last executing test programs: 2.991488075s ago: executing program 4 (id=6660): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 2.778467549s ago: executing program 4 (id=6661): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) 2.579696382s ago: executing program 1 (id=6663): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x1ff, 0x7) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x800, 0xa00}) 2.235914036s ago: executing program 1 (id=6666): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 2.193625173s ago: executing program 2 (id=6667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2c, 0x25dfdbed, {0x7, 0x0, 0x0, r1, 0x80, 0x40, 0x1}, [@NDA_VLAN={0x6}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 2.090922009s ago: executing program 2 (id=6668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) 2.038866327s ago: executing program 0 (id=6669): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000009c0)={r0, &(0x7f00000005c0), 0x0}, 0x20) 2.028824404s ago: executing program 1 (id=6670): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x1, 0x1, 0x0, 0x83}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x4, {0x1, @vbi={0x8, 0x1, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) 1.967334996s ago: executing program 2 (id=6671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x38}}, 0x2400404e) 1.850658698s ago: executing program 0 (id=6672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.819131486s ago: executing program 1 (id=6673): unshare(0x400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 1.818331815s ago: executing program 2 (id=6674): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.723436277s ago: executing program 4 (id=6676): socket$nl_generic(0x11, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000a00)=""/209, 0xd1}], 0x1, 0x14, 0x5) 1.709056379s ago: executing program 1 (id=6677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x620b}, 0x0) 1.678822693s ago: executing program 0 (id=6678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x404e008) 1.538276088s ago: executing program 2 (id=6679): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) 1.498358077s ago: executing program 1 (id=6680): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400010000f0490904ef08010300030009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="f308e1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.493718238s ago: executing program 0 (id=6690): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) shutdown(r0, 0x1) 1.430177308s ago: executing program 4 (id=6681): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) poll(&(0x7f0000000500)=[{r0, 0x412}], 0x1, 0x81) signalfd4(r0, &(0x7f0000000000), 0x8, 0x800) 1.298041143s ago: executing program 2 (id=6682): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.134480553s ago: executing program 4 (id=6684): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001280)="199ac563f8dc2b5b5f6e9b02bbb10d29a7a0e76273444e55d87ce8cfb64e0e36bb34214d357c75c23e17acf25924e709578fcc3d4947453ae29c2d43cedf29f715cec42a50ef6d92932bedf62114dad2f184eb03257e09e7f85a8c6e22ecd96b0db42a36f3d2e8fe50e3f277dcbd8774ad232f7b57820a4ba69e459557842d5511673cf5ca51beefb4ad1e781d49f2ff33300b9a861af495ef381cb15f24d8cdbb153b644799d0a2be04e514ac8c7e5ae3de643c2b884cac7280001aa1b9473422f11eae4f3a4939f76a8cc10034f38cfea8e04caa23050b1198a19d2dcd8938fb67ac5c63be1defeb6d17f88e1e0fbec9912fc1d09d5cdc71f9158b06cf46831d106aeac7d97d0178684b24b7239c9ab7efe6bc2be02a5b4d93836a0d0f1a6bdb0d02785b7031bfe420600509f44112aa4bba809c5f0d606393cd04e7453db70fc300ddc375b325e3bd54c82475609eff263960b18a7ac0d47542b39086824f9663745a426a08d343ee343fa7fffa4ba7c31a465fef4635e500031ffdbc9bfd4881e1bd0082249dc08757021c33dde7f0bb5f5357d448d183b071edda641d257f6a6ab1b8b67750b097dbb13b34a23fab296f7c3fc9a7867157da53932d0e0f98c714eea456a665dccaccb02338e31a97723d65e8d4b7ced74c763b17c900239f912c5516358e535739c18789a3ff8559e8da52aa647ec97f2d8b7a6325617cf6b962d8cbadf74e2fb0cba8d1d6b28a1af5adf75ed27f7eb96cae8bba5c7e34dfdec0054170b9b783e9d9f5dde8329cd425e2b3a5483d37df0c216fffa2d5c2855e3818d6accd0d8b1d93531d0d47eabdb8c0265f17b32974d4e34f0b91277939c589323cdce6d92e6f78fe649daf29f07dc5e79f90c0e0502cbeea8db536b580c9114fc2d4b1854d92f35d43e4c5f28c15bf2b0545bc073aeeca25e2452af3b5b4e5af42c567dbfc70a79201b5360eaa6a6d9030c29d70aa3c05fd9d14a0b0f4d65f634e28c7f86963cfb6111aa1bc32c8426c71afa24c04225f2435508ef481d46707b6a6c46b7bf6c593840ac93353aa2bb26f0bcb7d8c73ea20ab6171ba9b944c22ec7b073dce65423707e180455b5af68e61175a69ce2fcb6d62190ad47c38a3fd32a70b77e8452daebfade97ddcbf2b6a29477ccb50248607c267202e0380814571c23829a5f605af8d0f609e54b42008b533893f07a1a89a22649164fa27a388ffdc182b92bff89b72a72cde691f81b5126738346db2da860e7e098b36f2f52158d14fa401b032c7dfcfc8e1003a49adafd03515191a96daa2819cd5b68df283a0b86ba0c48eb7ef9b42e32a19ef15963abc853b513f2337198304cc721ec5affa3996e15edf7badfd976048730e1cbf52955eadf96d83cd73ac18ea3d148643ee954c63d45b247b5713387eafe127bfdcfe7847", 0x3ec}, {0x0, 0x16}], 0x2}}], 0x1, 0x4) 1.004353078s ago: executing program 3 (id=6685): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 761.437857ms ago: executing program 3 (id=6686): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x54}}, 0x2000400c) 668.931327ms ago: executing program 3 (id=6687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 536.664925ms ago: executing program 3 (id=6688): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086603, 0x0) 465.315237ms ago: executing program 0 (id=6689): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x60) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)}, &(0x7f0000000300)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 289.654067ms ago: executing program 3 (id=6691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = timerfd_create(0x1, 0x800) timerfd_gettime(r0, &(0x7f0000000180)) 211.58167ms ago: executing program 0 (id=6692): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x4) getdents(r0, 0x0, 0x54) 129.689351ms ago: executing program 4 (id=6693): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x40005) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2010000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="6728535d31ed5e2db1675fe6664ab27ed40088b6d0bfd8ba31e06e338e4ccea6e9485cd7a6963c7ff02f96", @ANYRES16=0x0], 0xfb, 0x1515, &(0x7f00000002c0)="$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") 0s ago: executing program 3 (id=6694): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0xd7, 0xa, 0x8000, 0xdd8, 0x3}) kernel console output (not intermixed with test programs): t [ 466.036930][T22970] XFS (loop2): Ending clean mount [ 466.167846][ T25] usb 2-1: USB disconnect, device number 32 [ 466.219258][ T6070] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 466.254143][ T30] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 466.403468][T13832] udevd[13832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.469554][ T30] usb 1-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 466.477851][ T30] usb 1-1: config 129 has an invalid interface number: 176 but max is 0 [ 466.477928][ T30] usb 1-1: config 129 has no interface number 0 [ 466.478020][ T30] usb 1-1: config 129 interface 176 has no altsetting 0 [ 466.556420][ T30] usb 1-1: string descriptor 0 read error: -22 [ 466.556928][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.605437][ T30] option 1-1:129.176: GSM modem (1-port) converter detected [ 466.817190][ T5743] usb 1-1: USB disconnect, device number 18 [ 466.830280][ T5743] option 1-1:129.176: device disconnected [ 467.133804][T23054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5407'. [ 467.234682][T23089] netlink: 'syz.1.5413': attribute type 1 has an invalid length. [ 467.234727][T23089] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5413'. [ 467.443398][T23096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5415'. [ 467.626600][T23040] loop2: detected capacity change from 0 to 32768 [ 467.772201][T23040] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 467.844875][T23040] XFS (loop2): Ending clean mount [ 467.869203][T23128] loop3: detected capacity change from 0 to 16 [ 467.882930][T23128] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 468.046744][ T6070] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 468.734484][T23179] loop2: detected capacity change from 0 to 2048 [ 468.767190][T23179] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 468.782247][T23179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.144279][ T30] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 469.308674][ T30] usb 4-1: not running at top speed; connect to a high speed hub [ 469.308767][ T30] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 469.317843][ T30] usb 4-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 469.317872][ T30] usb 4-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 469.339387][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.339470][ T30] usb 4-1: Product: syz [ 469.339512][ T30] usb 4-1: Manufacturer: syz [ 469.339555][ T30] usb 4-1: SerialNumber: syz [ 469.408114][ T30] usb 4-1: 0:2 : does not exist [ 469.413640][ T30] usb 4-1: unit 130 not found! [ 469.650441][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5449'. [ 469.650483][T23241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5449'. [ 469.803195][T23248] netlink: 1056 bytes leftover after parsing attributes in process `syz.0.5452'. [ 469.814674][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5452'. [ 469.871541][T23254] bond0: Error: CAN devices cannot be enslaved [ 469.896556][ T30] usb 4-1: USB disconnect, device number 30 [ 469.989744][T23266] netlink: 'syz.2.5454': attribute type 15 has an invalid length. [ 470.042973][T23271] block device autoloading is deprecated and will be removed. [ 470.204400][ T1071] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 470.291636][T23291] loop2: detected capacity change from 0 to 1024 [ 470.306406][T13832] udevd[13832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.327778][T23291] EXT4-fs (loop2): unsupported inode size: 143 [ 470.327826][T23291] EXT4-fs (loop2): blocksize: 1024 [ 470.366606][ T1071] usb 5-1: Using ep0 maxpacket: 32 [ 470.398959][ T1071] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 470.411610][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.411676][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.411834][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.441513][ T5743] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 470.470040][ T1071] usb 5-1: config 0 descriptor?? [ 470.509996][ T1071] hub 5-1:0.0: USB hub found [ 470.594182][ T5743] usb 2-1: Using ep0 maxpacket: 8 [ 470.600049][ T5743] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 470.610553][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 470.610607][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.610636][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.610667][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 470.610700][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 470.610744][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.691042][ T5743] usb 2-1: config 0 descriptor?? [ 470.704026][T23286] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 470.773434][ T1071] hub 5-1:0.0: 1 port detected [ 470.785969][T23293] loop0: detected capacity change from 0 to 32768 [ 470.833551][T23293] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 470.922087][T23293] XFS (loop0): Ending clean mount [ 470.976282][ T1071] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 471.016952][ T1071] usbhid 5-1:0.0: can't add hid device: -71 [ 471.017087][ T1071] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.043625][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 471.046653][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.046960][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.047173][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.047461][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.047684][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.047956][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.048182][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.048376][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.048642][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.048894][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.049193][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.049397][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.050117][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.050353][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.050622][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.050829][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051051][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051130][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051189][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051274][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051329][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051412][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051468][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051555][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051611][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051696][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051753][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051845][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.051903][ T5631] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 471.238427][ T1071] usb 5-1: USB disconnect, device number 25 [ 471.299884][ T5628] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 471.317761][ T5630] usb 2-1: USB disconnect, device number 33 [ 471.325908][ T5626] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.425636][T23336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5463'. [ 471.503760][T23291] loop2: detected capacity change from 0 to 32768 [ 471.531654][T23291] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5457 (23291) [ 471.668125][T23291] BTRFS info (device loop2): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 471.668348][T23291] BTRFS info (device loop2): using crc32c checksum algorithm [ 471.668616][T23291] BTRFS error (device loop2): ignoresuperflags must be used with ro mount option [ 471.669117][T23291] BTRFS error (device loop2): open_ctree failed: -EINVAL [ 472.027755][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5469'. [ 472.580595][T23402] netlink: zone id is out of range [ 472.589655][T23402] netlink: zone id is out of range [ 472.589705][T23402] netlink: zone id is out of range [ 472.589719][T23402] netlink: zone id is out of range [ 472.589732][T23402] netlink: zone id is out of range [ 472.589745][T23402] netlink: set zone limit has 4 unknown bytes [ 472.682545][T23408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5479'. [ 473.134214][ T30] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 473.276880][T23450] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 473.309022][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 