last executing test programs: 2m21.887368992s ago: executing program 4 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) 2m21.685657179s ago: executing program 4 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 2m21.430808987s ago: executing program 4 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ac37000fbdbdf244400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030323000008000d0008"], 0x30}, 0x1, 0x0, 0x0, 0x24000015}, 0x4000804) 2m21.278074643s ago: executing program 4 (id=306): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f0000000180)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@discard_size={'discard', 0x3d, 0xfff}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x6318, &(0x7f0000006600)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jkpBssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9O3PO5yPZP++ZM3OeOfOcM/vb9XcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI1uf93sp2pZltX/5H9tzbIX1P+9eWJrvuzVGz1CAAAAYLV+lf/93E1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0U1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39bh9vMftS3bAEpuLn8fkD7Yz/+fWYpdmN2ej+W0729zr8dqmoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fnt9W2/O4raGGra1vT5DfvbY8TiGWtjHO5u2tfiY0U9em038/GePHf+7C8/e2q723A1Nj1eM8+4d9XF+IiwpxlrLNqV9Esc51DDO7W1ek+Gmcdby+9X/3TrO55Y5zuHFYa6r1td8PBvK//3dfD+NNP5YL+2n7WHZL+7Isuzy4rBb11myrWwo29K0ZGjx9RkvZmT9MepT6cXZyIrm6e3LmKf1OrOzeZ62HhPx9b893G+kwxgaX6affHys4XX/5cK1zNOo/qw7HSutc3Ctj5V+mYNxXnw3f9JPtJ2DO8Pzf+zOznOw7dxpMwfT826Ygzt6zcGhseF8zOlFqOX3WZyDu5rWH863VMvrM3d2n4NTF06fm5r/6Mfumzt97OTsydkze3btmt6zb9+BAwemTsydmp0u/r7Gvd3/tmRD6RjYEfZdPAbualm3caoufHFsyfn3Wo/D8S7H4daWddf6OBxpfXK19Tkgl87p4th4d32nj18ZyjocY/nrc8/qj8P0vBuOw5GG47Dte0qb43BkGcdhfZ1z9yzve5aRhj/txtD5vWB1c3Brwxxs/X6kdQ6u9fcj/TIHx8O8+P49nd8LtofxPjG50u9HhrMtTW+qQ4tPN5x76kvS9/vjB/LSbl7eVr/hhrHs4vzs+fsfPXbhwvldWSjr4iUNc6V1vm5peE7Zkvk6tOL5enju5U/c1mb51rCvxu+r/zXe8bWqr7P3/u6vVf7u1n5/Ni3dnYWyxtZ7f7Z7N6/vz7Es+/y3Pv7wNx77/Os67s96v/mJqdV/L5760obz72iH82/s+58vtpce6vHh0ZHi+B1Oe2e06Xzc/FKN5OeuWr7t56aWdz4eDX/W+3x8c5fz8baWddf6fDza+uTi+bjW66cdq9P6eo6HeXJquvv5uL7Ott0rnZMjS+Zk4zF2R6i1sP9fFTqFdApvmDud5m3a1sjIaHheI3ELzfN0T9P6o6E3q2/rqd3hm8I0yuXN07vvKNYfbrhftF7zdKJl3bWep+lnX53maa3XT9+uTevrOR7mxc17us/T+jpP7139uXNz/GfDuXOs1xwcHR6rj3k0TcL8fJ8tbI5z8P7seHY2O5XN5LeO5fOplm9r8oHlnSvHwp/1Pldu6zIH725Zd63nYHof6zT3aiNLn/waaH09x8O8ePKB7nOwvs7r91/D965NS5rPlXeHJWmdhu9dW3++1ulnXre17KbrNVdGwji/tb/7z2br65w6sNI+s/t+ujcsuaHNfmo9fjsdUzPZ+uynbWGczx7ovJ/q46mv87mDy5xPh7Msu/ThB/Of94bfr1y6+L2vNv3epd3vdC59+MGfvvDEP69k/AAMvueLsqV4r2v4Idpyfv8PAAAADITY9w+Fmuj/AQAAoDRi3x//V3ii/wcAAIDSiH3/SKhJGfr/P+69yrbXPzv3/KUsJfMXgnh72g0PFevFjOt0+HpiYVF9+YNfnv3vf7q0vOENZVn2y4f+qO362x6K4ypMhHFefUPz8iW+et+ytn30kUtpu4359S+Ex4/PZ7nToF0EdzrLsq/f9Jl8OxPvu5LXpx86mteHLz/xeH2d5w4WX8f7P/OSYv2/DuHfwyeONd3/mbAffhTq9Fva7494v69cedX2/e9Z3F68X23HjfnTfvL9xePGz8n57OPF+nE/dxr/Nz791Ffq6z/6yvbjvzTUfvxPhcf9cqj/87Ji/cbXoP51vN8nw/jj9uL97v/SN9uO/+qnivXPvbFY72iocft3h693vvHZucb99WjtWNPzyt5UrBe3P/29P81vj48XH791/ONHrjTtj9b58fS/F48z1bJ+XB63E/1jy/brj9M4P+P2n/qTo037udf2rz78zMvqj9u6/Xtb1jv34Xvy7S8+XvMnNv3NJz/TdntxPIf/4VzT8zn8znAch+0/+f4wH8Pt/3u1eLzWT1c4+s7m809c/wtbLzU9n+jNPy+2f/U1J/O6aXzzlhte8MIbL7+ivu+y7Lubisfrtf2Tf3u2afxfvKXYH/H2mNFv3X4ncfvnPzJ55uz8xbmZtFcfuyn/7Jy3FuOJ470pnFtbvz5y9sIHZs9PTE9MZ9lEeT9C75p9KdSfFuVy97UXlpxB73kkvJ63/eXXt9z5b5+Oy//j3cXyK28p3rfuCut9NizfGl6/lW1/qSdvvyU/vmtPhxEuLP284NXYvvPHB5a1Ynj+rd8XxPl+7qUfyPdD/bb8fSMe16sc/w9misf5WtivC+GTmXfcsri9xvXjZyNceVdxvK96/4XTXHxd/z683m/7UfH4cVzx+f4gfB/zzW3N57s4P752aaj18fNP8bgczifZ5eL2uFbc31eeu6Xt8OLnkGSXb82//rP0OLeu6Gl2Mv/R+alTc2cuPjp1YXb+wtT8Rz925PTZi2cuHMk/y/PIB7vc9a/uyrJs8fy0JT8/zczu25vlZ6uzRbnOVjH+3GrHf+6R4zP7p++cmT1x7OKJC4+cmz1/8vj8/PHZmfk7j504MfuRXvefmzm0a/fBPft3T56cmzl04ODBPQcn586crQ+jGFQP+6Y/NHnm/JH8LvOH9h7c9cADe6cnT5+dmT20f3p68mKv++fvTZP1e//h5PnZU8cuzJ2enZyf+9jsoV0H9+3b3fPTAE+fOzE/MXX+4pmpi/Oz56eK5zJxIV9cf+/rdX/Kaf4/i+9nW9WKD+LL3nHvvvT5rHVf/njHhypWafkA0WfDZ9F8+0XnDizn69j3j4aalKH/BwAAAHKx7x8LNdH/AwAAQGnEvn9TqIn+HwAAAEoj9v3joab/ElCR/r90+f9tl5a1ffl/+f/G/SX/X7H8/7v6Lf9fnC/k/9fGavP38v+B/L/8f8rPj2VZtj75+eszfvl/+X82Ur/l/2PfvznL/P4fAAAASir2/VtCTfT/AAAAUBqx778h1ET/DwAAAKUR+/4XhJpUpP+X/5f/l/+X/5f/b799+f/BJP/fnfx/J8UnQsv/z09lG5ifX4vxrzD/f3ktx78B+f/NjV/I/9OP+i3/H/v+F4aaVKT/BwAAgCqIff+NoSb6fwAAACiN2PffFGqi/wcAAIDSiH3/1lCTivT/8v+ryv+nzJX8f/P45f+byf+H+SD/L/+/DuT/u5P/70H+f0Ovnz/o43f9f/l/luq3/H/s+18UalKR/h8AAABKa3Txn7Hvf3Goif4fAAAA+s/Itd0t9v0vCTVZ0v9f4wYAAACADRf7/puzliB4RX7/L//v+v/y//L/8v/tt7/8/P9wJv/fP+T/u5P/70H+X/6/uvn/8Uz+n+ug3/L/ed+fjWcvDTWpSP8PAAAAVRD7/ltCTfT/AAAAUBqx7/9/oSb6fwAAACiN2PdvCzWpSP8v/1+a/P8vGl86+X/5/27bl/93/f8yk//vTv6/B/l/+f/q5v9d/5/rot/y/7HvvzXUpCL9PwAAAFRB7PtvCzXR/wMAAEBpxL7//4ea6P8BAACgNGLfvz3UpCL9v/x/n+f/Y3LU9f/l/+X/+zL/Py7/33fk/7uT/+9B/l/+X/5f/p811W/5/9j3vyzUpCL9PwAAAFRB7PtfHmqi/wcAAIDSiH3/K0JN9P8AAABQGrHvnwg1qUj/v5L8f+2y/H8n1/n6/2PLuP5/E/l/+f9u25f/d/3/MpP/707+vwf5f/l/+X/5f9ZUv+X/Y99/e6hJRfp/AAAAqILY9+8INdH/AwAAQGnEvv+OUBP9PwAAAJRG7Pt3hppUpP93/f+ByP9n8v/y//L/8v/y/8sj/9+d/H8P8v/y//L/8v+sqTXO/w+1Llxp/j/2/a8MNalI/w8AAABVEPv+O0NN9P8AAABQGrHvvyvURP8PAAAApRH7/rtDTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r8H+f+Byv+3BoE3evzy//L/LNVv1/+Pff+rQk0q0v8DAABAFcS+/55QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/++3L/w8m+f/u5P97kP8fqPx/v41f/l/+n6X6Lf8f+/77Qk0q0v8DAABAFcS+//5QE/0/AAAAlEbs+6dCTfT/AAAAUBqx758ONalI/y//L/8v/y//v6L8/ysWH1f+vyD/31/k/7uT/+9B/l/+f8Pz/6Py/5RKv+X/Y9+/K9SkIv0/AAAAVEHs+3eHmuj/AQAAoDRi378n1ET/DwAAAKUR+/69oSYV6f/l/+X/5f/l/13/v/325f8Hk/x/d2uf/49PUf5f/l/+3/X/5f9Zqt/y/7HvfyDUpCL9PwAAAFRB7Pv3hZro/wEAAKA0Yt+/P9RE/w8AAAClEfv+A6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/d+f6/z205P/HwvuS/L/8/yDk/+tzS/6fftNv+f/Y9x8MNalI/w8AAABVEPv+V4ea6P8BAACgNGLf/2uhJvp/AAAAKI3Y9/96qElF+n/5f/l/+X/5/37P/4/J/8v/r4D8f3fy/z24/r/8/wDn/13/n37Ub/n/2PcfCjWpSP8PAAAAVRD7/t8INdH/AwAAQGnEvv81oSb6fwAAACiN2PcfDjWpSP8v/79O+f+4UP5f/l/+3/X/5f+vK/n/7uT/e5D/l/+X/5f/Z031W/4/9v2vDTWpSP8PAAAAVRD7/gdDTfT/AAAAUBqx739dqIn+HwAAAEoj9v2vDzWpSP8v/+/6/xuf/x9tGrv8/+L95P8L8v/y/ysh/9+d/H8P8v/y//L/8v+sqX7L/8e+/w2hJhXp/wEAAKAKYt//xlAT/T8AAACURuz73xRqov8HAACA0oh9/5tDTSrS/8v/y/9vfP7f9f/l/wvy//L/a0H+v7vBzP/Xd6P8fyb/3/fjl/+X/2epfsv/x77/N0NNKtL/AwAAQBXEvv+hUBP9PwAAAJRG7PvfEmqi/wcAAIDSiH3/W0NNKtL/y//L/8v/y//L/7ffvvz/YJL/727A8v+/ujEs35Dr/8eTu/y//P91yv+PtHx9XfL/P+yU/1/Y1Hp/+X+uh37L/8e+/22hJhXp/wEAAKAKYt//9lAT/T8AAACURuz73xFqov8HAACA0oh9/2+FmlSk/5f/r49jMb0s/y//ny+Q/5f/l/8fWPL/3Q1Y/j9c/3+D8v+u/y//7/r/8v+sWr/l/2Pf/85Qk4r0/wAAAFAFse9/ONRE/w8AAAClEfv+d4Wa6P8BAACgNGLf/+5Qk4r0//L/rv8v/y//L//ffvvy/4NpbfL/w/L/8v/y//L//ZH//y/5fwZbv+X/Y9//SKhJRfp/AAAAqILY978n1ET/DwAAAKUR+/7fDjXR/wMAAEBpxL7/vaEmFen/5f8HJf8/If+/wvz/WFgm/y//L/9fLa7/3932nT/unKxsJP8v/y//3x/5f9f/Z8D1W/4/9v3vCzVZfv8/vuw1AQAAgA0R+/7fCTWpyO//AQAAoApi3/+7oSb6fwAAACiN2Pf/XqhJ6fr/z7VdKv8/KPl/1//PXP9f/r/l+cj/y/+3s375/3jmGbj8v+v/dyP/L/8v/98x/z/U4/7y/7TTb/n/2Pf/fqhJ6fp/AAAAqK7Y978/1ET/DwAAAAOh3f/JbhX7/iOhJvp/AAAAKI3Y9x8NNalI/y//L/8v/9+n+f+/2PGv3//O24/ukv+X/5f/X5F1vf5//eAfvOv/y/93I/8v/y//7/r/rKl+y//Hvv9YqMli4/dWF/gHAACAwRb7/j8INanI7/8BAACgCmLffzzURP8PAAAApRH7/plQk4r0//L/8v/y/32a/x/g6//H/TFI+f/JTQOU/48nXfn/ttY1//+exZy4/P9K8/9jbZe25v9r8v9N5P9XPP5vZ1km/y//zwbqt/x/7PtnQ00q0v8DAABAFYS+f+hEURdv0P8DAABAacS+/2Soif4fAAAASiP2/R8INalI/y//L/8v/y//7/r/7bfft/l/1//vSv6/u/7J/7fXh9f/H5L/H+j8v+v/y/+zwfot/x/7/rlQk4r0/wAAAFAFse//YKiJ/h8AAABKI/b9Hwo10f8D/8fenTxZVqZ1HD+JSZAVhBUGGxcucO+fwELW+ge4YONCQ8NQUHGeKMR5QJxnUXHAAQdQxAnFWXBCcQYV57lpeqa7ozoq83meyuHkuZmV9+Y9530/n4VPk93FzW4r6P5RfHkBAIBm5O7/9Lilk/2v/9f/6//1//r/8c/X/y+T/n+a/n8F7//r//X/+n/Wam79f+7+z4hbOtn/AAAA0IPc/ffHLfY/AAAANCN3/wNxi/0PAAAAzcjd/5lxyyL3/84b560E9f/6/2b7/4/V/5/2+fp//X/L9P/T9P8rXFb/f3XQ/2/Atr//C/T/bw76fxo1t/4/d/9nxS2L3P8AAADAmNz9nx232P8AAADQjNz9D8Yt9j8AAAA0I3f/58Qtnez/Y/3/ztBn/58Zr/6/pf7/Zq+/O+j/j3y+/l//37LL7f8fvvFHPv2//t/7/0H/7/1//T/Hza3/z93/uXFLJ/sfAAAAepC7//PiFvsfAAAAmpG7//PjFvsfAAAAmpG7/wvilk72/wzf/9//f4L3/w9+W/+/lv7f+//HPl//r/9vWd/v/++t/Ff01P8/+Mqd97/57Ec9d57P1//r//X/+n/Wa279f+7+L4xbOtn/AAAA0IPc/V8Ut9j/AAAA0Izc/V8ct9j/AAAAsEBXRr+au/9L4pZO9v8M+/+D70v/v0//f4n9/57+X/+v/29B3/3/aj31/7fy+Z30/+P/o3gG/fxFre37f2LQ/+v/WZO59f+5+780bulk/wMAAEAPcvd/Wdxi/wMAAMB8jf2F2BNy9z8Ut9j/AAAA0Izc/dfilk72v/5/8/3/B/X/y+j/vf+v/9f/N0H/P03/v0If/f+p9P/e/9f/s25z6/9z9z8ct3Sy/wEAAKAHufu/PG6x/wEAAKAZufsfiVvsfwAAAGhG7v6viFs62f/6/9m9/7876P/1/0H/f0D/r/8/D/3/NP3/Cvr/i/bzt+v/9f/6fw47Z///1sQfttfS/+fu/8q4pZP9DwAAAD3I3f9VcYv9DwAAAM3I3f/VcYv9DwAAAM3I3f81cUsn+1//P7v+3/v/S+v/r978/XTX/5/8qbdP/z9O/3859P/TZtP/7+yOfln/v/j+3/v/+n/9P0fM7f3/3P1fG7d0sv8BAACgB7n7vy5umdj/5/6T+QAAAMBW5e7/+rjFr/8DAADA4mV1lrv/G+KWTva//l//r//3/r/3/8c/f6r/f+7Q96f/nxf9/7TZ9P+n0P/r/5f8/ev/9f+cNLf+P3f/N8Ytnex/AAAA6EHu/kfjFvsfAAAAmpG7/5viFvsfAAAAmpG7/7G4pZP9P97/3/zn9f9no/8/+v3r/8d/fqyr/8/fo/5/sv+/1/v/fdL/T9P/r6D/1//r/0/r/6+s+vH6f8bMrf/P3f/NcUsn+x8AAAB6kLv/W+IW+x8AAACakbv/W+MW+x8AAACakbv/2+KWTva/9//1//r/5fX/3v8/sM33/4dL7/939f9npP+ftqD+/9Wrn3KX/v8Y/f+8v//G+/+D9/8n/i4A+n/GzK3/z93/7XFLJ/sfAAAAepC7/zviFvsfAAAAluHwXztw/C8oDbn7vzNusf8BAACgGbn7vytuaWf/T77Vqf/X/+v/9f/6//HPn1f/7/3/s9L/T1tQ/+/9/xEL7f93G+v/Hz/tx8+h/39o0/3/BP0/Y470/8/f/Pq2+v/c/d8dt7Sz/wEAAKB7ufu/J26x/wEAAKAZufu/N26x/wEAAKAZufu/L27pZP9vvP+f+LsP6P/1//p//b/+X/+/bvr/afr/FfT/3v/3/r/+n7U60v8fsq3+P3f/98ctnex/AAAA6EHu/h+IW+x/AAAAaEbu/sfjFvsfAAAAmpG7/wfjlk72v/f/9f/6f/2//n/88/X/y3Sh/v42/X/R/+v/9f/6f/0/azC3/j93/w/FLZ3sfwAAAOhB7v4fjlvsfwAAAGhG7v4n4hb7HwAAAJqRu/9H4pZO9r/+f7P9f35d/6//H/T/+n/9/6Xo9v3/nbH/JjrplP7/pU+99vFHv6L/1//r//X/+n/O6CMm/rlZ9P/Xb/6vy9z9Pxq3dLL/AQAAoAe5+38sbrH/AQAAoBm5+388brH/AQAAoBm5+5+MW865/6eah3Fv3H3uH7IB+n/v/+v/9f/6//HP1/8vU7f9/xl5/38F/b/+X/+v/2etZtH/H/rt3P0/Ebf49X8AAABoRu7+n4xb7H8AAABoRu7+n4pb7H8AAABoRu7+n45bOtn/+n/9v/5f/6//H/98/f8y6f+n6f9XWFL//+QF+v/d8S9vu5+/qG1///p//T8nza3/z93/VNzSyf4HAACAHuTu/5m4xf4HAACAZuTu/9m4xf4HAACAZuTu/7m4pZP9r//X/+v/9f/6//HP1/8vk/5/mv5/GIanJ76Bsf7/+h3z7P+9/z+771//r//npLn1/7n7fz5u6WT/AwAAQA9y9z8dt9j/AAAA0Izc/c/ELfY/AAAANCN3/y/ELZ3sf/2//l//r/9fQ/9/pK/V/4/T/18O/f80/f8KS3r/X/8/u+9f/6//56S59f+5+38xbulk/wMAAEAPcvc/G7fY/wAAANCM3P2/FLfY/wAAANCM3P3PxS2d7H/9v/5f/6//9/7/+Ofr/5dpc/3/oP/X/+v/V9D/6//1/xw3t/4/d/8vxy2d7H8AAADoQe7+X4lb7H8AAABoRu7+X41b7H8AAABoRu7+X4tbOtn/+n/9/34/H9+A/l//P2yt/7/xxyD9v/7/4rz/P03/v4L+X/+v/9f/s1bj/f9DW+v/c/f/etzSyf4HAACAHuTufz5usf8BAACgGbn7fyNusf8BAACgGbn7fzNu6WT/X7D/v2PQ/+9bfP8fP+6xR4ZB/6//X9n/xx8hvP9/4AL9/96g/187/f80/f8K+v82+//bhob6/yun/nj9P3M0t/f/c/e/ELd0sv8BAACgB7n7fytusf8BAACgGbn7fztusf8BAACgGbn7fydu6WT/e/9f/3+0//f+//4X9P9beP+/y/6//lPV/6+P/n+a/n8F/X+b/b/3//X/bM3c+v/c/b8bt3Sy/wEAAKAHuft/L26x/wEAAKAZuft/P26x/wEAAKAZufv/IG7pZP/r//X/t9D/36b/1/8P+n/9/0zp/6fp/1fQ/+v/9f/6f9Zqbv1/7v4/jFs62f8AAADQg9z9L8Yt9j8AAAA0I3f/S3GL/Q8AAADNyN3/R3FLJ/tf/6//9/7/Mvv/Pf2//l//P2ou/f8993zcy/p//b/+X/+v/9f/925u/X/u/j+OWzrZ/wAAANCD3P1/ErfY/wAAANCM3P1/GrfY/wAAANCM3P1/Frd0sv9P9v+3DweF6oGx/j8aNf3/IVvv//eOfrb+v/3+f9D/6//1/6Pm0v97///Wvn/9v/5/yd//ufr/jz754/X/tGhu/X/u/pfjlk72PwAAAPQgd/+fxy32PwAAADQjd/9fxC32PwAAADQjd/8rcUsn+9/7/430/8fo//X/U5+v/9f/t0z/P03/v4L+X//v/f8HPunD9P+sz9z6/9z9fxm3dLL/AQAAoAe5+/8qbrH/AQAAoBm5+/86brH/AQAAoBm5+/8mbulk/+v/9f/6/w30/7vjPz/0//p//f/m6f+n6f/L8X9rB/rp//fGvrjtfv6itv39b6j/f+FO7/+zYHPr/3P3/23c0sn+BwAAgB7k7v+7uMX+BwAAgGbk7v/7uMX+BwAAgGbk7n81bulk/+v/G+//b/xG9/3/J3r//9jn6//1/y3T/+d/o48b7/93T36p/f5/XD/9/6ht9/NL//6bef9f/88aza3/z93/WtzSyf4HAACAHuTu/4e4xf4HAACAZuTu/8e4xf4HAACAZuTu/6e4pZP9r/9vvP8/9v7/ztBj/7+F9/9P+fmh/9f/6/83T/8/zfv/K+j/9f/6f/0/azW3/j93/+s7u13ufwAAAFiqT/iYT3vtrP/a1/f/797wz3HLvcP1M/4yNgAAADBzN3b/zu4w/Mv+b/n1fwAAAGhR7v5/jVs62f/6/776/z7f/99g/3/jg/X/+n/9/6zo/6dtof/fO8/3p//X/y/5+9f/6/85aW79f+7+f4tbDg2/3XP/uwQAAADmJHf/v8ctnfz6PwAAAPQgd/9/xC0n9r+/HSAAAAAsVe7+/4xbOvn1f/3/zPv/YUP9f/zr9P8HvP+v/x/7fP3/Mun/p12w/7++4/1//f8E/b/+X//PcXPr/3P3/1fc0sn+BwAAgEYd+TMKufv/O26x/wEAAKAZufv/J26x/wEAAKAZufv/N27pZP/r/y+9/89UfYPv/1+pf+T9/877/0f3Rj9f/6//b5n+f9oW3v/X/x/9/ev/N+jQ93+H/l//zzzMrf/P3f9/cUsn+x8AAAB6kLv//+MW+x8AAACakbv/bXGL/Q8AAADNyN3/xo3z4f3t/630//E76bT/P9/7/2fs/++6evSzV77/r//vo/8/5fPb6f8/8s5rL973yc88pf/npsvs//Pngv5f/6//PzCj/t/7//p/ZmL9/f/ukS+et//f3/3D3vD2uKWT/Q8AAAA9yN3/Ztxi/wMAAEAzcve/I26x/wEAAKAZufvfGbd0sv+9/99G/3/cEvv//M96C/3/tVvu/68Mw7CV/j+b4t77f+//6/9P8v7/NP3/Cvp//b/+X//PWq2//z/6xfP2/7n73xW3dLL/AQAAoAe5+98dt+T+3zn3n7oHAAAAZiZ3/3viFr/+DwAAAM3I3f/euKWT/a//1//Ppf9P3v+/+ePaev//vopT++z/765/pP/fLP3/NP3/Cvp//b/+X//PWs2t/8/d/764pZP9DwAAAD3I3f9W3GL/AwAAQDNy978/brH/AQAAoBm5+z8Qt3Sy//X/rfb/WcTr//X/c+n/vf/v/f/Lof+fpv9fQf+/8P4/fsIM+n/9P3Mxt/4/d/+HAgAA///FE2fi") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 2m19.546781672s ago: executing program 4 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0) 2m19.032235239s ago: executing program 4 (id=317): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) 2m18.306246204s ago: executing program 32 (id=317): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) 4.67288288s ago: executing program 5 (id=1391): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x7, 0x9}, 0xc) 4.297113623s ago: executing program 5 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) 4.108890759s ago: executing program 2 (id=1398): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/153, 0x99}], 0x1, 0x1, 0x10) 3.895526057s ago: executing program 5 (id=1401): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455ca, 0x2) 3.81523997s ago: executing program 1 (id=1403): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) read(r1, 0x0, 0x0) 2.366729219s ago: executing program 2 (id=1413): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004064}, 0x40046) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) 2.315856142s ago: executing program 2 (id=1414): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2.110738408s ago: executing program 3 (id=1416): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x1000, 0x208000, 0x7a34}) 2.110483318s ago: executing program 1 (id=1417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000108, 0x0, 0x80}]}) 2.110260928s ago: executing program 2 (id=1418): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x15e379a176efa452, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x5e}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7, 0x2, [0xe73, 0x4, 0x7]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x8001, [0x1, 0x7, 0xd, 0x1, 0x8000000000000001, 0xfffffffffffffff7, 0x8000, 0x400]}}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3000000}}], 0x118}}], 0x1, 0x4000005) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0x32}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.955529903s ago: executing program 3 (id=1419): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) 1.871422756s ago: executing program 1 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 1.750725521s ago: executing program 2 (id=1422): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703837342c003e7edf5f55c9c5daacaf151c376bf5599ae01ac194e7255fd3968db191bdb3dea9ab11d122deeea40b32a13ea32f2a9ff939e60ebcebbc118eb664cdd73b80d4eb6c4b56b8fe0236d453ab8a63e9857ec85fb127bfb8164fb999afc3692735e9e7d84e3c94259406c29e6b57a51b034fbb0c84a194062612c98792142feb5b609fda840123ac3ecb292c40338df923876a026fae369e0ebfa97e4ce6"], 0x1, 0x349, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0x0, 0x58) 1.702973442s ago: executing program 3 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.668985343s ago: executing program 1 (id=1424): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000002780)=""/133, 0x85}], 0x1, 0x10001, 0x80) 1.532029358s ago: executing program 2 (id=1425): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000607"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.46663173s ago: executing program 5 (id=1426): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.438154961s ago: executing program 3 (id=1427): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) 970.652307ms ago: executing program 3 (id=1429): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 852.513111ms ago: executing program 0 (id=1430): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0xfffe, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x3], [0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 761.606104ms ago: executing program 0 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005940), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006cc0)={&(0x7f0000005980)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000) 619.557959ms ago: executing program 1 (id=1432): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 605.8532ms ago: executing program 3 (id=1433): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$eJzs3V9oZFcdB/DfnSRNdnfaZMUHK5aKFleQTjIT6dQ/YIr2wUprsQqCld2wO5mEncmEzCxuQqHpmw8+uA+rgihbCqIIkgef7MMGBUFooSyKqBCh+KDFRdGCPjlyZybZ0E6a0Gxzl97PB27u+TN3vufMZO6ZeToB5NYH0z+FiHvTchIxOWhPImKsVxqNmOs/7srs5mJ6JNHtPvWPpPeYZ2Y3F2PPNalTEbERERMR8cvxJE6Ovzm3vbZ+cb7RqK0O6tOd5sp0e239waXmfL1Wry1XqtXZcqVafqh62+Z698LzP3/1hUefffEX116/7wu/+lkSc1Ec9O2dx+3Uf03G4sk9baNJxBffibAMjPT/Q3rnHclohgPi0D537sRWISLeExEf6p0nYyT6b96F5af/NRn/e2K/ax/+wA//dpxjBQBun+5nIroAQK5k/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuRN1uYv9/AMiZrL9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAneyZ2c3FneO4Mu/7WsTNRyJiop9/ZXD0e0djrneeiLGIOPnvJEb3XJtExMwR8xduRGw8FxHvGzb/pJc/lQ5uSP5IRJw7Yv6L14+Wv3LE/K9+54hPcESnf5pt/rU/ZZt/7iPZ5v/l1WzzH7g/2/yrrYit9P4zN+zzV9i9/8SQz99E/7IjeeTrt+5/V950/7uVP7LP/W/jkDkv3fjz5LD2wpcibj4X8f7RYfnJbn6yT/63D5n/5Ud/9Klh7c++FtF9PuJMDM/fmzXdaa5Mt9fWH1xqztdr9dpypVqdLVeq5Yeq0wtLjdpM/+/Q/HsaTzw2rP3l7f78T+6TvzGY/36v/7VDzv8rv746tTmk/Te/7ed/9MNv/f4Pe/3TNXHrkPnXt7/19LD23326n39hn/kf9P6/csj8V6Y+//Fh7TczXn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O0qREQxkkJpt1wolEoRpyLivXGy0Gi1Ox9baF1avpD2RUzFWGFnp6XJfj1J6+Ve+Va98ob6bEScjohvjp/o1UvnW40LWU8eAHKmGLH9x5nPHnYLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyJVTb9j//6/j/f3/AYB3n2LE9taNF36Sll8fz3o0AMBxSNf/s5d/cDWs/wCQG9Z/AMgf6z8A5I/1HwDyx/oPAPlj/QeA/Nm7/gMAAAAAAAAAAAAAAAAAAADZevLxx9Oje2V2czGtL7fqSxcXVz5RmSk1L50vnW+trpTqrVa9USudbzUPfr5Gq7VSrsSly9OdWrsz3V5bP9tsXVrunF1qztdrZ2tjxzAn4GCVx/7z+6zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeS0/dv/SGJiI1PnugdqbsGffbqh3e3QtYDADIzkvUAgMyMZj0AIDN+4wPJAf0T+/b4BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6cudf+/5BX9v+H/LL/P+SX3Xshv/zGB+z/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByv2jqRQGuwFXoxCoVSKuDsipmIsWVhq1GYi4p6IeGl8bDytl7MeNADwthQjtrfnlh/OehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnaq+tX5xvNGqrCgoKCruFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxubfqd9UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEuF15KISI8zkw8Ur//9xy/v7b0r+e947xwR3/j+U9+9PN/prJbT9n/utne+N2ivZDUHAOCt7KzTO+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTXlu/ON9o1FbfwULWcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgd/h8AAP//WEsF2g==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 538.113652ms ago: executing program 0 (id=1434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 398.245847ms ago: executing program 0 (id=1435): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4d, 0x0, &(0x7f00000004c0)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 369.402198ms ago: executing program 5 (id=1436): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000100)="7927393059dab7272a842d1a8644", 0xe}, {&(0x7f0000000b40)="b622a51c", 0x4}], 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x12, 0x4) 302.72074ms ago: executing program 1 (id=1437): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0, 0xe9a, 0x3, 0xfffffffe}) 200.652903ms ago: executing program 5 (id=1438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250400000008000100", @ANYRES32, @ANYBLOB="05000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040800) 161.373144ms ago: executing program 0 (id=1439): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f00009ea000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x18942000) 0s ago: executing program 0 (id=1440): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@debug}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x40005, 0x8008c61) kernel console output (not intermixed with test programs): fs, but vfs thinks they are! [ 144.523831][ T5716] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 144.903525][ T4360] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.055525][ T5714] loop0: detected capacity change from 0 to 32768 [ 145.101970][ T5714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.431 (5714) [ 145.123730][ T4360] usb 2-1: Using ep0 maxpacket: 16 [ 145.131114][ T4360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 145.165437][ T4360] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 145.211568][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.263930][ T4360] usb 2-1: Product: syz [ 145.268534][ T4360] usb 2-1: Manufacturer: syz [ 145.288793][ T4360] usb 2-1: SerialNumber: syz [ 145.304486][ T4360] usb 2-1: config 0 descriptor?? [ 145.328008][ T5714] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.332776][ T4360] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 145.371026][ T5714] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.383728][ T5740] loop5: detected capacity change from 0 to 256 [ 145.397613][ T5742] input: syz0 as /devices/virtual/input/input9 [ 145.418200][ T4360] usb 2-1: Detected FT232R [ 145.421738][ T5714] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.462236][ T5740] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.499281][ T5714] BTRFS info (device loop0): trying to use backup root at mount time [ 145.523545][ T5714] BTRFS info (device loop0): setting nodatasum [ 145.529873][ T5714] BTRFS info (device loop0): enabling ssd optimizations [ 145.536690][ T4360] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 145.590372][ T5714] BTRFS info (device loop0): using spread ssd allocation scheme [ 145.657668][ T5714] BTRFS info (device loop0): turning on flush-on-commit [ 145.679322][ T5714] BTRFS info (device loop0): force zlib compression, level 3 [ 145.749962][ T5714] BTRFS info (device loop0): using free space tree [ 145.769066][ T5746] loop3: detected capacity change from 0 to 1024 [ 145.772101][ T4360] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 145.838901][ T5746] EXT4-fs: Ignoring removed orlov option [ 145.970548][ T5756] loop2: detected capacity change from 0 to 1024 [ 146.039906][ T4666] usb 2-1: USB disconnect, device number 3 [ 146.047374][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.087160][ T5756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.108473][ T4666] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 146.108875][ T4666] ftdi_sio 2-1:0.0: device disconnected [ 146.265695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.302636][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 146.360702][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 146.509444][ T4555] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.515600][ T5803] loop1: detected capacity change from 0 to 2048 [ 147.537206][ T5803] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 147.552861][ T5803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.929526][ T5808] loop3: detected capacity change from 0 to 8192 [ 147.986228][ T5808] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.080437][ T5808] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 148.154156][ T5808] REISERFS (device loop3): using ordered data mode [ 148.160762][ T5808] reiserfs: using flush barriers [ 148.232761][ T5822] loop5: detected capacity change from 0 to 64 [ 148.250854][ T5808] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.334223][ T5808] REISERFS (device loop3): checking transaction log (loop3) [ 148.378750][ T5808] REISERFS (device loop3): Using r5 hash to sort names [ 148.413079][ T5808] REISERFS (device loop3): using 3.5.x disk format [ 148.439030][ T5808] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 148.481973][ T5808] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 148.890261][ T5807] loop2: detected capacity change from 0 to 32768 [ 148.996161][ T5807] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 149.035450][ T5807] XFS (loop2): Mounting V5 Filesystem [ 149.314830][ T5807] XFS (loop2): Ending clean mount [ 149.331363][ T5807] XFS (loop2): Quotacheck needed: Please wait. [ 149.452238][ T5807] XFS (loop2): Quotacheck: Done. [ 149.513410][ T5489] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.635730][ T4276] XFS (loop2): Unmounting Filesystem [ 149.713563][ T5489] usb 1-1: Using ep0 maxpacket: 16 [ 149.720582][ T5489] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 149.758232][ T5489] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 149.786089][ T5489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.803448][ T5489] usb 1-1: Product: syz [ 149.813777][ T5489] usb 1-1: Manufacturer: syz [ 149.823894][ T5489] usb 1-1: SerialNumber: syz [ 149.840300][ T5489] usb 1-1: config 0 descriptor?? [ 149.884070][ T5489] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 149.903135][ T5489] usb 1-1: Detected FT232R [ 150.067437][ T5489] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 150.290935][ T5489] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.474636][ T5840] loop3: detected capacity change from 0 to 40427 [ 150.514692][ T5840] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 150.533171][ T5489] usb 1-1: USB disconnect, device number 4 [ 150.539327][ T5840] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 150.582456][ T5489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 150.623754][ T5489] ftdi_sio 1-1:0.0: device disconnected [ 150.653941][ T5840] F2FS-fs (loop3): invalid crc value [ 150.737883][ T5840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.748115][ T56] kworker/u4:4: attempt to access beyond end of device [ 150.748115][ T56] loop5: rw=1048577, sector=4172, nr_sectors = 1 limit=64 [ 150.806043][ T56] Buffer I/O error on dev loop5, logical block 4172, lost async page write [ 150.856890][ T56] kworker/u4:4: attempt to access beyond end of device [ 150.856890][ T56] loop5: rw=1048577, sector=4173, nr_sectors = 16 limit=64 [ 150.908049][ T56] kworker/u4:4: attempt to access beyond end of device [ 150.908049][ T56] loop5: rw=1048577, sector=4189, nr_sectors = 1 limit=64 [ 150.944631][ T56] Buffer I/O error on dev loop5, logical block 4189, lost async page write [ 150.959206][ T56] kworker/u4:4: attempt to access beyond end of device [ 150.959206][ T56] loop5: rw=1048577, sector=4190, nr_sectors = 1 limit=64 [ 150.990481][ T5840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.036646][ T5861] loop2: detected capacity change from 0 to 512 [ 151.084724][ T56] Buffer I/O error on dev loop5, logical block 4190, lost async page write [ 151.111229][ T56] kworker/u4:4: attempt to access beyond end of device [ 151.111229][ T56] loop5: rw=1048577, sector=4191, nr_sectors = 1 limit=64 [ 151.141586][ T5861] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 151.165573][ T5861] EXT4-fs (loop2): invalid journal inode [ 151.190231][ T5864] loop1: detected capacity change from 0 to 1024 [ 151.210210][ T56] Buffer I/O error on dev loop5, logical block 4191, lost async page write [ 151.225914][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 151.225930][ T26] audit: type=1800 audit(2000000020.090:56): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="file0" dev="loop3" ino=14 res=0 errno=0 [ 151.255501][ T5861] EXT4-fs (loop2): can't get journal size [ 151.306036][ T56] kworker/u4:4: attempt to access beyond end of device [ 151.306036][ T56] loop5: rw=1048577, sector=4192, nr_sectors = 1 limit=64 [ 151.348942][ T5861] EXT4-fs (loop2): 1 truncate cleaned up [ 151.395020][ T5861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.413497][ T56] Buffer I/O error on dev loop5, logical block 4192, lost async page write [ 151.413599][ T56] kworker/u4:4: attempt to access beyond end of device [ 151.413599][ T56] loop5: rw=1048577, sector=4193, nr_sectors = 1 limit=64 [ 151.448599][ T4274] syz-executor: attempt to access beyond end of device [ 151.448599][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 151.451361][ T5870] netlink: 'syz.0.465': attribute type 3 has an invalid length. [ 151.548343][ T5870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.465'. [ 151.569734][ T5864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.583582][ T56] Buffer I/O error on dev loop5, logical block 4193, lost async page write [ 151.629508][ T56] kworker/u4:4: attempt to access beyond end of device [ 151.629508][ T56] loop5: rw=1048577, sector=4196, nr_sectors = 1 limit=64 [ 151.704448][ T56] Buffer I/O error on dev loop5, logical block 4196, lost async page write [ 151.735319][ T56] kworker/u4:4: attempt to access beyond end of device [ 151.735319][ T56] loop5: rw=1048577, sector=4197, nr_sectors = 1 limit=64 [ 151.759225][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 151.812871][ T56] Buffer I/O error on dev loop5, logical block 4197, lost async page write [ 151.865344][ T56] Buffer I/O error on dev loop5, logical block 4198, lost async page write [ 151.914569][ T56] Buffer I/O error on dev loop5, logical block 4359, lost async page write [ 152.274382][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 153.599067][ T5909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 153.913061][ T5918] netlink: 'syz.5.481': attribute type 10 has an invalid length. [ 154.102361][ T5918] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.125160][ T5487] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 154.141128][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.355414][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.390389][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.417419][ T5901] loop2: detected capacity change from 0 to 40427 [ 154.431534][ T5487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.458004][ T5901] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(64) root(3) [ 154.487016][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.497655][ T5901] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.562438][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.592451][ T5901] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.594161][ T5487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.603372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 154.680721][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.742728][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.769508][ T5901] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 154.789429][ T5487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.841715][ T5901] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.860632][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.873538][ T5901] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.910673][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.975551][ T5487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 155.086294][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.128186][ T5487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.179366][ T5487] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 155.213641][ T2121] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.243406][ T5487] usb 2-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 155.279691][ T5487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.377907][ T5487] usb 2-1: config 0 descriptor?? [ 155.445216][ T2121] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 155.465656][ T2121] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 155.508290][ T2121] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 155.577423][ T2121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.636273][ T2121] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 155.689124][ T5955] program syz.0.