last executing test programs: 35.192160029s ago: executing program 4 (id=652): syz_mount_image$hfs(&(0x7f0000020940), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x11, 0x2fe, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 34.893004247s ago: executing program 4 (id=654): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x9) 34.642964843s ago: executing program 4 (id=658): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) 34.499993587s ago: executing program 4 (id=659): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$eJzs3c9rHNcdAPDv7lqyJKuV7ZbWdqE2uOD+wLv6QbHU9tJT24Oh1NBLC44irRVHK63QrhxL+CAnNx9yCAkJhBxyz1+QS3yKCYSck3vIITgkjgJJILBhZndlWdLKC5G1RvP5wGhn5q3m+94u36eZNzOaADLrXPIjFzEcER9FxEhz8dE3nGu+bDy4NZNMuWg0rnyZS9+XLLff2v69YxGxHhEDEfGff0Q8m9sZt7a6Nj9dqZSXW8ul+sJSqba6dvH6wvRcea68ODZ5aWpqcnRifKr7xgzuXXzn5efvXH73X/3vfPvS/XuvvP9eUq3hVtnWduynZtP74sSWdUci4m9PIlgPFFrtecxHz1Mq+f5+ERHn0/wfiUL6bQJZ0Gg0Gj80jnYqXm8Ah1Y+3QfO5YsR0ZzP54vF5j78L2MoX6nW6n+6Vl1ZnG3uKx+Pvvy165XyaOtY4Xj05ZLlsXT+4fL4tuWJiHQf+NXCYLpcnKlWZg+2qwO2OdbK/8FW/n9TaOY/kBG7H/J3PCgADhFDfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF078n+XG3aBQ+ffly8nU6N9//vsjdWV+eqNi7Pl2nxxYWWmOFNdXirOVatzv84XZ6oLj9tepVpdGvtzrNws1cu1eqm2unZ1obqyWL+a3td/tdx3IK0CunHi7N1Pkr/2638ZTKdEf6tMrsLh1mjkotf3IAO9Ueh1BwT0jKF/yC7H+MDjzvgNdCpY2v+6AAcj3+sKAD1z4bTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bru8Pyvn215dtdoRPw8Ij4u9B1tP+sLOAzyn+ci8sn+/4WR3w1vL+3PfZeeIuiPiBfevPL6zel6fXksWf/V5vr6G631472oP9Ctdp628xgAyK6NB7dm2tNBxv3i782LEHbGP9IamxxIz1EObeQeuVYht0/XLqzfjohTu8XPpWMjI60zH0MbhR3xT7Zec81NpPU9kj43ff/iH98j/ukt8X+7Jf6Zn/ypQDbcTfqf0d3yL5/mdGzm36P9z/A+XTvRuf/Lb/Z/hQ7939kuYzz31oufdYx/O+LMrvHb8QbSWNvjJ3W70F343P3///dXnQobbze3s1v8zQ1ERKm+sFSqra5dTP+P3Fx5cWzy0tTU5OjE+FQpHaMutUeqd/rrqQ/v7dX+oYfxByOiq/Yn6/7QXfvj+9988L9ze8T//fndv/+Te8RPKvrHLuN/Pf7pM53KkvizHT7//B7xk3UTXcavvfZPzxIHgKdIbXVtfrpSKS+bMWPGzOZMr3sm4El7mPS9rgkAAAAAAAAAAADQrc6XAY/s2+XEvW4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8GMAAAD//0Gh0nQ=") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 33.793578725s ago: executing program 4 (id=667): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file2\x00', 0x1c886, &(0x7f0000000100)=ANY=[], 0x83, 0x614e, &(0x7f0000006ac0)="$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") lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 32.992669016s ago: executing program 4 (id=675): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff}) 32.783351571s ago: executing program 32 (id=675): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff}) 5.009423352s ago: executing program 3 (id=963): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000100)={0x0, 0x16, 0x4, 'a#\tu'}, 0x0, 0x0}) 3.681079846s ago: executing program 1 (id=976): timer_create(0x0, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timer_getoverrun(0x0) 3.001498983s ago: executing program 3 (id=978): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r1, 0x29, 0x2, 0x81, 0xcf57, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0xa0, 0x8000, 0x8, 0x1}}) 2.834733597s ago: executing program 2 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 2.757104059s ago: executing program 3 (id=981): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.694882721s ago: executing program 3 (id=982): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000340)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@dioread_nolock}, {@test_dummy_encryption_v1}, {@errors_continue}, {@delalloc}, {@nombcache}, {@grpquota}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="3f0000004c900200000000000300deff0000000000000000620000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff000000000000002d0ff46d00000000000000000000000000000000000000000000000000ff0400000009000000000000000a00"/171]) 2.693441591s ago: executing program 1 (id=983): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001200010225bd700000ffffff81000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.623549222s ago: executing program 1 (id=984): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000000000000000000000000fa00000000", @ANYRES32, @ANYBLOB="81b8000000000000380012800b000100697036746e6c000028000280080008002d000000140003002001000000de000000000000000000000500090029"], 0x58}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000140001002bbd7000fedbdf25ac141427000000000000000000000000e00000020000000000000000000000004e2100104e208001020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x40080) 2.514150665s ago: executing program 1 (id=986): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7) 2.447211067s ago: executing program 2 (id=988): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000a00)="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", 0x200, 0x200}]) 2.356211369s ago: executing program 1 (id=990): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@commit={'commit', 0x3d, 0x401}}, {@atime_quantum={'atime_quantum', 0x3d, 0x6}}, {@noacl}]}, 0x1, 0x4442, &(0x7f000000c300)="$eJzs3b9vHFkdAPDvjA1nh7tg311xSEisxEkgQJZ9FeCTcBwnPvtiggJ3QjSbtb2XGNbeyF4jiitMdxIVEgWiOIFE5ypyQRv+BBrKUEeCggYJKcJod2ftnfGus0S7Nsl9PlI8nvfb+51587aYvDTTuL+1V9raK1V2SvWNj/beKf28XtvfrkZ6Qc7t/zjiwgbCuUZxnVz2tfdZdvv6zR9++E7Enzf/+uT4+Lh5p0WMR09zXb//658fb3QfO9JCnWa7vVsblp9ExJtnxtU0FhE//lNEEhHXsrTF7DgZEVejnffhx7+6WxrSaB4+rr5bfrr2ydH826uHnx71/9uTiN/VvvSte9t//+rY/N++MaTuAQAAAAAAAAAAAAAAAAB4wS3fuf3BD2bn4lES44fJ2fd1l7Njv/djj4fmK6P/YwEAAAAAAAAAAAAAAAAAAOD/1On7/6Xk9R7v/y9lx4U+9Y+/N/oxMjor37+9dGN2Ltv/PTmT/+0s6R/XxmK6x77vxf3frxXq997//Ww/z6szvk6/U5GkM7nzNJ2ZifhDtvH7W8mVtFbfa3zzo/r+zubQhvHCyse/vXt/LjrZhv6Dxn+x0P55+/8P5yp440w7zfO7w7vEXmr5+I/1LffHXyYDxf96od558R+ON0bb/EsuH//xVtpkd4GF9gTQjP+vx58d/6VC+6OK/9WIKCXNsZZyM0BzDdNM77deIS8f/8+10nJTZ/ZB9rv//12I/41C+xdx//ea/w+KDyJ6ysf/8620iVyJ0/t/On32/X+z0P5lxL85/gPP/4Hk4/9KO3E8V6T1Sbbm/4ne8U+7Ci8X2h9V/D9Is3FeTXJXwGHSTu/3/9WRl4//xJn80+9/6UDrv/cK9S/q+1+n3873v870//Wk/f2P3vLxn+xbbtD130qh3qjn/4XW+o/nlY//lVZafu081fo5aPxXC+2PKv6tZ85EJ/6n88l/Xmmn/976byD5+H+hndj9QI+D1s/W+i959vr//UL7l7H+a47/IB1try+LfPxf7VuuGf+/DPD8v1WoN/r4R8xa6z+3fPxf61uudf/3Wf93l1sr1Bt1/L82ysYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgCL2XEqknQmd56mMzMR17Pzt+JKsl7ZLK/X6hs/24tYytJL8Xpyr1Zfr9TKWzv1zWq5UqvVNyJuZPlvxkSyV6s3ytuVBzdP2ppM7lcru431aqUREctZ+pfjtU5b61uN7cqDiHjvJO+LaX33wf3KTnlza/e7s7Ozs7FyMobppPqLRnWn0e69nRuxelJ3KukaXCv7/ZOxvJr8tL6/u1OptdJvddWp1Tcqta46a1neb2I6aezu72xUGtVyrX6v099lWsiOSyt3fnTn1tyZ/LtJ+7h4scMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/0aP47v42I8fZZGhGlJPslyf7lPHxcfbf8dO2To/m3Vw8/PXrSqwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLv2jNBBEcQB+MxZaegyrZbezXVFEC1cET6DH8DB6FC/hHSxSpE0RAskshP0D2yTV9zUP5sfMezAPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5R7fuvfXuolIcbW9jPj9/Ps/zp9L/b6bvn9xhhk5naeX7v6hbsq/p1F+W45Wbd6nm/XXR0zU3s9gT4b7dDDuMzS3b3Pz9X2vI+UqItqS36Scq2rZWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjh04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yj6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgVAAD//6jHIFA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c) lseek(r0, 0x8000000000000000, 0x4) 2.197508923s ago: executing program 2 (id=992): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 1.825053363s ago: executing program 2 (id=995): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff, 0xfffffffffffffffe, 0x4}) 1.639675238s ago: executing program 2 (id=997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x7) 1.619048398s ago: executing program 3 (id=998): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x9}) 1.464007772s ago: executing program 2 (id=1000): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.223429488s ago: executing program 5 (id=1003): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000300)={0x1, 0x2}) 1.057949683s ago: executing program 5 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 805.009839ms ago: executing program 0 (id=1007): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 770.48934ms ago: executing program 0 (id=1008): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f00000006c0)="$eJzslTFv2lAUhc+zwchVJbq2SysVCTrU2KatytABdezQSq0aZQMFB5GYEIEHYEp+RebMGTKjLPyPZEgyZQjZMkWKo2c/4icCQSQEoeR+w/Wx3+X5+ALHIAjixXJ6cnm8n07pXL9GCglx/UyNehSpv5u8+nRY/X2wY14cdXu/8kPbadPePwagV1DhiXPf9315PSWO/6AMdBzFaH0JDIbQRSj4L7QDhmWh1yRd5/2GsVp1HWOl7pa5MHmxeLF5yQ37628zlCV/TFpvtjvrJdd1Go8XP7ntUUuT5tcvKPgh+ZO/r8FszGh+sKDAEjoHhr9Cf0diMJtwJNLzv4tF+6tP8/zPVLxNTuiJY1GsLqzQo2SZ593FH31rqk8xcHGuz9fqrMSeDsxmwyif/F2GtJRPMSk/sl5tM9tsdz5Xa6WKU3E2bDv3zfximl/tbBBEYb0n//Qgn15J+8fH9GpMQ6vkeQ0rrLfndisBr2GPSlwtyD8FmY+hazbiJRf8TN6wD/yQUYFrP2SsaYIgCIIgCIIgCIIgCIIgiAfxHgz+MPk7l+w/QfdNAAAA//8DBm2N") listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/19, 0x13) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) 758.64189ms ago: executing program 5 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 569.960185ms ago: executing program 0 (id=1010): pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close_range(r0, 0xffffffffffffffff, 0x2) openat$cgroup_pressure(r1, &(0x7f0000000900)='io.pressure\x00', 0x2, 0x0) 566.797025ms ago: executing program 5 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000060900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 372.77202ms ago: executing program 0 (id=1012): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 360.09286ms ago: executing program 5 (id=1013): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1000404, &(0x7f0000000200)={[{@dmode={'dmode', 0x3d, 0x5}}, {@map_normal}, {}, {@check_relaxed}, {@unhide}, {@overriderock}]}, 0x45, 0x581, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x3b) 219.333014ms ago: executing program 0 (id=1014): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 142.188476ms ago: executing program 1 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c006) 59.984918ms ago: executing program 5 (id=1016): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 17.115879ms ago: executing program 0 (id=1017): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x3, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}}], 0x2, 0x0) 0s ago: executing program 3 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 87708][ T4345] loop0: detected capacity change from 0 to 32768 [ 71.392881][ T4347] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.35: couldn't read orphan inode 15 (err -117) [ 71.414269][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 71.459499][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467000][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474391][ T4345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (4345) [ 71.625429][ T4345] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 71.665640][ T4345] BTRFS info (device loop0): setting nodatasum [ 71.685349][ T4345] BTRFS info (device loop0): force zlib compression, level 3 [ 71.713937][ T4345] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 71.725438][ T4345] BTRFS info (device loop0): use lzo compression, level 0 [ 71.733742][ T4345] BTRFS info (device loop0): turning on flush-on-commit [ 71.751303][ T4345] BTRFS info (device loop0): enabling auto defrag [ 71.758055][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.773823][ T4345] BTRFS info (device loop0): max_inline at 4096 [ 71.784982][ T4345] BTRFS info (device loop0): using free space tree [ 71.809125][ T4345] BTRFS info (device loop0): has skinny extents [ 72.115461][ T4345] BTRFS info (device loop0): enabling ssd optimizations [ 72.215413][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.253934][ T4403] loop4: detected capacity change from 0 to 4096 [ 72.267368][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.327117][ T4231] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 72.357566][ T4407] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.379668][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.426143][ T4231] usb 4-1: config 0 descriptor?? [ 72.773047][ T4419] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 73.125426][ T4231] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71 [ 73.155160][ T4231] usb 4-1: USB disconnect, device number 2 [ 73.289842][ T4442] loop4: detected capacity change from 0 to 256 [ 73.368505][ T4441] loop0: detected capacity change from 0 to 1024 [ 73.392167][ T4438] loop1: detected capacity change from 0 to 4096 [ 73.405241][ T26] audit: type=1800 audit(1786966623.930:2): pid=4442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.62" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 73.414242][ T4442] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 73.442673][ T4442] FAT-fs (loop4): Filesystem has been set read-only [ 73.487987][ T4438] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 73.591249][ T4441] hfsplus: xattr search failed [ 73.639355][ T4441] hfsplus: xattr searching failed [ 73.770780][ T4438] ntfs3: loop1: failed to convert "c46c" to iso8859-13 [ 73.802816][ T4428] loop2: detected capacity change from 0 to 32768 [ 73.875594][ T4428] ======================================================= [ 73.875594][ T4428] WARNING: The mand mount option has been deprecated and [ 73.875594][ T4428] and is ignored by this kernel. Remove the mand [ 73.875594][ T4428] option from the mount to silence this warning. [ 73.875594][ T4428] ======================================================= [ 73.910603][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 74.442444][ T4478] loop2: detected capacity change from 0 to 256 [ 74.546366][ T4478] exfat: Deprecated parameter 'utf8' [ 74.589285][ T4468] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.620291][ T4478] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 74.647738][ T4481] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.651546][ T4468] ntfs3: loop0: Failed to load $Extend. [ 74.735873][ T4474] attempt to access beyond end of device [ 74.735873][ T4474] loop4: rw=0, want=2198922592330, limit=2048 [ 74.795001][ T3517] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.826486][ T4474] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 75.193404][ T4498] set_capacity_and_notify: 2 callbacks suppressed [ 75.193421][ T4498] loop3: detected capacity change from 0 to 1024 [ 75.204979][ T3517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.272958][ T4502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.89'. [ 75.278311][ T4496] loop4: detected capacity change from 0 to 4096 [ 75.313399][ T4498] hfsplus: failed to load root directory [ 75.325073][ T3517] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 75.332876][ T3517] usb 2-1: can't read configurations, error -71 [ 75.381290][ T4496] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 75.581692][ T4496] ntfs3: loop4: failed to convert "c46c" to koi8-u [ 75.943041][ T4523] loop3: detected capacity change from 0 to 1024 [ 76.035149][ T4523] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 76.105624][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.174714][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 76.351769][ T4518] loop4: detected capacity change from 0 to 32768 [ 76.482259][ T4518] XFS (loop4): Mounting V5 Filesystem [ 76.520937][ T4265] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.632963][ T4509] loop2: detected capacity change from 0 to 40427 [ 76.635330][ T4265] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.664470][ T4509] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 76.697630][ T4265] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.709725][ T4509] F2FS-fs (loop2): invalid crc value [ 76.738184][ T4518] XFS (loop4): Ending clean mount [ 76.758208][ T4509] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.790965][ T4518] XFS (loop4): Quotacheck needed: Please wait. [ 76.881905][ T4518] XFS (loop4): Quotacheck: Done. [ 76.889660][ T4265] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 76.924936][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.947665][ T4556] loop3: detected capacity change from 0 to 256 [ 76.955030][ T4265] usb 1-1: Product: syz [ 76.959250][ T4265] usb 1-1: Manufacturer: syz [ 76.963951][ T4265] usb 1-1: SerialNumber: syz [ 77.006837][ T4509] F2FS-fs (loop2): recover fsync data on readonly fs [ 77.023851][ T4509] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 77.035791][ T4509] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 77.058346][ T4265] usb 1-1: selecting invalid altsetting 1 [ 77.062680][ T4556] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.074930][ T4509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.081610][ T4265] usb 1-1: unit 6 not found! [ 77.107782][ T4560] loop1: detected capacity change from 0 to 1024 [ 77.114365][ T4265] usb 1-1: unit 0 not found! [ 77.135205][ T4556] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 77.178793][ T4192] XFS (loop4): Unmounting Filesystem [ 77.179720][ T4265] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 77.210846][ T4556] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 77.287132][ T4265] usb 1-1: USB disconnect, device number 2 [ 77.516801][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.193767][ T4585] loop1: detected capacity change from 0 to 2048 [ 78.328388][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 78.516812][ T4607] loop1: detected capacity change from 0 to 256 [ 78.650418][ T4607] FAT-fs (loop1): Directory bread(block 64) failed [ 78.669385][ T4607] FAT-fs (loop1): Directory bread(block 65) failed [ 78.685202][ T4607] FAT-fs (loop1): Directory bread(block 