473.309108][ T30] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 473.329441][ T30] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 473.329488][ T30] usb 5-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 473.365635][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.365684][ T30] usb 5-1: Product: syz [ 473.365718][ T30] usb 5-1: Manufacturer: syz [ 473.365741][ T30] usb 5-1: SerialNumber: syz [ 473.405642][ T30] usb 5-1: 0:2 : does not exist [ 473.410943][ T30] usb 5-1: unit 130 not found! [ 473.825093][ T30] usb 5-1: USB disconnect, device number 26 [ 473.938455][T13832] udevd[13832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.311201][T23519] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 474.401077][T23525] loop3: detected capacity change from 0 to 256 [ 474.701133][T23543] IPv6: sit1: Disabled Multicast RS [ 474.847440][T23552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5513'. [ 474.856689][T23552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5513'. [ 475.263746][T23585] loop3: detected capacity change from 0 to 1024 [ 475.406266][T23585] hfsplus: extend alloc file! (16384,256,150995124) [ 475.406317][T23585] hfsplus: failed to extend attributes file [ 475.457974][T23594] ÿÿÿÿÿÿ: renamed from hsr0 (while UP) [ 476.469670][T23659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5544'. [ 476.715211][ T30] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 476.738640][T23679] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 476.738690][T23679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5549'. [ 476.884462][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 476.894523][ T30] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 476.905205][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 476.916909][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 476.934506][ T30] usb 5-1: string descriptor 0 read error: -22 [ 476.934662][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.964594][T23663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.981637][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.990348][ T30] usb 5-1: MIDIStreaming interface descriptor not found [ 477.326706][ T1071] usb 5-1: USB disconnect, device number 27 [ 477.353437][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'. [ 477.353485][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'. [ 477.985099][T23767] dvmrp0: entered allmulticast mode [ 478.204143][ T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 478.366793][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 478.379258][ T30] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 478.379307][ T30] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 478.379352][ T30] usb 3-1: config 0 has no interface number 0 [ 478.412730][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.412781][ T30] usb 3-1: Product: syz [ 478.412818][ T30] usb 3-1: Manufacturer: syz [ 478.412839][ T30] usb 3-1: SerialNumber: syz [ 478.443846][ T30] usb 3-1: config 0 descriptor?? [ 478.459421][ T30] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 478.574683][ T31] audit: type=1326 audit(1788198444.336:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.605861][ T31] audit: type=1326 audit(1788198444.336:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.640160][ T31] audit: type=1326 audit(1788198444.396:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.653309][ T31] audit: type=1326 audit(1788198444.406:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.653452][ T31] audit: type=1326 audit(1788198444.406:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.666324][ T31] audit: type=1326 audit(1788198444.396:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.666378][ T31] audit: type=1326 audit(1788198444.426:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.666419][ T31] audit: type=1326 audit(1788198444.426:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 478.693906][ T31] audit: type=1326 audit(1788198444.446:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23818 comm="syz.1.5585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 479.201976][T23850] netlink: 'syz.4.5593': attribute type 9 has an invalid length. [ 479.284163][ T30] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 479.306554][T23846] loop1: detected capacity change from 0 to 8192 [ 479.362586][T23846] loop1: p1 p3 p4 [ 479.362637][T23846] loop1: partition table partially beyond EOD, truncated [ 479.369383][T23846] loop1: p1 start 393225 is beyond EOD, truncated [ 479.371875][T23846] loop1: p3 start 16777216 is beyond EOD, truncated [ 479.371940][T23846] loop1: p4 start 4294967295 is beyond EOD, truncated [ 479.413748][T23861] loop4: detected capacity change from 0 to 2048 [ 479.434142][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 479.440086][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 479.451084][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.451136][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.483483][ T30] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 479.483533][ T30] usb 4-1: Product: syz [ 479.483573][ T30] usb 4-1: Manufacturer: syz [ 479.483595][ T30] usb 4-1: SerialNumber: syz [ 479.518351][ T30] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 479.574297][T23861] Dev loop4: RDB in block 1 has bad checksum [ 479.803188][ T1071] usb 4-1: USB disconnect, device number 31 [ 479.883550][T23891] loop0: detected capacity change from 0 to 512 [ 479.905425][ T1071] appletouch 4-1:1.0: input: appletouch disconnected [ 479.959137][T23891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.973621][T23891] ext4 filesystem being mounted at /1135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.149193][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.271233][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 480.281022][T23918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5604'. [ 480.628940][T23939] loop1: detected capacity change from 0 to 164 [ 480.896356][T23958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5615'. [ 480.958476][T23962] openvswitch: netlink: IPv4 tunnel dst address is zero [ 480.983351][ T5630] usb 3-1: USB disconnect, device number 23 [ 481.231354][T23984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5623'. [ 481.467843][T23995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5627'. [ 481.497543][T24003] loop4: detected capacity change from 0 to 1024 [ 481.534387][T24005] loop2: detected capacity change from 0 to 2048 [ 481.577069][T24005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 481.577924][T24003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.633948][T24005] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #12: comm syz.2.5630: corrupted in-inode xattr: invalid size in ea xattr [ 481.834130][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.867197][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 482.088117][T24032] gre0: entered promiscuous mode [ 482.088294][T24032] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 482.234539][ T31] audit: type=1326 audit(1788198447.996:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24037 comm="syz.1.5640" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 482.375949][T24044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5639'. [ 482.604143][ T5630] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 482.617048][T24000] loop0: detected capacity change from 0 to 32768 [ 482.642560][T24000] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 482.671025][T24000] JBD2: Ignoring recovery information on journal [ 482.745921][T24000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 482.756493][ T5630] usb 2-1: Using ep0 maxpacket: 8 [ 482.767861][ T5630] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 482.785793][ T5630] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.785844][ T5630] usb 2-1: config 179 has no interface number 0 [ 482.785915][ T5630] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 482.785951][ T5630] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 482.785981][ T5630] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 482.786012][ T5630] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 482.786043][ T5630] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 482.786075][ T5630] usb 2-1: config 179 interface 65 has no altsetting 0 [ 482.786112][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.957928][ T5630] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 483.068282][ T4976] input input24: unable to receive magic message: -110 [ 483.382924][ T9] usb 2-1: USB disconnect, device number 34 [ 483.382968][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 483.383023][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 483.650065][ T5626] ocfs2: Unmounting device (7,0) on (node local) [ 484.042171][T24110] bond2: entered promiscuous mode [ 484.047637][T24110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.119486][T24154] loop1: detected capacity change from 0 to 2048 [ 484.204861][T24160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.386547][T24166] loop2: detected capacity change from 0 to 256 [ 484.450232][T24160] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 484.450305][T24160] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 484.504819][T24171] loop3: detected capacity change from 0 to 64 [ 484.618444][T24160] Remounting filesystem read-only [ 484.636553][ T5627] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 484.718998][T24159] loop0: detected capacity change from 0 to 40427 [ 484.755230][T24159] F2FS-fs (loop0): build fault injection rate: 690 [ 484.770403][T24159] F2FS-fs (loop0): invalid crc value [ 484.795650][T24184] PKCS8: Unsupported PKCS#8 version [ 485.103929][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5667'. [ 485.103989][T24204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5667'. [ 485.139292][T24159] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 485.176305][T24159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 485.509033][T24221] loop4: detected capacity change from 0 to 256 [ 485.885519][T24245] MTD: Couldn't look up 'mtd0/file0': -2 [ 486.096231][T24253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5685'. [ 486.096290][T24253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5685'. [ 486.271167][T24229] loop3: detected capacity change from 0 to 32768 [ 486.323093][T24259] xt_NFQUEUE: number of total queues is 0 [ 486.362825][T24229] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 486.362825][T24229] [ 486.395657][T24229] ERROR: (device loop3): remounting filesystem as read-only [ 486.403550][T24229] xtLookup: xtSearch returned -5 [ 486.412245][T24229] ERROR: (device loop3): xtTruncate: xt_getpage: xtree page corrupt [ 486.412245][T24229] [ 486.501002][T24267] netlink: 'syz.2.5690': attribute type 16 has an invalid length. [ 486.518976][T24267] netlink: 'syz.2.5690': attribute type 17 has an invalid length. [ 486.551264][T24267] gre0: left promiscuous mode [ 486.676324][T24267] bridge0: left allmulticast mode [ 486.910975][T24288] netlink: 'syz.4.5696': attribute type 1 has an invalid length. [ 487.076029][T24267] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 487.134738][T24267] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 487.181076][T24267] geneve2: left promiscuous mode [ 487.186714][T24267] geneve2: left allmulticast mode [ 487.195367][T24267] bond1: left promiscuous mode [ 487.208038][T24267] sit2: left allmulticast mode [ 487.217126][T24267] veth3: left allmulticast mode [ 487.223640][T24267] bond2: left promiscuous mode [ 487.236372][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.236443][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 38624 - 0 [ 487.237968][ T1288] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.238063][ T1288] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 38624 - 0 [ 487.238159][ T1288] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.238236][ T1288] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 38624 - 0 [ 487.439709][T24306] usb usb8: usbfs: process 24306 (syz.3.5704) did not claim interface 0 before use [ 487.513140][T24314] loop3: detected capacity change from 0 to 64 [ 488.321017][T24366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.747868][T24396] netlink: 'syz.0.5730': attribute type 2 has an invalid length. [ 488.747915][T24396] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5730'. [ 488.921454][T24400] loop4: detected capacity change from 0 to 2048 [ 488.975077][T24400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.868340][T24390] syz.2.5728 (24390): drop_caches: 2 [ 489.971035][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5745'. [ 489.971458][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5745'. [ 489.971524][T24456] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5745'. [ 490.045899][T24461] netlink: 'syz.0.5747': attribute type 2 has an invalid length. [ 490.053939][T24461] netlink: 'syz.0.5747': attribute type 2 has an invalid length. [ 490.326823][T24476] gretap1: entered allmulticast mode [ 490.492021][T24488] loop2: detected capacity change from 0 to 4096 [ 490.596264][T24488] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 490.650511][T24488] ntfs3(loop2): Failed to load $Extend (-22). [ 490.650572][T24488] ntfs3(loop2): Failed to initialize $Extend. [ 490.890205][T24513] loop4: detected capacity change from 0 to 65 [ 490.901192][T24513] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 491.169758][T24529] vlan0: entered promiscuous mode [ 491.176116][T24529] veth0_vlan: entered promiscuous mode [ 491.305401][T24534] kAFS: unable to lookup cell '' [ 491.491970][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5771'. [ 491.608937][T24556] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5775'. [ 491.609090][T24556] netlink: 578 bytes leftover after parsing attributes in process `syz.1.5775'. [ 491.717119][T24563] loop4: detected capacity change from 0 to 1024 [ 491.731136][T24568] loop3: detected capacity change from 0 to 1024 [ 491.739790][T24568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.747465][T24568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.757589][T24568] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 491.793973][T24568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.806813][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 491.908580][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.965906][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.980457][ T25] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 491.980527][ T25] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 491.980580][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.010658][ T25] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 492.010705][ T25] usb 3-1: Product: syz [ 492.010738][ T25] usb 3-1: Manufacturer: syz [ 492.010759][ T25] usb 3-1: SerialNumber: syz [ 492.036478][ T25] usb 3-1: config 0 descriptor?? [ 492.044423][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 492.050526][ T25] hub 3-1:0.0: probe with driver hub failed with error -5 [ 492.062124][ T25] usb 3-1: selecting invalid altsetting 0 [ 492.273356][T24600] tmpfs: Bad value for 'mpol' [ 492.435364][ T25] usb 3-1: USB disconnect, device number 24 [ 492.661035][T24633] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 492.726739][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 492.874529][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 492.879671][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 492.890573][ T9] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 492.890649][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 492.890736][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.890833][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.944785][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.944858][ T9] usb 4-1: Product: syz [ 492.944893][ T9] usb 4-1: Manufacturer: syz [ 492.944962][ T9] usb 4-1: SerialNumber: syz [ 492.969804][ T9] usb 4-1: config 0 descriptor?? [ 493.161723][T24667] ieee802154 phy1 wpan1: encryption failed: -22 [ 493.254473][ T9] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 493.259959][ T9] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 493.338832][ T9] usb 4-1: USB disconnect, device number 32 [ 493.391995][T24682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5800'. [ 493.421639][T24683] netlink: 'syz.0.5802': attribute type 6 has an invalid length. [ 493.522488][T24688] xt_NETMAP: bad rangesize 3221225472. [ 493.657520][T24695] loop0: detected capacity change from 0 to 256 [ 493.745054][T24700] netlink: 'syz.1.5807': attribute type 6 has an invalid length. [ 493.762646][T24701] loop4: detected capacity change from 0 to 64 [ 493.798177][T24701] syz.4.5809: attempt to access beyond end of device [ 493.798177][T24701] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 493.798250][T24701] Buffer I/O error on dev loop4, logical block 512, async page read [ 493.798402][T24701] syz.4.5809: attempt to access beyond end of device [ 493.798402][T24701] loop4: rw=8388608, sector=32768, nr_sectors = 2 limit=64 [ 493.798495][T24701] Buffer I/O error on dev loop4, logical block 16384, async page read [ 494.771925][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5825'. [ 494.771979][T24757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5825'. [ 494.867797][T24762] netlink: 'syz.1.5828': attribute type 2 has an invalid length. [ 495.306690][ T1288] IPVS: starting estimator thread 0... [ 495.376456][T24784] loop3: detected capacity change from 0 to 4096 [ 495.425301][T24787] IPVS: using max 29 ests per chain, 69600 per kthread [ 495.457314][T24784] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 495.519919][T24784] ntfs3(loop3): Failed to load $Extend (-22). [ 495.519982][T24784] ntfs3(loop3): Failed to initialize $Extend. [ 496.108306][T24818] loop3: detected capacity change from 0 to 4096 [ 496.119068][T24818] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 496.172456][T24818] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 496.179968][T24818] ntfs3(loop3): Failed to load $Extend (-22). [ 496.180017][T24818] ntfs3(loop3): Failed to initialize $Extend. [ 496.239115][T24818] ntfs3(loop3): ino=5, "/" indx_read_ra [ 496.254982][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 496.415785][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 496.423424][ T25] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 496.436056][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.448891][ T25] usb 3-1: config 0 descriptor?? [ 496.468728][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 496.841450][T24861] loop0: detected capacity change from 0 to 4096 [ 496.890908][ T25] gspca_vc032x: reg_w err -71 [ 496.891036][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891068][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891082][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891096][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891110][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891123][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891136][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891149][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891163][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891176][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891189][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891202][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891215][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891228][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891241][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891254][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891267][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891280][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 496.891292][ T25] gspca_vc032x: Unknown sensor... [ 496.891370][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 497.009238][T24861] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 497.018611][ T25] usb 3-1: USB disconnect, device number 25 [ 497.093110][T24861] ntfs3(loop0): Failed to load $Extend (-22). [ 497.093171][T24861] ntfs3(loop0): Failed to initialize $Extend. [ 497.206459][T24893] netlink: 'syz.4.5862': attribute type 3 has an invalid length. [ 497.206560][T24893] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5862'. [ 497.311499][T24885] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 498.184986][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 498.215741][T24955] netlink: 'syz.3.5878': attribute type 1 has an invalid length. [ 498.334417][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 498.340466][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 498.351148][ T25] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 498.351214][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 498.351249][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 498.351283][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 498.402041][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.402094][ T25] usb 1-1: Product: syz [ 498.402130][ T25] usb 1-1: Manufacturer: syz [ 498.402151][ T25] usb 1-1: SerialNumber: syz [ 498.428957][ T25] usb 1-1: config 0 descriptor?? [ 498.671263][T24973] loop4: detected capacity change from 0 to 64 [ 498.680547][ T25] appledisplay 1-1:0.0: Error while getting initial brightness: -71 [ 498.695950][ T25] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71 [ 498.715851][ T25] usb 1-1: USB disconnect, device number 19 [ 498.816619][T24986] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 498.861615][T24948] loop1: detected capacity change from 0 to 32768 [ 498.912288][T24948] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 498.987827][T24948] XFS (loop1): Ending clean mount [ 498.997034][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5887'. [ 499.061982][ T5627] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 499.561026][T25034] sctp: [Deprecated]: syz.2.5894 (pid 25034) Use of int in maxseg socket option. [ 499.561026][T25034] Use struct sctp_assoc_value instead [ 499.844120][T25047] netlink: 'syz.3.5900': attribute type 3 has an invalid length. [ 499.855228][T25047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5900'. [ 499.855290][T25047] netlink: 'syz.3.5900': attribute type 3 has an invalid length. [ 499.855312][T25047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5900'. [ 499.900082][T25049] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.255558][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 500.307282][T25039] loop0: detected capacity change from 0 to 40427 [ 500.324721][T25039] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 500.331603][T25039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 500.415509][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 500.421416][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 500.432436][ T25] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 500.432526][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 500.432573][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 500.432604][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 500.486411][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.494774][ T25] usb 5-1: Product: syz [ 500.494829][ T25] usb 5-1: Manufacturer: syz [ 500.494850][ T25] usb 5-1: SerialNumber: syz [ 500.520214][ T25] usb 5-1: config 0 descriptor?? [ 500.686927][T25039] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 500.706530][T25039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 500.713844][T25039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 500.784544][ T25] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 500.810500][ T25] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 500.835350][ T25] usb 5-1: USB disconnect, device number 28 [ 501.589314][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.713284][T25143] netlink: 'syz.4.5926': attribute type 17 has an invalid length. [ 501.843489][T25143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.859600][T25143] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 502.434594][ T30] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 502.567623][T25202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5942'. [ 502.594447][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 502.600584][ T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 502.612473][ T30] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 502.612557][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 502.612591][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 502.612622][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 502.671732][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.671782][ T30] usb 2-1: Product: syz [ 502.671817][ T30] usb 2-1: Manufacturer: syz [ 502.671838][ T30] usb 2-1: SerialNumber: syz [ 502.696821][ T30] usb 2-1: config 0 descriptor?? [ 502.798925][T25212] loop0: detected capacity change from 0 to 128 [ 502.835229][T25212] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.849267][T25212] ext4 filesystem being mounted at /1185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 502.993913][ T30] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 503.005559][ T30] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 503.023581][ T30] usb 2-1: USB disconnect, device number 35 [ 503.067354][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.168886][T25191] loop2: detected capacity change from 0 to 32768 [ 503.178884][T25191] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5938 (25191) [ 503.198210][T25191] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 503.208501][T25191] BTRFS info (device loop2): using blake2b checksum algorithm [ 503.325055][T25191] BTRFS info (device loop2): enabling ssd optimizations [ 503.337126][T25191] BTRFS info (device loop2): turning on async discard [ 503.344243][T25191] BTRFS info (device loop2): enabling free space tree [ 503.532246][ T6070] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 504.122480][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'. [ 504.140333][T25288] loop0: detected capacity change from 0 to 512 [ 504.158749][T25288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 504.191821][T25288] EXT4-fs (loop0): 1 truncate cleaned up [ 504.207314][T25288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.288267][T25290] bond5: option packets_per_slave: invalid value (16777215) [ 504.296898][T25290] bond5: option packets_per_slave: allowed values 0 - 65535 [ 504.748220][T25328] loop2: detected capacity change from 0 to 32768 [ 504.787415][T25328] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 504.846476][T25328] XFS (loop2): Ending clean mount [ 504.881574][T25328] XFS (loop2): Quotacheck needed: Please wait. [ 504.969802][T25290] bond5 (unregistering): Released all slaves [ 505.007151][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.213403][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5962'. [ 505.258709][T25328] XFS (loop2): Quotacheck: Done. [ 505.509284][ T6070] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 505.583363][T25405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 505.583394][T25405] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 505.604309][T25405] vhci_hcd vhci_hcd.0: Device attached [ 505.620541][T25406] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 505.691182][ T1288] vhci_hcd vhci_hcd.3: stop threads [ 505.691247][ T1288] vhci_hcd vhci_hcd.3: release socket [ 505.691398][ T1288] vhci_hcd vhci_hcd.3: disconnect device [ 505.726191][T25413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5971'. [ 505.754225][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'. [ 506.136776][T25422] loop2: detected capacity change from 0 to 1764 [ 506.171681][T25422] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 506.556298][T25408] loop1: detected capacity change from 0 to 32768 [ 506.743220][T25442] loop2: detected capacity change from 0 to 4096 [ 506.768586][T25398] loop4: detected capacity change from 0 to 40427 [ 506.770877][T25442] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 506.805807][T25408] find_entry called with index = 0 [ 506.812722][T25408] read_mapping_page failed! [ 506.817551][T25408] ERROR: (device loop1): txCommit: [ 506.817551][T25408] [ 506.825194][T25408] ERROR: (device loop1): remounting filesystem as read-only [ 506.839960][T25398] F2FS-fs (loop4): invalid crc value [ 506.940840][T25442] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 506.962982][T25442] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 507.311193][T25398] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 507.472113][T25398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 507.934772][ T5625] syz-executor: attempt to access beyond end of device [ 507.934772][ T5625] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 507.948909][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 507.948946][ T5625] Tainted: [L]=SOFTLOCKUP [ 507.948955][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.948972][ T5625] Call Trace: [ 507.948991][ T5625] [ 507.949001][ T5625] dump_stack_lvl+0xe8/0x150 [ 507.949041][ T5625] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 507.949111][ T5625] f2fs_write_end_bio+0x1211/0x16e0 [ 507.949162][ T5625] ? blkg_put+0x22/0x240 [ 507.949254][ T5625] __submit_merged_bio+0x258/0x6a0 [ 507.949315][ T5625] ? rcu_is_watching+0x16/0xb0 [ 507.949347][ T5625] __submit_merged_write_cond+0x3c9/0x4e0 [ 507.949387][ T5625] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 507.949506][ T5625] f2fs_write_data_pages+0x2a27/0x36f0 [ 507.949615][ T5625] ? __lock_acquire+0x6df/0x2e50 [ 507.949770][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.949846][ T5625] ? is_bpf_text_address+0x26/0x2b0 [ 507.949950][ T5625] ? arch_stack_walk+0xfb/0x150 [ 507.950096][ T5625] ? add_lock_to_list+0xc7/0x100 [ 507.950172][ T5625] ? lockdep_unlock+0x5c/0xd0 [ 507.950215][ T5625] ? __lock_acquire+0x14b9/0x2e50 [ 507.950348][ T5625] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.950452][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 507.950528][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.950621][ T5625] do_writepages+0x338/0x560 [ 507.950704][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 507.950796][ T5625] filemap_fdatawrite+0x1e9/0x2f0 [ 507.950868][ T5625] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 507.951074][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 507.951166][ T5625] f2fs_sync_dirty_inodes+0x30e/0x830 [ 507.951268][ T5625] f2fs_write_checkpoint+0xa3d/0x2710 [ 507.951322][ T5625] ? __lock_acquire+0x6df/0x2e50 [ 507.951465][ T5625] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 507.951683][ T5625] kill_f2fs_super+0x2dd/0x700 [ 507.951798][ T5625] ? __pfx_kill_f2fs_super+0x10/0x10 [ 507.951919][ T5625] ? call_rcu+0x64d/0x8b0 [ 507.952002][ T5625] ? lockdep_hardirqs_on+0x7b/0x110 [ 507.952182][ T5625] deactivate_locked_super+0xbc/0x110 [ 507.952266][ T5625] cleanup_mnt+0x3d3/0x460 [ 507.952337][ T5625] task_work_run+0x1d9/0x270 [ 507.952422][ T5625] ? __pfx_task_work_run+0x10/0x10 [ 507.952525][ T5625] exit_to_user_mode_loop+0x204/0x770 [ 507.952587][ T5625] ? rcu_is_watching+0x16/0xb0 [ 507.952670][ T5625] do_syscall_64+0x328/0x520 [ 507.952771][ T5625] ? trace_irq_disable+0x3b/0x140 [ 507.952825][ T5625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.952887][ T5625] ? clear_bhb_loop+0x70/0xc0 [ 507.952961][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.953026][ T5625] RIP: 0033:0x7f190559f397 [ 507.953088][ T5625] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 507.953141][ T5625] RSP: 002b:00007ffdc670dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 507.953204][ T5625] RAX: 0000000000000000 RBX: 00007f1905634474 RCX: 00007f190559f397 [ 507.953246][ T5625] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc670dc60 [ 507.953286][ T5625] RBP: 00007ffdc670dc60 R08: 00007ffdc670ec60 R09: 00000000ffffffff [ 507.953321][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc670ecf0 [ 507.953361][ T5625] R13: 00007f1905634474 R14: 000000000007bf52 R15: 00007ffdc670ed30 [ 507.953456][ T5625] [ 507.971294][ T5625] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 508.221592][ T5743] loop4: lost filesystem error report for type 5 error -108 [ 508.395440][T25543] loop2: detected capacity change from 0 to 4096 [ 508.523375][T25548] netlink: 'syz.3.5998': attribute type 4 has an invalid length. [ 508.626837][T25543] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 508.884204][ T5743] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.036062][ T5743] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 509.041477][ T5743] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 509.041560][ T5743] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 509.063879][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.063959][ T5743] usb 4-1: Product: syz [ 509.064001][ T5743] usb 4-1: Manufacturer: syz [ 509.065732][ T5743] usb 4-1: SerialNumber: syz [ 509.092316][ T5743] usb 4-1: config 0 descriptor?? [ 509.110544][T25575] devtmpfs: Unexpected value for 'usrquota' [ 509.131581][ T5743] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 509.420046][T25572] loop0: detected capacity change from 0 to 32768 [ 509.429268][T25572] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6003 (25572) [ 509.452772][T25572] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 509.452836][T25572] BTRFS info (device loop0): using sha256 checksum algorithm [ 509.571234][T25572] BTRFS info (device loop0): enabling ssd optimizations [ 509.571325][T25572] BTRFS info (device loop0): turning on async discard [ 509.571360][T25572] BTRFS info (device loop0): enabling free space tree [ 509.590406][ T5743] usb 4-1: USB disconnect, device number 33 [ 509.692783][T25623] loop1: detected capacity change from 0 to 16 [ 509.703901][T25623] erofs (device loop1): mounted with root inode @ nid 36. [ 509.716017][T25623] erofs (device loop1): unsupported i_format 1796 of nid 86 [ 509.820673][ T5626] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 510.441070][T25669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6022'. [ 510.441117][T25669] netlink: 'syz.3.6022': attribute type 1 has an invalid length. [ 510.595442][ T30] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 510.713881][T25680] program syz.4.6027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.775597][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 510.786573][ T30] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 510.786645][ T30] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 510.786671][ T30] usb 3-1: config 0 has no interface number 0 [ 510.813539][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.813586][ T30] usb 3-1: Product: syz [ 510.813621][ T30] usb 3-1: Manufacturer: syz [ 510.813641][ T30] usb 3-1: SerialNumber: syz [ 510.843264][ T30] usb 3-1: config 0 descriptor?? [ 510.984893][ T5743] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 511.185766][ T5743] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 511.188708][ T5743] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 511.201356][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.201438][ T5743] usb 1-1: Product: syz [ 511.201480][ T5743] usb 1-1: Manufacturer: syz [ 511.201517][ T5743] usb 1-1: SerialNumber: syz [ 511.283415][ T30] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 511.291895][ T30] uvcvideo 3-1:0.64: No valid video chain found. [ 511.318544][ T30] usb 3-1: USB disconnect, device number 26 [ 511.542752][ T5743] snd-ua101 1-1:1.1: sample format descriptor not found [ 511.542906][ T5743] snd-ua101 1-1:1.0: invalid num_altsetting [ 511.571419][T25726] loop3: detected capacity change from 0 to 4096 [ 511.617190][ T5743] usb 1-1: USB disconnect, device number 20 [ 511.639312][T25726] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 511.677280][T25726] ntfs3(loop3): Failed to load $Extend (-22). [ 511.683647][T25726] ntfs3(loop3): Failed to initialize $Extend. [ 511.704141][ T1071] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 511.724153][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 511.855294][ T1071] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 511.868438][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.879455][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 511.886567][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 511.904527][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 511.904603][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.930683][ T1071] usb 5-1: config 0 descriptor?? [ 511.937500][ T25] usb 2-1: config 0 descriptor?? [ 511.945202][ T1071] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 511.946959][T25738] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 512.101499][T25773] netlink: 'syz.2.6042': attribute type 8 has an invalid length. [ 512.212968][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 512.219535][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 512.232517][ T9] usb 5-1: USB disconnect, device number 29 [ 512.244750][ T25] usb 2-1: USB disconnect, device number 36 [ 512.299155][T25798] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.605217][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 512.704623][T25813] loop3: detected capacity change from 0 to 32768 [ 512.721274][T25813] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 512.732716][T25813] JBD2: Ignoring recovery information on journal [ 512.777117][ T30] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 512.787751][T25813] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 512.813117][ T30] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 512.813166][ T30] usb 1-1: config 1 has no interface number 0 [ 512.813225][ T30] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 512.813259][ T30] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 512.813289][ T30] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.814431][ T5743] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 512.887099][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.887150][ T30] usb 1-1: Product: syz [ 512.887187][ T30] usb 1-1: Manufacturer: syz [ 512.887207][ T30] usb 1-1: SerialNumber: syz [ 512.918022][T25801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 512.928419][ T30] usb 1-1: Expected 3 endpoints, found: 2 [ 512.990539][ T5743] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 512.995928][ T5743] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 512.996009][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.996051][ T5743] usb 3-1: config 0 has no interface number 0 [ 512.996157][ T5743] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 512.996240][ T5743] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.059607][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.059669][ T5743] usb 3-1: Product: syz [ 513.059703][ T5743] usb 3-1: Manufacturer: syz [ 513.059719][ T5743] usb 3-1: SerialNumber: syz [ 513.090235][ T5743] usb 3-1: config 0 descriptor?? [ 513.109476][T25817] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 513.229455][ T5623] ocfs2: Unmounting device (7,3) on (node local) [ 513.268940][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6053'. [ 513.292056][ T5743] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 513.342728][ T5743] vmk80xx 3-1:0.6: probe with driver vmk80xx failed with error -22 [ 513.450750][ T5743] usb 3-1: USB disconnect, device number 27 [ 513.683187][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 513.683240][ T31] audit: type=1326 audit(1788198479.436:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.1.6060" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 513.687651][ T31] audit: type=1326 audit(1788198479.446:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.1.6060" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 513.750948][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6061'. [ 513.762306][ T31] audit: type=1326 audit(1788198479.516:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.1.6060" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 513.765887][ T31] audit: type=1326 audit(1788198479.516:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.1.6060" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 513.766032][ T31] audit: type=1326 audit(1788198479.516:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25866 comm="syz.1.6060" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 513.831622][T25870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6061'. [ 513.898661][ T30] usb 1-1: USB disconnect, device number 21 [ 514.254203][ T5743] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 514.404519][ T5743] usb 4-1: Using ep0 maxpacket: 32 [ 514.408229][ T5743] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 514.411579][ T5743] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.411652][ T5743] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 514.411718][ T5743] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.450967][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.451055][ T5743] usb 4-1: Product: syz [ 514.451121][ T5743] usb 4-1: Manufacturer: syz [ 514.451558][ T5743] usb 4-1: SerialNumber: syz [ 514.485670][ T5743] usb 4-1: config 0 descriptor?? [ 514.933063][ T5743] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 514.933126][ T5743] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 514.975317][ T5743] usb 4-1: USB disconnect, device number 34 [ 515.006991][T25953] xt_TCPMSS: Only works on TCP SYN packets [ 515.096483][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 515.143630][T25964] loop0: detected capacity change from 0 to 256 [ 515.246420][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 515.253691][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 515.263581][ T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 515.263631][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.263653][ T9] usb 3-1: config 0 has no interface number 0 [ 515.263790][ T9] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.311454][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.311519][ T9] usb 3-1: Product: syz [ 515.311555][ T9] usb 3-1: Manufacturer: syz [ 515.311622][ T9] usb 3-1: SerialNumber: syz [ 515.350034][ T9] usb 3-1: config 0 descriptor?? [ 515.377067][ T9] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 515.377182][ T9] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 515.601694][ T9] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 515.734879][T25980] loop4: detected capacity change from 0 to 32768 [ 515.782954][T25980] ea_get: invalid extended attribute [ 515.798669][T25988] loop3: detected capacity change from 0 to 64 [ 515.816186][ T9] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 515.903246][ T9] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 515.933467][ T9] usb 3-1: USB disconnect, device number 28 [ 515.952008][ T9] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 517.142829][T26062] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 517.235416][ T5743] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 517.309014][T26068] x_tables: duplicate entry at hook 3 [ 517.387792][ T5743] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 517.390446][ T5743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.390597][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.426725][ T5743] usb 4-1: config 0 descriptor?? [ 517.470292][ T5743] pwc: Askey VC010 type 2 USB webcam detected. [ 517.867546][ T5743] pwc: recv_control_msg error -71 req 02 val 2b00 [ 517.875020][ T5743] pwc: recv_control_msg error -71 req 02 val 2700 [ 517.876238][ T5743] pwc: recv_control_msg error -71 req 02 val 2c00 [ 517.877238][ T5743] pwc: recv_control_msg error -71 req 04 val 1000 [ 517.880358][ T5743] pwc: recv_control_msg error -71 req 04 val 1300 [ 517.881518][ T5743] pwc: recv_control_msg error -71 req 04 val 1400 [ 517.883700][ T5743] pwc: recv_control_msg error -71 req 02 val 2000 [ 517.888773][ T5743] pwc: recv_control_msg error -71 req 02 val 2100 [ 517.889854][ T5743] pwc: recv_control_msg error -71 req 04 val 1500 [ 517.895916][ T5743] pwc: recv_control_msg error -71 req 02 val 2500 [ 517.903005][ T5743] pwc: recv_control_msg error -71 req 02 val 2400 [ 517.905993][ T5743] pwc: recv_control_msg error -71 req 02 val 2600 [ 517.910438][ T5743] pwc: recv_control_msg error -71 req 02 val 2900 [ 517.916137][ T5743] pwc: recv_control_msg error -71 req 02 val 2800 [ 517.922010][ T5743] pwc: recv_control_msg error -71 req 04 val 1100 [ 517.932464][ T5743] pwc: recv_control_msg error -71 req 04 val 1200 [ 518.025853][ T5743] pwc: Registered as video103. [ 518.045686][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 518.075191][T26093] nvme_fabrics: missing parameter 'host_traddr=%s' [ 518.193889][ T5743] usb 4-1: USB disconnect, device number 35 [ 518.347145][T13832] udevd[13832]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 518.427632][T26114] netlink: 'syz.2.6121': attribute type 1 has an invalid length. [ 518.427728][T26114] netlink: 