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.842491][ T2121] gspca_sn9c2028: read1 error -32 [ 155.857774][ T5487] hid-generic 0003:04B4:0000.0003: unbalanced delimiter at end of report description [ 155.873706][ T2121] gspca_sn9c2028: read1 error -32 [ 155.894404][ T5487] hid-generic: probe of 0003:04B4:0000.0003 failed with error -22 [ 155.958960][ T5960] loop3: detected capacity change from 0 to 512 [ 156.002009][ T5960] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 156.061011][ T5960] EXT4-fs (loop3): invalid journal inode [ 156.106880][ T2121] usb 6-1: USB disconnect, device number 2 [ 156.107832][ T5960] EXT4-fs (loop3): can't get journal size [ 156.181256][ T5960] EXT4-fs (loop3): 1 truncate cleaned up [ 156.195001][ T5960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.212156][ T5487] usb 2-1: USB disconnect, device number 4 [ 156.499291][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 156.974308][ T2121] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.030221][ T5962] loop0: detected capacity change from 0 to 32768 [ 157.133511][ T5962] XFS (loop0): Mounting V5 Filesystem [ 157.152417][ T5982] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 157.163632][ T2121] usb 3-1: Using ep0 maxpacket: 32 [ 157.170769][ T2121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.182806][ T2121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.193184][ T2121] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.202584][ T2121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.226327][ T2121] usb 3-1: config 0 descriptor?? [ 157.227515][ T5962] XFS (loop0): Ending clean mount [ 157.235376][ T2121] hub 3-1:0.0: USB hub found [ 157.287674][ T5962] XFS (loop0): Quotacheck needed: Please wait. [ 157.406482][ T5962] XFS (loop0): Quotacheck: Done. [ 157.442060][ T2121] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 157.580477][ T4555] XFS (loop0): Unmounting Filesystem [ 157.673432][ T4360] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.681786][ T5982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.733010][ T5977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.863468][ T4360] usb 6-1: Using ep0 maxpacket: 32 [ 157.872770][ T4360] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 157.896725][ T4360] usb 6-1: config 0 has no interface number 0 [ 157.906508][ T2121] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 157.932766][ T4360] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.959366][ T4360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.023510][ T4360] usb 6-1: Product: syz [ 158.033477][ T4360] usb 6-1: Manufacturer: syz [ 158.044030][ T4360] usb 6-1: SerialNumber: syz [ 158.069586][ T4360] usb 6-1: config 0 descriptor?? [ 158.100394][ T4360] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.243888][ T2121] usb 3-1: USB disconnect, device number 7 [ 158.279882][ T5997] fido_id[5997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 158.303141][ T4360] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.365750][ T4360] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.750099][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.759501][ T4494] usb 6-1: USB disconnect, device number 3 [ 158.780800][ T4494] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.815674][ T4494] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.851101][ T4494] quatech2 6-1:0.51: device disconnected [ 159.114469][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.152273][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.189677][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.213969][ T5995] loop0: detected capacity change from 0 to 40427 [ 159.236885][ T5995] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(64) root(3) [ 159.251004][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.252469][ T6007] loop1: detected capacity change from 0 to 256 [ 159.280114][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.282288][ T5995] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.340361][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.394744][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.418228][ T5995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.419752][ T6007] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 159.456967][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.520048][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.589391][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.589624][ T5995] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 159.630470][ T6005] batman_adv: batadv0: Adding interface: ipvlan2 [ 159.669313][ T6005] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.720135][ T5995] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.733475][ T5995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.865335][ T6007] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 159.872494][ T6005] batman_adv: batadv0: Interface activated: ipvlan2 [ 159.886929][ T5995] bio_check_eod: 102 callbacks suppressed [ 159.886950][ T5995] syz.0.505: attempt to access beyond end of device [ 159.886950][ T5995] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.205466][ T6029] tap0: tun_chr_ioctl cmd 1074025680 [ 160.293027][ T6031] loop3: detected capacity change from 0 to 512 [ 160.335607][ T6031] EXT4-fs: Invalid gid value -1 [ 160.597637][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.618512][ T6038] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 160.749865][ T6038] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.824534][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.412996][ T6055] loop0: detected capacity change from 0 to 8192 [ 161.450769][ T6055] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.670921][ T6065] loop5: detected capacity change from 0 to 256 [ 161.757818][ T6065] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 161.834212][ T6069] tap0: tun_chr_ioctl cmd 1074025680 [ 161.976161][ T6065] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 162.363689][ T6076] sctp: [Deprecated]: syz.3.537 (pid 6076) Use of int in maxseg socket option. [ 162.363689][ T6076] Use struct sctp_assoc_value instead [ 162.429518][ T6076] syz.3.537 (6076) used greatest stack depth: 20664 bytes left [ 162.759270][ T6088] netlink: 'syz.3.542': attribute type 10 has an invalid length. [ 162.800765][ T6088] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.858348][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.980630][ T6092] loop2: detected capacity change from 0 to 8192 [ 162.997692][ T6037] loop1: detected capacity change from 0 to 40427 [ 163.011036][ T6092] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.114993][ T6037] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(64) root(3) [ 163.123083][ T6037] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.195745][ T6037] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.372242][ T6037] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 163.400554][ T6102] loop8: detected capacity change from 0 to 7 [ 163.412771][ T6037] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.432158][ T4953] Dev loop8: unable to read RDB block 7 [ 163.462342][ T4953] loop8: unable to read partition table [ 163.473457][ T6037] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.515522][ T4953] loop8: partition table beyond EOD, truncated [ 163.527612][ T6102] Dev loop8: unable to read RDB block 7 [ 163.548070][ T6102] loop8: unable to read partition table [ 163.575747][ T6102] loop8: partition table beyond EOD, truncated [ 163.602543][ T6102] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 163.780903][ T6105] pim6reg: tun_chr_ioctl cmd 1074812117 [ 163.801193][ T6107] loop2: detected capacity change from 0 to 256 [ 163.839151][ T6107] exfat: Deprecated parameter 'utf8' [ 163.891792][ T6107] exfat: Deprecated parameter 'utf8' [ 163.976527][ T6107] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 164.253518][ T4494] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.391710][ T6118] loop0: detected capacity change from 0 to 128 [ 164.436037][ T6118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 164.466228][ T4494] usb 2-1: Using ep0 maxpacket: 32 [ 164.478810][ T4494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.531038][ T4494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.579999][ T4494] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.621646][ T4494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.652303][ T4494] usb 2-1: config 0 descriptor?? [ 164.679812][ T6122] sctp: [Deprecated]: syz.2.557 (pid 6122) Use of int in maxseg socket option. [ 164.679812][ T6122] Use struct sctp_assoc_value instead [ 164.704190][ T4494] hub 2-1:0.0: USB hub found [ 164.917059][ T4494] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 165.334195][ T4494] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 165.625782][ T6147] loop2: detected capacity change from 0 to 4096 [ 165.683862][ T5487] usb 2-1: USB disconnect, device number 5 [ 165.761276][ T6148] fido_id[6148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.899234][ T4276] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 165.921878][ T4276] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 166.406417][ T6170] sctp: [Deprecated]: syz.1.572 (pid 6170) Use of int in maxseg socket option. [ 166.406417][ T6170] Use struct sctp_assoc_value instead [ 166.632536][ T6176] loop5: detected capacity change from 0 to 512 [ 166.670545][ T6179] loop1: detected capacity change from 0 to 64 [ 166.741776][ T6176] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 167.009975][ T6189] wireguard: wg1: Could not create IPv4 socket [ 167.231367][ T4666] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.426055][ T4666] usb 4-1: Using ep0 maxpacket: 8 [ 167.433122][ T4666] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.458180][ T4666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.479836][ T4666] pvrusb2: Hardware description: Terratec Grabster AV400 [ 167.523421][ T4666] pvrusb2: ********** [ 167.527487][ T4666] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 167.549450][ T4666] pvrusb2: Important functionality might not be entirely working. [ 167.568614][ T4666] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 167.590836][ T4666] pvrusb2: ********** [ 167.694090][ T2310] pvrusb2: Invalid write control endpoint [ 167.975379][ T2121] usb 4-1: USB disconnect, device number 7 [ 168.041405][ T2310] pvrusb2: Invalid write control endpoint [ 168.058755][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 168.093432][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 168.124215][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 168.126417][ T6210] loop5: detected capacity change from 0 to 8192 [ 168.135587][ T6219] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.147624][ T6214] loop2: detected capacity change from 0 to 128 [ 168.162850][ T2310] pvrusb2: Device being rendered inoperable [ 168.188070][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 168.208638][ T6210] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.223498][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 168.235239][ T6210] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 168.250663][ T6210] REISERFS (device loop5): using journaled data mode [ 168.255997][ T6214] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.258007][ T6210] reiserfs: using flush barriers [ 168.279763][ T6210] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.297087][ T6210] REISERFS (device loop5): checking transaction log (loop5) [ 168.301914][ T2310] pvrusb2: Attached sub-driver cx25840 [ 168.315143][ T6210] REISERFS (device loop5): Using r5 hash to sort names [ 168.326338][ T6210] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 168.329851][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 168.351596][ T6210] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 168.393363][ T6222] device erspan0 entered promiscuous mode [ 168.450708][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 168.847492][ T6231] loop3: detected capacity change from 0 to 512 [ 169.024576][ T6231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.140234][ T6242] loop5: detected capacity change from 0 to 256 [ 169.305326][ T6242] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.366439][ T26] audit: type=1800 audit(2000000038.230:57): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.596" name="file1" dev="loop5" ino=1048619 res=0 errno=0 [ 169.422244][ T26] audit: type=1800 audit(2000000038.260:58): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.596" name="file1" dev="loop5" ino=1048619 res=0 errno=0 [ 169.474638][ T9] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 169.523465][ T9] FAT-fs (loop5): Filesystem has been set read-only [ 169.545069][ T9] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 169.562946][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 169.607767][ T6248] netlink: 92 bytes leftover after parsing attributes in process `syz.1.599'. [ 169.643809][ T6246] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.676624][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 170.673436][ T2121] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.871428][ T2121] usb 2-1: Using ep0 maxpacket: 8 [ 170.891433][ T2121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 170.937913][ T2121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.983885][ T2121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 170.990991][ T2121] pvrusb2: ********** [ 171.046977][ T2121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 171.073627][ T2121] pvrusb2: Important functionality might not be entirely working. [ 171.091793][ T2121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 171.159687][ T2121] pvrusb2: ********** [ 171.200013][ T2310] pvrusb2: Invalid write control endpoint [ 171.418465][ T4494] usb 2-1: USB disconnect, device number 6 [ 171.501167][ T2310] pvrusb2: Invalid write control endpoint [ 171.517638][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 171.547674][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 171.567935][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 171.603553][ T2310] pvrusb2: Device being rendered inoperable [ 171.643518][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 171.683863][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 171.742632][ T2310] pvrusb2: Attached sub-driver cx25840 [ 171.763440][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 171.800555][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 172.206650][ T6282] loop3: detected capacity change from 0 to 32768 [ 172.257314][ T6305] loop1: detected capacity change from 0 to 512 [ 172.320402][ T6305] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.329727][ T6282] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.619 (6282) [ 172.390093][ T6305] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 172.458604][ T6282] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 172.508735][ T6305] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 172.533523][ T6305] System zones: 0-2, 18-18, 34-35 [ 172.538890][ T6282] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 172.540549][ T6315] pim6reg: tun_chr_ioctl cmd 1074812117 [ 172.559849][ T6305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.569556][ T6282] BTRFS info (device loop3): using free space tree [ 172.598916][ T6305] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 172.823085][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 172.947905][ T6282] BTRFS info (device loop3): enabling ssd optimizations [ 172.957012][ T6344] input: syz1 as /devices/virtual/input/input10 [ 173.220400][ T4274] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 173.432371][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 173.717317][ T6362] loop0: detected capacity change from 0 to 64 [ 173.901657][ T6362] syz.0.628: attempt to access beyond end of device [ 173.901657][ T6362] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 173.945080][ T6362] buffer_io_error: 87 callbacks suppressed [ 173.945100][ T6362] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 174.382254][ T6370] loop2: detected capacity change from 0 to 8192 [ 175.982688][ T6422] loop2: detected capacity change from 0 to 8192 [ 176.030881][ T6422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.053682][ T6422] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 176.070673][ T6422] REISERFS (device loop2): using ordered data mode [ 176.078003][ T6422] reiserfs: using flush barriers [ 176.090841][ T6422] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.116023][ T6422] REISERFS (device loop2): checking transaction log (loop2) [ 176.124721][ T6422] REISERFS (device loop2): Using r5 hash to sort names [ 176.131638][ T6422] REISERFS (device loop2): using 3.5.x disk format [ 176.138777][ T6422] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 176.294512][ T6430] loop5: detected capacity change from 0 to 128 [ 176.353548][ T6430] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 176.402224][ T6430] hpfs: filesystem error: improperly stopped [ 176.443203][ T6430] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 176.503998][ T6430] hpfs: You really don't want any checks? You are crazy... [ 176.542373][ T6430] hpfs: hpfs_map_sector(): read error [ 176.594246][ T6430] hpfs: code page support is disabled [ 176.607698][ T6430] hpfs: hpfs_map_4sectors(): unaligned read [ 176.629113][ T6430] hpfs: hpfs_map_4sectors(): unaligned read [ 176.667626][ T6430] hpfs: filesystem error: unable to find root dir [ 176.756125][ T6430] hpfs: hpfs_map_4sectors(): unaligned read [ 176.789821][ T6430] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 176.836462][ T6444] device macvtap0 entered promiscuous mode [ 176.860597][ T6444] device macvtap0 left promiscuous mode [ 177.745086][ T6476] loop2: detected capacity change from 0 to 512 [ 177.777113][ T6468] loop5: detected capacity change from 0 to 8192 [ 177.877280][ T6476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.907633][ T6468] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.996960][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 178.015488][ T6468] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 178.080522][ T6468] REISERFS (device loop5): using ordered data mode [ 178.090034][ T6468] reiserfs: using flush barriers [ 178.124121][ T6468] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.163175][ T6468] REISERFS (device loop5): checking transaction log (loop5) [ 178.184211][ T6468] REISERFS (device loop5): Using r5 hash to sort names [ 178.191451][ T6468] REISERFS (device loop5): using 3.5.x disk format [ 178.224722][ T6468] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 178.246763][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 178.647837][ T6492] loop3: detected capacity change from 0 to 8192 [ 178.707399][ T6492] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.784792][ T6492] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 178.813934][ T6492] REISERFS (device loop3): using journaled data mode [ 178.820683][ T6492] reiserfs: using flush barriers [ 178.846146][ T6492] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.879953][ T6492] REISERFS (device loop3): checking transaction log (loop3) [ 178.913041][ T6513] loop0: detected capacity change from 0 to 128 [ 178.932284][ T6492] REISERFS (device loop3): Using r5 hash to sort names [ 178.942077][ T6513] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.964573][ T6492] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 179.005183][ T6513] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.028077][ T6492] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 179.250677][ T4299] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.413612][ T4323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.609724][ T4323] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.638258][ T4323] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.663528][ T4323] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.737527][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.778715][ T6515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 179.925077][ T6537] loop0: detected capacity change from 0 to 256 [ 180.096531][ T6537] FAT-fs (loop0): Directory bread(block 64) failed [ 180.103190][ T6537] FAT-fs (loop0): Directory bread(block 65) failed [ 180.172660][ T6537] FAT-fs (loop0): Directory bread(block 66) failed [ 180.213735][ T6537] FAT-fs (loop0): Directory bread(block 67) failed [ 180.290084][ T6537] FAT-fs (loop0): Directory bread(block 68) failed [ 180.298050][ T6537] FAT-fs (loop0): Directory bread(block 69) failed [ 180.305456][ T6537] FAT-fs (loop0): Directory bread(block 70) failed [ 180.312208][ T6537] FAT-fs (loop0): Directory bread(block 71) failed [ 180.322889][ T6537] FAT-fs (loop0): Directory bread(block 72) failed [ 180.329945][ T6537] FAT-fs (loop0): Directory bread(block 73) failed [ 180.462422][ T2121] usb 6-1: USB disconnect, device number 4 [ 180.553499][ T4666] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.747248][ T4666] usb 2-1: Using ep0 maxpacket: 16 [ 180.758911][ T4666] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.813805][ T4666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.877945][ T4666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.917064][ T4666] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.943513][ T4666] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.990837][ T4666] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.010463][ T4666] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.030740][ T4666] usb 2-1: Manufacturer: syz [ 181.094278][ T4666] usb 2-1: config 0 descriptor?? [ 181.213543][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.423525][ T4323] usb 1-1: Using ep0 maxpacket: 16 [ 181.432716][ T4323] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.473453][ T4323] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.501631][ T4323] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 181.503406][ T4666] rc_core: IR keymap rc-hauppauge not found [ 181.545580][ T4323] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.563401][ T4666] Registered IR keymap rc-empty [ 181.568452][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.570533][ T4323] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 181.599077][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.619732][ T6581] loop3: detected capacity change from 0 to 256 [ 181.625585][ T4323] usb 1-1: config 0 descriptor?? [ 181.633544][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.669760][ T4666] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 181.734522][ T4666] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 181.773194][ T6575] loop2: detected capacity change from 0 to 8192 [ 181.806943][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.844264][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.875789][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.891129][ T6575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 181.939077][ T6575] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 181.949955][ T6575] REISERFS (device loop2): using journaled data mode [ 181.956917][ T6575] reiserfs: using flush barriers [ 181.971192][ T6575] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.988643][ T6575] REISERFS (device loop2): checking transaction log (loop2) [ 182.002868][ T6575] REISERFS (device loop2): Using r5 hash to sort names [ 182.003481][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.017377][ T6575] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 182.017484][ T6575] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 182.081092][ T4323] hid (null): unknown global tag 0xc [ 182.101505][ T4323] hid (null): report_id 49667 is invalid [ 182.121512][ T4323] hid (null): global environment stack underflow [ 182.223566][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.253535][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.283465][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.323442][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.341304][ T41] usb 1-1: USB disconnect, device number 5 [ 182.355965][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.413683][ T4666] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.465486][ T4666] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.505809][ T4666] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.553591][ T4666] usb 2-1: USB disconnect, device number 7 [ 183.109730][ T6613] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 183.193129][ T6617] loop0: detected capacity change from 0 to 1024 [ 183.716355][ T6634] loop3: detected capacity change from 0 to 64 [ 183.716841][ T6626] loop1: detected capacity change from 0 to 8192 [ 183.785805][ T6626] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.854694][ T6626] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 183.906242][ T6626] REISERFS (device loop1): using journaled data mode [ 183.913169][ T6626] reiserfs: using flush barriers [ 183.970756][ T6626] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.999242][ T6641] tap0: tun_chr_ioctl cmd 1074025677 [ 184.050318][ T6626] REISERFS (device loop1): checking transaction log (loop1) [ 184.053709][ T6641] tap0: linktype set to 1 [ 184.086100][ T6626] REISERFS (device loop1): Using r5 hash to sort names [ 184.121000][ T6626] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 184.173924][ T6626] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 184.192475][ T6645] loop2: detected capacity change from 0 to 256 [ 184.237724][ T6647] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 184.356734][ T6645] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 184.723578][ T4494] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 184.868969][ T6655] loop0: detected capacity change from 0 to 4096 [ 184.927327][ T4494] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.954401][ T4494] usb 6-1: not running at top speed; connect to a high speed hub [ 184.971970][ T6665] loop2: detected capacity change from 0 to 64 [ 184.985835][ T6666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.986751][ T6655] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 185.013419][ T4494] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.045766][ T4494] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.075622][ T6655] NILFS (loop0): mounting fs with errors [ 185.095292][ T4494] usb 6-1: string descriptor 0 read error: -22 [ 185.111603][ T4494] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.164188][ T4494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.287781][ T6655] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 185.292081][ T4494] usb 6-1: 0:2 : does not exist [ 185.635250][ T6673] loop3: detected capacity change from 0 to 8192 [ 186.092129][ T4494] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 186.129486][ T4494] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.176962][ T4494] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 186.244701][ T4494] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.280828][ T6684] loop1: detected capacity change from 0 to 128 [ 186.293806][ T4494] usb 6-1: USB disconnect, device number 5 [ 186.575958][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.659944][ T6687] loop2: detected capacity change from 0 to 4096 [ 186.715248][ T6687] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 186.763971][ T6687] ntfs3: loop2: Failed to load $UpCase. [ 186.826833][ T6696] loop5: detected capacity change from 0 to 256 [ 186.856340][ T6696] exfat: Deprecated parameter 'namecase' [ 186.909120][ T6696] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 187.454304][ T6705] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 187.464284][ T6709] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.498859][ T6705] NILFS (loop1): mounting fs with errors [ 187.561204][ T6705] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 188.584757][ T6711] set_capacity_and_notify: 3 callbacks suppressed [ 188.584775][ T6711] loop0: detected capacity change from 0 to 32768 [ 188.692483][ T6711] XFS (loop0): Mounting V5 Filesystem [ 188.859371][ T6711] XFS (loop0): Ending clean mount [ 188.932109][ T4555] XFS (loop0): Unmounting Filesystem [ 189.146764][ T6750] loop5: detected capacity change from 0 to 8 [ 189.505932][ T6754] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 189.513654][ T6754] syzkaller0: linktype set to 825 [ 189.523718][ T2121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.740196][ T2121] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.802783][ T2121] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.819779][ T2121] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.852793][ T2121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.889117][ T6752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.120856][ T6772] program syz.2.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.131520][ T6765] team0 (unregistering): Port device team_slave_0 removed [ 190.178241][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 190.326495][ T4360] usb 4-1: USB disconnect, device number 8 [ 190.716694][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 190.743580][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.780'. [ 191.449289][ T6806] team0 (unregistering): Port device team_slave_0 removed [ 191.512293][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 192.661722][ T6840] loop0: detected capacity change from 0 to 4096 [ 192.711491][ T6840] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 192.735215][ T6840] ntfs3: loop0: Failed to load $UpCase. [ 193.002025][ T6848] loop3: detected capacity change from 0 to 512 [ 193.130342][ T6848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.160204][ T6848] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.367572][ T6846] team0 (unregistering): Port device team_slave_0 removed [ 193.391665][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 193.422955][ T6856] loop0: detected capacity change from 0 to 8192 [ 193.437440][ T6846] team0 (unregistering): Port device team_slave_1 removed [ 193.495369][ T6856] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.550582][ T6856] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 193.603576][ T6856] REISERFS (device loop0): using ordered data mode [ 193.616849][ T6856] reiserfs: using flush barriers [ 193.637913][ T6856] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.699301][ T6856] REISERFS (device loop0): checking transaction log (loop0) [ 194.068823][ T6856] REISERFS (device loop0): Using r5 hash to sort names [ 194.076267][ T4660] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.092973][ T6856] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 194.270856][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274313][ T4660] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.277242][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.321409][ T6877] loop5: detected capacity change from 0 to 256 [ 194.350854][ T4660] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.362655][ T6877] exfat: Deprecated parameter 'utf8' [ 194.422384][ T6877] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 194.443980][ T4660] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.479228][ T4660] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.510772][ T4660] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.554612][ T4660] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.587205][ T4660] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.604831][ T4660] usb 2-1: Product: syz [ 194.609181][ T4660] usb 2-1: Manufacturer: syz [ 194.635830][ T4660] cdc_wdm 2-1:1.0: skipping garbage [ 194.641111][ T4660] cdc_wdm 2-1:1.0: skipping garbage [ 194.683570][ T4360] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.705998][ T4660] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 194.730866][ T4660] cdc_wdm 2-1:1.0: Unknown control protocol [ 194.752074][ T6886] loop0: detected capacity change from 0 to 128 [ 194.838448][ T6882] loop3: detected capacity change from 0 to 4096 [ 194.859783][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 194.866619][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 194.873041][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 194.879678][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 194.893580][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 194.895150][ T4360] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.900472][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 194.903411][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 194.924263][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 194.926739][ T4360] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.934987][ T4660] usb 2-1: USB disconnect, device number 8 [ 194.953091][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 194.959748][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 194.964872][ T4360] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.965830][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 194.990120][ T4360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.029307][ T6881] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 195.050674][ T6882] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 195.077815][ T6882] ntfs3: loop3: Failed to load $UpCase. [ 195.531871][ T5487] usb 3-1: USB disconnect, device number 8 [ 195.728542][ T6891] loop0: detected capacity change from 0 to 32768 [ 195.779803][ T6891] (syz.0.824,6891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.797971][ T6891] (syz.0.824,6891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.847957][ T6891] JBD2: Ignoring recovery information on journal [ 195.913908][ T6891] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 