66) failed [ 78.692074][ T4607] FAT-fs (loop1): Directory bread(block 67) failed [ 78.725141][ T4607] FAT-fs (loop1): Directory bread(block 68) failed [ 78.758179][ T4607] FAT-fs (loop1): Directory bread(block 69) failed [ 78.792759][ T4607] FAT-fs (loop1): Directory bread(block 70) failed [ 78.810834][ T4607] FAT-fs (loop1): Directory bread(block 71) failed [ 78.823927][ T4625] loop2: detected capacity change from 0 to 128 [ 78.845540][ T4607] FAT-fs (loop1): Directory bread(block 72) failed [ 78.859829][ T4607] FAT-fs (loop1): Directory bread(block 73) failed [ 78.955289][ T4625] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 78.996160][ T4625] hpfs: filesystem error: improperly stopped [ 79.002954][ T4625] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 79.066927][ T4625] hpfs: You really don't want any checks? You are crazy... [ 79.086631][ T4625] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 79.094694][ T4625] hpfs: code page support is disabled [ 79.192417][ T4625] hpfs: hpfs_map_4sectors(): unaligned read [ 79.206229][ T4625] hpfs: hpfs_map_4sectors(): unaligned read [ 79.212179][ T4625] hpfs: filesystem error: unable to find root dir [ 79.872527][ T4652] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.153: invalid indirect mapped block 10 (level 1) [ 80.019826][ T4652] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.153: invalid indirect mapped block 8 (level 1) [ 80.056330][ T4652] EXT4-fs (loop0): 1 truncate cleaned up [ 80.091376][ T4652] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 80.212222][ T4634] set_capacity_and_notify: 5 callbacks suppressed [ 80.212239][ T4634] loop3: detected capacity change from 0 to 32768 [ 80.235191][ T4648] XFS (loop1): Mounting V5 Filesystem [ 80.498974][ T4666] loop2: detected capacity change from 0 to 4096 [ 80.526905][ T4648] XFS (loop1): Ending clean mount [ 80.568050][ T4666] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 80.594045][ T4668] loop0: detected capacity change from 0 to 4096 [ 80.657811][ T4668] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 80.713372][ T4666] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 80.813347][ T4186] XFS (loop1): Unmounting Filesystem [ 80.882079][ T4668] ntfs: volume version 3.1. [ 81.353009][ T4679] loop4: detected capacity change from 0 to 1024 [ 81.467228][ T4679] hfsplus: invalid length 1280 has been corrected to 255 [ 81.905595][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.098196][ T4680] loop0: detected capacity change from 0 to 32768 [ 82.145276][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 82.242107][ T4680] JBD2: Ignoring recovery information on journal [ 82.275330][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.455352][ T7] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 82.475996][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.484143][ T7] usb 4-1: Product: syz [ 82.519130][ T7] usb 4-1: Manufacturer: syz [ 82.523792][ T7] usb 4-1: SerialNumber: syz [ 82.533566][ T4680] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.742274][ T4699] loop4: detected capacity change from 0 to 40427 [ 82.772276][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 82.806403][ T4699] F2FS-fs (loop4): invalid crc value [ 82.862130][ T4728] loop2: detected capacity change from 0 to 16 [ 82.882109][ T4699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.946973][ T4728] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.018297][ T4691] udc-core: couldn't find an available UDC or it's busy [ 83.025524][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.027459][ T4699] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 83.039046][ T4691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.075123][ T4699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 83.159702][ T7] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 83.226853][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 83.265328][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 83.272333][ T7] usb 4-1: USB disconnect, device number 3 [ 83.379213][ T26] audit: type=1400 audit(1786966633.910:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4738 comm="syz.0.188" [ 83.403088][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.423698][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.445372][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 83.477319][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.503902][ T4192] attempt to access beyond end of device [ 83.503902][ T4192] loop4: rw=2049, want=40992, limit=40427 [ 83.575131][ T4233] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 83.585425][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.594748][ T4233] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.620154][ T4233] usb 2-1: Manufacturer: syz [ 83.635629][ T4233] usb 2-1: config 0 descriptor?? [ 83.972371][ T4233] usb 2-1: USB disconnect, device number 5 [ 84.020289][ T4753] mmap: syz.3.196 (4753) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 84.074623][ T4741] loop2: detected capacity change from 0 to 32768 [ 84.123329][ T4741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.189 (4741) [ 84.217588][ T4741] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 84.255661][ T4741] BTRFS info (device loop2): setting nodatasum [ 84.279218][ T4757] loop4: detected capacity change from 0 to 1024 [ 84.285994][ T4741] BTRFS info (device loop2): force zlib compression, level 3 [ 84.304100][ T4741] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 84.326460][ T4741] BTRFS info (device loop2): use lzo compression, level 0 [ 84.344107][ T4741] BTRFS info (device loop2): turning on flush-on-commit [ 84.363814][ T4741] BTRFS info (device loop2): enabling auto defrag [ 84.395029][ T4741] BTRFS info (device loop2): max_inline at 4096 [ 84.425088][ T4741] BTRFS info (device loop2): using free space tree [ 84.442018][ T4741] BTRFS info (device loop2): has skinny extents [ 84.726740][ T4751] loop0: detected capacity change from 0 to 32768 [ 84.751854][ T4741] BTRFS info (device loop2): enabling ssd optimizations [ 85.407070][ T4804] netlink: 'syz.3.209': attribute type 3 has an invalid length. [ 85.422514][ T4806] set_capacity_and_notify: 1 callbacks suppressed [ 85.422533][ T4806] loop1: detected capacity change from 0 to 1024 [ 85.588060][ T4806] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 85.614996][ T4806] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.709035][ T4806] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 85.787001][ T4806] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #17: comm syz.1.208: iget: bad i_size value: 4398046511204 [ 85.867954][ T4806] EXT4-fs (loop1): no journal found [ 85.926818][ T4827] loop3: detected capacity change from 0 to 128 [ 86.076275][ T4827] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 86.144646][ T4827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.354954][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.410668][ T4839] loop2: detected capacity change from 0 to 512 [ 86.443841][ T4839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.458750][ T4841] loop0: detected capacity change from 0 to 1024 [ 86.458976][ T4839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.475989][ T4843] loop3: detected capacity change from 0 to 512 [ 86.518269][ T4839] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.537926][ T4839] EXT4-fs (loop2): 1 truncate cleaned up [ 86.546049][ T4839] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,user_xattr,nolazytime,quota,,errors=continue. Quota mode: writeback. [ 86.574398][ T4843] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 86.631244][ T4841] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none. [ 86.662566][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 86.674466][ T4843] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.751354][ T4841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.227: bg 0: block 153: padding at end of block bitmap is not set [ 86.829468][ T1107] cfg80211: failed to load regulatory.db [ 86.834986][ T4232] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.849304][ T4839] EXT4-fs (loop2): Can't set test_dummy_encryption on remount [ 86.858428][ T4232] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.996486][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.013079][ T4232] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 87.025840][ T4232] usb 2-1: Product: syz [ 87.030278][ T4232] usb 2-1: Manufacturer: syz [ 87.086436][ T4232] hub 2-1:4.0: USB hub found [ 87.097970][ T4855] usb usb4: usbfs: process 4855 (syz.4.230) did not claim interface 0 before use [ 87.120192][ T4857] loop2: detected capacity change from 0 to 256 [ 87.228423][ T4857] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 87.305122][ T4232] hub 2-1:4.0: 2 ports detected [ 87.541915][ T4232] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 87.548889][ T4232] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 87.571494][ T4866] loop0: detected capacity change from 0 to 4096 [ 87.616004][ T4232] usb 2-1: USB disconnect, device number 6 [ 87.711971][ T4866] ntfs: volume version 3.1. [ 87.728046][ T4874] loop2: detected capacity change from 0 to 1024 [ 87.849416][ T4874] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 87.992907][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 88.354940][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.381667][ T4898] loop3: detected capacity change from 0 to 2048 [ 88.455289][ T4898] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.519586][ T4910] loop0: detected capacity change from 0 to 764 [ 88.541384][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop3 [ 88.541827][ T4911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.607455][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 88.725426][ T1107] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 88.915587][ T1107] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 88.946560][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.961841][ T1107] usb 3-1: Product: syz [ 88.971222][ T1107] usb 3-1: Manufacturer: syz [ 89.006587][ T1107] usb 3-1: SerialNumber: syz [ 89.109027][ T4925] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 89.306116][ T1107] usb 3-1: USB disconnect, device number 2 [ 89.331544][ T4929] NILFS (loop0): invalid segment: Magic number mismatch [ 89.346271][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 89.350696][ T4929] NILFS (loop0): trying rollback from an earlier position [ 89.406395][ T4939] overlayfs: upper fs is r/o, try multi-lower layers mount [ 89.438636][ T4929] NILFS (loop0): recovery complete [ 89.465279][ T4940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 89.474360][ T4941] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.551604][ T4929] NILFS (loop0): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=36028797018963974, cno=3, offset=234, blocknr=0, vblocknr=1073741826 [ 89.620912][ T4929] NILFS (loop0): error -2 preparing GC: cannot read source blocks [ 89.640464][ T4947] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 89.654768][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.696177][ T4949] netlink: 48 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.906478][ T4962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'. [ 90.035848][ T4961] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.043844][ T4961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 90.082036][ T4961] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.116372][ T4961] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.274: iget: bad i_size value: 12154761577498 [ 90.180410][ T4961] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.274: couldn't read orphan inode 13 (err -117) [ 90.236770][ T4961] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 90.309347][ T4961] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.274: dx entry: limit 65535 != root limit 120 [ 90.368693][ T4961] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.274: Corrupt directory, running e2fsck is recommended [ 90.445119][ T4961] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.274: path /56/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 90.619499][ T4960] set_capacity_and_notify: 4 callbacks suppressed [ 90.619516][ T4960] loop4: detected capacity change from 0 to 40427 [ 90.688932][ T4960] F2FS-fs (loop4): invalid crc value [ 90.693913][ T4975] loop0: detected capacity change from 0 to 4096 [ 90.773621][ T4975] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 90.805379][ T4975] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 90.855533][ T4975] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 90.858573][ T4960] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.915032][ T4975] ntfs: volume version 3.1. [ 90.978188][ T4975] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 91.023091][ T4975] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 91.038013][ T4957] loop3: detected capacity change from 0 to 40427 [ 91.051389][ T4960] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 91.060441][ T4975] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 91.072798][ T4975] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 91.087424][ T4960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 91.168390][ T4957] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 91.204453][ T4957] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.215631][ T4957] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 91.243301][ T4957] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 91.299029][ T4957] F2FS-fs (loop3): invalid crc value [ 91.306172][ T4235] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 91.406332][ T4957] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.564777][ T5007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.290'. [ 91.638896][ T4957] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.651660][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 91.654957][ T4957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.686737][ T5003] loop2: detected capacity change from 0 to 4096 [ 91.745119][ T4235] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 91.797809][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 91.850662][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 91.911111][ T4235] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 91.952670][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.991955][ T4235] usb 2-1: config 0 descriptor?? [ 92.025683][ T4990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.036621][ T5003] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 92.141586][ T5003] ntfs3: loop2: failed to convert "0080" to cp862 [ 92.236735][ T5003] ntfs3: loop2: failed to convert name for inode 1e. [ 92.497160][ T4235] hid (null): usage index exceeded [ 92.502493][ T4235] hid (null): global environment stack underflow [ 92.533065][ T4235] uclogic 0003:28BD:0075.0003: ignoring exceeding usage max [ 92.570468][ T4235] uclogic 0003:28BD:0075.0003: ignoring exceeding usage max [ 92.633320][ T4235] uclogic 0003:28BD:0075.0003: usage index exceeded [ 92.648916][ T4235] uclogic 0003:28BD:0075.0003: item 0 4 2 2 parsing failed [ 92.671910][ T4235] uclogic 0003:28BD:0075.0003: parse failed [ 92.684918][ T4235] uclogic: probe of 0003:28BD:0075.0003 failed with error -22 [ 92.755160][ T4235] usb 2-1: USB disconnect, device number 7 [ 92.780582][ T5046] loop3: detected capacity change from 0 to 128 [ 92.848225][ T5048] loop2: detected capacity change from 0 to 64 [ 92.896455][ T5046] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.054638][ T5052] loop0: detected capacity change from 0 to 1024 [ 93.155993][ T5024] loop4: detected capacity change from 0 to 32768 [ 93.208990][ T5052] hfsplus: bad catalog entry type [ 93.287579][ T4233] kernel write not supported for file /admmidi2 (pid: 4233 comm: kworker/0:5) [ 93.296896][ T5024] [ 93.296896][ T5024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.296896][ T5024] [ 93.308224][ T5024] [ 93.308224][ T5024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.308224][ T5024] [ 93.353927][ T5060] loop3: detected capacity change from 0 to 256 [ 93.404208][ T5024] [ 93.404208][ T5024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.404208][ T5024] [ 93.472418][ T5024] [ 93.472418][ T5024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.472418][ T5024] [ 93.472481][ T5024] [ 93.472481][ T5024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.472481][ T5024] [ 93.477170][ T276] [ 93.477170][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.477170][ T276] [ 93.573704][ T5068] loop1: detected capacity change from 0 to 256 [ 93.615041][ T5068] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 93.634226][ T4192] [ 93.634226][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.634226][ T4192] [ 93.641777][ T26] audit: type=1800 audit(1786966644.170:4): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.321" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 93.641987][ T4192] [ 93.641987][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.641987][ T4192] [ 93.716272][ T5075] binder: 5074:5075 ioctl c00c620f 200000002980 returned -22 [ 94.157078][ T5082] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.329'. [ 94.275564][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.366320][ T5090] kernel