'syz.2.6121': attribute type 1 has an invalid length. [ 519.383964][T26131] loop2: detected capacity change from 0 to 32768 [ 519.404700][T26131] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 519.472618][T26131] XFS (loop2): Ending clean mount [ 519.494480][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 519.572145][ T1071] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 519.606049][ T6070] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 519.656459][ T25] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 519.671518][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.671590][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.671633][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 519.671663][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 519.718480][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.726611][ T25] usb 5-1: Product: syz [ 519.726687][ T25] usb 5-1: Manufacturer: syz [ 519.726707][ T25] usb 5-1: SerialNumber: syz [ 519.743279][ T1071] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.753901][ T1071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.753973][ T1071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.798433][ T1071] usb 1-1: config 0 descriptor?? [ 519.811990][ T1071] pwc: Askey VC010 type 2 USB webcam detected. [ 519.955034][T26207] loop3: detected capacity change from 0 to 256 [ 519.978518][T26207] exfat: Deprecated parameter 'utf8' [ 519.979606][T26207] exfat: Deprecated parameter 'namecase' [ 520.013058][T26207] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 520.035536][ T25] usb 5-1: Not enough endpoints found in device, aborting! [ 520.228092][ T1071] pwc: recv_control_msg error -71 req 02 val 2b00 [ 520.235164][ T1071] pwc: recv_control_msg error -71 req 02 val 2700 [ 520.241993][ T1071] pwc: recv_control_msg error -71 req 02 val 2c00 [ 520.248899][ T1071] pwc: recv_control_msg error -71 req 04 val 1000 [ 520.255780][ T1071] pwc: recv_control_msg error -71 req 04 val 1300 [ 520.262599][ T1071] pwc: recv_control_msg error -71 req 04 val 1400 [ 520.269566][ T1071] pwc: recv_control_msg error -71 req 02 val 2000 [ 520.276425][ T1071] pwc: recv_control_msg error -71 req 02 val 2100 [ 520.283244][ T1071] pwc: recv_control_msg error -71 req 04 val 1500 [ 520.291683][ T1071] pwc: recv_control_msg error -71 req 02 val 2500 [ 520.301657][ T1071] pwc: recv_control_msg error -71 req 02 val 2400 [ 520.313751][ T1071] pwc: recv_control_msg error -71 req 02 val 2600 [ 520.320645][ T1071] pwc: recv_control_msg error -71 req 02 val 2900 [ 520.327591][ T1071] pwc: recv_control_msg error -71 req 02 val 2800 [ 520.334634][ T1071] pwc: recv_control_msg error -71 req 04 val 1100 [ 520.341601][ T1071] pwc: recv_control_msg error -71 req 04 val 1200 [ 520.350258][ T1071] pwc: Registered as video103. [ 520.357741][ T1071] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 520.376981][ T1071] usb 1-1: USB disconnect, device number 22 [ 520.390397][ T5641] usb 5-1: USB disconnect, device number 30 [ 520.633641][T26252] CIFS: Attempting to mount //127.0.0.1/share [ 520.680379][T26252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 521.197230][T26219] loop2: detected capacity change from 0 to 32768 [ 521.250995][T26275] wg2 speed is unknown, defaulting to 1000 [ 521.353089][T26294] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6163'. [ 521.718672][T26324] loop3: detected capacity change from 0 to 1024 [ 521.899226][T26335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.930652][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6170'. [ 521.930720][T26339] netlink: 'syz.4.6170': attribute type 1 has an invalid length. [ 522.120976][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6172'. [ 522.187747][T26356] loop2: detected capacity change from 0 to 512 [ 522.271640][T26356] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.6174: Unrecognised inode hash code 255 [ 522.271701][T26356] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6174: Corrupt directory, running e2fsck is recommended [ 522.407598][T26360] loop3: detected capacity change from 0 to 4096 [ 522.425446][T26356] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 522.433759][T26356] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.6174: corrupted in-inode xattr: invalid ea_ino [ 522.447427][T26356] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 522.455617][T26356] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.6174: couldn't read orphan inode 15 (err -117) [ 522.455676][T26356] loop2: lost filesystem error report for type 5 error -117 [ 522.465028][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 522.465054][ C1] EXT4-fs (loop2): initial error at time 1788198488: ext4_iget_extra_inode:5210: inode 15 [ 522.465088][ C1] EXT4-fs (loop2): last error at time 1788198488: ext4_orphan_get:1408 [ 522.504008][T26356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.618956][T26374] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.779637][T26356] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.6174: Abort forced by user [ 522.780854][T26356] EXT4-fs (loop2): Remounting filesystem read-only [ 522.780913][T26356] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 522.935335][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.644901][ T31] audit: type=1326 audit(1788198489.406:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.646447][ T31] audit: type=1326 audit(1788198489.406:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.683593][ T31] audit: type=1326 audit(1788198489.436:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.683745][ T31] audit: type=1326 audit(1788198489.436:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.688589][ T31] audit: type=1326 audit(1788198489.446:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.688736][ T31] audit: type=1326 audit(1788198489.446:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.689969][ T31] audit: type=1326 audit(1788198489.446:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.695188][ T31] audit: type=1326 audit(1788198489.446:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 523.695332][ T31] audit: type=1326 audit(1788198489.446:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26429 comm="syz.1.6195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a5db9e159 code=0x7ffc0000 [ 524.314159][ T1071] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 524.348580][T26458] loop3: detected capacity change from 0 to 2048 [ 524.402295][T26467] loop0: detected capacity change from 0 to 512 [ 524.411418][T26470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.481758][ T1071] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 524.494645][ T1071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.494721][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.517624][ T1071] usb 5-1: config 0 descriptor?? [ 524.530643][ T1071] pwc: Askey VC010 type 2 USB webcam detected. [ 524.550255][T26478] loop2: detected capacity change from 0 to 256 [ 524.579295][T26458] syz.3.6203: attempt to access beyond end of device [ 524.579295][T26458] loop3: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 524.595251][T26458] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 524.604831][T26458] syz.3.6203: attempt to access beyond end of device [ 524.604831][T26458] loop3: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 524.621818][T26458] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 524.632640][T26458] NILFS (loop3): error -5 truncating bmap (ino=16) [ 524.971364][ T1071] pwc: recv_control_msg error -71 req 02 val 2b00 [ 524.981504][ T1071] pwc: recv_control_msg error -71 req 02 val 2700 [ 524.989384][ T1071] pwc: recv_control_msg error -71 req 02 val 2c00 [ 524.997795][ T1071] pwc: recv_control_msg error -71 req 04 val 1000 [ 525.005582][ T1071] pwc: recv_control_msg error -71 req 04 val 1300 [ 525.016326][ T1071] pwc: recv_control_msg error -71 req 04 val 1400 [ 525.024253][T26498] netlink: 'syz.1.6212': attribute type 21 has an invalid length. [ 525.024287][T26498] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6212'. [ 525.024376][T26498] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6212'. [ 525.052066][ T1071] pwc: recv_control_msg error -71 req 02 val 2000 [ 525.058953][ T1071] pwc: recv_control_msg error -71 req 02 val 2100 [ 525.067476][ T1071] pwc: recv_control_msg error -71 req 04 val 1500 [ 525.074348][ T1071] pwc: recv_control_msg error -71 req 02 val 2500 [ 525.084895][ T1071] pwc: recv_control_msg error -71 req 02 val 2400 [ 525.091831][ T1071] pwc: recv_control_msg error -71 req 02 val 2600 [ 525.098772][ T1071] pwc: recv_control_msg error -71 req 02 val 2900 [ 525.107256][ T1071] pwc: recv_control_msg error -71 req 02 val 2800 [ 525.114341][ T1071] pwc: recv_control_msg error -71 req 04 val 1100 [ 525.121405][ T1071] pwc: recv_control_msg error -71 req 04 val 1200 [ 525.131381][ T1071] pwc: Registered as video103. [ 525.138800][ T1071] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 525.154197][ T1071] usb 5-1: USB disconnect, device number 31 [ 525.387763][T26529] macvtap0: entered allmulticast mode [ 525.512170][T26521] loop3: detected capacity change from 0 to 4096 [ 525.668533][T26521] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 526.461786][T26540] loop1: detected capacity change from 0 to 32768 [ 526.513597][T26540] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 526.592406][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 526.592463][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 526.592501][T26606] netlink: 25 bytes leftover after parsing attributes in process `syz.2.6240'. [ 526.592656][T26606] vlan0: entered promiscuous mode [ 526.662212][T26540] XFS (loop1): Ending clean mount [ 526.811395][T26540] XFS (loop1): Quotacheck needed: Please wait. [ 526.857914][T26618] SET target dimension over the limit! [ 527.101907][T26540] XFS (loop1): Quotacheck: Done. [ 527.140016][T26627] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 527.140087][T26627] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 527.140111][T26627] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 527.285060][ T5627] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 527.356301][T26646] loop4: detected capacity change from 0 to 64 [ 528.021989][T26682] loop2: detected capacity change from 0 to 1024 [ 528.041550][T26682] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 528.080374][T26682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 528.092723][T26682] ext4 filesystem being mounted at /1167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.216848][T26682] EXT4-fs error (device loop2): ext4_xattr_block_list:777: inode #15: comm syz.2.6263: corrupted xattr block 128: bad e_name length [ 528.325599][T26702] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6269'. [ 528.362759][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 528.386475][T26706] netlink: 'syz.3.6268': attribute type 17 has an invalid length. [ 528.442478][T26706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.506467][T26706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.570795][T26706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.591297][T26706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.686291][T26717] loop4: detected capacity change from 0 to 1024 [ 529.298407][T26732] bond5 (unregistering): Released all slaves [ 529.525720][T26820] netlink: 'syz.4.6284': attribute type 1 has an invalid length. [ 529.574011][T26809] loop0: detected capacity change from 0 to 4096 [ 529.705126][T26829] loop4: detected capacity change from 0 to 256 [ 529.792801][ T31] audit: type=1326 audit(1788198495.546:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.792886][ T31] audit: type=1326 audit(1788198495.546:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.856492][ T31] audit: type=1326 audit(1788198495.606:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.856591][ T31] audit: type=1326 audit(1788198495.616:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.856761][ T31] audit: type=1326 audit(1788198495.616:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.856888][ T31] audit: type=1326 audit(1788198495.616:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.857013][ T31] audit: type=1326 audit(1788198495.616:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.857130][ T31] audit: type=1326 audit(1788198495.616:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 529.857241][ T31] audit: type=1326 audit(1788198495.616:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26832 comm="syz.2.6288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcdd039e159 code=0x7ffc0000 [ 530.223104][T26846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6294'. [ 530.413759][T26864] loop1: detected capacity change from 0 to 1024 [ 530.593667][T26874] xt_bpf: check failed: parse error [ 530.719466][T26883] loop4: detected capacity change from 0 to 256 [ 530.781670][T26888] comedi comedi1: 8255: I/O base address not correctly aligned [ 530.910020][T26894] loop1: detected capacity change from 0 to 256 [ 531.031676][T26910] loop4: detected capacity change from 0 to 256 [ 531.353098][T26925] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 531.363660][T26925] ALSA: mixer_oss: invalid index 137438 [ 531.381813][T26929] binder: 26928:26929 ioctl c018620b 200000000180 returned -14 [ 531.633287][T26944] netlink: 'syz.4.6323': attribute type 63 has an invalid length. [ 531.652193][T26942] loop2: detected capacity change from 0 to 512 [ 531.697441][T26951] loop0: detected capacity change from 0 to 256 [ 531.726738][T26942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.742346][T26942] ext4 filesystem being mounted at /1177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.782498][T26951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 531.900935][T26959] can0: slcan on ttynull. [ 532.067502][T26958] can0 (unregistered): slcan off ttynull. [ 532.097675][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.140269][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'. [ 532.149549][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'. [ 532.289229][T26983] loop4: detected capacity change from 0 to 512 [ 532.427357][T26983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.427651][T26983] ext4 filesystem being mounted at /1269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.572791][T27001] xt_hashlimit: size too large, truncated to 1048576 [ 532.629618][T27008] tipc: Started in network mode [ 532.637556][T27008] tipc: Node identity 0000000000000000009f000000000001, cluster identity 4711 [ 532.648300][T27008] tipc: Enabling of bearer rejected, failed to enable media [ 532.743625][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.198949][T27042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 533.224562][ T5641] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 533.377752][ T5641] usb 3-1: Using ep0 maxpacket: 32 [ 533.382987][ T5641] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 533.403737][ T5641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.403799][ T5641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.403879][ T5641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.456021][ T5641] usb 3-1: config 0 descriptor?? [ 533.751462][T27072] loop1: detected capacity change from 0 to 512 [ 533.766793][T27072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 533.787877][T27072] EXT4-fs (loop1): 1 truncate cleaned up [ 533.797835][T27072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.955192][ T5641] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 534.005098][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.071083][T27090] loop3: detected capacity change from 0 to 512 [ 534.080618][T27090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 534.099974][ T5641] usb 3-1: USB disconnect, device number 29 [ 534.140368][T27090] EXT4-fs (loop3): 1 truncate cleaned up [ 534.174418][T27090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.230490][T27107] loop1: detected capacity change from 0 to 1024 [ 534.242432][T27107] EXT4-fs: Ignoring removed orlov option [ 534.300630][T27107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.436004][T27092] fido_id[27092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 534.518439][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.542417][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.837032][T27142] loop0: detected capacity change from 0 to 256 [ 534.857010][T27142] vfat: Bad value for 'dmask' [ 534.897970][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6371'. [ 535.326149][T27170] loop1: detected capacity change from 0 to 256 [ 535.463573][T27177] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6380'. [ 535.659092][T27153] loop3: detected capacity change from 0 to 32768 [ 535.670568][T27153] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6373 (27153) [ 535.703625][T27153] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 535.703688][T27153] BTRFS info (device loop3): using crc32c checksum algorithm [ 535.813652][T27153] BTRFS info (device loop3): turning off barriers [ 535.813703][T27153] BTRFS info (device loop3): disabling tree log [ 535.813723][T27153] BTRFS info (device loop3): turning on sync discard [ 535.813773][T27153] BTRFS info (device loop3): enabling free space tree [ 535.813847][T27153] BTRFS info (device loop3): use zlib compression, level 3 [ 536.006881][ T5623] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 536.757909][T27190] loop0: detected capacity change from 0 to 32768 [ 536.789436][T27190] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 536.926142][T27190] XFS (loop0): Ending clean mount [ 537.115082][ T25] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 537.220668][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.267296][T27224] loop3: detected capacity change from 0 to 32768 [ 537.274422][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 537.280936][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 537.292464][ T25] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.292518][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.292559][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.326710][ T25] usb 2-1: config 0 descriptor?? [ 537.374536][T27224] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.490100][T27284] netlink: 'syz.4.6398': attribute type 3 has an invalid length. [ 537.750209][T27224] XFS (loop3): Ending clean mount [ 537.827136][ T25] sony 0003:054C:0002.0002: missing HID_OUTPUT_REPORT 0 [ 537.873723][ T25] sony 0003:054C:0002.0002: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.1-1/input0 [ 537.885168][ T25] sony 0003:054C:0002.0002: failed to claim input [ 537.968290][ T5623] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.013086][ T25] usb 2-1: USB disconnect, device number 37 [ 538.198224][T27303] fido_id[27303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 538.831151][T27293] loop4: detected capacity change from 0 to 32768 [ 539.281351][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6412'. [ 539.443580][T27374] loop0: detected capacity change from 0 to 512 [ 539.508266][T27374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.508420][T27374] ext4 filesystem being mounted at /1283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.750935][T27389] loop2: detected capacity change from 0 to 256 [ 539.822532][T27389] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 539.993275][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.996217][T27453] loop2: detected capacity change from 0 to 64 [ 541.038755][T27457] proc: Bad value for 'gid' [ 541.206882][T27463] loop0: detected capacity change from 0 to 512 [ 541.220967][T27463] EXT4-fs: Ignoring removed orlov option [ 541.221058][T27463] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.259263][T27463] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 541.272740][T27463] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.6437: attempt to clear invalid blocks 2 len 1 [ 541.272812][T27463] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 541.274651][ C1] EXT4-fs (loop0): initial error at time 1788198507: ext4_clear_blocks:876: inode 13 [ 541.274706][ C1] EXT4-fs (loop0): last error at time 1788198507: ext4_clear_blocks:876: inode 13 [ 541.372343][T27463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 541.406549][T27463] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6437: invalid indirect mapped block 1819239214 (level 0) [ 541.406625][T27463] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 541.414552][T27463] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6437: invalid indirect mapped block 1819239214 (level 1) [ 541.414674][T27463] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 541.447451][T27427] loop4: detected capacity change from 0 to 32768 [ 541.468619][T27463] EXT4-fs (loop0): 1 truncate cleaned up [ 541.478124][T27463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.492643][T27427] (syz.4.6427,27427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.496139][T27427] (syz.4.6427,27427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.574947][T27427] JBD2: Ignoring recovery information on journal [ 541.746342][T27427] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 541.850792][T27493] Zero length message leads to an empty skb [ 541.869746][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.183945][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 542.253730][T27505] loop0: detected capacity change from 0 to 4096 [ 542.344513][T27505] ntfs3(loop0): Failed to load $Extend (-22). [ 542.346197][T27505] ntfs3(loop0): Failed to initialize $Extend. [ 542.445159][T27505] ntfs3(loop0): ino=1e, "file1" fallocate(0x11) is not supported [ 542.481972][T27525] loop2: detected capacity change from 0 to 8 [ 542.985770][T27556] loop0: detected capacity change from 0 to 512 [ 543.050643][T27556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 543.061377][T27556] ext4 filesystem being mounted at /1290/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.203054][T27556] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 543.203231][T27556] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 543.203312][T27556] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.6461: Failed to acquire dquot type 0 [ 543.453384][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 543.985798][T27567] loop4: detected capacity change from 0 to 32768 [ 544.035471][T27567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6463 (27567) [ 544.093310][T27567] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 544.093370][T27567] BTRFS info (device loop4): using crc32c checksum algorithm [ 544.204959][ T30] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 544.286255][T27567] BTRFS info (device loop4): setting nodatasum [ 544.286306][T27567] BTRFS info (device loop4): setting nodatacow [ 544.286346][T27567] BTRFS info (device loop4): turning on async discard [ 544.286369][T27567] BTRFS info (device loop4): enabling free space tree [ 544.286392][T27567] BTRFS info (device loop4): enabling auto defrag [ 544.286415][T27567] BTRFS info (device loop4): max_inline set to 0 [ 544.388435][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 544.397121][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 544.409990][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.410048][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.410106][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.410155][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.462100][ T30] usb 4-1: config 0 descriptor?? [ 544.554997][T27652] loop2: detected capacity change from 0 to 8192 [ 544.599044][T27652] Dev loop2: RDB in block 1 has bad checksum [ 544.891203][ T5625] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 544.927112][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.935031][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.942959][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.952665][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.960088][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.967487][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.975001][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.982368][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.989888][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 544.997247][ T30] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 545.018254][ T30] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 545.214424][ T9] usb 4-1: USB disconnect, device number 36 [ 545.274295][T27658] loop0: detected capacity change from 0 to 32768 [ 545.290112][T27658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6480 (27658) [ 545.317035][T27658] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 545.317096][T27658] BTRFS info (device loop0): using crc32c checksum algorithm [ 545.528618][T27658] BTRFS info (device loop0): enabling ssd optimizations [ 545.528670][T27658] BTRFS info (device loop0): turning on flush-on-commit [ 545.528714][T27658] BTRFS info (device loop0): enabling free space tree [ 545.528738][T27658] BTRFS info (device loop0): enabling auto defrag [ 545.528762][T27658] BTRFS info (device loop0): use lzo compression, level 1 [ 545.528789][T27658] BTRFS info (device loop0): max_inline set to 4096 [ 545.832593][T27628] loop1: detected capacity change from 0 to 32768 [ 545.856637][T27628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6477 (27628) [ 545.910816][ T5626] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 545.915902][T27628] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.916049][T27628] BTRFS info (device loop1): using sha256 checksum algorithm [ 546.250768][T27628] BTRFS info (device loop1): enabling ssd optimizations [ 546.250830][T27628] BTRFS info (device loop1): turning on async discard [ 546.250871][T27628] BTRFS info (device loop1): enabling free space tree [ 546.400493][T27742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6490'. [ 546.438892][T27739] loop3: detected capacity change from 0 to 2048 [ 546.582318][T27739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.595511][T27739] ext4 filesystem being mounted at /1339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.622061][ T5627] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.727299][T27747] loop0: detected capacity change from 0 to 2048 [ 546.747331][T27747] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 546.747393][T27747] NILFS (loop0): mounting unchecked fs [ 546.863830][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.875951][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6491'. [ 546.918464][T27747] NILFS (loop0): recovery complete [ 546.952084][T27761] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 547.413303][T27780] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6497'. [ 547.496910][T27783] veth1_to_hsr: entered promiscuous mode [ 547.551113][T27783] macsec0: entered promiscuous mode [ 547.601027][T27783] macsec0: entered allmulticast mode [ 547.606520][T27783] veth1_to_hsr: entered allmulticast mode [ 548.225412][T27824] loop1: detected capacity change from 0 to 64 [ 548.601984][T27834] loop3: detected capacity change from 0 to 8192 [ 548.749830][T27846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 549.149577][T27865] binder: binder_mmap: 27864 0-800000 bad vm_flags failed -1 [ 549.231690][T27869] loop2: detected capacity change from 0 to 64 [ 549.300365][T27874] loop3: detected capacity change from 0 to 164 [ 549.343080][T27874] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 549.629994][T27848] loop1: detected capacity change from 0 to 32768 [ 549.658882][T27848] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 549.867451][ T5627] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 549.964780][T27907] loop2: detected capacity change from 0 to 512 [ 549.995397][T27907] EXT4-fs (loop2): orphan cleanup on readonly fs [ 549.995445][T27907] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 550.052901][T27907] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 550.068701][T27907] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.6529: attempt to clear invalid blocks 2 len 1 [ 550.068741][T27907] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 550.069180][T27907] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.6529: invalid indirect mapped block 1819239214 (level 0) [ 550.069295][T27907] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 550.069725][T27907] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.6529: invalid indirect mapped block 1819239214 (level 1) [ 550.069761][T27907] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 550.070419][T27907] EXT4-fs (loop2): 1 truncate cleaned up [ 550.072468][T27907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.188113][T27882] loop3: detected capacity change from 0 to 32768 [ 550.316382][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.339461][T27882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6525 (27882) [ 550.376607][T27882] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.376670][T27882] BTRFS info (device loop3): using sha256 checksum algorithm [ 550.576145][T27941] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 550.576145][T27941] program syz.4.6533 not setting count and/or reply_len properly [ 550.637600][T27882] BTRFS info (device loop3): enabling ssd optimizations [ 550.637661][T27882] BTRFS info (device loop3): turning on async discard [ 550.637701][T27882] BTRFS info (device loop3): enabling free space tree [ 550.789158][ T5623] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.631862][T27980] binder: 27976:27980 unknown command 0 [ 551.645617][T27980] binder: 27976:27980 ioctl c0306201 200000000340 returned -22 [ 551.857535][ T5641] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 551.893045][T27965] loop2: detected capacity change from 0 to 32768 [ 551.940497][T27965] JBD2: Ignoring recovery information on journal [ 552.014292][ T5641] usb 5-1: Using ep0 maxpacket: 8 [ 552.020309][ T5641] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 552.031517][ T5641] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 552.031563][ T5641] usb 5-1: config 0 has no interface number 0 [ 552.055914][ T5641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.057505][ T5641] usb 5-1: Product: syz [ 552.057546][ T5641] usb 5-1: Manufacturer: syz [ 552.057569][ T5641] usb 5-1: SerialNumber: syz [ 552.090798][ T5641] usb 5-1: config 0 descriptor?? [ 552.118569][T27965] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 552.142530][T27994] loop3: detected capacity change from 0 to 4096 [ 552.196840][T27965] (syz.2.6541,27965,0):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 552.317722][ T5641] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 552.317944][ T5641] uvcvideo 5-1:0.31: No valid video chain found. [ 552.350858][ T5641] usb 5-1: USB disconnect, device number 32 [ 552.526384][ T6070] ocfs2: Unmounting device (7,2) on (node local) [ 553.338246][T28056] loop4: detected capacity change from 0 to 4096 [ 553.351461][T28056] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 553.424864][T28056] ntfs3(loop4): ino=19, mi_enum_attr [ 553.430414][T28056] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 553.441414][T28056] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 553.754163][ T30] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 553.801855][T28041] loop1: detected capacity change from 0 to 32768 [ 553.823165][T28041] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 553.914195][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 553.915848][ T30] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 553.920627][ T30] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 553.920771][ T30] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 553.920852][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 553.920945][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.964884][ T30] usb 4-1: config 0 descriptor?? [ 553.993068][T28041] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 554.028540][T28041] XFS (loop1): Starting recovery (logdev: internal) [ 554.123168][T28104] loop4: detected capacity change from 0 to 1024 [ 554.134243][ T5641] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 554.165839][T28041] XFS (loop1): Ending recovery (logdev: internal) [ 554.283778][T28108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6572'. [ 554.296284][ T5641] usb 1-1: Using ep0 maxpacket: 16 [ 554.302453][ T5641] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 554.314640][ T5641] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.314694][ T5641] usb 1-1: config 0 interface 0 has no altsetting 0 [ 554.314747][ T5641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.347135][ T5641] usb 1-1: config 0 descriptor?? [ 554.379197][ T5627] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 554.442996][ T30] wacom 0003:056A:00C5.0004: ignoring exceeding usage max [ 554.482008][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482085][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482135][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482169][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482202][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482232][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482259][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482377][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482476][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.482557][ T30] wacom 0003:056A:00C5.0004: unknown main item tag 0x0 [ 554.783085][ T5641] wacom 0003:056A:0094.0005: Using device in hidraw-only mode [ 554.857454][ T5641] wacom 0003:056A:0094.0005: hidraw1: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 554.873333][ T30] wacom 0003:056A:00C5.0004: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 554.914657][T28129] loop2: detected capacity change from 0 to 2048 [ 554.939491][ T30] usb 4-1: USB disconnect, device number 37 [ 555.056047][T28129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.060346][ T5641] usb 1-1: USB disconnect, device number 23 [ 555.153969][T28144] fido_id[28144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 555.289899][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.804247][ T1071] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 555.831353][T28205] loop4: detected capacity change from 0 to 2048 [ 555.880442][T28205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.957069][ T1071] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 555.974775][ T1071] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.974829][ T1071] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 555.974873][ T1071] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 555.974906][ T1071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 555.974947][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.031614][ T1071] usb 2-1: config 0 descriptor?? [ 556.050328][T28187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 556.230414][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.495659][ T1071] kye 0003:0458:5017.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 556.512427][ T1071] kye 0003:0458:5017.0006: item 0 1 0 8 parsing failed [ 556.525958][ T1071] kye 0003:0458:5017.0006: parse failed [ 556.526074][ T1071] kye 0003:0458:5017.0006: probe with driver kye failed with error -22 [ 556.663849][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6599'. [ 556.665275][T28252] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6599'. [ 556.701703][ T1071] usb 2-1: USB disconnect, device number 38 [ 557.614691][ T30] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 557.702329][T28289] loop3: detected capacity change from 0 to 32768 [ 557.720945][T28289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6609 (28289) [ 557.749760][T28289] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.749818][T28289] BTRFS info (device loop3): using sha256 checksum algorithm [ 557.784440][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 557.791129][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 557.803472][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.803551][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.815796][ T30] usb 2-1: config 0 descriptor?? [ 557.831268][ T30] hub 2-1:0.0: bad descriptor, ignoring hub [ 557.831317][ T30] hub 2-1:0.0: probe with driver hub failed with error -5 [ 557.950423][T28289] BTRFS info (device loop3): enabling ssd optimizations [ 557.958792][T28289] BTRFS info (device loop3): turning on async discard [ 557.966027][T28289] BTRFS info (device loop3): enabling free space tree [ 558.017415][T28334] usb usb7: usbfs: process 28334 (syz.0.6616) did not claim interface 0 before use [ 558.043232][T28289] BTRFS warning (device loop3): get dev_stats failed, device not found [ 558.120657][T28287] loop2: detected capacity change from 0 to 32768 [ 558.196350][ T5623] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.756008][ T30] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 558.904191][ T5630] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 558.905862][T28329] loop4: detected capacity change from 0 to 32768 [ 558.922183][T28329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6615 (28329) [ 558.939794][T28329] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.939864][T28329] BTRFS info (device loop4): using crc32c checksum algorithm [ 559.065644][ T5630] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 559.070918][ T5630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.071066][ T5630] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 559.071190][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.105277][T28363] loop2: detected capacity change from 0 to 1024 [ 559.136465][T28363] EXT4-fs: Ignoring removed oldalloc option [ 559.245745][T28329] BTRFS info (device loop4): enabling ssd optimizations [ 559.245808][T28329] BTRFS info (device loop4): turning on flush-on-commit [ 559.245830][T28329] BTRFS info (device loop4): enabling free space tree [ 559.245879][T28329] BTRFS info (device loop4): enabling auto defrag [ 559.245947][T28329] BTRFS info (device loop4): use lzo compression, level 1 [ 559.246026][T28329] BTRFS info (device loop4): max_inline set to 4096 [ 559.314210][T28363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.404722][ T5630] dvbdev: DVB: registering new adapter (DEC2000-t) [ 559.477310][ T5630] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 559.592848][T28346] loop0: detected capacity change from 0 to 32768 [ 559.606315][ T5630] ttusb_dec_send_command: command bulk message failed: error -71 [ 559.635435][ T30] usb 2-1: USB disconnect, device number 39 [ 559.656966][ T5630] usb 4-1: USB disconnect, device number 38 [ 559.663200][T28346] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 559.698411][ T5625] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.727557][T28363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.6620: missing EA_INODE flag [ 559.779940][T28363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.6620: error while reading EA inode 11 err=-117 [ 559.817058][T28363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.6620: missing EA_INODE flag [ 559.838559][T28363] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.6620: error while reading EA inode 11 err=-117 [ 559.971933][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.019649][T28346] XFS (loop0): Ending clean mount [ 560.258753][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'. [ 560.267871][T28431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6623'. [ 560.284344][T28431] netlink: 'syz.1.6623': attribute type 18 has an invalid length. [ 560.308564][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 560.388470][T28429] loop4: detected capacity change from 0 to 2048 [ 560.550876][T28448] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.734109][ T1071] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 560.914343][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 560.932861][ T1071] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 560.948720][ T1071] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.948772][ T1071] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 560.948821][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.011441][ T1071] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 561.085152][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 561.092224][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 561.101833][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 561.101909][ T9] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 561.101975][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 561.102087][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.142380][ T9] usb 3-1: config 0 descriptor?? [ 561.346997][T28482] new mount options do not match the existing superblock, will be ignored [ 561.397195][T28482] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 561.537849][T28485] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 561.596977][ T9] wacom 0003:056A:00C5.0007: ignoring exceeding usage max [ 561.616868][ T9] hid_parser_main: 2 callbacks suppressed [ 561.626043][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626113][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626159][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626191][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626222][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626254][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626284][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626314][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626355][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.626385][ T9] wacom 0003:056A:00C5.0007: unknown main item tag 0x0 [ 561.758506][ T9] wacom 0003:056A:00C5.0007: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 561.765640][ T5641] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 561.809236][ T9] usb 3-1: USB disconnect, device number 30 [ 561.878574][T28503] fido_id[28503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 561.917432][ T5641] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 561.927604][ T5641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.970750][ T5641] usb 5-1: config 0 descriptor?? [ 561.996492][ T5641] cp210x 5-1:0.0: cp210x converter detected [ 562.455341][ T5641] usb 5-1: cp210x converter now attached to ttyUSB0 [ 562.582409][T28524] loop3: detected capacity change from 0 to 32768 [ 562.592581][T28524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6639 (28524) [ 562.639382][T28524] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 562.639435][T28524] BTRFS info (device loop3): using sha256 checksum algorithm [ 562.671413][ T5641] usb 5-1: USB disconnect, device number 33 [ 562.730068][T28557] loop2: detected capacity change from 0 to 512 [ 562.732790][ T5750] usb 2-1: USB disconnect, device number 40 [ 562.751560][ T5641] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 562.766251][T28557] EXT4-fs (loop2): Test dummy encryption mode enabled [ 562.803928][ T5750] idmouse 2-1:1.0: disconnected [ 562.814192][T28557] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.6642: inode has both inline data and extents flags [ 562.814250][T28557] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.827924][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 562.827983][ C0] EXT4-fs (loop2): initial error at time 1788198528: ext4_orphan_get:1403: inode 15 [ 562.828049][ C0] EXT4-fs (loop2): last error at time 1788198528: ext4_orphan_get:1403: inode 15 [ 562.828903][T28557] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.6642: couldn't read orphan inode 15 (err -117) [ 562.828994][T28557] loop2: lost filesystem error report for type 5 error -117 [ 562.882337][ T5641] cp210x 5-1:0.0: device disconnected [ 562.890681][T28557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.954575][T28524] BTRFS info (device loop3): rebuilding free space tree [ 563.026062][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.057569][T28532] loop0: detected capacity change from 0 to 32768 [ 563.071039][T28524] BTRFS info (device loop3): disabling free space tree [ 563.071169][T28524] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 563.071264][T28524] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 563.099228][T28557] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 563.121739][T28524] BTRFS info (device loop3): setting nodatasum [ 563.121809][T28524] BTRFS info (device loop3): setting nodatacow [ 563.121829][T28524] BTRFS info (device loop3): turning off barriers [ 563.121847][T28524] BTRFS info (device loop3): turning on sync discard [ 563.121952][T28524] BTRFS info (device loop3): force clearing of disk cache [ 563.183416][T28532] JBD2: Ignoring recovery information on journal [ 563.256451][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.333131][ T5623] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 563.355135][T28532] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 563.476764][T28532] (syz.0.6641,28532,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 