196.305879][ T4555] ocfs2: Unmounting device (7,0) on (node local) [ 196.347950][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 196.347971][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 196.348002][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 196.397393][ T6910] loop3: detected capacity change from 0 to 256 [ 196.449137][ T6910] FAT-fs (loop3): Directory bread(block 64) failed [ 196.470356][ T6910] FAT-fs (loop3): Directory bread(block 65) failed [ 196.510968][ T6910] FAT-fs (loop3): Directory bread(block 66) failed [ 196.528513][ T6912] loop1: detected capacity change from 0 to 256 [ 196.538958][ T6910] FAT-fs (loop3): Directory bread(block 67) failed [ 196.559575][ T6910] FAT-fs (loop3): Directory bread(block 68) failed [ 196.582625][ T6912] exfat: Deprecated parameter 'utf8' [ 196.600029][ T6910] FAT-fs (loop3): Directory bread(block 69) failed [ 196.621416][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 196.622685][ T6910] FAT-fs (loop3): Directory bread(block 70) failed [ 196.674310][ T6912] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 196.691264][ T6910] FAT-fs (loop3): Directory bread(block 71) failed [ 196.712169][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 196.721567][ T6910] FAT-fs (loop3): Directory bread(block 72) failed [ 196.760394][ T6910] FAT-fs (loop3): Directory bread(block 73) failed [ 197.111834][ T6923] loop1: detected capacity change from 0 to 64 [ 197.341828][ T6925] loop2: detected capacity change from 0 to 1024 [ 197.482175][ T6925] hfsplus: bad catalog entry type [ 197.521199][ T4267] hfs: node 4:3 still has 1 user(s)! [ 197.576510][ T11] hfsplus: b-tree write err: -5, ino 25 [ 197.582474][ T11] hfsplus: b-tree write err: -5, ino 4 [ 197.623845][ T11] hfsplus: b-tree write err: -5, ino 2 [ 197.629481][ T11] hfsplus: b-tree write err: -5, ino 26 [ 198.056628][ T6951] loop3: detected capacity change from 0 to 64 [ 198.923091][ T6976] loop1: detected capacity change from 0 to 512 [ 199.050870][ T6976] EXT4-fs (loop1): 1 truncate cleaned up [ 199.065606][ T6976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.207923][ T26] audit: type=1800 audit(2000000068.070:59): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.862" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 199.241808][ T6976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.862: bg 0: block 465: padding at end of block bitmap is not set [ 199.358310][ T6976] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 199.394789][ T6976] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.862: invalid indirect mapped block 234881024 (level 0) [ 199.471295][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 199.505107][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 199.557227][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 200.019326][ T6970] loop0: detected capacity change from 0 to 40427 [ 200.043965][ T6970] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 200.124032][ T4260] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.462404][ T7003] loop1: detected capacity change from 0 to 4096 [ 200.638563][ T7003] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default. [ 200.650122][ T7003] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 200.684750][ T7003] ntfs: volume version 3.1. [ 200.737025][ T7003] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 200.756879][ T7003] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 201.194729][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 201.323543][ T4360] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.413492][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 201.420588][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 201.448460][ T41] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 201.484557][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.503026][ T41] usb 6-1: Product: syz [ 201.517740][ T41] usb 6-1: Manufacturer: syz [ 201.522410][ T41] usb 6-1: SerialNumber: syz [ 201.544840][ T4360] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.548372][ T41] usb 6-1: config 0 descriptor?? [ 201.578459][ T4360] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.596520][ T41] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 201.603406][ T4360] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.630367][ T4360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.653196][ T7016] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.653264][ T41] usb 6-1: Detected FT232R [ 201.766273][ T7012] loop3: detected capacity change from 0 to 40427 [ 201.786730][ T7012] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 201.804077][ T41] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 201.813422][ T7012] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 201.823633][ T7012] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 201.839244][ T7012] F2FS-fs (loop3): invalid crc value [ 201.859111][ T7012] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.915203][ T7034] loop2: detected capacity change from 0 to 512 [ 201.951602][ T7012] F2FS-fs (loop3): Start checkpoint disabled! [ 201.968548][ T7012] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 201.984657][ T7034] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.887: Invalid inode bitmap blk 4 in block_group 0 [ 202.022539][ T41] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.031030][ T7012] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 202.116162][ T7034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.121494][ T5487] usb 2-1: USB disconnect, device number 9 [ 202.232998][ T4360] usb 6-1: USB disconnect, device number 6 [ 202.272785][ T4360] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.311800][ T4360] ftdi_sio 6-1:0.0: device disconnected [ 202.332837][ T4301] kworker/u4:6: attempt to access beyond end of device [ 202.332837][ T4301] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 202.385690][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.401907][ T7038] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 202.459028][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 202.855032][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 203.236583][ T7061] loop1: detected capacity change from 0 to 1024 [ 203.357926][ T7061] hfsplus: bad catalog entry type [ 203.507509][ T4522] hfsplus: b-tree write err: -5, ino 25 [ 203.517122][ T4522] hfsplus: b-tree write err: -5, ino 4 [ 203.522878][ T4522] hfsplus: b-tree write err: -5, ino 2 [ 203.555269][ T4522] hfsplus: b-tree write err: -5, ino 26 [ 204.031768][ T7055] loop0: detected capacity change from 0 to 32768 [ 204.177578][ T7075] ERROR: (device loop0): diWrite: ixpxd invalid [ 204.177578][ T7075] [ 204.233701][ T7075] ERROR: (device loop0): remounting filesystem as read-only [ 204.282178][ T7075] ERROR: (device loop0): txCommit: [ 204.282178][ T7075] [ 204.363536][ T4360] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.558687][ T4360] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.579990][ T4360] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.621825][ T4360] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.653088][ T4360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.707008][ T7074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 204.993699][ T4360] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.255558][ T4360] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.273378][ T4360] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.300476][ T4360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.322429][ T4360] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 205.344811][ T41] usb 6-1: USB disconnect, device number 7 [ 205.368230][ T4360] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.415915][ T4360] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.449502][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.486919][ T4360] usb 3-1: Product: syz [ 205.505910][ T4360] usb 3-1: Manufacturer: syz [ 205.557785][ T4360] cdc_wdm 3-1:1.0: skipping garbage [ 205.564408][ T4360] cdc_wdm 3-1:1.0: skipping garbage [ 205.601318][ T4323] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 205.611405][ T4360] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 205.633713][ T4360] cdc_wdm 3-1:1.0: Unknown control protocol [ 205.713879][ T4323] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.849707][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 205.856381][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 205.876056][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 205.882815][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 205.911953][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 205.918616][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 205.926024][ T5487] usb 3-1: USB disconnect, device number 9 [ 206.010355][ T7102] fido_id[7102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.726774][ T7112] loop1: detected capacity change from 0 to 8192 [ 206.777784][ T7112] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.806017][ T7112] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 206.836230][ T7112] REISERFS (device loop1): using ordered data mode [ 206.842805][ T7112] reiserfs: using flush barriers [ 206.952351][ T7112] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.993844][ T7112] REISERFS (device loop1): checking transaction log (loop1) [ 207.030969][ T7112] REISERFS (device loop1): Using r5 hash to sort names [ 207.056581][ T7112] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 207.102995][ T7122] loop3: detected capacity change from 0 to 512 [ 207.151397][ T7122] EXT4-fs (loop3): 1 truncate cleaned up [ 207.234648][ T7122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.379856][ T26] audit: type=1800 audit(2000000076.240:60): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.921" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 207.381541][ T7122] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.921: bg 0: block 465: padding at end of block bitmap is not set [ 207.443541][ T7126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 207.618112][ T7122] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 207.653624][ T7122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.921: invalid indirect mapped block 234881024 (level 0) [ 207.782478][ T7107] loop5: detected capacity change from 0 to 40427 [ 207.820274][ T7107] F2FS-fs (loop5): Unrecognized mount option "whint_mode=user-based" or missing value [ 207.885831][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 208.470856][ T7147] input: syz0 as /devices/virtual/input/input14 [ 208.775684][ T7154] loop0: detected capacity change from 0 to 512 [ 208.811801][ T7154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.924933][ T7154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 208.942064][ T7154] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.994180][ T26] audit: type=1800 audit(2000000077.860:61): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.936" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 209.006334][ T7164] loop1: detected capacity change from 0 to 64 [ 209.014734][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.083571][ T5487] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 209.108831][ T4555] EXT4-fs (loop0): unmounting filesystem. [ 209.285325][ T5487] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 209.315271][ T5487] usb 6-1: config 0 has no interface number 0 [ 209.353953][ T5487] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 209.363235][ T5487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.422589][ T5487] usb 6-1: Product: syz [ 209.427181][ T5487] usb 6-1: Manufacturer: syz [ 209.443708][ T5487] usb 6-1: SerialNumber: syz [ 209.464972][ T5487] usb 6-1: config 0 descriptor?? [ 210.140251][ T5487] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 210.165376][ T5487] asix: probe of 6-1:0.251 failed with error -524 [ 210.233580][ T4660] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.387685][ T4323] usb 6-1: USB disconnect, device number 8 [ 210.446687][ T4660] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 210.475844][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 210.513187][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.531254][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 210.533665][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 210.558420][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 210.573399][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.594911][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 210.640854][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 210.669150][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.678713][ T7203] loop2: detected capacity change from 0 to 512 [ 210.697095][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 210.718581][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 210.744608][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.769139][ T7203] EXT4-fs (loop2): 1 truncate cleaned up [ 210.798651][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 210.833463][ T7203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.858893][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 210.898112][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.951505][ T26] audit: type=1800 audit(2000000079.810:62): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.956" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 210.953139][ T7203] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.956: bg 0: block 465: padding at end of block bitmap is not set [ 210.992663][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 211.016475][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 211.023357][ T4323] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.049698][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.079894][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 211.089284][ T7203] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 211.100120][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 211.111882][ T7203] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.956: invalid indirect mapped block 234881024 (level 0) [ 211.127258][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.144790][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 211.163654][ T4660] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 211.172687][ T4660] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.203448][ T4660] usb 2-1: config 64 interface 0 has no altsetting 0 [ 211.212765][ T4660] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.232988][ T4660] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.241765][ T4660] usb 2-1: Product: syz [ 211.245148][ T4323] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 211.253956][ T4660] usb 2-1: Manufacturer: syz [ 211.258658][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.270577][ T4660] usb 2-1: SerialNumber: syz [ 211.275893][ T7212] loop5: detected capacity change from 0 to 64 [ 211.289430][ T4323] usb 1-1: config 0 descriptor?? [ 211.316645][ T4660] yurex 2-1:64.0: USB YUREX device now attached to Yurex #0 [ 211.327891][ T4323] cp210x 1-1:0.0: cp210x converter detected [ 211.462959][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 211.862887][ T7208] loop3: detected capacity change from 0 to 32768 [ 211.932431][ T4323] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 211.957773][ T4323] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 211.999906][ T4323] usb 1-1: cp210x converter now attached to ttyUSB0 [ 212.049231][ T7221] ERROR: (device loop3): diWrite: ixpxd invalid [ 212.049231][ T7221] [ 212.150983][ T7221] ERROR: (device loop3): remounting filesystem as read-only [ 212.172474][ T4323] usb 1-1: USB disconnect, device number 6 [ 212.193041][ T4323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.227022][ T7221] ERROR: (device loop3): txCommit: [ 212.227022][ T7221] [ 212.244228][ T4323] cp210x 1-1:0.0: device disconnected [ 212.957236][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 213.069453][ T41] usb 2-1: USB disconnect, device number 10 [ 213.088065][ T41] yurex 2-1:64.0: USB YUREX #0 now disconnected [ 213.507456][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 213.768282][ T7248] loop2: detected