profiling enabled (shift: 5) [ 94.375709][ T5088] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.489595][ T5086] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.544934][ T5086] hpfs: filesystem error: improperly stopped [ 94.551244][ T5086] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.579702][ T5086] hpfs: You really don't want any checks? You are crazy... [ 94.590658][ T5086] hpfs: hpfs_map_sector(): read error [ 94.601545][ T5086] hpfs: code page support is disabled [ 94.609260][ T5086] hpfs: hpfs_map_4sectors(): unaligned read [ 94.620600][ T5086] hpfs: hpfs_map_4sectors(): unaligned read [ 94.646715][ T5086] hpfs: filesystem error: unable to find root dir [ 94.651597][ T5068] attempt to access beyond end of device [ 94.651597][ T5068] loop1: rw=16777216, want=34359738496, limit=256 [ 94.736689][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.761741][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.804979][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.828957][ T4235] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.885808][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.936224][ T4235] usb 4-1: config 0 descriptor?? [ 95.285340][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.431410][ T5120] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 95.489266][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 95.505576][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 95.520591][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 95.540131][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 95.561839][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 95.575089][ T4235] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 95.580582][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 95.584721][ T4235] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 95.632318][ T5128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 95.643828][ T5116] XFS (loop4): Mounting V5 Filesystem [ 95.677425][ T4235] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.725299][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.732319][ T5116] XFS (loop4): Starting recovery (logdev: internal) [ 95.744137][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.797418][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.805401][ T4235] usb 4-1: USB disconnect, device number 4 [ 95.874525][ T1107] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.936359][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.967691][ T1107] usb 1-1: config 0 descriptor?? [ 95.977593][ T5116] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x8 [ 95.989609][ T5116] XFS (loop4): Unmount and run xfs_repair [ 95.995473][ T5116] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 96.002890][ T5116] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff R3FC............ [ 96.011812][ T5116] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 96.020822][ T5116] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 96.029812][ T5116] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 96.039752][ T5116] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 96.048714][ T5116] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.057654][ T5116] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.066833][ T5116] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.077556][ T5116] XFS (loop4): log mount/recovery failed: error -74 [ 96.132426][ T5116] XFS (loop4): log mount failed [ 96.224734][ T5139] fido_id[5139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 96.464063][ T1107] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 96.469032][ T5146] CUSE: unknown device info "" [ 96.476647][ T5146] CUSE: zero length info key specified [ 96.513150][ T1107] HID 045e:07da: Invalid code 65791 type 1 [ 96.549540][ T1107] HID 045e:07da: Invalid code 768 type 1 [ 96.568158][ T1107] HID 045e:07da: Invalid code 769 type 1 [ 96.594181][ T1107] HID 045e:07da: Invalid code 770 type 1 [ 96.615608][ T1107] HID 045e:07da: Invalid code 771 type 1 [ 96.637530][ T1107] HID 045e:07da: Invalid code 772 type 1 [ 96.653526][ T1107] HID 045e:07da: Invalid code 773 type 1 [ 96.678306][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 96.684406][ T1107] HID 045e:07da: Invalid code 774 type 1 [ 96.706548][ T5154] netlink: 200 bytes leftover after parsing attributes in process `syz.4.358'. [ 96.711783][ T1107] HID 045e:07da: Invalid code 775 type 1 [ 96.737487][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 96.747293][ T1107] HID 045e:07da: Invalid code 776 type 1 [ 96.767773][ T5133] set_capacity_and_notify: 4 callbacks suppressed [ 96.767790][ T5133] loop2: detected capacity change from 0 to 40427 [ 96.785006][ T5157] mkiss: ax0: crc mode is auto. [ 96.831092][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input6 [ 96.861129][ T5133] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 96.881194][ T5133] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 96.899747][ T5133] F2FS-fs (loop2): invalid crc value [ 96.955721][ T5133] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 96.982488][ T1107] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 97.070414][ T1107] usb 1-1: USB disconnect, device number 3 [ 97.168023][ T5133] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 97.193947][ T5133] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.287205][ T5177] loop1: detected capacity change from 0 to 256 [ 97.330730][ T5174] fido_id[5174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 97.530170][ T4197] attempt to access beyond end of device [ 97.530170][ T4197] loop2: rw=2049, want=45104, limit=40427 [ 97.649325][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 97.786079][ T5188] loop4: detected capacity change from 0 to 1024 [ 97.837126][ T5191] netlink: 31 bytes leftover after parsing attributes in process `syz.0.372'. [ 98.088182][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 98.341039][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 98.388950][ T5215] netlink: del zone limit has 4 unknown bytes [ 98.516551][ T5222] loop0: detected capacity change from 0 to 512 [ 98.609688][ T5222] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.613640][ T5228] loop4: detected capacity change from 0 to 1024 [ 98.646855][ T5222] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.387: bad orphan inode 131083 [ 98.663794][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 98.663802][ T5230] loop3: detected capacity change from 0 to 2048 [ 98.854148][ T5241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.053575][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 99.085307][ T5249] device gretap0 entered promiscuous mode [ 99.282092][ T5257] loop0: detected capacity change from 0 to 8 [ 99.333470][ T5262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'. [ 99.422192][ T5257] SQUASHFS error: lzo decompression failed, data probably corrupt [ 99.448148][ T5257] SQUASHFS error: Failed to read block 0x82: -5 [ 99.471089][ T5257] SQUASHFS error: Unable to read metadata cache entry [80] [ 99.509342][ T5257] SQUASHFS error: Unable to read inode 0x11f [ 99.632869][ T5271] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.407'. [ 99.915563][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.109145][ T5299] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 100.145074][ T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 100.221695][ T5304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.424'. [ 100.272303][ T5306] loop1: detected capacity change from 0 to 512 [ 100.280743][ T5302] loop2: detected capacity change from 0 to 4096 [ 100.295150][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.313285][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.369458][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.378581][ T5312] netlink: 256 bytes leftover after parsing attributes in process `syz.3.426'. [ 100.386520][ T5310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.391458][ T5312] unsupported nlmsg_type 40 [ 100.405142][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 100.439327][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.469698][ T5306] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.500430][ T7] usb 1-1: SerialNumber: syz [ 100.558490][ T7] usb 1-1: 0:2 : does not exist [ 100.585431][ T21] usb 5-1: config 0 interface 0 altsetting 65 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 100.644888][ T21] usb 5-1: config 0 interface 0 altsetting 65 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.688865][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.698604][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 100.715753][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.743563][ T21] usb 5-1: config 0 descriptor?? [ 100.795255][ T5286] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.022272][ T7] usb 1-1: USB disconnect, device number 4 [ 101.063852][ T5332] loop1: detected capacity change from 0 to 1024 [ 101.115065][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.178932][ T5332] EXT4-fs (loop1): Ignoring removed orlov option [ 101.190132][ T5336] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 101.203161][ T5332] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 101.251818][ T5332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 101.260714][ T5332] System zones: 0-1, 3-36 [ 101.272052][ T5332] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 101.299637][ T21] wacom 0003:056A:0307.0006: unknown main item tag 0x0 [ 101.326449][ T21] wacom 0003:056A:0307.0006: unknown main item tag 0x0 [ 101.352141][ T5336] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 101.359851][ T21] wacom 0003:056A:0307.0006: unknown main item tag 0x0 [ 101.411575][ T21] wacom 0003:056A:0307.0006: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.4-1/input0 [ 101.433297][ T5341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.441'. [ 101.515182][ T23] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 101.523632][ T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.571258][ T23] usb 3-1: config 0 has no interface number 0 [ 101.595119][ T23] usb 3-1: too many endpoints for config 0 interface 8 altsetting 91: 227, using maximum allowed: 30 [ 101.647169][ T23] usb 3-1: config 0 interface 8 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 101.680796][ T23] usb 3-1: config 0 interface 8 has no altsetting 0 [ 101.712842][ T23] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 101.738941][ T5346] hfsplus: xattr search failed [ 101.750589][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.763303][ T5351] hfsplus: xattr searching failed [ 101.794981][ T21] usb 5-1: USB disconnect, device number 2 [ 101.803306][ T23] usb 3-1: config 0 descriptor?? [ 101.955330][ T5355] set_capacity_and_notify: 2 callbacks suppressed [ 101.955348][ T5355] loop3: detected capacity change from 0 to 4096 [ 102.018500][ T5355] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.049107][ T26] audit: type=1800 audit(1786966652.570:5): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.446" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 102.075192][ T4235] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 102.145255][ T23] usb 3-1: string descriptor 0 read error: -71 [ 102.166155][ T23] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected [ 102.187168][ T23] usb 3-1: Detected FT-X [ 102.215093][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 102.242905][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 102.275047][ T23] ftdi_sio 3-1:0.8: GPIO initialisation failed: -71 [ 102.308994][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.355458][ T23] usb 3-1: USB disconnect, device number 3 [ 102.381642][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.393162][ T5371] loop1: detected capacity change from 0 to 256 [ 102.435823][ T23] ftdi_sio 3-1:0.8: device disconnected [ 102.455992][ T5371] exfat: Deprecated parameter 'utf8' [ 102.514426][ T4235] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 102.530025][ T4235] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.530918][ T5371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 102.553689][ T4235] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.566744][ T5373] loop4: detected capacity change from 0 to 1024 [ 102.567035][ T4235] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 102.593988][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.621067][ T4235] usb 1-1: config 0 descriptor?? [ 102.645637][ T5348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.856946][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 103.083371][ T5365] loop3: detected capacity change from 0 to 32768 [ 103.137142][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x2 [ 103.144516][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x5 [ 103.160870][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x3 [ 103.185042][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 103.192070][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 103.200624][ T4235] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 103.209769][ T4235] elecom 0003:056E:00FC.0007: invalid report_count 885399381 [ 103.217369][ T23] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 103.224956][ T4235] elecom 0003:056E:00FC.0007: item 0 4 1 9 parsing failed [ 103.232593][ T4235] elecom: probe of 0003:056E:00FC.0007 failed with error -22 [ 103.285367][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.387407][ T4235] usb 1-1: USB disconnect, device number 5 [ 103.476927][ T5400] loop3: detected capacity change from 0 to 64 [ 103.545116][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 103.635259][ T23] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 103.664165][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.671373][ T23] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 103.681789][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.704535][ T23] usb 5-1: config 0 descriptor?? [ 103.725300][ T5379] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.825379][ T7] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 103.834601][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.855091][ T7] usb 3-1: Product: syz [ 103.859533][ T7] usb 3-1: Manufacturer: syz [ 103.864148][ T7] usb 3-1: SerialNumber: syz [ 103.887723][ T7] usb 3-1: config 0 descriptor?? [ 103.927136][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 103.978404][ T5404] loop3: detected capacity change from 0 to 32768 [ 104.027592][ T5404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.468 (5404) [ 104.051187][ T5404] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 104.060459][ T5404] BTRFS info (device loop3): setting nodatasum [ 104.067041][ T5404] BTRFS info (device loop3): force zlib compression, level 3 [ 104.074627][ T5404] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 104.084701][ T5404] BTRFS info (device loop3): use lzo compression, level 0 [ 104.092234][ T5404] BTRFS info (device loop3): turning on flush-on-commit [ 104.100217][ T5404] BTRFS info (device loop3): enabling auto defrag [ 104.107192][ T5404] BTRFS info (device loop3): max_inline at 4096 [ 104.113740][ T5404] BTRFS info (device loop3): using free space tree [ 104.133288][ T5404] BTRFS info (device loop3): has skinny extents [ 104.175400][ T5404] BTRFS info (device loop3): enabling ssd optimizations [ 104.197724][ T23] kye 0003:0458:501A.0008: unknown main item tag 0x2 [ 104.229168][ T23] kye 0003:0458:501A.0008: unknown main item tag 0x6 [ 104.265309][ T23] kye 0003:0458:501A.0008: ignoring exceeding usage max [ 104.275145][ T4235] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 104.309155][ T23] kye 0003:0458:501A.0008: hidraw0: USB HID v0.81 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 104.353522][ T23] kye 0003:0458:501A.0008: tablet-enabling feature report not found [ 104.397909][ T5437] loop1: detected capacity change from 0 to 256 [ 104.411405][ T23] kye 0003:0458:501A.0008: tablet enabling failed [ 104.429588][ T5437] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.471081][ T23] usb 5-1: USB disconnect, device number 3 [ 104.498109][ T5437] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 104.530237][ T5437] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.625299][ T7] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 104.631238][ T7] sq930x: probe of 3-1:0.0 failed with error -71 [ 104.644764][ T5439] fido_id[5439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 104.689409][ T4235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.712993][ T7] usb 3-1: USB disconnect, device number 4 [ 104.713076][ T4235] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.745822][ T4235] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 104.925479][ T4235] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 104.944100][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.953917][ T4235] usb 1-1: Product: syz [ 104.981666][ T4235] usb 1-1: Manufacturer: syz [ 104.992360][ T4235] usb 1-1: SerialNumber: syz [ 105.411505][ T5448] kernel write not supported for file /sg0 (pid: 5448 comm: kworker/1:18) [ 105.554992][ C1] usb 1-1: received EP1 urb->status = -2 [ 105.561436][ T4235] usb 1-1: unable to init card! (ret=-110) [ 105.568974][ T4235] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 105.590415][ T5479] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 