563.747488][ T5626] ocfs2: Unmounting device (7,0) on (node local) [ 563.891580][T28605] wg2 speed is unknown, defaulting to 1000 [ 564.247026][T28636] loop4: detected capacity change from 0 to 512 [ 564.354130][T28636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.424841][T28636] EXT4-fs error (device loop4): ext4_lookup:1787: inode #13: comm syz.4.6651: iget: checksum invalid [ 564.572634][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.654113][ T5750] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 564.816955][ T5750] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 564.820146][ T5750] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 564.820220][ T5750] usb 1-1: config 0 has no interface number 0 [ 564.820332][ T5750] usb 1-1: config 0 interface 239 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.820415][ T5750] usb 1-1: config 0 interface 239 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.820485][ T5750] usb 1-1: config 0 interface 239 has no altsetting 0 [ 564.820579][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.888517][ T5750] usb 1-1: config 0 descriptor?? [ 565.164218][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6659'. [ 565.389861][ T5750] logitech-djreceiver 0003:046D:C532.0008: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.0-1/input239 [ 565.502064][T28683] loop3: detected capacity change from 0 to 32768 [ 565.530143][T28683] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 565.549172][ T30] usb 1-1: USB disconnect, device number 24 [ 565.715391][T28683] XFS (loop3): Ending clean mount [ 565.731268][T28683] XFS (loop3): Quotacheck needed: Please wait. [ 565.869141][T28737] fido_id[28737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 566.007763][T28752] netlink: 'syz.2.6665': attribute type 29 has an invalid length. [ 566.018492][T28752] netlink: 'syz.2.6665': attribute type 29 has an invalid length. [ 566.099720][T28683] XFS (loop3): Quotacheck: Done. [ 566.181817][T28762] tipc: Enabling not permitted [ 566.181882][T28762] tipc: Enabling of bearer rejected, failed to enable media [ 566.491188][ T5623] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 567.113250][T28817] loop3: detected capacity change from 0 to 256 [ 567.114565][ T30] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 567.122715][T28817] exfat: Deprecated parameter 'utf8' [ 567.125105][T28817] exfat: Deprecated parameter 'namecase' [ 567.148714][T28817] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 567.274937][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 567.286841][ T30] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 567.286887][ T30] usb 2-1: config 0 has no interface number 0 [ 567.286951][ T30] usb 2-1: config 0 interface 239 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.286985][ T30] usb 2-1: config 0 interface 239 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.287014][ T30] usb 2-1: config 0 interface 239 has no altsetting 0 [ 567.287054][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.340995][ T30] usb 2-1: config 0 descriptor?? [ 567.696737][T28840] loop3: detected capacity change from 0 to 128 [ 567.729812][T28840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 567.729994][T28840] System zones: 1-3, 19-19, 35-36 [ 567.751774][T28840] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 567.776195][T28840] ext4 filesystem being mounted at /1385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.816909][ T30] hid_parser_main: 8 callbacks suppressed [ 567.823061][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.831478][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.840371][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.848925][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.857467][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.857521][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.857552][ T30] logitech-djreceiver 0003:046D:C532.0009: unknown main item tag 0x0 [ 567.892092][ T30] logitech-djreceiver 0003:046D:C532.0009: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.1-1/input239 [ 567.971754][ T5623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.102407][ T30] usb 2-1: USB disconnect, device number 41 [ 568.180593][T28857] loop4: detected capacity change from 0 to 1024 [ 568.211141][T28853] fido_id[28853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 568.350926][T28857] [ 568.353339][T28857] ====================================================== [ 568.360390][T28857] WARNING: possible circular locking dependency detected [ 568.367468][T28857] syzkaller #0 Tainted: G L [ 568.373482][T28857] ------------------------------------------------------ [ 568.380536][T28857] syz.4.6693/28857 is trying to acquire lock: [ 568.386661][T28857] ffff8880262948f0 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa9/0xd30 [ 568.396736][T28857] [ 568.396736][T28857] but task is already holding lock: [ 568.404129][T28857] ffff888033535880 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 568.415247][T28857] [ 568.415247][T28857] which lock already depends on the new lock. [ 568.415247][T28857] [ 568.425691][T28857] [ 568.425691][T28857] the existing dependency chain (in reverse order) is: [ 568.434752][T28857] [ 568.434752][T28857] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 568.443841][T28857] __mutex_lock+0x19c/0x15a0 [ 568.449060][T28857] hfsplus_get_block+0x391/0x1610 [ 568.454650][T28857] block_read_full_folio+0x2db/0x8d0 [ 568.460504][T28857] filemap_read_folio+0x12c/0x3a0 [ 568.466110][T28857] do_read_cache_folio+0x354/0x590 [ 568.471787][T28857] read_cache_page+0x5d/0x170 [ 568.477021][T28857] hfsplus_block_allocate+0xf7/0xd30 [ 568.482870][T28857] hfsplus_file_extend+0xb77/0x1df0 [ 568.488629][T28857] hfsplus_get_block+0x41f/0x1610 [ 568.494225][T28857] __block_write_begin_int+0x6c2/0x1900 [ 568.500335][T28857] cont_write_begin+0x71b/0xac0 [ 568.505751][T28857] hfsplus_write_begin+0x126/0x1e0 [ 568.511426][T28857] page_symlink+0x27a/0x440 [ 568.516486][T28857] hfsplus_symlink+0xd3/0x390 [ 568.521733][T28857] vfs_symlink+0x18b/0x330 [ 568.526705][T28857] filename_symlinkat+0x1cd/0x410 [ 568.532282][T28857] __se_sys_symlink+0x4d/0x2b0 [ 568.537607][T28857] do_syscall_64+0x166/0x520 [ 568.542754][T28857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.549208][T28857] [ 568.549208][T28857] -> #0 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 568.557072][T28857] __lock_acquire+0x15ff/0x2e50 [ 568.562483][T28857] lock_acquire+0x115/0x350 [ 568.567542][T28857] __mutex_lock+0x19c/0x15a0 [ 568.572697][T28857] hfsplus_block_allocate+0xa9/0xd30 [ 568.578548][T28857] hfsplus_file_extend+0xb77/0x1df0 [ 568.584317][T28857] hfsplus_get_block+0x41f/0x1610 [ 568.589909][T28857] __block_write_begin_int+0x6c2/0x1900 [ 568.596058][T28857] cont_write_begin+0x71b/0xac0 [ 568.601468][T28857] hfsplus_write_begin+0x126/0x1e0 [ 568.607154][T28857] cont_write_begin+0x2d6/0xac0 [ 568.612573][T28857] hfsplus_write_begin+0x126/0x1e0 [ 568.618255][T28857] generic_cont_expand_simple+0x146/0x210 [ 568.624534][T28857] hfsplus_setattr+0x15f/0x260 [ 568.629865][T28857] notify_change+0xbba/0xea0 [ 568.635052][T28857] do_truncate+0x1c2/0x250 [ 568.640072][T28857] vfs_truncate+0x4b4/0x540 [ 568.645143][T28857] ksys_truncate+0xf3/0x1c0 [ 568.650211][T28857] __x64_sys_truncate+0x5b/0x70 [ 568.655633][T28857] do_syscall_64+0x166/0x520 [ 568.660785][T28857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.667228][T28857] [ 568.667228][T28857] other info that might help us debug this: [ 568.667228][T28857] [ 568.677481][T28857] Possible unsafe locking scenario: [ 568.677481][T28857] [ 568.684965][T28857] CPU0 CPU1 [ 568.690370][T28857] ---- ---- [ 568.695762][T28857] lock(&HFSPLUS_I(inode)->extents_lock); [ 568.701608][T28857] lock(&sbi->alloc_mutex); [ 568.708752][T28857] lock(&HFSPLUS_I(inode)->extents_lock); [ 568.717145][T28857] lock(&sbi->alloc_mutex); [ 568.721760][T28857] [ 568.721760][T28857] *** DEADLOCK *** [ 568.721760][T28857] [ 568.729919][T28857] locks held by syz.4.6693/28857: 3, last CPU#1: [ 568.736272][T28857] #0: ffff88807ae44460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 568.745548][T28857] #1: ffff888033535a18 (&sb->s_type->i_mutex_key#45){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 568.755962][T28857] #2: ffff888033535880 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 568.767490][T28857] [ 568.767490][T28857] stack backtrace: [ 568.773403][T28857] CPU: 1 UID: 0 PID: 28857 Comm: syz.4.6693 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.784361][T28857] Tainted: [L]=SOFTLOCKUP [ 568.788706][T28857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.798787][T28857] Call Trace: [ 568.802086][T28857] [ 568.805032][T28857] dump_stack_lvl+0xe8/0x150 [ 568.809666][T28857] print_circular_bug+0x2e2/0x300 [ 568.814756][T28857] check_noncircular+0x12f/0x150 [ 568.819739][T28857] __lock_acquire+0x15ff/0x2e50 [ 568.824614][T28857] ? check_path+0x21/0x40 [ 568.828975][T28857] ? add_lock_to_list+0xc7/0x100 [ 568.833935][T28857] ? lockdep_unlock+0x5c/0xd0 [ 568.838628][T28857] ? __lock_acquire+0x14b9/0x2e50 [ 568.843679][T28857] lock_acquire+0x115/0x350 [ 568.848207][T28857] ? hfsplus_block_allocate+0xa9/0xd30 [ 568.853698][T28857] __mutex_lock+0x19c/0x15a0 [ 568.858317][T28857] ? hfsplus_block_allocate+0xa9/0xd30 [ 568.863808][T28857] ? __pfx___mutex_trylock_common+0x10/0x10 [ 568.869734][T28857] ? hfsplus_block_allocate+0xa9/0xd30 [ 568.875224][T28857] ? trace_contention_end+0x3d/0x140 [ 568.880551][T28857] ? __pfx___mutex_lock+0x10/0x10 [ 568.885604][T28857] ? __mutex_lock+0x30a/0x15a0 [ 568.890404][T28857] ? is_bpf_text_address+0x292/0x2b0 [ 568.895731][T28857] hfsplus_block_allocate+0xa9/0xd30 [ 568.901049][T28857] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 568.907221][T28857] ? arch_stack_walk+0xfb/0x150 [ 568.912095][T28857] hfsplus_file_extend+0xb77/0x1df0 [ 568.917331][T28857] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 568.923016][T28857] ? add_lock_to_list+0xc7/0x100 [ 568.927985][T28857] ? lockdep_unlock+0x5c/0xd0 [ 568.932683][T28857] ? __lock_acquire+0x14b9/0x2e50 [ 568.937733][T28857] hfsplus_get_block+0x41f/0x1610 [ 568.942792][T28857] ? __pfx_hfsplus_get_block+0x10/0x10 [ 568.948276][T28857] ? do_raw_spin_unlock+0xf5/0x200 [ 568.953462][T28857] ? _raw_spin_unlock+0x28/0x50 [ 568.958396][T28857] ? create_empty_buffers+0x460/0x520 [ 568.963798][T28857] __block_write_begin_int+0x6c2/0x1900 [ 568.969386][T28857] ? __pfx_hfsplus_get_block+0x10/0x10 [ 568.974879][T28857] ? __pfx___block_write_begin_int+0x10/0x10 [ 568.980901][T28857] cont_write_begin+0x71b/0xac0 [ 568.985787][T28857] ? stack_trace_save+0xa9/0x100 [ 568.990768][T28857] ? __pfx_stack_trace_save+0x10/0x10 [ 568.996174][T28857] ? __pfx_hlock_conflict+0x10/0x10 [ 569.001395][T28857] ? __pfx_cont_write_begin+0x10/0x10 [ 569.006817][T28857] ? check_path+0x21/0x40 [ 569.011179][T28857] hfsplus_write_begin+0x126/0x1e0 [ 569.016321][T28857] ? __pfx_hfsplus_get_block+0x10/0x10 [ 569.021810][T28857] cont_write_begin+0x2d6/0xac0 [ 569.026697][T28857] ? __pfx_cont_write_begin+0x10/0x10 [ 569.032102][T28857] hfsplus_write_begin+0x126/0x1e0 [ 569.037245][T28857] ? __pfx_hfsplus_get_block+0x10/0x10 [ 569.042737][T28857] generic_cont_expand_simple+0x146/0x210 [ 569.048486][T28857] ? __pfx_inode_dio_wait+0x10/0x10 [ 569.053712][T28857] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 569.059980][T28857] ? current_time+0x25a/0x380 [ 569.064676][T28857] ? __pfx_current_time+0x10/0x10 [ 569.069728][T28857] hfsplus_setattr+0x15f/0x260 [ 569.074532][T28857] ? __pfx_hfsplus_setattr+0x10/0x10 [ 569.079857][T28857] notify_change+0xbba/0xea0 [ 569.084480][T28857] do_truncate+0x1c2/0x250 [ 569.088941][T28857] ? __pfx_do_truncate+0x10/0x10 [ 569.093903][T28857] ? apparmor_path_truncate+0x230/0x2c0 [ 569.099572][T28857] ? ima_iint_find+0x53/0x110 [ 569.104328][T28857] ? ima_path_truncate+0x13c/0x190 [ 569.109508][T28857] vfs_truncate+0x4b4/0x540 [ 569.114052][T28857] ? __pfx_vfs_truncate+0x10/0x10 [ 569.119119][T28857] ? do_getname+0x151/0x250 [ 569.123647][T28857] ksys_truncate+0xf3/0x1c0 [ 569.128178][T28857] ? __pfx_ksys_truncate+0x10/0x10 [ 569.133328][T28857] __x64_sys_truncate+0x5b/0x70 [ 569.138212][T28857] do_syscall_64+0x166/0x520 [ 569.142830][T28857] ? trace_irq_disable+0x3b/0x140 [ 569.147913][T28857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.154017][T28857] ? clear_bhb_loop+0x70/0xc0 [ 569.158748][T28857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.164680][T28857] RIP: 0033:0x7f190559e159 [ 569.169142][T28857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.188782][T28857] RSP: 002b:00007f190641c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 569.197244][T28857] RAX: ffffffffffffffda RBX: 00007f1905825fa0 RCX: 00007f190559e159 [ 569.205291][T28857] RDX: 0000000000000000 RSI: 0000000000040005 RDI: 0000200000000100 [ 569.213297][T28857] RBP: 00007f1905635024 R08: 0000000000000000 R09: 0000000000000000 [ 569.221294][T28857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.229292][T28857] R13: 00007f1905826038 R14: 00007f1905825fa0 R15: 00007ffdc670e938 [ 569.237387][T28857] [ 569.316143][T28883] loop2: detected capacity change from 0 to 512 [ 569.323723][T28883] EXT4-fs: Ignoring removed bh option [ 569.396109][T28883] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 569.396159][T28883] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 569.396192][T28883] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6695: Corrupt directory, running e2fsck is recommended [ 569.455183][T28883] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 569.455392][T28883] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.6695: corrupted in-inode xattr: e_name out of bounds [ 569.455448][T28883] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.477702][T28883] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.6695: couldn't read orphan inode 15 (err -117) [ 569.477742][T28883] loop2: lost filesystem error report for type 5 error -117 [ 569.484203][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 569.484353][ C1] EXT4-fs (loop2): initial error at time 1788198535: ext4_iget_extra_inode:5210: inode 15 [ 569.484488][ C1] EXT4-fs (loop2): last error at time 1788198535: ext4_orphan_get:1408 [ 569.500137][T28883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.626308][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.638535][T28866] loop0: detected capacity change from 0 to 32768 [ 569.671746][T28866] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 569.732231][ T5626] ocfs2: Unmounting device (7,0) on (node local) [ 569.945850][T28882] loop3: detected capacity change from 0 to 40427 [ 569.955307][T28882] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 569.955352][T28882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 570.015239][T28882] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 570.026034][T28882] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 570.033193][T28882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5