capacity change from 0 to 64 [ 214.045540][ T7252] input: syz0 as /devices/virtual/input/input15 [ 214.329925][ T7238] loop0: detected capacity change from 0 to 40427 [ 214.381917][ T7238] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 214.418456][ T7238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 214.451198][ T7238] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 214.491570][ T7238] F2FS-fs (loop0): invalid crc value [ 214.575279][ T7238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.758923][ T7238] F2FS-fs (loop0): Start checkpoint disabled! [ 214.779793][ T7238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 214.793431][ T7238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 215.021771][ T7272] loop2: detected capacity change from 0 to 512 [ 215.074422][ T7272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.175221][ T7272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.180997][ T7254] loop1: detected capacity change from 0 to 32768 [ 215.184486][ T4360] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 215.203782][ T7272] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.280348][ T4522] kworker/u4:7: attempt to access beyond end of device [ 215.280348][ T4522] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 215.307183][ T26] audit: type=1800 audit(2000000084.170:63): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.986" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 215.311962][ T7254] ERROR: (device loop1): diWrite: ixpxd invalid [ 215.311962][ T7254] [ 215.415652][ T4360] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.429585][ T7254] ERROR: (device loop1): remounting filesystem as read-only [ 215.444719][ T4360] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.464036][ T7254] ERROR: (device loop1): txCommit: [ 215.464036][ T7254] [ 215.503880][ T4360] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.543854][ T4360] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 215.574499][ T4360] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.638899][ T4360] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.639463][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 215.673387][ T4360] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.712025][ T4360] usb 6-1: Product: syz [ 215.733359][ T4360] usb 6-1: Manufacturer: syz [ 215.785204][ T4360] cdc_wdm 6-1:1.0: skipping garbage [ 215.790492][ T4360] cdc_wdm 6-1:1.0: skipping garbage [ 215.841661][ T4360] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 215.853452][ T4360] cdc_wdm 6-1:1.0: Unknown control protocol [ 216.170750][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 216.209732][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 216.216403][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 216.223219][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 216.229859][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 216.253666][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 216.260327][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 216.273114][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 216.279856][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 216.286310][ T4360] usb 6-1: USB disconnect, device number 9 [ 217.054805][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 217.297022][ T7316] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 217.357652][ T7316] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 217.990375][ T5487] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.189689][ T5487] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.209748][ T5487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.262684][ T5487] usb 2-1: config 0 descriptor?? [ 218.290957][ T5487] cp210x 2-1:0.0: cp210x converter detected [ 218.344095][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 218.914328][ T5487] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 218.932717][ T5487] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 218.959896][ T5487] usb 2-1: cp210x converter now attached to ttyUSB0 [ 219.128544][ T5487] usb 2-1: USB disconnect, device number 11 [ 219.164246][ T5487] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.172490][ T5487] cp210x 2-1:0.0: device disconnected [ 219.865380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.928553][ T7395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1035'. [ 219.973915][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 220.056266][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 220.203742][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 220.592047][ T7420] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 220.599724][ T7420] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 221.200416][ T7436] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 221.596907][ T7449] mkiss: ax0: crc mode is auto. [ 222.079759][ T7460] loop2: detected capacity change from 0 to 4096 [ 222.104079][ T4360] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 222.300164][ T4360] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 222.321631][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.337137][ T7460] ntfs: (device loop2): parse_options(): NLS character set is not found. Using previous one default. [ 222.354503][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.366431][ T7460] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 222.393503][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 222.414713][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.458920][ T7460] ntfs: volume version 3.1. [ 222.463416][ T7445] loop0: detected capacity change from 0 to 32768 [ 222.471314][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.515101][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 222.539638][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.559613][ T7445] XFS (loop0): Mounting V5 Filesystem [ 222.563031][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.566093][ T7460] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 222.586831][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 222.615157][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.638312][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.660751][ T7460] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 222.742559][ T7445] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 222.764032][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 222.806813][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.857262][ T7445] XFS (loop0): Starting recovery (logdev: internal) [ 222.864265][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.913534][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 222.944710][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 222.954025][ T7445] XFS (loop0): Ending recovery (logdev: internal) [ 222.966884][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.013413][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 223.051569][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 223.083545][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.135983][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 223.155647][ T4360] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 223.175471][ T4555] XFS (loop0): Unmounting Filesystem [ 223.192419][ T4360] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.238999][ T4360] usb 6-1: config 64 interface 0 has no altsetting 0 [ 223.284710][ T4360] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 223.311183][ T4360] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 223.337699][ T4360] usb 6-1: Product: syz [ 223.344077][ T4360] usb 6-1: Manufacturer: syz [ 223.348746][ T4360] usb 6-1: SerialNumber: syz [ 223.392733][ T4360] yurex 6-1:64.0: USB YUREX device now attached to Yurex #0 [ 224.086382][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 224.098959][ T5487] usb 6-1: USB disconnect, device number 10 [ 224.121362][ T5487] yurex 6-1:64.0: USB YUREX #0 now disconnected [ 224.405505][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 224.463805][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 224.489473][ T7509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 224.524980][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 224.753529][ T2121] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 224.880217][ T7518] netlink: 'syz.2.1086': attribute type 8 has an invalid length. [ 224.895960][ T7518] sch_fq: defrate 0 ignored. [ 224.943777][ T2121] usb 1-1: Using ep0 maxpacket: 16 [ 224.974117][ T2121] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 224.997655][ T2121] usb 1-1: config 0 has no interface number 0 [ 225.023456][ T2121] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 225.053508][ T2121] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 225.086488][ T2121] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 225.099270][ T7523] loop2: detected capacity change from 0 to 128 [ 225.113486][ T2121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.132881][ T7523] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.145304][ T2121] usb 1-1: Product: syz [ 225.149521][ T2121] usb 1-1: Manufacturer: syz [ 225.164256][ T2121] usb 1-1: SerialNumber: syz [ 225.169798][ T7523] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.193683][ T2121] usb 1-1: config 0 descriptor?? [ 225.199506][ T7511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.208493][ T7511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.451883][ T7511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.498090][ T7511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.735486][ T7534] loop5: detected capacity change from 0 to 4096 [ 225.818653][ T7541] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.973682][ T5487] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 226.002542][ T7544] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 226.078488][ T7544] Remounting filesystem read-only [ 226.135266][ T2121] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.161414][ T2121] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 226.182648][ T2121] asix: probe of 1-1:0.251 failed with error -71 [ 226.185352][ T5487] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 226.187788][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.187843][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.187874][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.188915][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.188942][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.188960][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.189783][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.189826][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.189864][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.198235][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.198281][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.198311][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.199205][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.199256][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.199285][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.200160][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.200199][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.200227][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.201137][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.201176][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.201203][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.207344][ T5487] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 226.207390][ T5487] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.207419][ T5487] usb 4-1: config 64 interface 0 has no altsetting 0 [ 226.211243][ T5487] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 226.211277][ T5487] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 226.211301][ T5487] usb 4-1: Product: syz [ 226.211317][ T5487] usb 4-1: Manufacturer: syz [ 226.211334][ T5487] usb 4-1: SerialNumber: syz [ 226.217783][ T5487] yurex 4-1:64.0: USB YUREX device now attached to Yurex #0 [ 226.239384][ T2121] usb 1-1: USB disconnect, device number 7 [ 226.808006][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 226.810030][ T5487] usb 4-1: USB disconnect, device number 9 [ 226.815941][ T5487] yurex 4-1:64.0: USB YUREX #0 now disconnected [ 226.841043][ T7557] loop1: detected capacity change from 0 to 1024 [ 227.022783][ T7557] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 227.063743][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 227.147113][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 227.371056][ T7569] mkiss: ax0: crc mode is auto. [ 227.647869][ T7580] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.686036][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1110'. [ 227.756795][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1110'. [ 228.569287][ T5487] kernel write not supported for file /528/attr/exec (pid: 5487 comm: kworker/0:15) [ 228.773682][ T5487] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.819889][ T7621] cgroup: noprefix used incorrectly [ 228.958011][ T7625] loop1: detected capacity change from 0 to 512 [ 228.976782][ T5487] usb 1-1: Using ep0 maxpacket: 16 [ 228.998241][ T5487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.019858][ T7625] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1134: inode has both inline data and extents flags [ 229.036596][ T7625] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1134: couldn't read orphan inode 15 (err -117) [ 229.042084][ T5487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.063763][ T7625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.158238][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 229.180802][ T5487] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.203428][ T5487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.238560][ T5487] usb 1-1: Product: syz [ 229.253077][ T5487] usb 1-1: Manufacturer: syz [ 229.268740][ T5487] usb 1-1: SerialNumber: syz [ 229.458143][ T7637] loop5: detected capacity change from 0 to 2048 [ 229.483881][ T7637] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 229.538902][ T7637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.707537][ T5487] usb 1-1: 0:2 : does not exist [ 229.720109][ T5487] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 229.755417][ T5487] usb 1-1: USB disconnect, device number 8 [ 230.024693][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.838216][ T7656] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 230.863872][ T7656] netdevsim netdevsim2 netdevsim0: Failed to get key data for SA table [ 231.618773][ T7684] loop0: detected capacity change from 0 to 4096 [ 231.668758][ T7684] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 231.701223][ T7684] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 231.799331][ T7684] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 231.831693][ T7684] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 231.920564][ T7684] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 231.973120][ T7684] ntfs: volume version 3.1. [ 232.004488][ T7684] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 232.043531][ T7684] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 232.098694][ T7684] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 232.146206][ T7684] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 232.178055][ T7684] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 232.218531][ T7700] loop5: detected capacity change from 0 to 2048 [ 232.341939][ T7701] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.363578][ T4494] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 232.430302][ T7703] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 232.540256][ T7703] Remounting filesystem read-only [ 232.590653][ T4494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.617638][ T4494] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.639560][ T4494] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.649440][ T4494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.666992][ T4494] usb 3-1: Product: syz [ 232.671319][ T4494] usb 3-1: Manufacturer: syz [ 232.677122][ T7700] syz.5.1166 (7700) used greatest stack depth: 19736 bytes left [ 232.684969][ T4494] usb 3-1: SerialNumber: syz [ 