105.598869][ T5483] loop2: detected capacity change from 0 to 256 [ 105.608881][ T5479] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 105.626600][ T5479] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 105.721371][ T5483] FAT-fs (loop2): Directory bread(block 64) failed [ 105.752055][ T5483] FAT-fs (loop2): Directory bread(block 65) failed [ 105.782301][ T5483] FAT-fs (loop2): Directory bread(block 66) failed [ 105.783394][ T1107] usb 1-1: USB disconnect, device number 6 [ 105.794399][ T5483] FAT-fs (loop2): Directory bread(block 67) failed [ 105.806580][ T5483] FAT-fs (loop2): Directory bread(block 68) failed [ 105.847138][ T5483] FAT-fs (loop2): Directory bread(block 69) failed [ 105.863647][ T5483] FAT-fs (loop2): Directory bread(block 70) failed [ 105.879590][ T5483] FAT-fs (loop2): Directory bread(block 71) failed [ 105.903823][ T5483] FAT-fs (loop2): Directory bread(block 72) failed [ 105.929633][ T5483] FAT-fs (loop2): Directory bread(block 73) failed [ 106.207497][ T5503] ip_tables: iptables: counters copy to user failed while replacing table [ 106.289220][ T5509] loop3: detected capacity change from 0 to 512 [ 106.338454][ T5509] EXT4-fs (loop3): Ignoring removed bh option [ 106.347573][ T5509] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 106.461340][ T5517] device gretap0 entered promiscuous mode [ 106.520434][ T5509] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.501: inode has both inline data and extents flags [ 106.577624][ T5521] loop2: detected capacity change from 0 to 1024 [ 106.599514][ T5509] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.501: couldn't read orphan inode 15 (err -117) [ 106.618876][ T5521] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 106.642710][ T5509] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,prjquota,debug_want_extra_isize=0x0000000000000004,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 106.713688][ T5521] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.763624][ T5526] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.798553][ T5526] overlayfs: maximum fs stacking depth exceeded [ 106.812179][ T5521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 106.836930][ T5521] System zones: 0-1, 3-36 [ 106.845369][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 106.854648][ T5531] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 106.861090][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 106.981826][ T5535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.511'. [ 107.055159][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 107.200907][ T5543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.517'. [ 107.201513][ T5541] loop3: detected capacity change from 0 to 4096 [ 107.222474][ T5545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.309193][ T5541] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 107.536661][ T5557] loop4: detected capacity change from 0 to 1764 [ 107.927522][ T5573] loop4: detected capacity change from 0 to 2048 [ 107.944353][ T5575] tipc: Started in network mode [ 107.987786][ T5575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 108.006181][ T5575] tipc: Enabling of bearer rejected, failed to enable media [ 108.117542][ T5573] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.231249][ T5573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 108.669373][ T5591] loop3: detected capacity change from 0 to 16 [ 108.702517][ T5554] loop0: detected capacity change from 0 to 40427 [ 108.710061][ T5593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.537'. [ 108.744994][ T5591] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.772948][ T5554] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 108.815037][ T5554] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.834168][ T5591] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 108.862389][ T5554] F2FS-fs (loop0): invalid crc value [ 108.867319][ T5591] attempt to access beyond end of device [ 108.867319][ T5591] loop3: rw=0, want=296, limit=16 [ 108.892625][ T5596] loop2: detected capacity change from 0 to 1024 [ 108.922720][ T5591] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 108.935781][ T5554] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.148794][ T5577] loop1: detected capacity change from 0 to 40427 [ 109.221109][ T5603] loop3: detected capacity change from 0 to 4096 [ 109.229272][ T5577] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.244290][ T5554] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.283094][ T5603] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 109.291250][ T5577] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.301313][ T5554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.350981][ T5577] F2FS-fs (loop1): invalid crc value [ 109.437850][ T5577] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.667281][ T4188] attempt to access beyond end of device [ 109.667281][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 109.693504][ T5577] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.706542][ T5624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 109.735653][ T5577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.013863][ T5635] loop4: detected capacity change from 0 to 256 [ 110.085236][ T5635] exfat: Deprecated parameter 'utf8' [ 110.160244][ T5635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 110.366804][ T5641] Zero length message leads to an empty skb [ 110.610717][ T5656] loop2: detected capacity change from 0 to 128 [ 110.718142][ T5656] ufs: ufstype=hp is supported read-only [ 110.785209][ T5656] ufs: ufs_fill_super(): bad magic number [ 110.938056][ T5666] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 110.954969][ T1107] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 110.981070][ T5669] netlink: 'syz.2.563': attribute type 5 has an invalid length. [ 111.049752][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 111.340464][ T1107] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.400489][ T1107] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 111.447757][ T1107] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.482448][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.499269][ T1107] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 111.519037][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.547409][ T1107] usb 4-1: config 0 descriptor?? [ 111.575544][ T5659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.599730][ T5688] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.614110][ T5688] EXT4-fs (loop2): Ignoring removed orlov option [ 111.683733][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 111.855839][ T5699] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.047283][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.083722][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.101656][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.132945][ T5705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.152304][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.178176][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.189251][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.202382][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.224608][ T5678] set_capacity_and_notify: 4 callbacks suppressed [ 112.224624][ T5678] loop1: detected capacity change from 0 to 32768 [ 112.237800][ T5703] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 112.242157][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.282815][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.301790][ T1107] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 112.333130][ T1107] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 112.392113][ T1107] usb 4-1: USB disconnect, device number 5 [ 112.465287][ T5703] ntfs3: loop0: failed to convert "c46c" to cp860 [ 112.472344][ T5678] XFS (loop1): Mounting V5 Filesystem [ 112.585984][ T5717] fido_id[5717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 112.645791][ T5724] tipc: Enabling of bearer rejected, failed to enable media [ 112.736733][ T5678] XFS (loop1): Ending clean mount [ 112.893107][ T4186] XFS (loop1): Unmounting Filesystem [ 113.183998][ T5742] loop3: detected capacity change from 0 to 1024 [ 113.297097][ T5749] netlink: 256 bytes leftover after parsing attributes in process `syz.2.589'. [ 113.306196][ T5749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.589'. [ 113.795531][ T5764] loop4: detected capacity change from 0 to 1024 [ 113.967051][ T5775] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 113.967061][ T5776] IPVS: stopping backup sync thread 5775 ... [ 114.065115][ T5449] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.197203][ T5786] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 114.348758][ T5449] usb 4-1: Using ep0 maxpacket: 8 [ 114.393870][ T5795] loop1: detected capacity change from 0 to 8 [ 114.505502][ T5449] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.574263][ T5795] SQUASHFS error: Failed to read block 0x636: -5 [ 114.597294][ T5795] SQUASHFS error: Unable to read metadata cache entry [634] [ 114.615282][ T5449] usb 4-1: config 4 interface 0 has no altsetting 0 [ 114.875134][ T5449] usb 4-1: string descriptor 0 read error: -22 [ 114.892375][ T5449] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 114.912602][ T5449] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 114.987472][ T5449] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 115.021205][ T5449] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.042287][ T5449] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 115.062201][ T5449] usb 4-1: media controller created [ 115.088946][ T5449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.251064][ T5803] loop0: detected capacity change from 0 to 32768 [ 115.282338][ T5780] loop2: detected capacity change from 0 to 32768 [ 115.356394][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 115.373442][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 115.685689][ T5780] JBD2: Ignoring recovery information on journal [ 115.897514][ T5780] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.922849][ T5818] netlink: 'syz.4.619': attribute type 3 has an invalid length. [ 116.202142][ T5780] (syz.2.601,5780,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 116.224915][ T5449] zl10353_read_register: readreg error (reg=127, ret==0) [ 116.225521][ T5768] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 116.259438][ T5780] (syz.2.601,5780,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 116.285714][ T5768] usb 4-1: dvb_usb_au6610: wlen=4100, aborting [ 116.345411][ T5780] (syz.2.601,5780,0):ocfs2_mknod:298 ERROR: status = -2 [ 116.352429][ T5780] (syz.2.601,5780,0):ocfs2_mknod:502 ERROR: status = -2 [ 116.391829][ T5448] usb 4-1: USB disconnect, device number 6 [ 116.476990][ T5828] loop4: detected capacity change from 0 to 4096 [ 116.495044][ T5780] (syz.2.601,5780,0):ocfs2_create:676 ERROR: status = -2 [ 116.627430][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 117.061939][ T5843] netem: change failed [ 117.174791][ T5830] loop0: detected capacity change from 0 to 32768 [ 117.212432][ T5847] loop4: detected capacity change from 0 to 256 [ 117.287638][ T5830] JBD2: Ignoring recovery information on journal [ 117.296005][ T5847] exfat: Deprecated parameter 'namecase' [ 117.377903][ T5847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 117.480423][ T5830] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.742594][ T5830] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 117.742696][ T5830] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 117.879273][ T5830] OCFS2: File system is now read-only. [ 117.885228][ T5830] (syz.0.625,5830,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 117.893733][ T5830] (syz.0.625,5830,1):ocfs2_mknod:334 ERROR: status = -117 [ 117.916511][ T5830] (syz.0.625,5830,1):ocfs2_mknod:502 ERROR: status = -117 [ 117.967243][ T5830] (syz.0.625,5830,1):ocfs2_mkdir:659 ERROR: status = -117 [ 118.037015][ T5830] syz.0.625 (5830) used greatest stack depth: 18304 bytes left [ 118.068001][ T5840] loop1: detected capacity change from 0 to 32768 [ 118.080354][ T5866] loop4: detected capacity change from 0 to 4096 [ 118.121885][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 118.248836][ T5866] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 118.275161][ T5866] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 118.327341][ T5866] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 118.393250][ T5866] ntfs: volume version 3.1. [ 118.470037][ T5840] XFS (loop1): Mounting V5 Filesystem [ 118.606024][ T4192] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 118.749185][ T5840] XFS (loop1): Ending clean mount [ 118.778621][ T5840] XFS (loop1): Quotacheck needed: Please wait. [ 119.057800][ T5840] XFS (loop1): Quotacheck: Done. [ 119.141592][ T5888] loop3: detected capacity change from 0 to 2048 [ 119.221792][ T4472] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 119.221857][ T4472] loop3: partition table partially beyond EOD, truncated [ 119.223930][ T4472] loop3: p1 start 3405774849 is beyond EOD, truncated [ 119.235731][ T4186] XFS (loop1): Unmounting Filesystem [ 119.248506][ T4472] loop3: p3 start 4225 is beyond EOD, truncated [ 119.276727][ T4472] loop3: p6 start 4225 is beyond EOD, truncated [ 119.342281][ T5888] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 119.342311][ T5888] loop3: partition table partially beyond EOD, truncated [ 119.343495][ T5888] loop3: p1 start 3405774849 is beyond EOD, truncated [ 119.347227][ T5888] loop3: p3 start 4225 is beyond EOD, truncated [ 119.361972][ T5888] loop3: p6 start 4225 is beyond EOD, truncated [ 119.523874][ T5894] loop4: detected capacity change from 0 to 64 [ 119.596719][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 119.619213][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 119.636483][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 119.726755][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 119.726927][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 119.750056][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 119.846144][ T5877] loop0: detected capacity change from 0 to 40427 [ 119.853338][ T5899] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 119.985395][ T5877] F2FS-fs (loop0): invalid crc value [ 120.054159][ T5877] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.248965][ T5917] loop4: detected capacity change from 0 to 512 [ 120.347925][ T5917] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 120.358432][ T5877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.401399][ T5917] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.455988][ T5922] loop3: detected capacity change from 0 to 512 [ 120.515786][ T5917] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 120.556549][ T5922] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.574575][ T4188] attempt to access beyond end of device [ 120.574575][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 120.595324][ T5917] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.607277][ T5922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.639516][ T5922] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.661: bad orphan inode 3855 [ 120.650455][ T5922] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 120.784964][ T4235] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 120.901204][ T4192] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 120.962499][ T4192] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 121.205362][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 121.395209][ T4235] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 121.404368][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.415739][ T5948] loop2: detected capacity change from 0 to 4096 [ 121.432540][ T4235] usb 2-1: Product: syz [ 121.441228][ T5948] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 121.458439][ T4235] usb 2-1: Manufacturer: syz [ 121.463453][ T4235] usb 2-1: SerialNumber: syz [ 121.493249][ T4235] usb 2-1: config 0 descriptor?? [ 121.531469][ T5927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.557350][ T4235] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 121.574018][ T403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.838733][ T403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.853198][ T4233] usb 2-1: USB disconnect, device number 8 [ 121.975534][ T403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.133879][ T5946] loop0: detected capacity change from 0 to 32768 [ 122.162730][ T403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.231565][ T5946] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.671 (5946) [ 122.298536][ T5946] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 122.356534][ T5946] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 122.366205][ T5946] BTRFS info (device loop0): force lzo compression, level 0 [ 122.373566][ T5946] BTRFS info (device loop0): max_inline at 4096 [ 122.380723][ T5946] BTRFS info (device loop0): allowing degraded mounts [ 122.388000][ T5946] BTRFS info (device loop0): using free space tree [ 122.405135][ T5946] BTRFS info (device loop0): has skinny extents [ 122.891866][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 122.974453][ T5962] loop3: detected capacity change from 0 to 32768 [ 123.045765][ T5962] XFS: ikeep mount option is deprecated. [ 123.140262][ T5962] XFS (loop3): Mounting V5 Filesystem [ 123.395311][ T5962] XFS (loop3): Ending clean mount [ 123.424189][ T5962] XFS (loop3): Quotacheck needed: Please wait. [ 123.563894][ T5962] XFS (loop3): Quotacheck: Done. [ 123.635607][ T6023] loop2: detected capacity change from 0 to 512 [ 123.775900][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.813049][ T6023] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.687: Unrecognised inode hash code 255 [ 123.837551][ T4187] XFS (loop3): Unmounting Filesystem [ 123.851466][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.856947][ T6023] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.687: Corrupt directory, running e2fsck is recommended [ 123.874327][ T6023] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 123.916447][ T5959] device bridge_slave_0 entered promiscuous mode [ 123.930568][ T6023] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.687: corrupted in-inode xattr [ 123.933816][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.955964][ T6023] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.687: couldn't read orphan inode 15 (err -117) [ 123.991464][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.998692][ T6023] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 124.035399][ T5959] device bridge_slave_1 entered promiscuous mode [ 124.177586][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.218160][ T6023] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.687: Abort forced by user [ 124.242813][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.281378][ T6023] EXT4-fs (loop2): Remounting filesystem read-only [ 124.317653][ T6023] EXT4-fs (loop2): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000. Quota mode: writeback. [ 124.345286][ T5448] Bluetooth: hci2: command 0x0409 tx timeout [ 124.448275][ T5959] team0: Port device team_slave_0 added [ 124.478988][ T5959] team0: Port device team_slave_1 added [ 124.574447][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.593830][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.663035][ T6046] loop3: detected capacity change from 0 to 64 [ 124.702979][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.753716][ T6046] hfs: bad catalog entry type 6 [ 124.762375][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.773959][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.811540][ T4190] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.849905][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.936402][ T6050] loop3: detected capacity change from 0 to 512 [ 125.011869][ T6050] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.696: missing EA_INODE flag [ 125.032429][ T6036] loop1: detected capacity change from 0 to 32768 [ 125.039974][ T6050] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.696: error while reading EA inode 2 err=-117 [ 125.057161][ T6050] EXT4-fs (loop3): 1 orphan inode deleted [ 125.076925][ T6036] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.692 (6036) [ 125.102759][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 125.160248][ T6036] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 125.180622][ T6036] BTRFS info (device loop1): using free space tree [ 125.195154][ T4190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.218871][ T6036] BTRFS info (device loop1): has skinny extents [ 125.237576][ T4190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.269016][ T4190] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.269465][ T6050] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.696: invalid size [ 125.312795][ T4190] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.350526][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.385193][ T4190] usb 1-1: config 0 descriptor?? [ 125.501452][ T6036] BTRFS info (device loop1): enabling ssd optimizations [ 125.678318][ T5959] device hsr_slave_0 entered promiscuous mode [ 125.691909][ T5959] device hsr_slave_1 entered promiscuous mode [ 125.700116][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.719148][ T5959] Cannot create hsr debugfs directory [ 125.909706][ T4190] input: HID 047f:ffff as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:047F:FFFF.000A/input/input12 [ 126.033203][ T4190] plantronics 0003:047F:FFFF.000A: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 126.139163][ T4190] usb 1-1: USB disconnect, device number 7 [ 126.415619][ T5444] Bluetooth: hci2: command 0x041b tx timeout [ 126.473919][ T6097] fido_id[6097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 126.548837][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.3.705'. [ 126.901919][ T403] device hsr_slave_0 left promiscuous mode [ 126.937401][ T403] device hsr_slave_1 left promiscuous mode [ 127.013478][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.040967][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.070778][ T6127] loop3: detected capacity change from 0 to 512 [ 127.109278][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.144800][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.182710][ T6127] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.203660][ T403] device bridge_slave_1 left promiscuous mode [ 127.226695][ T6127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.237198][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.290182][ T6127] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.712: Invalid block bitmap block 0 in block_group 0 [ 127.292337][ T403] device bridge_slave_0 left promiscuous mode [ 127.342956][ T6127] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 127.375926][ T6093] loop2: detected capacity change from 0 to 32768 [ 127.383121][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.395884][ T6127] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.712: attempt to clear invalid blocks 983261 len 1 [ 127.433774][ T6127] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.712: Invalid inode table block 0 in block_group 0 [ 127.448912][ T6093] XFS: ikeep mount option is deprecated. [ 127.468585][ T6127] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 127.483602][ T403] device veth1_macvtap left promiscuous mode [ 127.506733][ T6127] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 127.513503][ T403] device veth0_macvtap left promiscuous mode [ 127.522561][ T6127] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.712: Invalid inode table block 0 in block_group 0 [ 127.523823][ T403] device veth1_vlan left promiscuous mode [ 127.544146][ T403] device veth0_vlan left promiscuous mode [ 127.553505][ T6127] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 127.575351][ T6093] XFS (loop2): Mounting V5 Filesystem [ 127.581547][ T6127] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.712: mark_inode_dirty error [ 127.605585][ T6127] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 127.670017][ T6127] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.712: Invalid inode table block 0 in block_group 0 [ 127.691093][ T6093] XFS (loop2): Ending clean mount [ 127.702174][ T6093] XFS (loop2): Quotacheck needed: Please wait. [ 127.734986][ T6127] EXT4-fs (loop3): 1 truncate cleaned up [ 127.745345][ T5448] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.765158][ T6127] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 127.803937][ T6093] XFS (loop2): Quotacheck: Done. [ 127.915540][ T4197] XFS (loop2): Unmounting Filesystem [ 128.149700][ T403] team0 (unregistering): Port device team_slave_1 removed [ 128.185341][ T5448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.199711][ T5448] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.213522][ T5448] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.215822][ T403] team0 (unregistering): Port device team_slave_0 removed [ 128.274267][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.294336][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.385165][ T5448] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 128.402115][ T5448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.431259][ T5448] usb 1-1: Product: syz [ 128.441124][ T5448] usb 1-1: Manufacturer: syz [ 128.455019][ T5448] usb 1-1: SerialNumber: syz [ 128.472903][ T4190] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.505362][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 128.510326][ T403] bond0 (unregistering): Released all slaves [ 128.518678][ T6155] loop2: detected capacity change from 0 to 1024 [ 128.571722][ T6155] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 128.592033][ T6155] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.630579][ T6155] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.719: bg 0: block 112: padding at end of block bitmap is not set [ 128.719870][ T5959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.728062][ T4190] usb 4-1: Using ep0 maxpacket: 8 [ 128.729668][ T6159] loop1: detected capacity change from 0 to 256 [ 128.787773][ T5959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.815706][ T6159] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 128.821443][ T5959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.855419][ T5448] usb 1-1: 0:2 : does not exist [ 128.855444][ T4190] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 128.871789][ T5959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.889543][ T5448] usb 1-1: USB disconnect, device number 8 [ 128.907572][ T4190] usb 4-1: config 2 has no interface number 0 [ 128.916262][ T4190] usb 4-1: config 2 interface 31 has no altsetting 0 [ 129.050114][ T6161] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.105355][ T4190] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 129.135482][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.187406][ T4190] usb 4-1: Product: syz [ 129.191643][ T4190] usb 4-1: Manufacturer: syz [ 129.224917][ T4190] usb 4-1: SerialNumber: syz [ 129.376515][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.438982][ T6171] device bridge0 entered promiscuous mode [ 129.492041][ T6171] device macvlan2 entered promiscuous mode [ 129.517269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.535923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.577442][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.657416][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.672646][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.707416][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.714535][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.826077][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.854656][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.879523][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.906153][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.913500][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.961367][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.993788][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.072078][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.099601][ T4190] ch9200: probe of 4-1:2.31 failed with error -22 [ 130.122626][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.146288][ T4190] usb 4-1: USB disconnect, device number 7 [ 130.168628][ T6205] loop1: detected capacity change from 0 to 256 [ 130.185473][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.225648][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.267758][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.361691][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.383870][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.432847][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.468549][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.525475][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.577848][ T5448] Bluetooth: hci2: command 0x0419 tx timeout [ 130.644421][ T6220] loop3: detected capacity change from 0 to 8 [ 130.735055][ T5446] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.761332][ T6220] unable to read fragment index table [ 131.112115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.145287][ T5446] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 131.153628][ T5446] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 131.170588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.219688][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.224952][ T5446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.301864][ T5446] usb 3-1: config 0 descriptor?? [ 131.366364][ T5446] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 131.602172][ T5446] usb 3-1: USB disconnect, device number 5 [ 131.879802][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 131.913172][ T6224] loop1: detected capacity change from 0 to 32768 [ 131.920243][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.924612][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 131.936299][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.950253][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.952961][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 131.972634][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 131.982349][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 131.985687][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.996283][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.011954][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.034782][ T5959] device veth0_vlan entered promiscuous mode [ 132.043586][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.063131][ T6224] ialloc: diAlloc returned -5! [ 132.068401][ T6220] loop3: detected capacity change from 0 to 32768 [ 132.069871][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.083812][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.091812][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.096605][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.114776][ T6224] ialloc: diAlloc returned -5! [ 132.118222][ T5959] device veth1_vlan entered promiscuous mode [ 132.126547][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.130519][ T6220] [ 132.130519][ T6220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.130519][ T6220] [ 132.171246][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.194300][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.216554][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.234696][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.254227][ T6220] read_mapping_page failed! [ 132.261197][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.274298][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.283133][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.291980][ T6220] ERROR: (device loop3): txCommit: [ 132.291980][ T6220] [ 132.300681][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.309267][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.318688][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.335738][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.344488][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.347546][ T5959] device veth0_macvtap entered promiscuous mode [ 132.367138][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.374590][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.385078][ T5959] device veth1_macvtap entered promiscuous mode [ 132.404660][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.424411][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.434936][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.434966][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.434990][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435013][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435036][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435058][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435079][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435100][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435122][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435143][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435164][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435186][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435207][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435228][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435250][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435272][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.435294][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.454921][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.466476][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.494440][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.531598][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.576017][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.590945][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.618724][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.629372][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.639799][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.643802][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.664723][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.665115][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.672542][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.697234][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.710183][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.720738][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.723136][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.731943][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.759968][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.766204][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.785300][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.790151][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.802528][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.820771][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.832398][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.844291][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.853094][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.869264][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.878114][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.893310][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.905710][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.913917][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.922694][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.923910][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.935268][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.960705][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.961592][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.973453][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 