_memory_metadata+0x314/0x400 [ 289.544765][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.547590][ C0] ? __nft_trace_packet+0x135/0x150 [ 289.553401][T12026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.556210][ C0] check_panic_on_warn+0x80/0xa0 [ 289.556237][ C0] ? __nft_trace_packet+0x135/0x150 [ 289.570522][T12026] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.583356][ C0] end_report+0x6d/0xf0 [ 289.583380][ C0] kasan_report+0x102/0x130 [ 289.583397][ C0] ? __nft_trace_packet+0x135/0x150 [ 289.583416][ C0] __nft_trace_packet+0x135/0x150 [ 289.583436][ C0] nft_do_chain+0x12a5/0x14f0 [ 289.583453][ C0] ? ip_vs_conn_out_get+0xa06/0xa60 [ 289.583474][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 289.583496][ C0] ? tcp_conn_schedule+0x498/0x850 [ 289.583522][ C0] ? ip_vs_in+0xbe1/0x1d20 [ 289.619811][T12026] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.620018][ C0] ? nf_nat_inet_fn+0x8a3/0xad0 [ 289.629353][T12026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.638961][ C0] nft_do_chain_inet+0x25c/0x340 [ 289.638984][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 289.639002][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 289.639023][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 289.639039][ C0] nf_hook_slow+0xb9/0x200 [ 289.639059][ C0] ? NF_HOOK+0x390/0x390 [ 289.639077][ C0] NF_HOOK+0x1f2/0x390 [ 289.649764][T12026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.654034][ C0] ? NF_HOOK+0x390/0x390 [ 289.654057][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 289.654073][ C0] ? NF_HOOK+0x390/0x390 [ 289.654088][ C0] ? ip_local_deliver+0xbf/0x1a0 [ 290.212709][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 290.217722][ C0] ? ip_rcv_core+0xb60/0xb60 [ 290.222295][ C0] NF_HOOK+0x303/0x390 [ 290.226343][ C0] ? ip_rcv_core+0xb60/0xb60 [ 290.230921][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 290.235927][ C0] ? ip_rcv_core+0xb60/0xb60 [ 290.240497][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 290.246124][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 290.251870][ C0] __netif_receive_skb+0xcc/0x290 [ 290.256901][ C0] process_backlog+0x370/0x790 [ 290.261689][ C0] ? rps_trigger_softirq+0x210/0x210 [ 290.266964][ C0] __napi_poll+0xc0/0x430 [ 290.271286][ C0] ? net_rx_action+0x307/0xa10 [ 290.276067][ C0] net_rx_action+0x4d4/0xa10 [ 290.280648][ C0] ? net_tx_action+0x880/0x880 [ 290.285392][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 290.291356][ C0] ? detach_timer+0x2b0/0x2b0 [ 290.296038][ C0] handle_softirqs+0x339/0x830 [ 290.300890][ C0] ? do_softirq+0x142/0x210 [ 290.305383][ C0] ? do_softirq+0x210/0x210 [ 290.309867][ C0] do_softirq+0x142/0x210 [ 290.314177][ C0] [ 290.317091][ C0] [ 290.320007][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 290.325361][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 290.331326][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 290.336595][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 290.341864][ C0] ? local_bh_enable+0x5/0x20 [ 290.346526][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 290.351705][ C0] ? _local_bh_enable+0xa0/0xa0 [ 290.356536][ C0] ? ip_finish_output2+0x8f7/0x10a0 [ 290.361716][ C0] ip_finish_output2+0xd50/0x10a0 [ 290.366723][ C0] ? ip_fragment+0x210/0x210 [ 290.371292][ C0] ? skb_gso_validate_network_len+0x22d/0x450 [ 290.377343][ C0] ? ip_finish_output+0x1c1/0x4b0 [ 290.382351][ C0] ip_output+0x2c0/0x3e0 [ 290.386576][ C0] __ip_queue_xmit+0x11c1/0x1c00 [ 290.391501][ C0] __tcp_transmit_skb+0x1d11/0x3200 [ 290.396694][ C0] ? __tcp_send_ack+0x5d0/0x5d0 [ 290.401530][ C0] ? sk_forced_mem_schedule+0xe5/0x1a0 [ 290.406972][ C0] ? tcp_small_queue_check+0x201/0x400 [ 290.412414][ C0] tcp_write_xmit+0x18d3/0x6580 [ 290.417255][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 290.422610][ C0] __tcp_push_pending_frames+0x92/0x250 [ 290.428135][ C0] tcp_sendmsg_locked+0x2be6/0x3320 [ 290.433412][ C0] ? tcp_free_fastopen_req+0x70/0x70 [ 290.438685][ C0] tcp_sendmsg+0x2b/0x40 [ 290.442909][ C0] sock_write_iter+0x2a6/0x3a0 [ 290.447653][ C0] ? sock_read_iter+0x380/0x380 [ 290.452481][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 290.457494][ C0] ? memset+0x1e/0x40 [ 290.461462][ C0] ? iov_iter_init+0xb4/0x170 [ 290.466134][ C0] vfs_write+0x745/0xd60 [ 290.470361][ C0] ? file_end_write+0x250/0x250 [ 290.475195][ C0] ? __context_tracking_exit+0x4c/0x80 [ 290.480638][ C0] ? __fdget_pos+0x1e2/0x370 [ 290.485234][ C0] ksys_write+0x152/0x260 [ 290.489544][ C0] ? __ia32_sys_read+0x80/0x80 [ 290.494300][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 290.499484][ C0] do_syscall_64+0x4c/0xa0 [ 290.503880][ C0] ? clear_bhb_loop+0x30/0x80 [ 290.508538][ C0] ? clear_bhb_loop+0x30/0x80 [ 290.513204][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.519083][ C0] RIP: 0033:0x7f3613a20917 [ 290.523482][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 290.543082][ C0] RSP: 002b:00007ffe106ac600 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 290.551484][ C0] RAX: ffffffffffffffda RBX: 0000555580e30500 RCX: 00007f3613a20917 [ 290.559553][ C0] RDX: 0000000000000f50 RSI: 00007f360c4c80b0 RDI: 0000000000000003 [ 290.567505][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.575453][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000f50 [ 290.583576][ C0] R13: 0000555580e45110 R14: 00007ffe106acba0 R15: 00007f360c4c80b0 [ 290.591534][ C0] [ 290.594825][ C0] Kernel Offset: disabled [ 290.602955][ C0] Rebooting in 86400 seconds..