232.744861][ T5328] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 233.135388][ T4494] usb 3-1: 0:2 : does not exist [ 233.590443][ T4494] usb 3-1: USB disconnect, device number 10 [ 233.938900][ T7709] loop5: detected capacity change from 0 to 32768 [ 233.967548][ T7709] (syz.5.1169,7709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.009012][ T7709] (syz.5.1169,7709,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.116501][ T7709] JBD2: Ignoring recovery information on journal [ 234.293876][ T7709] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 234.655067][ T7733] loop2: detected capacity change from 0 to 1024 [ 234.682020][ T7733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.704827][ T5328] ocfs2: Unmounting device (7,5) on (node local) [ 235.461814][ T7648] Set syz1 is full, maxelem 65536 reached [ 235.603673][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 235.625518][ T7758] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1190'. [ 235.675559][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 235.701831][ T7760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1190'. [ 235.850156][ T7756] ipt_CLUSTERIP: Please specify destination IP [ 235.882486][ T7766] loop0: detected capacity change from 0 to 128 [ 236.216042][ T7770] loop2: detected capacity change from 0 to 512 [ 236.281274][ T7770] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1196: inode has both inline data and extents flags [ 236.303981][ T7770] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1196: couldn't read orphan inode 15 (err -117) [ 236.326228][ T4360] kernel read not supported for file /dsp1 (pid: 4360 comm: kworker/0:8) [ 236.345317][ T7770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.555687][ T7759] loop5: detected capacity change from 0 to 32768 [ 236.635436][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 236.728447][ T7759] XFS (loop5): Mounting V5 Filesystem [ 236.787442][ T7785] loop3: detected capacity change from 0 to 64 [ 236.944743][ T7759] XFS (loop5): Ending clean mount [ 236.976595][ T7759] XFS (loop5): Quotacheck needed: Please wait. [ 237.080468][ T7759] XFS (loop5): Quotacheck: Done. [ 237.213706][ T7794] input: syz0 as /devices/virtual/input/input16 [ 237.301814][ T5328] XFS (loop5): Unmounting Filesystem [ 237.688062][ T7803] loop0: detected capacity change from 0 to 4096 [ 238.085288][ T4555] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 238.091888][ T4555] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 238.100325][ T7807] loop3: detected capacity change from 0 to 4096 [ 238.214863][ T7816] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.087098][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 239.258134][ T7809] loop2: detected capacity change from 0 to 32768 [ 239.427535][ T7809] XFS (loop2): Mounting V5 Filesystem [ 239.499883][ T7809] XFS (loop2): Ending clean mount [ 239.515870][ T7809] XFS (loop2): Quotacheck needed: Please wait. [ 239.592122][ T7809] XFS (loop2): Quotacheck: Done. [ 239.599943][ T7845] loop0: detected capacity change from 0 to 4096 [ 239.859589][ T4276] XFS (loop2): Unmounting Filesystem [ 239.977839][ T7845] ntfs3: loop0: MFT: r=1b, expect seq=1 instead of 0! [ 241.025218][ T7856] loop3: detected capacity change from 0 to 32768 [ 241.697135][ T4666] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.900455][ T4666] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.921197][ T4666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.974647][ T4666] usb 2-1: config 0 descriptor?? [ 242.004600][ T4666] cp210x 2-1:0.0: cp210x converter detected [ 242.069721][ T7908] loop3: detected capacity change from 0 to 4096 [ 242.330176][ T7915] loop2: detected capacity change from 0 to 256 [ 242.400198][ T4666] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 242.421635][ T4666] usb 2-1: cp210x converter now attached to ttyUSB0 [ 242.491890][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'. [ 242.529391][ T7920] netlink: 'syz.5.1240': attribute type 3 has an invalid length. [ 242.580391][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1240'. [ 242.642426][ T4360] usb 2-1: USB disconnect, device number 12 [ 242.650144][ T7921] netlink: 'syz.5.1240': attribute type 3 has an invalid length. [ 242.665116][ T4360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.746226][ T4360] cp210x 2-1:0.0: device disconnected [ 242.790279][ T7925] loop2: detected capacity change from 0 to 512 [ 242.792289][ T7923] loop0: detected capacity change from 0 to 4096 [ 242.897239][ T7928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.033129][ T7923] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 243.097793][ T7923] Remounting filesystem read-only [ 243.429894][ T7937] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 243.464584][ T7939] loop1: detected capacity change from 0 to 512 [ 243.484646][ T7939] EXT4-fs: Ignoring removed bh option [ 243.513717][ T4360] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 243.545434][ T7939] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 243.607703][ T7939] EXT4-fs (loop1): 1 truncate cleaned up [ 243.626236][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1252'. [ 243.666414][ T7939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.681795][ T7939] EXT4-fs (loop1): shut down requested (2) [ 243.717938][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 243.747433][ T4360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.775938][ T4360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.803413][ T4360] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.836846][ T4360] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.863435][ T4360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.905323][ T4360] usb 3-1: config 0 descriptor?? [ 243.999094][ T7957] loop1: detected capacity change from 0 to 128 [ 244.219987][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1257'. [ 244.321092][ T4360] plantronics 0003:047F:FFFF.0008: collection stack underflow [ 244.343667][ T4360] plantronics 0003:047F:FFFF.0008: item 0 2 0 12 parsing failed [ 244.351995][ T4360] plantronics 0003:047F:FFFF.0008: parse failed [ 244.373346][ T4360] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 244.567348][ T5487] usb 3-1: USB disconnect, device number 11 [ 245.679528][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 245.720099][ T7998] loop1: detected capacity change from 0 to 512 [ 245.764605][ T7998] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1269: inode has both inline data and extents flags [ 245.790695][ T7998] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1269: couldn't read orphan inode 15 (err -117) [ 245.806116][ T4299] bond0: (slave wlan1): link status definitely down, disabling slave [ 245.903761][ T7998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.051812][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 247.691149][ T8041] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 247.863150][ T8048] program syz.1.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.252867][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 248.470201][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 248.513925][ T8065] loop9: detected capacity change from 0 to 7 [ 248.537386][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.546655][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.569521][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.578908][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.591836][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.601145][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.631354][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.640669][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.658728][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.667992][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.677710][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.687037][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.704785][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.714138][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.722507][ T8065] ldm_validate_partition_table(): Disk read failed. [ 248.730169][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.739593][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.751020][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.760285][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.768709][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.777942][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 248.794632][ T8065] Dev loop9: unable to read RDB block 0 [ 248.800779][ T8065] loop9: unable to read partition table [ 248.815657][ T8065] loop9: partition table beyond EOD, truncated [ 248.850912][ T8065] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 249.107403][ T8070] loop5: detected capacity change from 0 to 4096 [ 249.193364][ T8073] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.785973][ T8084] loop5: detected capacity change from 0 to 128 [ 250.654856][ T8079] loop2: detected capacity change from 0 to 131072 [ 250.674454][ T8079] F2FS-fs (loop2): invalid crc value [ 250.841117][ T8079] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.882932][ T8079] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 250.919571][ T8079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 250.955893][ T8079] F2FS-fs (loop2): access invalid blkaddr:36 [ 250.962363][ T8079] CPU: 0 PID: 8079 Comm: syz.2.1305 Not tainted syzkaller #0 [ 250.969867][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.979964][ T8079] Call Trace: [ 250.983293][ T8079] [ 250.986305][ T8079] dump_stack_lvl+0x188/0x24e [ 250.991390][ T8079] ? show_regs_print_info+0x12/0x12 [ 250.996654][ T8079] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 251.002524][ T8079] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 251.007943][ T8079] f2fs_get_read_data_page+0x40f/0x640 [ 251.013444][ T8079] ? f2fs_reserve_block+0x240/0x240 [ 251.018689][ T8079] ? folio_unlock+0x114/0x2e0 [ 251.023414][ T8079] f2fs_get_new_data_page+0x408/0x600 [ 251.028823][ T8079] ? lock_page+0x2b0/0x2b0 [ 251.033267][ T8079] ? has_not_enough_free_secs+0xe10/0xe10 [ 251.039019][ T8079] ? memset+0x1e/0x40 [ 251.043015][ T8079] f2fs_add_regular_entry+0x585/0xbf0 [ 251.048437][ T8079] f2fs_add_dentry+0xd6/0x1c0 [ 251.053159][ T8079] f2fs_do_add_link+0x1cd/0x2a0 [ 251.058460][ T8079] ? f2fs_add_dentry+0x1c0/0x1c0 [ 251.063415][ T8079] ? up_read+0x20/0x20 [ 251.067585][ T8079] ? f2fs_lookup+0x4be/0x800 [ 251.072195][ T8079] ? down_read+0x1a8/0x2d0 [ 251.076629][ T8079] f2fs_create+0x6d7/0x9e0 [ 251.081069][ T8079] ? f2fs_lookup+0x800/0x800 [ 251.085676][ T8079] path_openat+0x1181/0x2ee0 [ 251.090304][ T8079] ? do_filp_open+0x430/0x430 [ 251.095011][ T8079] do_filp_open+0x1f1/0x430 [ 251.099530][ T8079] ? vfs_tmpfile+0x480/0x480 [ 251.104149][ T8079] ? _raw_spin_unlock+0x24/0x40 [ 251.109013][ T8079] ? alloc_fd+0x58f/0x630 [ 251.113372][ T8079] do_sys_openat2+0x150/0x4b0 [ 251.118069][ T8079] ? do_sys_open+0xe0/0xe0 [ 251.122502][ T8079] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.128673][ T8079] ? lock_chain_count+0x20/0x20 [ 251.133544][ T8079] __x64_sys_openat+0x135/0x160 [ 251.138414][ T8079] do_syscall_64+0x4c/0xa0 [ 251.142922][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 251.147622][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 251.152320][ T8079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.158224][ T8079] RIP: 0033:0x7f679679c819 [ 251.162652][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.182303][ T8079] RSP: 002b:00007f6797695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.190754][ T8079] RAX: ffffffffffffffda RBX: 00007f6796a15fa0 RCX: 00007f679679c819 [ 251.198748][ T8079] RDX: 0000000000880cc2 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 251.206741][ T8079] RBP: 00007f6796832c91 R08: 0000000000000000 R09: 0000000000000000 [ 251.214815][ T8079] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 251.222796][ T8079] R13: 00007f6796a16038 R14: 00007f6796a15fa0 R15: 00007ffce32cab58 [ 251.230794][ T8079] [ 252.103853][ T8132] loop1: detected capacity change from 0 to 2048 [ 252.150896][ T8132] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.318679][ T4259] udevd[4259]: incorrect nilfs2 checksum on /dev/loop1 [ 252.393352][ T8143] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.609152][ T8149] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1333'. [ 252.615403][ T8147] loop2: detected capacity change from 0 to 2048 [ 252.643445][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 252.664045][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 252.718564][ T8147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.908411][ T8153] loop3: detected capacity change from 0 to 256 [ 252.925117][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1337'. [ 253.006585][ T8153] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 253.209777][ T8160] loop1: detected capacity change from 0 to 256 [ 253.231380][ T8160] exfat: Deprecated parameter 'utf8' [ 253.323477][ T8160] exfat: Deprecated parameter 'utf8' [ 253.328929][ T8160] exfat: Deprecated parameter 'utf8' [ 253.500390][ T8160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 253.587146][ T8171] loop0: detected capacity change from 0 to 256 [ 253.643052][ T8171] exfat: Deprecated parameter 'namecase' [ 253.712674][ T8171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 254.021204][ T8180] loop2: detected capacity change from 0 to 2048 [ 254.110540][ T8183] loop0: detected capacity change from 0 to 512 [ 254.117151][ T8184] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.151221][ T8180] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 254.170831][ T8180] Remounting filesystem read-only [ 254.182513][ T8183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.196850][ T8183] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1349: Unimplemented hash flags: 0x0001 [ 254.211122][ T8183] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1349: Corrupt directory, running e2fsck is recommended [ 254.224748][ T8183] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1349: path /246/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 254.263159][ T8187] loop1: detected capacity change from 0 to 256 [ 254.464381][ T4276] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 254.599871][ T4555] EXT4-fs (loop0): unmounting filesystem. [ 254.882867][ T8198] loop1: detected capacity change from 0 to 128 [ 255.050663][ T8198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 255.064178][ T8198] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.102449][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1356'. [ 255.273679][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 255.706915][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713338][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.879549][ T8205] loop0: detected capacity change from 0 to 32768 [ 255.948994][ T8205] (syz.0.1357,8205,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.017254][ T8205] (syz.0.1357,8205,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 256.115482][ T8205] JBD2: Ignoring recovery information on journal [ 256.218870][ T8205] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 256.325532][ T8244] loop2: detected capacity change from 0 to 16 [ 256.341574][ T8244] erofs: (device loop2): mounted with root inode @ nid 36. [ 256.382254][ T8242] loop3: detected capacity change from 0 to 2048 [ 256.404880][ T8244] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 256.439488][ T8244] syz.2.1375: attempt to access beyond end of device [ 256.439488][ T8244] loop2: rw=0, sector=296, nr_sectors = 8 limit=16 [ 256.493999][ T8244] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 256.540012][ T8244] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 256.540386][ T8246] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.588668][ T8205] (syz.0.1357,8205,1):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 256.632936][ T8205] (syz.0.1357,8205,1):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 256.691290][ T8249] NILFS (loop3): error -2 truncating bmap (ino=16) [ 256.898099][ T4555] ocfs2: Unmounting device (7,0) on (node local) [ 257.226812][ T8258] program syz.2.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.299026][ T8261] loop3: detected capacity change from 0 to 65 [ 257.327709][ T8229] loop1: detected capacity change from 0 to 32768 [ 257.372494][ T8261] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 257.508588][ T8229] XFS (loop1): Mounting V5 Filesystem [ 257.568911][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 257.573742][ T8229] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 257.612649][ T8229] XFS (loop1): Starting recovery (logdev: internal) [ 257.633110][ T8229] XFS (loop1): Ending recovery (logdev: internal) [ 257.723568][ T4360] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 257.743714][ T41] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.821266][ T8280] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 257.864818][ T4267] XFS (loop1): Unmounting Filesystem [ 257.874341][ T8280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.929892][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.943597][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 257.954762][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.960678][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.992627][ T4360] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.016799][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.025831][ T4360] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.045895][ T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.055632][ T4360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.083625][ T41] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.104106][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.114296][ T4360] usb 1-1: config 0 descriptor?? [ 258.130945][ T41] usb 3-1: config 0 descriptor?? [ 258.545677][ T4360] plantronics 0003:047F:FFFF.0009: collection stack underflow [ 258.563500][ T4360] plantronics 0003:047F:FFFF.0009: item 0 2 0 12 parsing failed [ 258.565076][ T41] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 258.571794][ T4360] plantronics 0003:047F:FFFF.0009: parse failed [ 258.617290][ T41] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 258.623399][ T4360] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 258.660147][ T41] microsoft 0003:045E:07DA.000A: collection stack underflow [ 258.684737][ T41] microsoft 0003:045E:07DA.000A: item 0 4 0 12 parsing failed [ 258.722494][ T41] microsoft 0003:045E:07DA.000A: parse failed [ 258.745215][ T41] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 258.763882][ T8272] futex_wake_op: syz.2.1384 tries to shift op by -1; fix this program [ 258.826460][ T41] usb 3-1: USB disconnect, device number 12 [ 258.866871][ T4494] usb 1-1: USB disconnect, device number 9 [ 258.889335][ T8291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1390'. [ 259.176493][ T8287] set_capacity_and_notify: 1 callbacks suppressed [ 259.176513][ T8287] loop3: detected capacity change from 0 to 32768 [ 259.199867][ T8287] (syz.3.1389,8287,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.218055][ T8287] (syz.3.1389,8287,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 259.277260][ T8287] JBD2: Ignoring recovery information on journal [ 259.342566][ T8287] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.516809][ T8287] (syz.3.1389,8287,0):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 259.594584][ T8287] (syz.3.1389,8287,1):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 259.776599][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 259.870512][ T4301] Bluetooth: hci5: Frame reassembly failed (-84) [ 259.901045][ T4301] Bluetooth: hci5: Frame reassembly failed (-84) [ 259.907695][ T4360] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.143554][ T4360] usb 3-1: Using ep0 maxpacket: 8 [ 260.151178][ T4360] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 260.165795][ T4360] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 260.175712][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.185697][ T4360] usb 3-1: Product: syz [ 260.189907][ T4360] usb 3-1: Manufacturer: syz [ 260.194580][ T4660] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 260.202821][ T4360] usb 3-1: SerialNumber: syz [ 260.228735][ T4360] usb 3-1: config 0 descriptor?? [ 260.244763][ T4360] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 260.258663][ T4360] usb 3-1: setting power ON [ 260.269074][ T4360] dvb-usb: bulk message failed: -22 (2/0) [ 260.307011][ T4360] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.318649][ T8324] syz.3.1402 (8324) used greatest stack depth: 18800 bytes left [ 260.327330][ T4360] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 260.357673][ T4360] usb 3-1: media controller created [ 260.376172][ T4660] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.384171][ T4360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.398692][ T4660] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.413118][ T4660] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.427658][ T4660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.439342][ T4360] usb 3-1: selecting invalid altsetting 6 [ 260.449993][ T4360] usb 3-1: digital interface selection failed (-22) [ 260.461577][ T8316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 260.465382][ T8307] dvb-usb: bulk message failed: -22 (3/0) [ 260.490085][ T4360] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 260.508745][ T8307] cxusb: i2c rd: len=147 is too big! [ 260.508745][ T8307] [ 260.517328][ T4360] usb 3-1: setting power OFF [ 260.553427][ T8331] cxusb: i2c rd: len=153 is too big! [ 260.553427][ T8331] [ 260.567053][ T4360] dvb-usb: bulk message failed: -22 (2/0) [ 260.605438][ T4360] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 260.623582][ T4360] (NULL device *): no alternate interface [ 260.706661][ T4660] usb 2-1: USB disconnect, device number 13 [ 260.707386][ T4360] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 260.791833][ T4360] usb 3-1: USB disconnect, device number 13 [ 260.846408][ T8335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.959109][ T8335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.046356][ T8335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.248298][ T8335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.450396][ T8335] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.500422][ T8335] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.634196][ T8335] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.701784][ T8335] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.863709][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 261.872399][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 261.955963][ T8362] loop2: detected capacity change from 0 to 64 [ 262.004778][ T8360] loop0: detected capacity change from 0 to 4096 [ 262.142937][ T8360] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 262.208754][ T8360] ntfs3: loop0: Failed to load $Extend. [ 262.399607][ T8376] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 262.498185][ T4555] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 262.542017][ T4555] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 262.560818][ T4555] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 262.613606][ T41] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 262.647895][ T8378] loop3: detected capacity change from 0 to 1024 [ 262.708232][ T8378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.719476][ T8378] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.813626][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 262.820699][ T41] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.837966][ T41] usb 3-1: config 0 has no interface number 0 [ 262.851387][ T41] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.869209][ T41] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.888250][ T41] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 262.916363][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.945786][ T41] usb 3-1: config 0 descriptor?? [ 263.034416][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 263.310738][ T8394] program syz.0.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.399969][ T8395] loop3: detected capacity change from 0 to 2048 [ 263.494386][ T8395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.569445][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 263.578957][ T8395] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.596574][ T41] uclogic 0003:28BD:0094.000B: pen parameters not found [ 263.613442][ T41] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 263.661947][ T41] usb 3-1: USB disconnect, device number 14 [ 263.790067][ T8407] loop0: detected capacity change from 0 to 512 [ 263.826719][ T8407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.863713][ T4299] wlan1: Trigger new scan to find an IBSS to join [ 263.876076][ T8407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 263.876546][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 263.936217][ T11] ------------[ cut here ]------------ [ 263.942702][ T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 263.954022][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 263.963930][ T11] Modules linked in: [ 263.967862][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 263.975519][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.985663][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 263.992052][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 263.998410][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 264.018120][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 264.024375][ T11] RAX: 5c63710188229800 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 264.032387][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 264.032421][ T8407] System zones: [ 264.040501][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 264.040594][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000040 [ 264.040611][ T11] R13: dffffc0000000000 R14: ffff888055723358 R15: ffff888057b68b68 [ 264.040627][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 264.040647][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.040663][ T11] CR2: 00007f9d1746d000 CR3: 000000005ade1000 CR4: 00000000003506f0 [ 264.040685][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.040700][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.040715][ T11] Call Trace: [ 264.040724][ T11] [ 264.040752][ T11] rate_control_send_low+0x194/0x790 [ 264.040789][ T11] rate_control_get_rate+0x207/0x5c0 [ 264.040822][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 264.069753][ T8407] 1-12 [ 264.077612][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 264.077662][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 264.077692][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 264.077713][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 264.077734][ T11] ? sta_info_get+0x289/0x2a0 [ 264.077762][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 264.077798][ T11] ieee80211_tx+0x2d4/0x460 [ 264.077821][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 264.077857][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 264.077888][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 264.077915][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 264.077939][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 264.126753][ T8399] loop1: detected capacity change from 0 to 32768 [ 264.131658][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 264.149034][ T8407] [ 264.151177][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 264.205917][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 264.205983][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 264.206024][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.206048][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.206081][ T11] cfg80211_wiphy_work+0x221/0x260 [ 264.233084][ T8407] EXT4-fs (loop0): 1 truncate cleaned up [ 264.237110][ T11] ? process_one_work+0x7b0/0x1160 [ 264.237144][ T11] process_one_work+0x8a2/0x1160 [ 264.243582][ T8407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 264.247867][ T11] ? worker_detach_from_pool+0x240/0x240 [ 264.247906][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.279181][ T8399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1437 (8399) [ 264.282885][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.301529][ T11] ? kthread_data+0x4b/0xc0 [ 264.306164][ T11] worker_thread+0xaa2/0x1270 [ 264.310935][ T11] kthread+0x29d/0x330 [ 264.315096][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 264.320261][ T11] ? kthread_blkcg+0xd0/0xd0 [ 264.324952][ T11] ret_from_fork+0x1f/0x30 [ 264.329428][ T11] [ 264.332485][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.339796][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 264.347200][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.357298][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 264.364116][ T11] Call Trace: [ 264.367422][ T11] [ 264.370382][ T11] dump_stack_lvl+0x188/0x24e [ 264.375102][ T11] ? memcpy+0x3c/0x60 [ 264.379118][ T11] ? show_regs_print_info+0x12/0x12 [ 264.384359][ T11] ? load_image+0x400/0x400 [ 264.388917][ T11] panic+0x2e5/0x730 [ 264.392853][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 264.397409][ T11] ? ret_from_fork+0x1f/0x30 [ 264.402050][ T11] __warn+0x2f8/0x4f0 [ 264.406063][ T11] ? __rate_control_send_low+0x635/0x880 [ 264.411739][ T11] ? __rate_control_send_low+0x635/0x880 [ 264.417410][ T11] report_bug+0x2ba/0x4f0 [ 264.421777][ T11] ? __rate_control_send_low+0x635/0x880 [ 264.427514][ T11] handle_bug+0x3a/0x70 [ 264.431686][ T11] exc_invalid_op+0x16/0x40 [ 264.436215][ T11] asm_exc_invalid_op+0x16/0x20 [ 264.441080][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 264.447331][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 264.467037][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 264.473133][ T11] RAX: 5c63710188229800 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 264.481115][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 264.489095][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 264.497071][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000040 [ 264.505050][ T11] R13: dffffc0000000000 R14: ffff888055723358 R15: ffff888057b68b68 [ 264.513079][ T11] rate_control_send_low+0x194/0x790 [ 264.518470][ T11] rate_control_get_rate+0x207/0x5c0 [ 264.523774][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 264.529433][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 264.535435][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 264.540751][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 264.546308][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 264.552321][ T11] ? sta_info_get+0x289/0x2a0 [ 264.557015][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 264.562838][ T11] ieee80211_tx+0x2d4/0x460 [ 264.567363][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 264.572751][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 264.578225][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 264.583350][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 264.588211][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 264.594203][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 264.600123][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 264.606641][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 264.612914][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 264.618141][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.623178][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.628751][ T11] cfg80211_wiphy_work+0x221/0x260 [ 264.633885][ T11] ? process_one_work+0x7b0/0x1160 [ 264.639006][ T11] process_one_work+0x8a2/0x1160 [ 264.644074][ T11] ? worker_detach_from_pool+0x240/0x240 [ 264.649720][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.654842][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.660420][ T11] ? kthread_data+0x4b/0xc0 [ 264.664959][ T11] worker_thread+0xaa2/0x1270 [ 264.669682][ T11] kthread+0x29d/0x330 [ 264.673767][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 264.678810][ T11] ? kthread_blkcg+0xd0/0xd0 [ 264.683514][ T11] ret_from_fork+0x1f/0x30 [ 264.687959][ T11] [ 264.691573][ T11] Kernel Offset: disabled [ 264.696013][ T11] Rebooting in 86400 seconds..