132.993852][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.004481][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.014941][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.018408][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.033640][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.047112][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.048259][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.074945][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.078535][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.094674][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.105875][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.107981][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.143501][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.145166][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.161531][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161562][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161584][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161606][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161627][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161649][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161670][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161692][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161713][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161735][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161756][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161778][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161801][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161821][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161844][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.161867][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.199726][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.226569][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.283839][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.328140][ T6281] loop2: detected capacity change from 0 to 1024 [ 133.357893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.367638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.381177][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.391864][ T5959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.404082][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.421838][ T5959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.431274][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.442204][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.451311][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.451377][ T5959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.459567][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.475697][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.483109][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.491208][ T5959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.515921][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.523477][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.550771][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.560621][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.570174][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.577963][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.585516][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.592919][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.600445][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.608129][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.615845][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.624079][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.631643][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.639159][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.646773][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.654213][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.661834][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.669368][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.676959][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.684474][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.692104][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.699558][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.707038][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.714620][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.722668][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.730274][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.737823][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.745378][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.753168][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.760939][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.768416][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.776092][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.783984][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.791670][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.799429][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.806922][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.814434][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.822388][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.829978][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.837459][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.844886][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.852277][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.859985][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.868012][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.875490][ T5446] hid-generic 0009:0008:6946.000B: unknown main item tag 0x0 [ 133.887218][ T5446] hid-generic 0009:0008:6946.000B: hidraw0: HID v0.04 Device [syz1] on syz1 [ 133.916398][ T5448] Bluetooth: hci2: command 0x0411 tx timeout [ 133.959223][ T4351] ERROR: (device loop3): diWrite: ixpxd invalid [ 133.959223][ T4351] [ 134.001182][ T4351] ERROR: (device loop3): txCommit: [ 134.001182][ T4351] [ 134.049197][ T4351] jfs_write_inode: jfs_commit_inode failed! [ 134.068966][ T4549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.108373][ T4187] [ 134.108373][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.108373][ T4187] [ 134.130925][ T4549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.165261][ T4187] [ 134.165261][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.165261][ T4187] [ 134.227871][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.281103][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.310225][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.312231][ T6297] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 134.385194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.703961][ T6311] loop1: detected capacity change from 0 to 1024 [ 134.788695][ T6316] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.676:6316 [ 134.796556][ T6312] loop2: detected capacity change from 0 to 2048 [ 134.808691][ T6305] fido_id[6305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.808823][ T6315] loop0: detected capacity change from 0 to 256 [ 134.863636][ T6311] EXT4-fs (loop1): Ignoring removed orlov option [ 134.912103][ T6320] loop3: detected capacity change from 0 to 164 [ 134.955272][ T6311] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 135.424266][ T6315] attempt to access beyond end of device [ 135.424266][ T6315] loop0: rw=0, want=260, limit=256 [ 135.541280][ T6342] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.637440][ T6346] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 135.681835][ T6348] loop3: detected capacity change from 0 to 1024 [ 135.868265][ T6343] loop2: detected capacity change from 0 to 8192 [ 136.482230][ T6372] team0: Device wg0 is of different type [ 136.593984][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 136.742778][ T6388] loop0: detected capacity change from 0 to 2048 [ 136.867602][ T6397] loop5: detected capacity change from 0 to 64 [ 136.874513][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 136.898315][ T6388] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,nodioread_nolock,,errors=continue. Quota mode: none. [ 137.070291][ T6407] loop2: detected capacity change from 0 to 512 [ 137.141052][ T6407] EXT4-fs (loop2): Ignoring removed orlov option [ 137.216801][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,orlov,bsddf,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 137.345176][ T4233] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.396293][ T6428] trusted_key: encrypted_key: hex blob is missing [ 137.755175][ T4233] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.845215][ T4233] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 137.863700][ T4233] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 137.902728][ T4233] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 137.931602][ T4233] usb 2-1: config 13 has no interface number 0 [ 137.955261][ T4233] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 138.002019][ T4233] usb 2-1: config 13 interface 50 has no altsetting 0 [ 138.185315][ T4233] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 138.215876][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.224018][ T4233] usb 2-1: Product: syz [ 138.254769][ T6461] loop2: detected capacity change from 0 to 512 [ 138.271651][ T4233] usb 2-1: Manufacturer: syz [ 138.289438][ T4233] usb 2-1: SerialNumber: syz [ 138.350137][ T6461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.399688][ T6461] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.814: bad orphan inode 131083 [ 138.462652][ T6461] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,init_itable,norecovery,,errors=continue. Quota mode: none. [ 138.489436][ T6430] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.802 (6430) [ 138.517711][ T6430] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 138.527697][ T6430] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.540018][ T6430] BTRFS info (device loop3): use zstd compression, level 3 [ 138.548108][ T6430] BTRFS info (device loop3): using free space tree [ 138.555685][ T6430] BTRFS info (device loop3): has skinny extents [ 138.653066][ T4233] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 138.671974][ T4215] usb 2-1: Failed to submit usb control message: -71 [ 138.674591][ T4233] usb 2-1: USB disconnect, device number 9 [ 138.708731][ T4215] usb 2-1: unable to send the bmi data to the device: -71 [ 138.749987][ T4215] usb 2-1: unable to get target info from device [ 138.772154][ T4215] usb 2-1: could not get target info (-71) [ 138.779062][ T4215] usb 2-1: could not probe fw (-71) [ 138.847557][ T6430] BTRFS info (device loop3): enabling ssd optimizations [ 138.934695][ T26] audit: type=1800 audit(1786966689.460:6): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.802" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 139.784301][ T6529] set_capacity_and_notify: 1 callbacks suppressed [ 139.784319][ T6529] loop3: detected capacity change from 0 to 1024 [ 139.918591][ T6529] hfsplus: small file entry [ 140.397027][ T6556] loop2: detected capacity change from 0 to 2048 [ 140.449035][ T6559] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.544978][ T4233] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.710187][ T6539] loop5: detected capacity change from 0 to 32768 [ 140.780270][ T6539] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.835 (6539) [ 140.798100][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 140.858188][ T6539] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 140.870981][ T6569] loop2: detected capacity change from 0 to 2048 [ 140.884986][ T6539] BTRFS info (device loop5): using free space tree [ 140.914528][ T6539] BTRFS info (device loop5): has skinny extents [ 140.915450][ T4233] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 140.985258][ T6569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.052857][ T6558] loop1: detected capacity change from 0 to 32768 [ 141.115228][ T4233] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.134724][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.149142][ T6558] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.845 (6558) [ 141.160339][ T4233] usb 4-1: Product: syz [ 141.164556][ T4233] usb 4-1: Manufacturer: syz [ 141.173725][ T4233] usb 4-1: SerialNumber: syz [ 141.182774][ T4233] usb 4-1: config 0 descriptor?? [ 141.227893][ T4233] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 141.245150][ T4233] usb 4-1: setting power ON [ 141.255734][ T4233] dvb-usb: bulk message failed: -22 (2/0) [ 141.277561][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.343472][ T6539] BTRFS info (device loop5): enabling ssd optimizations [ 141.399364][ T4233] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 141.459608][ T5137] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5137) [ 141.462395][ T6603] PKCS8: Unsupported PKCS#8 version [ 141.483973][ T4233] usb 4-1: media controller created [ 141.544085][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.634666][ T4233] usb 4-1: selecting invalid altsetting 6 [ 141.664052][ T4233] usb 4-1: digital interface selection failed (-22) [ 141.702409][ T4233] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 141.765364][ T4233] usb 4-1: setting power OFF [ 141.772739][ T4233] dvb-usb: bulk message failed: -22 (2/0) [ 141.785219][ T4233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 141.822532][ T6612] loop0: detected capacity change from 0 to 1024 [ 141.845100][ T4233] (NULL device *): no alternate interface [ 141.971078][ T6612] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 142.080230][ T4233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 142.110859][ T4233] usb 4-1: USB disconnect, device number 8 [ 142.441752][ T6635] loop5: detected capacity change from 0 to 512 [ 142.501142][ T6635] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 142.522665][ T6635] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 142.559255][ T6635] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 142.606498][ T6635] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 142.635252][ T6628] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.669094][ T6643] loop0: detected capacity change from 0 to 256 [ 142.673671][ T6635] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 142.696997][ T6635] EXT4-fs (loop5): orphan cleanup on readonly fs [ 142.739723][ T6643] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.798075][ T6635] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.861: bg 0: block 34: padding at end of block bitmap is not set [ 142.822027][ T6625] loop1: detected capacity change from 0 to 32768 [ 142.835728][ T6643] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 142.866777][ T6643] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 142.891399][ T6635] Quota error (device loop5): write_blk: dquota write failed [ 142.941286][ T6635] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 142.987659][ T6635] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.861: Failed to acquire dquot type 1 [ 143.044478][ T6635] EXT4-fs (loop5): 1 truncate cleaned up [ 143.051750][ T6635] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 143.093345][ T6647] loop3: detected capacity change from 0 to 1764 [ 143.235404][ T6628] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.265156][ T6628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.273218][ T6628] usb 3-1: Product: syz [ 143.295332][ T6628] usb 3-1: Manufacturer: syz [ 143.300004][ T6628] usb 3-1: SerialNumber: syz [ 143.387998][ T6628] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.630617][ T6671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.883'. [ 143.681773][ T6674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.883'. [ 143.970176][ T6683] hub 8-0:1.0: USB hub found [ 143.976933][ T6683] hub 8-0:1.0: 1 port detected [ 144.058387][ T6633] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.203389][ T6690] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 144.305700][ T6690] hfsplus: filesystem is marked journaled, leaving read-only. [ 144.350560][ T6698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'. [ 144.385705][ T6699] exfat: Deprecated parameter 'utf8' [ 144.402340][ T6699] exfat: Deprecated parameter 'utf8' [ 144.442364][ T6699] exfat: Deprecated parameter 'namecase' [ 144.458148][ T6699] exfat: Unknown parameter 'keep_last_dots' [ 144.545611][ T6704] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 144.679566][ T6704] team0: Port device dummy0 added [ 144.704454][ T4422] usb 3-1: USB disconnect, device number 6 [ 144.743472][ T6707] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 144.862488][ T6717] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.887631][ T6707] team0: Port device dummy0 removed [ 144.912999][ T6707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.119215][ T6722] set_capacity_and_notify: 4 callbacks suppressed [ 145.119232][ T6722] loop5: detected capacity change from 0 to 16 [ 145.249332][ T6722] erofs: (device loop5): mounted with root inode @ nid 36. [ 145.295215][ T6530] Bluetooth: hci2: command 0x0401 tx timeout [ 145.311569][ T6722] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 145.375232][ T6633] usb 3-1: Service connection timeout for: 256 [ 145.381512][ T6633] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 145.427360][ T6633] ath9k_htc: Failed to initialize the device [ 145.447268][ T4422] usb 3-1: ath9k_htc: USB layer deinitialized [ 145.754892][ T26] audit: type=1326 audit(1786966696.286:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.5.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d13b160d9 code=0x0 [ 145.953581][ T6752] loop0: detected capacity change from 0 to 4096 [ 146.082402][ T6752] ntfs: volume version 3.1. [ 146.136740][ T6715] loop3: detected capacity change from 0 to 32768 [ 147.383509][ T6809] loop1: detected capacity change from 0 to 64 [ 147.395005][ T6760] loop2: detected capacity change from 0 to 32768 [ 147.464602][ T6760] JBD2: Ignoring recovery information on journal [ 147.493762][ T6812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.931'. [ 147.526976][ T6803] loop0: detected capacity change from 0 to 8192 [ 147.577187][ T6760] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 147.633984][ T6803] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 147.732946][ T6803] REISERFS (device loop0): using ordered data mode [ 147.771696][ T6791] loop5: detected capacity change from 0 to 32768 [ 147.813309][ T6803] reiserfs: using flush barriers [ 147.856036][ T6803] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.891240][ T6760] (syz.2.911,6760,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 147.947598][ T6803] REISERFS (device loop0): checking transaction log (loop0) [ 148.011938][ T6803] REISERFS (device loop0): Using r5 hash to sort names [ 148.047871][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 148.252297][ T6830] loop5: detected capacity change from 0 to 256 [ 148.442588][ T6836] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 148.453014][ T6830] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 148.495183][ T6836] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\�d�+" [ 148.538906][ T6836] CUSE: unknown device info "Ýÿÿÿ" [ 148.571517][ T6836] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 148.585744][ T26] audit: type=1800 audit(1786966699.126:8): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.940" name="file1" dev="loop5" ino=1048611 res=0 errno=0 [ 148.634461][ T6836] CUSE: DEVNAME unspecified [ 148.654113][ T6830] [syz.5.940/6830] FS: loop5 File: /file1 would truncate fibmap result [ 148.656100][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 148.772871][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 148.772902][ T6843] netlink: 'syz.0.941': attribute type 14 has an invalid length. [ 148.898467][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.949'. [ 149.426753][ T6877] raw_sendmsg: syz.2.958 forgot to set AF_INET. Fix it! [ 149.592389][ T6883] loop5: detected capacity change from 0 to 736 [ 150.044971][ T6628] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.081554][ T6860] loop1: detected capacity change from 0 to 32768 [ 150.153257][ T6860] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.953 (6860) [ 150.285170][ T6628] usb 4-1: Using ep0 maxpacket: 16 [ 150.296494][ T6860] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.332383][ T6860] BTRFS info (device loop1): using free space tree [ 150.367802][ T6860] BTRFS info (device loop1): has skinny extents [ 150.405479][ T6628] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 150.565114][ T6628] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 150.574220][ T6628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.582935][ T6628] usb 4-1: Product: syz [ 150.587626][ T6628] usb 4-1: Manufacturer: syz [ 150.592939][ T6628] usb 4-1: SerialNumber: syz [ 150.601987][ T6628] r8152-cfgselector 4-1: config 0 descriptor?? [ 150.720718][ T6860] BTRFS info (device loop1): enabling ssd optimizations [ 150.835764][ T26] audit: type=1800 audit(1786966701.376:9): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.953" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 150.875078][ T6628] r8152-cfgselector 4-1: Unknown version 0x0000 [ 150.895209][ T5441] Bluetooth: hci2: command 0x0405 tx timeout [ 150.969391][ T6887] loop0: detected capacity change from 0 to 32768 [ 151.025093][ T6887] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.962 (6887) [ 151.155041][ T6628] r8152-cfgselector 4-1: Unknown version 0x0000 [ 151.156224][ T6954] loop5: detected capacity change from 0 to 64 [ 151.170622][ T6628] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 151.433564][ T6887] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 151.472345][ T6887] BTRFS info (device loop0): using free space tree [ 151.486459][ T6887] BTRFS info (device loop0): has skinny extents [ 151.702350][ T6954] Trying to free block not in datazone [ 151.954772][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 152.026206][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 152.034963][ T6887] BTRFS info (device loop0): enabling ssd optimizations [ 152.077319][ T6989] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 152.082514][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 152.331379][ T6996] loop3: detected capacity change from 0 to 4096 [ 152.472159][ T4178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop0 scanned by udevd (4178) [ 152.514716][ T6996] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 152.537233][ T6996] EXT4-fs (loop3): inline encryption not supported [ 152.543911][ T6996] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.613806][ T6996] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 152.616931][ T26] audit: type=1800 audit(1786966703.146:10): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.992" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 152.725125][ T6996] System zones: 0-5 [ 152.759940][ T6996] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,dioread_nolock,test_dummy_encryption=v1,errors=continue,delalloc,nombcache,grpquota,,errors=continue. Quota mode: writeback. [ 153.325835][ T26] audit: type=1400 audit(1786966703.866:11): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3AFF20B9DAC6B98850DD7E2AABD6BB0ED3E1FBFE95AF7DEBBE7B052583C2B8BB3F852755C2BBD37D5F3DF1CCB21D8C19D799701EB3C61CEA508FB554741E pid=7044 comm="syz.0.999" [ 153.355153][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.475186][ T7054] loop0: detected capacity change from 0 to 64 [ 153.574943][ T6633] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.711646][ T7013] loop1: detected capacity change from 0 to 32768 [ 153.723920][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1004'. [ 153.815698][ T7013] JBD2: Ignoring recovery information on journal [ 153.932410][ T7073] loop0: detected capacity change from 0 to 16 [ 153.945704][ T6633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.984931][ T6633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.022880][ T7073] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.097981][ T6633] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 154.117812][ T7013] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.148753][ T6633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.210432][ T6633] usb 3-1: config 0 descriptor?? [ 154.428764][ T7089] loop5: detected capacity change from 0 to 736 [ 154.450451][ T7043] loop3: detected capacity change from 0 to 32768 [ 154.610668][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 154.719011][ T6633] input: HID 1020:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1020:0006.000C/input/input13 [ 154.748220][ T7096] BUG: MAX_LOCK_DEPTH too low! [ 154.753057][ T7096] turning off the locking correctness validator. [ 154.759558][ T7096] depth: 48 max: 48! [ 154.763554][ T7096] 48 locks held by syz.0.1017/7096: [ 154.768767][ T7096] #0: ffff888062468860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x11d0/0x1710 [ 154.779017][ T7096] #1: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 154.788573][ T7096] #2: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.798031][ T7096] #3: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.807371][ T7096] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.816701][ T7096] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.826291][ T7096] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.835646][ T7096] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.845050][ T7096] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.854370][ T7096] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.863684][ T7096] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.873091][ T7096] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.882499][ T7096] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.891985][ T7096] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.901470][ T7096] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.910970][ T7096] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.920382][ T7096] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.929902][ T7096] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.939323][ T7096] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.948945][ T7096] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.958376][ T7096] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.967988][ T7096] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.977473][ T7096] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.986870][ T7096] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.996379][ T7096] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.005889][ T7096] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.015389][ T7096] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.024886][ T7096] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.034460][ T7096] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.044145][ T7096] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.053572][ T7096] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.063254][ T7096] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.072744][ T7096] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.082240][ T7096] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.091753][ T7096] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.101168][ T7096] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.110718][ T7096] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.120215][ T7096] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.129611][ T7096] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.139113][ T7096] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.148656][ T7096] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.158176][ T7096] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.167576][ T7096] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.176975][ T7096] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.186458][ T7096] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.195851][ T7096] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.205248][ T7096] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 155.214831][ T7096] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 155.224343][ T7096] INFO: lockdep is turned off. [ 155.229107][ T7096] CPU: 1 PID: 7096 Comm: syz.0.1017 Not tainted syzkaller #0 [ 155.236605][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.246658][ T7096] Call Trace: [ 155.249943][ T7096] [ 155.252891][ T7096] dump_stack_lvl+0x188/0x250 [ 155.257577][ T7096] ? show_regs_print_info+0x20/0x20 [ 155.262776][ T7096] ? load_image+0x410/0x410 [ 155.267302][ T7096] __lock_acquire+0x1247/0x7b50 [ 155.272183][ T7096] ? rpl_output+0x31f/0x730 [ 155.276704][ T7096] ? lwtunnel_output+0x27e/0x440 [ 155.281656][ T7096] ? kfree+0xef/0x2a0 [ 155.285641][ T7096] ? verify_lock_unused+0x140/0x140 [ 155.290869][ T7096] ? stack_trace_save+0xa6/0xf0 [ 155.295723][ T7096] ? stack_trace_snprint+0xe0/0xe0 [ 155.300922][ T7096] ? stack_trace_save+0xf0/0xf0 [ 155.305775][ T7096] ? mark_lock+0x94/0x320 [ 155.310110][ T7096] ? __lock_acquire+0x1305/0x7b50 [ 155.315176][ T7096] ? rpl_output+0x178/0x730 [ 155.319804][ T7096] lock_acquire+0x19e/0x400 [ 155.324315][ T7096] ? rcu_lock_acquire+0x9/0x30 [ 155.329181][ T7096] ? rpl_output+0x31f/0x730 [ 155.333685][ T7096] ? lwtunnel_output+0x27e/0x440 [ 155.338884][ T7096] ? rpl_output+0x31f/0x730 [ 155.343401][ T7096] ? lwtunnel_output+0x27e/0x440 [ 155.348432][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.353811][ T7096] ? verify_lock_unused+0x140/0x140 [ 155.359010][ T7096] ? mark_lock+0x94/0x320 [ 155.363439][ T7096] rcu_lock_acquire+0x2a/0x30 [ 155.368122][ T7096] ? rcu_lock_acquire+0x9/0x30 [ 155.372885][ T7096] ip6_dst_check+0xe2/0x7a0 [ 155.377388][ T7096] ? skb_header_pointer+0x120/0x120 [ 155.382584][ T7096] dst_cache_per_cpu_get+0x1a3/0x310 [ 155.387985][ T7096] rpl_output+0x165/0x730 [ 155.392318][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.396918][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.401856][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.407321][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.411828][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.416767][ T7096] lwtunnel_output+0x27e/0x440 [ 155.421898][ T7096] rpl_output+0x31f/0x730 [ 155.426257][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.430762][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.435790][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.441256][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.445768][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.450706][ T7096] lwtunnel_output+0x27e/0x440 [ 155.455477][ T7096] rpl_output+0x31f/0x730 [ 155.459809][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.464401][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.469339][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.474723][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.479234][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.484179][ T7096] lwtunnel_output+0x27e/0x440 [ 155.488955][ T7096] rpl_output+0x31f/0x730 [ 155.493289][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.497813][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.502751][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.508133][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.512645][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.517582][ T7096] lwtunnel_output+0x27e/0x440 [ 155.522352][ T7096] rpl_output+0x31f/0x730 [ 155.526692][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.531219][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.536162][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.541594][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.546102][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.551040][ T7096] lwtunnel_output+0x27e/0x440 [ 155.555808][ T7096] rpl_output+0x31f/0x730 [ 155.560140][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.564645][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.569583][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.575234][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.579744][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.584698][ T7096] lwtunnel_output+0x27e/0x440 [ 155.589471][ T7096] rpl_output+0x31f/0x730 [ 155.593805][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.598395][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.603422][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.608833][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.613349][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.618308][ T7096] lwtunnel_output+0x27e/0x440 [ 155.623091][ T7096] rpl_output+0x31f/0x730 [ 155.627427][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.631936][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.636970][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.642355][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.647151][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.652112][ T7096] lwtunnel_output+0x27e/0x440 [ 155.656986][ T7096] rpl_output+0x31f/0x730 [ 155.661323][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.665830][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.670768][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.676230][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.680744][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.685681][ T7096] lwtunnel_output+0x27e/0x440 [ 155.690450][ T7096] rpl_output+0x31f/0x730 [ 155.694959][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.699547][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.704490][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.709884][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.714503][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.719589][ T7096] lwtunnel_output+0x27e/0x440 [ 155.724478][ T7096] rpl_output+0x31f/0x730 [ 155.728826][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.733595][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.738825][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.744331][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.748844][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.753786][ T7096] lwtunnel_output+0x27e/0x440 [ 155.758565][ T7096] rpl_output+0x31f/0x730 [ 155.762900][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.767464][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.772405][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.777783][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.782288][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.787225][ T7096] lwtunnel_output+0x27e/0x440 [ 155.791993][ T7096] rpl_output+0x31f/0x730 [ 155.796418][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.801015][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.805958][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.811334][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.815839][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.820776][ T7096] lwtunnel_output+0x27e/0x440 [ 155.825632][ T7096] rpl_output+0x31f/0x730 [ 155.829977][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.834580][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.839603][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.844982][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.849487][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.854510][ T7096] lwtunnel_output+0x27e/0x440 [ 155.859277][ T7096] rpl_output+0x31f/0x730 [ 155.863609][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.868110][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.873080][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.878468][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.882976][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.887996][ T7096] lwtunnel_output+0x27e/0x440 [ 155.892766][ T7096] rpl_output+0x31f/0x730 [ 155.897104][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.901605][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.906546][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.911932][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.916442][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.921490][ T7096] lwtunnel_output+0x27e/0x440 [ 155.926255][ T7096] rpl_output+0x31f/0x730 [ 155.930597][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.935103][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.940043][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.945418][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.949939][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.955050][ T7096] lwtunnel_output+0x27e/0x440 [ 155.959826][ T7096] rpl_output+0x31f/0x730 [ 155.964165][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.968682][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.973645][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 155.979114][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 155.983643][ T7096] ? rpl_destroy_state+0x20/0x20 [ 155.988583][ T7096] lwtunnel_output+0x27e/0x440 [ 155.993388][ T7096] rpl_output+0x31f/0x730 [ 155.997723][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.002224][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.007253][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.012635][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.017141][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.022164][ T7096] lwtunnel_output+0x27e/0x440 [ 156.026931][ T7096] rpl_output+0x31f/0x730 [ 156.031358][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.035863][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.040799][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.046178][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.050682][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.055617][ T7096] lwtunnel_output+0x27e/0x440 [ 156.060384][ T7096] rpl_output+0x31f/0x730 [ 156.064733][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.069238][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.074274][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.079653][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.084163][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.089103][ T7096] lwtunnel_output+0x27e/0x440 [ 156.093871][ T7096] rpl_output+0x31f/0x730 [ 156.098207][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.102801][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.107828][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.113210][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.117714][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.122738][ T7096] lwtunnel_output+0x27e/0x440 [ 156.127592][ T7096] rpl_output+0x31f/0x730 [ 156.131926][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.136437][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.141371][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.146749][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.151253][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.156291][ T7096] lwtunnel_output+0x27e/0x440 [ 156.161058][ T7096] rpl_output+0x31f/0x730 [ 156.165427][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.169937][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.175135][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.180506][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.185014][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.189970][ T7096] lwtunnel_output+0x27e/0x440 [ 156.194738][ T7096] rpl_output+0x31f/0x730 [ 156.199073][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.203575][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.208517][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.213901][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.218404][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.223442][ T7096] lwtunnel_output+0x27e/0x440 [ 156.228644][ T7096] rpl_output+0x31f/0x730 [ 156.232977][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.237476][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.242411][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.247784][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.252315][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.257254][ T7096] lwtunnel_output+0x27e/0x440 [ 156.262117][ T7096] rpl_output+0x31f/0x730 [ 156.266455][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.271066][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.276089][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.281495][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.286003][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.290941][ T7096] lwtunnel_output+0x27e/0x440 [ 156.295710][ T7096] rpl_output+0x31f/0x730 [ 156.300217][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.304724][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.309668][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.315219][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.319729][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.324754][ T7096] lwtunnel_output+0x27e/0x440 [ 156.329519][ T7096] rpl_output+0x31f/0x730 [ 156.333848][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.338345][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.343373][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.348747][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.353253][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.358288][ T7096] lwtunnel_output+0x27e/0x440 [ 156.363056][ T7096] rpl_output+0x31f/0x730 [ 156.367472][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.372059][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.377257][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.382873][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.387412][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.392446][ T7096] lwtunnel_output+0x27e/0x440 [ 156.397217][ T7096] rpl_output+0x31f/0x730 [ 156.401646][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.406325][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.411263][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.416794][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.421329][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.426278][ T7096] lwtunnel_output+0x27e/0x440 [ 156.431187][ T7096] rpl_output+0x31f/0x730 [ 156.435631][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.440135][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.445079][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.450457][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.454961][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.459900][ T7096] lwtunnel_output+0x27e/0x440 [ 156.464694][ T7096] rpl_output+0x31f/0x730 [ 156.469055][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.473577][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.478530][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.483918][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.488428][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.493460][ T7096] lwtunnel_output+0x27e/0x440 [ 156.498233][ T7096] rpl_output+0x31f/0x730 [ 156.502573][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.507182][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.512119][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.517514][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.522147][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.527086][ T7096] lwtunnel_output+0x27e/0x440 [ 156.531869][ T7096] rpl_output+0x31f/0x730 [ 156.536204][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.540717][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.545657][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.551037][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.555549][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.560500][ T7096] lwtunnel_output+0x27e/0x440 [ 156.565278][ T7096] rpl_output+0x31f/0x730 [ 156.569609][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.574114][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.579050][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.584427][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.588933][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.593895][ T7096] lwtunnel_output+0x27e/0x440 [ 156.598751][ T7096] rpl_output+0x31f/0x730 [ 156.603109][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.607614][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.612579][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.618057][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.622575][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.627686][ T7096] lwtunnel_output+0x27e/0x440 [ 156.632636][ T7096] rpl_output+0x31f/0x730 [ 156.636993][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.641716][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.646679][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.652068][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.656580][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.661519][ T7096] lwtunnel_output+0x27e/0x440 [ 156.666478][ T7096] rpl_output+0x31f/0x730 [ 156.670988][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.675668][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.680638][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.686023][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.690726][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.695690][ T7096] lwtunnel_output+0x27e/0x440 [ 156.700703][ T7096] rpl_output+0x31f/0x730 [ 156.705511][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.710031][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.715121][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.720810][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.725351][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.730387][ T7096] lwtunnel_output+0x27e/0x440 [ 156.735164][ T7096] rpl_output+0x31f/0x730 [ 156.739613][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.744404][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.749361][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.754775][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.759370][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.764326][ T7096] lwtunnel_output+0x27e/0x440 [ 156.769123][ T7096] rpl_output+0x31f/0x730 [ 156.773471][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.777980][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.782918][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.788294][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.792802][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.797743][ T7096] lwtunnel_output+0x27e/0x440 [ 156.802516][ T7096] rpl_output+0x31f/0x730 [ 156.806852][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.811355][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.816295][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.821691][ T7096] ? rpl_do_srh+0x9c1/0xe50 [ 156.826285][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.831221][ T7096] lwtunnel_output+0x27e/0x440 [ 156.835997][ T7096] rpl_output+0x31f/0x730 [ 156.840331][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.845267][ T7096] ? pskb_expand_head+0x363/0x1100 [ 156.850391][ T7096] ? read_lock_is_recursive+0x10/0x10 [ 156.855864][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.860805][ T7096] lwtunnel_output+0x27e/0x440 [ 156.865570][ T7096] rpl_output+0x31f/0x730 [ 156.869900][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.874938][ T7096] ? rpl_destroy_state+0x20/0x20 [ 156.879875][ T7096] lwtunnel_output+0x27e/0x440 [ 156.884641][ T7096] ip6_send_skb+0x1af/0x350 [ 156.889148][ T7096] rawv6_push_pending_frames+0x665/0x820 [ 156.894877][ T7096] ? rawv6_send_hdrinc+0x1650/0x1650 [ 156.900165][ T7096] ? raw6_getfrag+0x2c0/0x2c0 [ 156.904862][ T7096] ? rawv6_send_hdrinc+0x1650/0x1650 [ 156.910173][ T7096] rawv6_sendmsg+0x1298/0x1710 [ 156.914973][ T7096] ? __might_sleep+0xf0/0xf0 [ 156.919582][ T7096] ? compat_rawv6_ioctl+0x60/0x60 [ 156.924788][ T7096] ? aa_sk_perm+0x7dc/0x910 [ 156.929310][ T7096] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 156.935728][ T7096] ? sock_rps_record_flow+0x17/0x3b0 [ 156.941027][ T7096] ? inet_sendmsg+0x7a/0x2a0 [ 156.945616][ T7096] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 156.951006][ T7096] ? inet_send_prepare+0x250/0x250 [ 156.956290][ T7096] ____sys_sendmsg+0x5be/0x8f0 [ 156.961061][ T7096] ? __sys_sendmsg_sock+0x30/0x30 [ 156.966103][ T7096] ? rcu_is_watching+0x11/0xa0 [ 156.970878][ T7096] ? import_iovec+0x6f/0xa0 [ 156.975560][ T7096] ___sys_sendmsg+0x236/0x2e0 [ 156.980331][ T7096] ? __sys_sendmsg+0x290/0x290 [ 156.985147][ T7096] ? __might_fault+0xb3/0x110 [ 156.989834][ T7096] __sys_sendmmsg+0x2ba/0x500 [ 156.994521][ T7096] ? __ia32_sys_sendmsg+0x80/0x80 [ 156.999649][ T7096] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.005634][ T7096] ? lock_chain_count+0x20/0x20 [ 157.010495][ T7096] __x64_sys_sendmmsg+0x9c/0xb0 [ 157.015348][ T7096] do_syscall_64+0x4c/0xa0 [ 157.019790][ T7096] ? clear_bhb_loop+0x30/0x80 [ 157.024563][ T7096] ? clear_bhb_loop+0x30/0x80 [ 157.029243][ T7096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.035136][ T7096] RIP: 0033:0x7f909abda0d9 [ 157.039551][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.059160][ T7096] RSP: 002b:00007f9098e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.067664][ T7096] RAX: ffffffffffffffda RBX: 00007f909ae61fa0 RCX: 00007f909abda0d9 [ 157.075841][ T7096] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 157.083819][ T7096] RBP: 00007f909ac71024 R08: 0000000000000000 R09: 0000000000000000 [ 157.091796][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.099993][ T7096] R13: 00007f909ae62038 R14: 00007f909ae61fa0 R15: 00007ffee5657948 [ 157.107971][ T7096] [ 157.111119][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.143692][ T6633] belkin 0003:1020:0006.000C: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 157.160388][ T7102] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.169819][ T7102] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.178684][ T7102] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.187443][ T7102] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.235416][ T6633] usb 3-1: USB disconnect, device number 7 [ 157.326126][ T7096] syz.0.1017 (7096) used greatest stack depth: 6768 bytes left [ 157.334066][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory