last executing test programs: 1m9.654527612s ago: executing program 3 (id=301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x3, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "01000800"}, @main=@item_4={0x3, 0x0, 0x8, "008000"}, @local=@item_4={0x3, 0x2, 0x0, '\t\x00zp'}, @main=@item_4={0x3, 0x0, 0xc, "45b53a4a"}]}}, 0x0}, 0x0) 1m7.656422511s ago: executing program 3 (id=330): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.43976167s ago: executing program 3 (id=333): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m4.657146202s ago: executing program 3 (id=357): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 1m4.443702672s ago: executing program 3 (id=359): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) 1m3.926124284s ago: executing program 3 (id=363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r1, 0x2, 0x7fff, 0x5, 0x80000001, 0x3}, &(0x7f00000001c0)=0x14) 1m3.759759152s ago: executing program 32 (id=363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r1, 0x2, 0x7fff, 0x5, 0x80000001, 0x3}, &(0x7f00000001c0)=0x14) 10.87258033s ago: executing program 5 (id=974): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, &(0x7f0000000140)='\x00\x00', 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0xb98c6ee81995dd68, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 10.693038908s ago: executing program 5 (id=979): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000640)="7003e339c1c2aec7c2b2d04b8dc26356", 0x10}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x0, [{@loopback}, {@broadcast}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x58}, 0x0) 10.644851231s ago: executing program 5 (id=981): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1, 0x176, &(0x7f0000000240)="$eJzs3TFKK1EUBuCTl7z3glVqsRiwsQrqCiISQRwQlBRaKUSbRATTjFbZhTtwK25HUqWL6EiiIZbJoPN9TX74CdzbzKnmzMXGTa97O7h+en6Mer0StVa0YlyJRvyJauSGAQD8JuPJJF4muaLPAgCshvkPAOVj/gNA+Zj/AFA+p2fnR3tp2j5JknrEaJh1sk7+m/cHh2l7O3nXmP1rlGWd6rTfyfvka/831j763YX9v9jazPu3bv84nev/R3f51wcAAAAAAAAAAAAAAAAAAAAAgEI0k6mF+32aze/6PH3aDzS3v6cW67WVXQMAAAAAAAAAAAAAAAAAAAB+tMH9Q++y37+6EwRBmIain0wAAAAAAAAAAAAAAAAAAFA+s5d+iz4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn9v3/5YWi7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK8BAAD//9OzTek=") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x24000045, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 10.381797132s ago: executing program 5 (id=986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 9.931236002s ago: executing program 5 (id=993): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 9.644462025s ago: executing program 5 (id=995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x34) 4.207635334s ago: executing program 4 (id=1041): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.000288223s ago: executing program 4 (id=1044): unshare(0x22020600) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0xfcacc8a079db2fb5) 3.608047881s ago: executing program 4 (id=1045): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)={[{@autodefrag}, {@clear_cache}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x2d]}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x1e4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000003480)={{r0}, 0x0, 0x2, @unused=[0x101, 0x5, 0x3, 0xe], @subvolid=0x3}) 2.962001289s ago: executing program 2 (id=1048): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000001100)='./file1\x00', 0x88) 2.744060598s ago: executing program 0 (id=1049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) 2.683677371s ago: executing program 0 (id=1050): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.533994348s ago: executing program 0 (id=1052): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') exit(0x1ff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.116462867s ago: executing program 4 (id=1053): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x48) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_request}}}}}, 0x0) 1.963468803s ago: executing program 2 (id=1054): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.698146374s ago: executing program 1 (id=1056): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x18, r0, 0xb01, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.648897527s ago: executing program 0 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000020000003400128009000100626f6e640000000024000280080003000400040005000600000000000b000f00ffff"], 0x54}}, 0x0) 1.516132352s ago: executing program 4 (id=1058): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.437779286s ago: executing program 1 (id=1059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) read$FUSE(r1, 0x0, 0x0) 1.382245859s ago: executing program 0 (id=1060): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *'], 0xa) 1.371219449s ago: executing program 1 (id=1061): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1.303650402s ago: executing program 0 (id=1062): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x52, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "1c45a834b2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6b79185a, 0x2, 0x7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x220, 0x3, 0x80, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x6e, &(0x7f0000000240)=ANY=[]}]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.230698465s ago: executing program 1 (id=1063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002ac0)={0x2020}, 0x2020) 1.12617821s ago: executing program 1 (id=1064): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r0, 0x0) 1.12586504s ago: executing program 2 (id=1065): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x61c6, &(0x7f000000ac00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 733.846357ms ago: executing program 2 (id=1066): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c400000003080104000000000000000001000000050003003a0000000600024000110000050003002f0000003e0004800800014000000401080001400000007f080002400000000108000240000000010800014000000001080001400000010008000240000000030500030084000000540004800800024000000001080001400e"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @time=@tick=0x1ff}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) 312.308996ms ago: executing program 2 (id=1067): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 312.127346ms ago: executing program 4 (id=1068): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x637c) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @c}}) 307.880256ms ago: executing program 1 (id=1077): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0x508, &(0x7f0000000500)="$eJzs3U1sI1cdAPD/TD7sTdMmhR4AFbqUwoJWayfeNqp6YTlVCFVC9MhhGxInitaJo9gpTVik7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQOLjyeJzNlxtrG9u78e8njebNe+P5v7ez8571rMwLYGxdj4iDiJiOiHciYi7PT/It7nS29nkfP7y/cvjw/koSrdbb/0qy8nZe9oHaTzvnR8Qz+TWLEfGDNyN+lJwK+ueIxt7+veVarbqTZ5Wbm9vlxt7+rY3N5fXqenWrUllaXFp4/fZrlUtr60ubv/3oWkT84fdf/vBPB9/6Sbtas3nZUTsuWafpU0dx2iYj4nuDCDYCE3l7ph/nw4/1IS5TGhGfi4iXs+d/Liayu3nSydv07SHWDgAYhFZrLlpzx48BgKsuzebAkrSUzwXMRpqWSp05vBdiJq3VG82ba/XdrdXOXNl8TKVrG7XqQj5XOB9TydrGZHUxS3ePa9XKqePbEfF8RPy8cC07Lq3Ua6uj/OIDAGPsmVPj/38LnfEfALjiio+ShVHWAwAYnuKoKwAADJ3xHwDGj/EfAMaP8R8Axo/xHwDGj/EfAMbK9996q721DvP3X6++u7d7r/7urdVq405+ys52ab1eX8/e2bN50fVq9fr24qux+165WW00y429/bub9d2t5t3svd53q1MDbxEAcJHnX/rgr0lEHLxxLdvi2Pv+LxyrXxx07YBBSkddAWBkJkZdAWBkzq72BYwL8/HAsSV6HxzLLp5JnPZ+X5dPrRsKT54bX/wM8//AU838P4yvx5v/910ergLz/zC+Wq3Emv8AMGbM8QPJBeXHf/9faB076O/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiSZrMtSUv5WuCzkaalUsSzETEfU8naRq26EBHPRcRfClOF9vFiRFg3CACeZuk/knz9rxtzr8yeLp0u/K+Q7SPix798+xfvLTebO4sR08m/j/Kb7+f5lVHUHwC4SHec7o7jXR8/vL/S3YZZn4++01lctB33MN86JZMxme2L2VzDzH+S/Lij/X1l4hLiHzyIiC+c1/4kmxuZz1c+PR2/HfvZocZPT8RPs7LOvv1v8flLqAuMmw/a/U/rvOcvjevZ/vznv5j1UJ9dt/87PNP/pUf930SP/u96vzFe/eN3z2S25jplDyK+NBlx2L34sf6nGz/pEf+VPuP/7cWvvNyrrPWriBtxXvuTE7HKzc3tcmNv/9bG5vJ6db26VaksLS4tvH77tUo5m6Mud2eqz/rnGzef6xW/3f6ZHvGLF7T/6322/9f/f+eHX/2U+N/82vn3/4VPid8eE7/RZ/zlmd8Ve5W146/2aP9F9/9mn/E//Pv+ap+nAgBD0Njbv7dcu1Pd6SRqA0ukgw+RJZKIgwGHeJQo/OZnbw4r1gATcZTT/W/xhFRMYnSJ0fZLwOA9euhHXRMAAAAAAAAAAAAAAKCXYfw50ajbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNX1SQAAAP//gILP2Q==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 0s ago: executing program 2 (id=1069): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0x4758e000) kernel console output (not intermixed with test programs): 2'. [ 78.385720][ T5049] XFS (loop4): Ending clean mount [ 78.449282][ T4185] XFS (loop4): Unmounting Filesystem [ 78.690145][ T5082] loop4: detected capacity change from 0 to 1024 [ 78.703415][ T7] microsoft 0003:045E:07DA.0002: collection stack underflow [ 78.712801][ T7] microsoft 0003:045E:07DA.0002: item 0 4 0 12 parsing failed [ 78.722742][ T7] microsoft 0003:045E:07DA.0002: parse failed [ 78.728903][ T7] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 78.780478][ T4234] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 78.862209][ T4566] hfsplus: b-tree write err: -5, ino 4 [ 78.930078][ T4188] usb 4-1: USB disconnect, device number 3 [ 78.966651][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 79.001959][ T1325] usb 3-1: USB disconnect, device number 4 [ 79.150556][ T4234] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.172547][ T4234] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.185793][ T4234] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.216043][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.490503][ T4234] usb 1-1: GET_CAPABILITIES returned 0 [ 79.496022][ T4234] usbtmc 1-1:16.0: can't read capabilities [ 79.580394][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.601015][ T5114] capability: warning: `syz.3.330' uses deprecated v2 capabilities in a way that may be insecure [ 79.645606][ T5110] loop4: detected capacity change from 0 to 32768 [ 79.725630][ T4234] usb 1-1: USB disconnect, device number 4 [ 79.747281][ T5110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 79.756512][ T5110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 79.783028][ T5110] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 79.795944][ T4188] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 79.808468][ T4188] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 79.820540][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 79.864573][ T4188] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 79.876897][ T4188] gfs2: fsid=syz:syz.0: jid=0: Done [ 79.884536][ T5110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 79.941489][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.960411][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.980378][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.040705][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.042201][ T5110] gfs2: fsid=syz:syz.0: found 1 quota changes [ 80.085664][ T1325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.114534][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.122714][ T5110] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 80.122714][ T5110] inode = 11 2339 [ 80.122714][ T5110] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 80.147531][ T5110] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 80.162141][ T5110] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 80.176166][ T5110] CPU: 1 PID: 5110 Comm: syz.4.329 Not tainted syzkaller #0 [ 80.183457][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.193518][ T5110] Call Trace: [ 80.196798][ T5110] [ 80.199712][ T5110] dump_stack_lvl+0x168/0x230 [ 80.200479][ T1325] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.204394][ T5110] ? show_regs_print_info+0x20/0x20 [ 80.204424][ T5110] ? load_image+0x3b0/0x3b0 [ 80.218906][ T1325] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.223103][ T5110] ? __lock_acquire+0x7c60/0x7c60 [ 80.223134][ T5110] ? do_raw_spin_unlock+0x11d/0x230 [ 80.223155][ T5110] gfs2_assert_warn_i+0x18f/0x2c0 [ 80.223182][ T5110] gfs2_quota_cleanup+0x4b4/0x6a0 [ 80.223212][ T5110] gfs2_make_fs_ro+0x237/0x5d0 [ 80.238246][ T1325] usb 2-1: Manufacturer: syz [ 80.241353][ T5110] ? gfs2_dinode_out+0xb00/0xb00 [ 80.241379][ T5110] ? _raw_spin_unlock+0x24/0x40 [ 80.241396][ T5110] ? gfs2_glock_nq+0xcb0/0x1550 [ 80.241431][ T5110] gfs2_withdraw+0x5f9/0x1460 [ 80.241466][ T5110] ? gfs2_lm+0x220/0x220 [ 80.241488][ T5110] ? gfs2_freeze_lock+0x52/0xc0 [ 80.241515][ T5110] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.247053][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 80.251534][ T5110] gfs2_inode_refresh+0xb5e/0xfe0 [ 80.251567][ T5110] ? do_promote+0x71a/0xab0 [ 80.251586][ T5110] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.251606][ T5110] ? __lock_acquire+0x7c60/0x7c60 [ 80.251635][ T5110] inode_go_lock+0x127/0x470 [ 80.251662][ T5110] do_promote+0x741/0xab0 [ 80.251693][ T5110] finish_xmote+0x514/0xb70 [ 80.251720][ T5110] do_xmote+0x7b6/0x1120 [ 80.251749][ T5110] gfs2_glock_nq+0xc7a/0x1550 [ 80.293467][ T1325] usb 2-1: config 0 descriptor?? [ 80.294518][ T5110] do_sync+0x486/0xc00 [ 80.350310][ T5110] ? slot_put+0x1e0/0x1e0 [ 80.354663][ T5110] ? do_sync+0x47e/0xc00 [ 80.356968][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 80.358917][ T5110] ? do_raw_spin_unlock+0x11d/0x230 [ 80.358946][ T5110] gfs2_quota_sync+0x32c/0x6f0 [ 80.377620][ T5110] gfs2_sync_fs+0x48/0xb0 [ 80.381961][ T5110] sync_filesystem+0xe6/0x220 [ 80.386652][ T5110] gfs2_reconfigure+0x120/0xcd0 [ 80.388510][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 80.391520][ T5110] ? shrink_dcache_sb+0x35d/0x3b0 [ 80.391548][ T5110] ? gfs2_get_tree+0x1e0/0x1e0 [ 80.391567][ T5110] ? dentry_lru_isolate+0x2e0/0x2e0 [ 80.391588][ T5110] ? __might_sleep+0xf0/0xf0 [ 80.391605][ T5110] ? hook_sb_remount+0x19/0xc0 [ 80.391628][ T5110] reconfigure_super+0x219/0x880 [ 80.391657][ T5110] path_mount+0xd3e/0x1020 [ 80.391681][ T5110] ? user_path_at_empty+0x13e/0x190 [ 80.391701][ T5110] __se_sys_mount+0x2d6/0x3c0 [ 80.391726][ T5110] ? __x64_sys_mount+0xc0/0xc0 [ 80.391747][ T5110] ? lockdep_hardirqs_on+0x94/0x140 [ 80.391766][ T5110] ? __x64_sys_mount+0x1c/0xc0 [ 80.391788][ T5110] do_syscall_64+0x4c/0xa0 [ 80.407218][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 80.410604][ T5110] ? clear_bhb_loop+0x30/0x80 [ 80.410628][ T5110] ? clear_bhb_loop+0x30/0x80 [ 80.410647][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.410679][ T5110] RIP: 0033:0x7f158eebb749 [ 80.490560][ T4314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.491945][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.518997][ T5110] RSP: 002b:00007f158d122038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.527408][ T5110] RAX: ffffffffffffffda RBX: 00007f158f111fa0 RCX: 00007f158eebb749 [ 80.535371][ T5110] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 80.543336][ T5110] RBP: 00007f158ef3ff91 R08: 0000000000000000 R09: 0000000000000000 [ 80.551316][ T5110] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 80.559288][ T5110] R13: 00007f158f112038 R14: 00007f158f111fa0 R15: 00007ffff90fa3f8 [ 80.567259][ T5110] [ 80.570411][ T5110] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 80.571941][ T7] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 80.579172][ T5110] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 80.581967][ T5110] gfs2: fsid=syz:syz.0: File system withdrawn [ 80.600779][ T5110] CPU: 1 PID: 5110 Comm: syz.4.329 Not tainted syzkaller #0 [ 80.608072][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.618134][ T5110] Call Trace: [ 80.621419][ T5110] [ 80.624361][ T5110] dump_stack_lvl+0x168/0x230 [ 80.629057][ T5110] ? kobject_uevent_env+0x371/0x890 [ 80.634375][ T5110] ? show_regs_print_info+0x20/0x20 [ 80.639588][ T5110] ? load_image+0x3b0/0x3b0 [ 80.644108][ T5110] ? kobject_uevent_env+0x371/0x890 [ 80.649314][ T5110] ? lockref_put_or_lock+0x6e/0xb0 [ 80.650081][ T7] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 80.654443][ T5110] gfs2_withdraw+0x111b/0x1460 [ 80.654479][ T5110] ? gfs2_lm+0x220/0x220 [ 80.654504][ T5110] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.654526][ T5110] gfs2_inode_refresh+0xb5e/0xfe0 [ 80.654561][ T5110] ? do_promote+0x71a/0xab0 [ 80.654582][ T5110] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.654603][ T5110] ? __lock_acquire+0x7c60/0x7c60 [ 80.654632][ T5110] inode_go_lock+0x127/0x470 [ 80.698930][ T7] usb 4-1: Product: syz [ 80.701415][ T5110] do_promote+0x741/0xab0 [ 80.701455][ T5110] finish_xmote+0x514/0xb70 [ 80.701481][ T5110] do_xmote+0x7b6/0x1120 [ 80.701509][ T5110] gfs2_glock_nq+0xc7a/0x1550 [ 80.701542][ T5110] do_sync+0x486/0xc00 [ 80.720370][ T7] usb 4-1: Manufacturer: syz [ 80.723362][ T5110] ? slot_put+0x1e0/0x1e0 [ 80.723399][ T5110] ? do_sync+0x47e/0xc00 [ 80.735303][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 80.736314][ T5110] ? do_raw_spin_unlock+0x11d/0x230 [ 80.740815][ T1325] rc_core: IR keymap rc-hauppauge not found [ 80.745573][ T5110] gfs2_quota_sync+0x32c/0x6f0 [ 80.745616][ T5110] gfs2_sync_fs+0x48/0xb0 [ 80.745634][ T5110] sync_filesystem+0xe6/0x220 [ 80.745655][ T5110] gfs2_reconfigure+0x120/0xcd0 [ 80.745683][ T5110] ? shrink_dcache_sb+0x35d/0x3b0 [ 80.745704][ T5110] ? gfs2_get_tree+0x1e0/0x1e0 [ 80.745725][ T5110] ? dentry_lru_isolate+0x2e0/0x2e0 [ 80.745748][ T5110] ? __might_sleep+0xf0/0xf0 [ 80.745767][ T5110] ? hook_sb_remount+0x19/0xc0 [ 80.745792][ T5110] reconfigure_super+0x219/0x880 [ 80.745822][ T5110] path_mount+0xd3e/0x1020 [ 80.745848][ T5110] ? user_path_at_empty+0x13e/0x190 [ 80.745872][ T5110] __se_sys_mount+0x2d6/0x3c0 [ 80.745898][ T5110] ? __x64_sys_mount+0xc0/0xc0 [ 80.745923][ T5110] ? lockdep_hardirqs_on+0x94/0x140 [ 80.745944][ T5110] ? __x64_sys_mount+0x1c/0xc0 [ 80.745963][ T5110] do_syscall_64+0x4c/0xa0 [ 80.745978][ T5110] ? clear_bhb_loop+0x30/0x80 [ 80.745994][ T5110] ? clear_bhb_loop+0x30/0x80 [ 80.746013][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.746032][ T5110] RIP: 0033:0x7f158eebb749 [ 80.746051][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.746066][ T5110] RSP: 002b:00007f158d122038 EFLAGS: 00000246 [ 80.762282][ T7] usb 4-1: SerialNumber: syz [ 80.766157][ T5110] ORIG_RAX: 00000000000000a5 [ 80.786607][ T1325] Registered IR keymap rc-empty [ 80.790562][ T5110] RAX: ffffffffffffffda RBX: 00007f158f111fa0 RCX: 00007f158eebb749 [ 80.790581][ T5110] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 80.790600][ T5110] RBP: 00007f158ef3ff91 R08: 0000000000000000 R09: 0000000000000000 [ 80.790611][ T5110] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 80.790622][ T5110] R13: 00007f158f112038 R14: 00007f158f111fa0 R15: 00007ffff90fa3f8 [ 80.790648][ T5110] [ 80.792572][ T5110] gfs2: unable to remount read-write [ 80.801960][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.848128][ T5133] loop0: detected capacity change from 0 to 8192 [ 80.863006][ T7] usb 4-1: config 0 descriptor?? [ 80.968531][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.979658][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.989515][ T4314] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 80.998722][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.001202][ T5133] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 81.006945][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.025465][ T4314] usb 3-1: config 0 descriptor?? [ 81.033625][ T5133] REISERFS (device loop0): using ordered data mode [ 81.048928][ T5133] reiserfs: using flush barriers [ 81.062098][ T1325] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 81.099545][ T5133] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.121274][ T5133] REISERFS (device loop0): checking transaction log (loop0) [ 81.132124][ T1325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 81.135888][ T5133] REISERFS (device loop0): Using r5 hash to sort names [ 81.157876][ T5133] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 81.158090][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.251535][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.292558][ T7] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 81.298991][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.330521][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.362358][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.411145][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.462030][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.500563][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.513630][ T4314] uclogic 0003:2179:0053.0003: unbalanced delimiter at end of report description [ 81.530078][ T4314] uclogic 0003:2179:0053.0003: parse failed [ 81.536525][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.555311][ T4314] uclogic: probe of 0003:2179:0053.0003 failed with error -22 [ 81.570490][ T1325] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.611746][ T1325] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 81.629023][ T1325] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.640926][ T5148] loop0: detected capacity change from 0 to 256 [ 81.721597][ T5148] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 81.740840][ T5148] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 81.780930][ T1325] usb 3-1: USB disconnect, device number 5 [ 81.940574][ T7] gspca_sunplus: reg_w_riv err -71 [ 81.956569][ T7] sunplus: probe of 4-1:0.0 failed with error -71 [ 81.983137][ T7] usb 4-1: USB disconnect, device number 4 [ 82.260469][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.332715][ T1325] usb 2-1: USB disconnect, device number 3 [ 82.450655][ T4314] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.507195][ T5175] loop3: detected capacity change from 0 to 64 [ 82.509683][ T5176] loop2: detected capacity change from 0 to 256 [ 82.584707][ T5176] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 82.663866][ T4234] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 82.683129][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.699380][ T4234] usb 5-1: config 0 descriptor?? [ 82.715600][ T4182] VFS: Lookup of '.' in minix loop3 would have caused loop [ 82.726989][ T4182] VFS: Lookup of '.' in minix loop3 would have caused loop [ 82.744601][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 82.790634][ T1325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.981938][ T5180] loop2: detected capacity change from 0 to 32768 [ 83.078845][ T4314] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 83.089320][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.100772][ T4314] usb 1-1: Product: syz [ 83.104957][ T4314] usb 1-1: Manufacturer: syz [ 83.109553][ T4314] usb 1-1: SerialNumber: syz [ 83.133090][ T4314] usb 1-1: config 0 descriptor?? [ 83.184294][ T4314] gspca_main: se401-2.14.0 probing 047d:5003 [ 83.198586][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.215217][ T4234] cypress 0003:04B4:0001.0004: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.4-1/input0 [ 83.226797][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.238990][ T1325] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 83.257252][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.294925][ T1325] usb 2-1: config 0 descriptor?? [ 83.332429][ T4282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.434809][ T4254] usb 5-1: USB disconnect, device number 2 [ 83.456677][ T4282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.574998][ T4282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.612555][ T4314] gspca_se401: Frame size: 0x0 1/16th janggu [ 83.659956][ T4282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.784700][ T1325] hid-led 0003:04D8:F372.0005: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 83.836872][ T4314] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 83.943953][ T4314] usb 1-1: USB disconnect, device number 5 [ 83.976142][ T1325] hid-led 0003:04D8:F372.0005: Greynut Luxafor initialized [ 83.996878][ T5204] loop4: detected capacity change from 0 to 512 [ 84.025698][ T1325] usb 2-1: USB disconnect, device number 4 [ 84.056441][ T4248] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 84.067187][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 84.102312][ T13] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 84.181413][ T13] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 84.199767][ T4248] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 84.221220][ T13] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 84.255092][ T13] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 84.277787][ T5216] loop2: detected capacity change from 0 to 1024 [ 84.287302][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 84.310064][ T5208] fido_id[5208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 84.358060][ T5216] EXT4-fs (loop2): Ignoring removed oldalloc option [ 84.368129][ T5216] EXT4-fs (loop2): Ignoring removed bh option [ 84.374470][ T4309] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 84.398090][ T5216] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.399471][ T7] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 84.448613][ T4248] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 84.466969][ T7] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 84.488918][ T7] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 84.551206][ T4309] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 84.561276][ T4314] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 84.592477][ T4314] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 84.632391][ T5216] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 84.702773][ T4248] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 84.712055][ T4309] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 84.721476][ T4248] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 84.809959][ T5230] loop0: detected capacity change from 0 to 4096 [ 84.848130][ T5238] loop4: detected capacity change from 0 to 1024 [ 84.949924][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.045899][ T5238] MPI: mpi too large (187712 bits) [ 85.052389][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.073707][ T5230] ntfs: volume version 3.1. [ 85.095764][ T5187] device bridge_slave_0 entered promiscuous mode [ 85.152368][ T9] hfsplus: b-tree write err: -5, ino 4 [ 85.199420][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.235786][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.278712][ T5187] device bridge_slave_1 entered promiscuous mode [ 85.359673][ T5255] loop4: detected capacity change from 0 to 512 [ 85.515450][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.562568][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.582031][ T5255] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.710383][ T4314] Bluetooth: hci0: command 0x0409 tx timeout [ 85.744909][ T5255] EXT4-fs (loop4): shut down requested (0) [ 85.812357][ T5187] team0: Port device team_slave_0 added [ 85.820210][ T5187] team0: Port device team_slave_1 added [ 86.038720][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.057081][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.149929][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.241064][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.248034][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.332752][ T5299] program syz.4.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.349194][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.509039][ T5308] loop0: detected capacity change from 0 to 1024 [ 86.643208][ T5187] device hsr_slave_0 entered promiscuous mode [ 86.657774][ T5187] device hsr_slave_1 entered promiscuous mode [ 86.702625][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.710203][ T5187] Cannot create hsr debugfs directory [ 86.823568][ T5275] loop2: detected capacity change from 0 to 40427 [ 86.931924][ T5275] F2FS-fs (loop2): invalid crc value [ 87.021148][ T5275] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.049361][ T5330] input: syz0 as /devices/virtual/input/input9 [ 87.138923][ T4282] device hsr_slave_0 left promiscuous mode [ 87.150151][ T4282] device hsr_slave_1 left promiscuous mode [ 87.172181][ T5275] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.180122][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.215075][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 87.215090][ T26] audit: type=1326 audit(1764039640.582:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.1.410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc17628d749 code=0x0 [ 87.225782][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.243805][ T4254] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.347035][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.354602][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.363641][ T4186] attempt to access beyond end of device [ 87.363641][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 87.377799][ T4282] device bridge_slave_1 left promiscuous mode [ 87.402475][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.433973][ T4282] device bridge_slave_0 left promiscuous mode [ 87.450501][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.480466][ T4254] usb 5-1: Using ep0 maxpacket: 8 [ 87.486696][ T5322] loop0: detected capacity change from 0 to 32768 [ 87.494864][ T4282] device veth1_macvtap left promiscuous mode [ 87.503890][ T4282] device veth0_macvtap left promiscuous mode [ 87.510156][ T4282] device veth1_vlan left promiscuous mode [ 87.516540][ T4282] device veth0_vlan left promiscuous mode [ 87.588328][ T5322] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.600425][ T4254] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.617915][ T4254] usb 5-1: too many configurations: 73, using maximum allowed: 8 [ 87.640677][ T569] (kworker/u4:3,569,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 87.690477][ T4254] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 87.709505][ T4254] usb 5-1: can't read configurations, error -71 [ 87.733847][ T5322] (syz.0.407,5322,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 87.781837][ T4314] Bluetooth: hci0: command 0x041b tx timeout [ 87.796261][ T5322] (syz.0.407,5322,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 87.813102][ T5342] netlink: 55 bytes leftover after parsing attributes in process `syz.2.411'. [ 87.824775][ T5322] (syz.0.407,5322,1):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 87.834246][ T5322] (syz.0.407,5322,1):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 87.844034][ T5322] (syz.0.407,5322,1):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 87.849309][ T4282] bond1 (unregistering): Released all slaves [ 87.853994][ T5322] (syz.0.407,5322,1):ocfs2_rename:1464 ERROR: status = -2 [ 87.869049][ T5322] (syz.0.407,5322,1):ocfs2_rename:1687 ERROR: status = -2 [ 87.923660][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 88.028924][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 88.065527][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 88.149073][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.209632][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.254156][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 88.318613][ T4282] bond0 (unregistering): Released all slaves [ 88.400737][ T5354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 88.577518][ T5362] vivid-004: disconnect [ 88.593109][ T5364] loop1: detected capacity change from 0 to 164 [ 88.603805][ T5361] vivid-004: reconnect [ 88.667618][ T5187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.733954][ T5187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.779911][ T5187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.851017][ T5187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.040830][ T4254] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.206773][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.207023][ T5395] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 89.278797][ T5403] loop1: detected capacity change from 0 to 256 [ 89.382543][ T5395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.420854][ T4254] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.436174][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.445270][ T4254] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.469728][ T5394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.490955][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.499290][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.549573][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.564439][ T4254] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.598292][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.612493][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.629916][ T4254] usb 5-1: SerialNumber: syz [ 89.638462][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.645635][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.667781][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.681665][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.692145][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.699207][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.721562][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.730791][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.739755][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.749882][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.782742][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.801845][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.858609][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.870509][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 89.886787][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.936170][ T4254] usb 5-1: 0:2 : does not exist [ 89.950126][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.985310][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.003589][ T4254] usb 5-1: USB disconnect, device number 5 [ 90.042944][ T5187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.101394][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.140760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.184792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.261591][ T5211] udevd[5211]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.319090][ T5441] binder: 5440:5441 ioctl 400c620e 0 returned -14 [ 90.460537][ T5439] loop1: detected capacity change from 0 to 4096 [ 90.461315][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.449'. [ 90.625780][ T5439] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.682082][ T5461] loop4: detected capacity change from 0 to 65 [ 90.717795][ T5461] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 90.730781][ T4314] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.782377][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.789553][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.812019][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.121691][ T4314] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 91.129809][ T4314] usb 1-1: config 0 has no interface number 0 [ 91.205016][ T4314] usb 1-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 91.260311][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.283755][ T5489] loop1: detected capacity change from 0 to 64 [ 91.299216][ T5481] loop4: detected capacity change from 0 to 4096 [ 91.312488][ T4314] usb 1-1: config 0 descriptor?? [ 91.349021][ T5487] loop2: detected capacity change from 0 to 2048 [ 91.361356][ T4314] usb-storage 1-1:0.42: USB Mass Storage device detected [ 91.387681][ T5481] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.508815][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.518812][ T4314] usb-storage 1-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 91.534685][ T5487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.578171][ T4314] usb-storage 1-1:0.42: This device (04cb,0100,00ae S 04 P e0) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 91.578171][ T4314] Please send a copy of this message to and [ 91.611021][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.672076][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.704608][ T5481] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #15: comm syz.4.456: corrupted inode contents [ 91.717753][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.797049][ T5187] device veth0_vlan entered promiscuous mode [ 91.805101][ T5481] EXT4-fs error (device loop4): ext4_dirty_inode:6054: inode #15: comm syz.4.456: mark_inode_dirty error [ 91.826604][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.851186][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.867760][ T4314] usb 1-1: USB disconnect, device number 6 [ 91.872887][ T5481] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #15: comm syz.4.456: corrupted inode contents [ 91.893366][ T5187] device veth1_vlan entered promiscuous mode [ 91.971400][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 92.010921][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.048877][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.049309][ T5481] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.456: mark_inode_dirty error [ 92.082854][ T5187] device veth0_macvtap entered promiscuous mode [ 92.135742][ T5187] device veth1_macvtap entered promiscuous mode [ 92.152605][ T5481] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #15: comm syz.4.456: corrupted inode contents [ 92.198532][ T5481] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.456: mark_inode_dirty error [ 92.223209][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.248478][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.289095][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.311298][ T5481] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #15: comm syz.4.456: corrupted inode contents [ 92.352626][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.380363][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.400433][ T5481] EXT4-fs error (device loop4): ext4_truncate:4279: inode #15: comm syz.4.456: mark_inode_dirty error [ 92.412462][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.438876][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.449643][ T5481] EXT4-fs error (device loop4) in ext4_setattr:5622: Corrupt filesystem [ 92.466891][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.481823][ T5497] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #15: comm syz.4.456: corrupted inode contents [ 92.497079][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.518979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.551641][ T5512] loop2: detected capacity change from 0 to 4096 [ 92.562761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.597533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.625501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.638089][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.656547][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.673197][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.685802][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.695723][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.706401][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.716489][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.728337][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.750381][ T5512] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 92.767878][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.787114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.834654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.906237][ T5187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.950335][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.960497][ T5187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.006234][ T5187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.025373][ T5187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.108577][ T4186] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 93.135475][ T4186] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 93.160370][ T4186] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 93.190987][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 93.325291][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.353656][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.430668][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.482080][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.510549][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.523976][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.600493][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.602750][ T5540] loop2: detected capacity change from 0 to 32768 [ 93.608736][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.650406][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.670580][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.754943][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.769176][ T5532] loop0: detected capacity change from 0 to 32768 [ 93.798908][ T5540] XFS (loop2): Mounting V5 Filesystem [ 93.845294][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.866957][ T5532] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.471 (5532) [ 93.969947][ T5532] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.990642][ T5532] BTRFS info (device loop0): enabling auto defrag [ 93.997175][ T5532] BTRFS info (device loop0): force clearing of disk cache [ 94.006727][ T5532] BTRFS info (device loop0): enabling disk space caching [ 94.015995][ T5532] BTRFS info (device loop0): max_inline at 0 [ 94.026189][ T5532] BTRFS info (device loop0): disk space caching is enabled [ 94.033678][ T5532] BTRFS info (device loop0): has skinny extents [ 94.034332][ T5540] XFS (loop2): Ending clean mount [ 94.041832][ T21] usb 2-1: GET_CAPABILITIES returned 0 [ 94.055463][ T21] usbtmc 2-1:16.0: can't read capabilities [ 94.141135][ T5540] XFS (loop2): Quotacheck needed: Please wait. [ 94.205217][ T5540] XFS (loop2): Quotacheck: Done. [ 94.211226][ T5540] XFS (loop2): Unmounting Filesystem [ 94.288659][ T4188] usb 2-1: USB disconnect, device number 5 [ 94.444924][ T5532] BTRFS info (device loop0): enabling ssd optimizations [ 94.506868][ T5532] BTRFS info (device loop0): clearing free space tree [ 94.553498][ T5532] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.650379][ T5532] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.271007][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.290265][ C0] sched: RT throttling activated [ 95.540645][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 95.660792][ T23] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 95.668949][ T23] usb 2-1: config 0 has no interface number 0 [ 95.872316][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 95.893380][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.914337][ T23] usb 2-1: Product: syz [ 95.918529][ T23] usb 2-1: Manufacturer: syz [ 95.934589][ T23] usb 2-1: SerialNumber: syz [ 95.945561][ T23] usb 2-1: config 0 descriptor?? [ 95.986130][ T5588] loop5: detected capacity change from 0 to 32768 [ 96.003853][ T23] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 96.222351][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 96.281860][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.297707][ T5588] XFS (loop5): Mounting V5 Filesystem [ 96.424806][ T5588] XFS (loop5): Ending clean mount [ 96.504186][ T5588] XFS (loop5): Quotacheck needed: Please wait. [ 96.590205][ T5588] XFS (loop5): Quotacheck: Done. [ 96.603830][ T5645] loop4: detected capacity change from 0 to 512 [ 96.672755][ T23] usb 2-1: USB disconnect, device number 6 [ 96.690316][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 96.719781][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 96.736947][ T5649] loop2: detected capacity change from 0 to 256 [ 96.777963][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 96.809360][ T5645] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.491: couldn't read orphan inode 26 (err -116) [ 96.869007][ T5655] Zero length message leads to an empty skb [ 96.905809][ T23] quatech2 2-1:0.51: device disconnected [ 96.912751][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.971794][ T5187] XFS (loop5): Unmounting Filesystem [ 96.981147][ T5645] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.068369][ T5645] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #3: comm syz.4.491: corrupted inode contents [ 97.186721][ T5645] EXT4-fs error (device loop4): ext4_dirty_inode:6054: inode #3: comm syz.4.491: mark_inode_dirty error [ 97.302204][ T5645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.491: bg 0: block 64: padding at end of block bitmap is not set [ 97.351410][ T5645] Quota error (device loop4): write_blk: dquota write failed [ 97.404394][ T5645] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 97.455271][ T5645] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.491: Failed to acquire dquot type 0 [ 97.458124][ T5661] Quota error (device loop4): write_blk: dquota write failed [ 97.514194][ T5661] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 97.534138][ T5661] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.491: Failed to acquire dquot type 0 [ 97.986280][ T5701] loop0: detected capacity change from 0 to 128 [ 98.012273][ T5703] loop2: detected capacity change from 0 to 64 [ 98.074681][ T5701] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 98.147071][ T5701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.772446][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 98.929889][ T5751] loop4: detected capacity change from 0 to 736 [ 99.203421][ T4309] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.345350][ T4254] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.480512][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 99.590478][ T4254] usb 6-1: Using ep0 maxpacket: 8 [ 99.610527][ T4309] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 99.635155][ T4309] usb 1-1: config 179 has no interface number 0 [ 99.651768][ T4309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 99.680318][ T4309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 99.700317][ T4309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.720567][ T4254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.730298][ T4309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 99.750432][ T4254] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 99.772336][ T4309] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 99.805662][ T4309] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 99.835210][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.880605][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.930583][ T4254] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.961153][ T5783] loop2: detected capacity change from 0 to 1024 [ 99.968176][ T4254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.991453][ T4254] usb 6-1: Product: syz [ 100.005519][ T4254] usb 6-1: Manufacturer: syz [ 100.012400][ T4254] usb 6-1: SerialNumber: syz [ 100.042148][ T5789] loop4: detected capacity change from 0 to 2048 [ 100.081394][ T26] audit: type=1800 audit(1764039653.452:8): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.534" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 100.169563][ T4309] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 100.192562][ T5789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.289317][ T5799] loop2: detected capacity change from 0 to 512 [ 100.340793][ T4254] cdc_ncm 6-1:1.0: bind() failure [ 100.350523][ T5799] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 100.364660][ T5799] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 100.367393][ T4254] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 100.392961][ T1325] usb 1-1: USB disconnect, device number 7 [ 100.410314][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 100.416487][ T4254] cdc_ncm 6-1:1.1: bind() failure [ 100.418647][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 100.423851][ T5799] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 100.435506][ T1325] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 100.452828][ T4254] usb 6-1: USB disconnect, device number 2 [ 100.520339][ T5799] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 100.611296][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 100.626136][ T5799] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.643424][ T5799] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 100.651588][ T5799] EXT4-fs (loop2): too many log groups per flexible block group [ 100.659435][ T5799] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 100.685074][ T5799] EXT4-fs (loop2): mount failed [ 100.690000][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.702292][ T5808] device bridge_slave_1 left promiscuous mode [ 100.708537][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.198245][ T5836] loop4: detected capacity change from 0 to 512 [ 101.338668][ T5836] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 101.350299][ T5836] UDF-fs: Scanning with blocksize 512 failed [ 101.390585][ T5836] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 101.427018][ T5836] UDF-fs: Scanning with blocksize 1024 failed [ 101.482253][ T5836] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 101.516672][ T5836] UDF-fs: Scanning with blocksize 2048 failed [ 101.550402][ T5836] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 101.596571][ T5836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.732848][ T5859] loop1: detected capacity change from 0 to 64 [ 101.870933][ T4309] Bluetooth: hci0: command 0x0411 tx timeout [ 101.944783][ T5844] loop5: detected capacity change from 0 to 32768 [ 102.020518][ T4254] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 102.115731][ T5844] XFS (loop5): Mounting V5 Filesystem [ 102.194784][ T5844] XFS (loop5): Ending clean mount [ 102.239610][ T5844] XFS (loop5): Quotacheck needed: Please wait. [ 102.280420][ T4254] usb 1-1: Using ep0 maxpacket: 32 [ 102.408846][ T5844] XFS (loop5): Quotacheck: Done. [ 102.440563][ T4254] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.512601][ T5187] XFS (loop5): Unmounting Filesystem [ 102.518705][ T5891] loop2: detected capacity change from 0 to 2048 [ 102.537769][ T5874] loop1: detected capacity change from 0 to 32768 [ 102.545185][ T4254] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 102.605948][ T4254] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 102.634037][ T4254] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 102.634931][ T5891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.643593][ T4254] usb 1-1: config 128 has no interface number 0 [ 102.659057][ T4254] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 102.670835][ T4254] usb 1-1: config 128 interface 127 has no altsetting 0 [ 102.720684][ T5874] XFS (loop1): Mounting V5 Filesystem [ 102.778626][ T5904] loop4: detected capacity change from 0 to 512 [ 102.840519][ T4254] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 102.849591][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.864580][ T5904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.879285][ T4254] usb 1-1: Product: syz [ 102.883557][ T4254] usb 1-1: Manufacturer: syz [ 102.888289][ T4254] usb 1-1: SerialNumber: syz [ 102.895701][ T5904] EXT4-fs (loop4): 1 truncate cleaned up [ 102.901574][ T5904] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 102.911440][ T5874] XFS (loop1): Ending clean mount [ 102.934582][ T5861] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.267782][ T4183] XFS (loop1): Unmounting Filesystem [ 103.459440][ T4254] usb 1-1: USB disconnect, device number 8 [ 103.747058][ T5927] x_tables: duplicate underflow at hook 4 [ 103.756409][ T5920] loop2: detected capacity change from 0 to 32768 [ 103.791107][ T5212] udevd[5212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.865453][ T5920] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 103.954764][ T5920] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.125275][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 104.750013][ T5941] loop0: detected capacity change from 0 to 32768 [ 104.864098][ T4309] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.900422][ T5941] XFS (loop0): Mounting V5 Filesystem [ 104.905538][ T5962] loop5: detected capacity change from 0 to 32768 [ 104.985079][ T5941] XFS (loop0): Ending clean mount [ 104.993335][ T5962] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 105.034544][ T5962] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 105.063809][ T4184] XFS (loop0): Unmounting Filesystem [ 105.119802][ T5187] ocfs2: Unmounting device (7,5) on (node local) [ 105.128194][ T4309] usb 5-1: Using ep0 maxpacket: 32 [ 105.270551][ T4309] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.285654][ T4309] usb 5-1: config 0 has no interface number 0 [ 105.470365][ T4309] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.479437][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.493992][ T6011] loop5: detected capacity change from 0 to 256 [ 105.501088][ T4309] usb 5-1: Product: syz [ 105.505318][ T4309] usb 5-1: Manufacturer: syz [ 105.509905][ T4309] usb 5-1: SerialNumber: syz [ 105.518378][ T4309] usb 5-1: config 0 descriptor?? [ 105.573597][ T4309] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.793578][ T4309] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.823069][ T4309] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.847392][ T6020] loop2: detected capacity change from 0 to 2048 [ 105.954575][ T6020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.971161][ T6020] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.189504][ T6033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.612: bg 0: block 345: padding at end of block bitmap is not set [ 106.217395][ T6033] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 160 with error 117 [ 106.241872][ T6033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 106.241872][ T6033] [ 106.325803][ T4309] usb 5-1: USB disconnect, device number 6 [ 106.331871][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.357595][ T6014] loop0: detected capacity change from 0 to 32768 [ 106.358536][ T4309] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.397824][ T6030] loop1: detected capacity change from 0 to 32768 [ 106.406999][ T4309] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.468903][ T4309] quatech2 5-1:0.51: device disconnected [ 106.502710][ T6041] loop2: detected capacity change from 0 to 512 [ 106.509684][ T6030] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 106.533327][ T6014] XFS (loop0): Mounting V5 Filesystem [ 106.537840][ T6030] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.620186][ T6041] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.618: couldn't read orphan inode 26 (err -116) [ 106.635568][ T6041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.648983][ T6041] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.700872][ T6041] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #3: comm syz.2.618: corrupted inode contents [ 106.750147][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 106.758815][ T6014] XFS (loop0): Ending clean mount [ 106.779244][ T6041] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #3: comm syz.2.618: mark_inode_dirty error [ 106.802118][ T6041] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.618: bg 0: block 64: padding at end of block bitmap is not set [ 106.817046][ T6041] Quota error (device loop2): write_blk: dquota write failed [ 106.832149][ T6041] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.843674][ T6050] Quota error (device loop2): write_blk: dquota write failed [ 106.859978][ T6050] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 106.885473][ T6041] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.618: Failed to acquire dquot type 0 [ 106.901420][ T6050] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.618: Failed to acquire dquot type 0 [ 106.945909][ T4184] XFS (loop0): Unmounting Filesystem [ 107.362919][ T6056] loop4: detected capacity change from 0 to 32768 [ 107.680741][ T6056] XFS (loop4): Mounting V5 Filesystem [ 107.791536][ T6056] XFS (loop4): Ending clean mount [ 107.824588][ T6056] XFS (loop4): Quotacheck needed: Please wait. [ 107.953925][ T6082] loop1: detected capacity change from 0 to 4096 [ 107.967040][ T6056] XFS (loop4): Quotacheck: Done. [ 107.972347][ T6056] XFS (loop4): Unmounting Filesystem [ 108.619799][ T6063] loop2: detected capacity change from 0 to 32768 [ 108.674313][ T6088] loop0: detected capacity change from 0 to 40427 [ 108.706504][ T6063] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.625 (6063) [ 108.756581][ T6088] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 108.797098][ T6063] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.828887][ T6088] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.861252][ T6063] BTRFS info (device loop2): enabling auto defrag [ 108.867705][ T6063] BTRFS info (device loop2): force clearing of disk cache [ 108.910488][ T6088] F2FS-fs (loop0): invalid crc value [ 108.947414][ T6063] BTRFS info (device loop2): enabling disk space caching [ 108.971621][ T6088] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.010851][ T6063] BTRFS info (device loop2): max_inline at 0 [ 109.016865][ T6063] BTRFS info (device loop2): disk space caching is enabled [ 109.053908][ T6063] BTRFS info (device loop2): has skinny extents [ 109.062632][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 109.079343][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.305061][ T6088] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.313027][ T6094] loop5: detected capacity change from 0 to 32768 [ 109.324083][ T6088] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.426621][ T6094] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 109.443237][ T6063] BTRFS info (device loop2): enabling ssd optimizations [ 109.466130][ T6063] BTRFS info (device loop2): clearing free space tree [ 109.536296][ T6063] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.566899][ T6094] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 109.611743][ T6063] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.742628][ T5187] ocfs2: Unmounting device (7,5) on (node local) [ 109.995176][ T6141] netlink: 'syz.1.636': attribute type 10 has an invalid length. [ 110.100787][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.531247][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.629568][ T6141] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 110.640996][ T6172] loop2: detected capacity change from 0 to 512 [ 110.667012][ T6153] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 110.685538][ T6166] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.771937][ T6172] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.844159][ T6172] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.863595][ T26] audit: type=1326 audit(1764039664.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158eebb749 code=0x7ffc0000 [ 110.957989][ T26] audit: type=1326 audit(1764039664.262:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158eebb749 code=0x7ffc0000 [ 111.036369][ T26] audit: type=1326 audit(1764039664.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f158eebb749 code=0x7ffc0000 [ 111.070542][ T6166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.094292][ T6166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.120941][ T26] audit: type=1326 audit(1764039664.282:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.4.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f158eebb749 code=0x0 [ 111.144049][ T6166] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 111.153566][ T6166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.172349][ T6166] usb 6-1: config 0 descriptor?? [ 111.567753][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 111.656564][ T6166] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 111.728336][ T6166] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 111.770342][ T4309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.850577][ T6166] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 111.885025][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 111.894425][ T6166] usb 6-1: USB disconnect, device number 3 [ 111.944881][ T6166] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 112.035864][ T6222] fido_id[6222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 112.084860][ T6230] loop1: detected capacity change from 0 to 256 [ 112.204249][ T6230] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.210580][ T4309] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 112.228107][ T6236] loop0: detected capacity change from 0 to 2048 [ 112.256797][ T4309] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 112.288219][ T6230] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.305781][ T6236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.331485][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.350711][ T6230] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 112.422019][ T4309] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 112.488957][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.660'. [ 112.572801][ T6242] device bond0 entered promiscuous mode [ 112.598824][ T6242] device bond_slave_0 entered promiscuous mode [ 112.659999][ T6242] device bond_slave_1 entered promiscuous mode [ 112.675148][ T6168] usb 3-1: USB disconnect, device number 6 [ 112.737574][ T6242] device bond0 left promiscuous mode [ 112.756126][ T6242] device bond_slave_0 left promiscuous mode [ 112.805776][ T6242] device bond_slave_1 left promiscuous mode [ 112.920455][ T4254] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.932906][ T6262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.996583][ T6168] kernel write not supported for file /amidi2 (pid: 6168 comm: kworker/1:20) [ 113.127837][ T6273] loop4: detected capacity change from 0 to 8 [ 113.200364][ T4254] usb 6-1: Using ep0 maxpacket: 32 [ 113.322757][ T4254] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.345694][ T4254] usb 6-1: config 0 has no interface number 0 [ 113.373690][ T6276] loop1: detected capacity change from 0 to 4096 [ 113.504466][ T6289] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.530570][ T4254] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.556053][ T4254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.598942][ T4254] usb 6-1: Product: syz [ 113.621673][ T4254] usb 6-1: Manufacturer: syz [ 113.641840][ T4254] usb 6-1: SerialNumber: syz [ 113.658986][ T4254] usb 6-1: config 0 descriptor?? [ 113.721833][ T4254] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.863105][ T6305] loop1: detected capacity change from 0 to 128 [ 113.942301][ T4254] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.959843][ T6313] loop2: detected capacity change from 0 to 1024 [ 113.974410][ T6305] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 114.017467][ T4254] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.058552][ T6305] FAT-fs (loop1): FAT read failed (blocknr 128) [ 114.221894][ T6313] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 114.303831][ T4553] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 114.314834][ T6313] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.347934][ T6313] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm syz.2.680: lblock 3 mapped to illegal pblock 3 (length 3) [ 114.361702][ T6168] usb 6-1: USB disconnect, device number 4 [ 114.380355][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 114.385688][ T6313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 114.395554][ T6168] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.432091][ T6313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.432091][ T6313] [ 114.483011][ T6340] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.680: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.487881][ T6168] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.562302][ T6340] EXT4-fs error (device loop2) in ext4_setattr:5622: Corrupt filesystem [ 114.639621][ T6168] quatech2 6-1:0.51: device disconnected [ 114.873505][ T6353] loop0: detected capacity change from 0 to 4096 [ 115.009482][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 115.054412][ T6312] loop4: detected capacity change from 0 to 32768 [ 115.195543][ T6371] syz.0.687 (6371) used greatest stack depth: 19968 bytes left [ 115.229222][ T6312] JBD2: Ignoring recovery information on journal [ 115.373920][ T6312] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.538406][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 115.825469][ T1325] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.991677][ T6370] loop2: detected capacity change from 0 to 40427 [ 116.001160][ T6403] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 116.017345][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 116.032030][ T6370] F2FS-fs (loop2): invalid crc value [ 116.066165][ T6370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.100825][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 116.146151][ T6370] F2FS-fs (loop2): Start checkpoint disabled! [ 116.188480][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 116.197729][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 116.206070][ T6370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 116.206746][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 116.260865][ T1325] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 116.270358][ T1325] usb 1-1: config 0 has no interface number 0 [ 116.278299][ T1325] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 116.307464][ T1325] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 116.334400][ T1325] usb 1-1: config 0 interface 126 has no altsetting 0 [ 116.428277][ T1223] attempt to access beyond end of device [ 116.428277][ T1223] loop2: rw=2049, want=40976, limit=40427 [ 116.548995][ T6419] loop1: detected capacity change from 0 to 256 [ 116.555699][ T1325] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 116.587915][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.616031][ T6419] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 116.628376][ T1325] usb 1-1: Product: syz [ 116.633015][ T1325] usb 1-1: Manufacturer: syz [ 116.638240][ T1325] usb 1-1: SerialNumber: syz [ 116.676565][ T1325] usb 1-1: config 0 descriptor?? [ 116.705909][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.717626][ T6387] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.719061][ T6413] loop4: detected capacity change from 0 to 32768 [ 116.767057][ T6413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.704 (6413) [ 116.857785][ T6413] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 116.885163][ T6413] BTRFS info (device loop4): turning on sync discard [ 116.909530][ T6413] BTRFS info (device loop4): enabling disk space caching [ 116.917597][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.712'. [ 116.942579][ T6413] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.974856][ T6413] BTRFS info (device loop4): trying to use backup root at mount time [ 117.025444][ T6413] BTRFS info (device loop4): force clearing of disk cache [ 117.050053][ T6432] nbd0: detected capacity change from 0 to 549764202496 [ 117.061903][ T6413] BTRFS info (device loop4): disk space caching is enabled [ 117.069304][ T6413] BTRFS info (device loop4): has skinny extents [ 117.091112][ T4200] block nbd0: Receive control failed (result -104) [ 117.196900][ T1325] ir_usb 1-1:0.126: IR Dongle converter detected [ 117.420526][ T1325] usb 1-1: IRDA class descriptor not found, device not bound [ 117.496394][ T6413] BTRFS info (device loop4): clearing free space tree [ 117.513732][ T6413] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.530684][ T6413] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.639931][ T6474] loop1: detected capacity change from 0 to 64 [ 117.653609][ T4188] usb 1-1: USB disconnect, device number 9 [ 117.682416][ T6478] loop5: detected capacity change from 0 to 256 [ 117.757300][ T6478] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 117.880386][ T6478] exFAT-fs (loop5): error, found bogus dentry(15) beyond unused empty group(0) (start_clu : 7, cur_clu : 7) [ 117.908507][ T6478] exFAT-fs (loop5): Filesystem has been set read-only [ 118.464656][ T6506] loop2: detected capacity change from 0 to 128 [ 118.561679][ T6506] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.644276][ T6506] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.805841][ T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.019960][ T6528] loop4: detected capacity change from 0 to 1024 [ 119.099045][ T6528] EXT4-fs (loop4): Ignoring removed oldalloc option [ 119.099082][ T6528] EXT4-fs (loop4): Ignoring removed bh option [ 119.099105][ T6528] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.171906][ T6528] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 119.291737][ T6542] loop2: detected capacity change from 0 to 1024 [ 119.411309][ T6542] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.455782][ T6546] loop0: detected capacity change from 0 to 512 [ 119.499182][ T6512] loop1: detected capacity change from 0 to 32768 [ 119.526992][ T6550] loop4: detected capacity change from 0 to 512 [ 119.549550][ T6542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 119.680754][ T6542] System zones: 0-1, 3-36 [ 119.691654][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.755480][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.774144][ T6512] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 119.808034][ T6563] loop5: detected capacity change from 0 to 128 [ 119.810177][ T6542] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,max_dir_size_kb=0x0000000000000002,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 119.831974][ T6563] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.849415][ T6550] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.883710][ T6563] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.910968][ T26] audit: type=1800 audit(1764039673.282:13): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.759" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 119.938514][ T6542] EXT4-fs (loop2): shut down requested (2) [ 120.018224][ T26] audit: type=1800 audit(1764039673.282:14): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.759" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 120.100456][ T26] audit: type=1800 audit(1764039673.392:15): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.736" name="file2" dev="loop1" ino=9554 res=0 errno=0 [ 120.138973][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.179438][ T1223] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.215624][ T6568] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 120.266749][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 120.447248][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 120.836069][ T6596] loop5: detected capacity change from 0 to 512 [ 120.899312][ T6597] overlayfs: statfs failed on './file0' [ 120.933429][ T6599] loop4: detected capacity change from 0 to 2048 [ 120.978312][ T6596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.009871][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.405012][ T6582] loop2: detected capacity change from 0 to 32768 [ 121.560679][ T6582] JBD2: Ignoring recovery information on journal [ 121.724247][ T6582] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.798375][ T6617] program syz.5.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.828834][ T6619] loop1: detected capacity change from 0 to 512 [ 121.829401][ T6610] loop4: detected capacity change from 0 to 32768 [ 121.916040][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 122.011712][ T6606] loop0: detected capacity change from 0 to 32768 [ 122.021319][ T6619] EXT4-fs (loop1): first meta block group too large: 16711680 (group descriptor block count 1) [ 122.032399][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 122.185204][ T6630] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 122.194042][ T6606] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 122.359835][ T26] audit: type=1800 audit(1764039675.722:16): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.769" name="file2" dev="loop0" ino=9554 res=0 errno=0 [ 122.639667][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 122.650511][ T6166] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.925200][ T26] audit: type=1326 audit(1764039676.292:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9db3749 code=0x7ffc0000 [ 122.979503][ T26] audit: type=1326 audit(1764039676.322:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6ea9db3749 code=0x7ffc0000 [ 123.073904][ T26] audit: type=1326 audit(1764039676.322:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9db3749 code=0x0 [ 123.090689][ T6166] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 123.135313][ T6166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.157361][ T6657] loop4: detected capacity change from 0 to 256 [ 123.175937][ T6166] usb 6-1: config 0 descriptor?? [ 123.241966][ T6657] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 123.310528][ T6498] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.600423][ T6498] usb 1-1: Using ep0 maxpacket: 8 [ 123.715085][ T6166] cypress 0003:04B4:0001.0008: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 123.751621][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 123.770533][ T6498] usb 1-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.794860][ T6498] usb 1-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.810780][ T6498] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.818549][ T6498] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 123.832176][ T6498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.859697][ T6498] usb 1-1: config 0 descriptor?? [ 123.988774][ T6496] usb 6-1: USB disconnect, device number 5 [ 124.001191][ T6667] loop1: detected capacity change from 0 to 1024 [ 124.103069][ T6672] nbd1: detected capacity change from 0 to 549764202496 [ 124.122727][ T4200] block nbd1: Receive control failed (result -32) [ 124.138874][ T150] block nbd1: Dead connection, failed to find a fallback [ 124.147075][ T150] block nbd1: shutting down sockets [ 124.154294][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.171396][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.202022][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.213058][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.221263][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.232121][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.240206][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.251264][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.261663][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.273203][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.282207][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.293068][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.310977][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.321995][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.331525][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.343142][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.351704][ T4957] ldm_validate_partition_table(): Disk read failed. [ 124.382132][ T6498] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 124.392560][ T6498] holtek 0003:1241:5015.0009: unknown global tag 0xd [ 124.408061][ T6498] holtek 0003:1241:5015.0009: item 0 2 1 13 parsing failed [ 124.410491][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.423564][ T6498] holtek 0003:1241:5015.0009: parse failed [ 124.426141][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.442749][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.453689][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 124.462827][ T4957] Dev nbd1: unable to read RDB block 0 [ 124.481760][ T4957] nbd1: unable to read partition table [ 124.493181][ T6498] holtek: probe of 0003:1241:5015.0009 failed with error -22 [ 124.538928][ T4957] ldm_validate_partition_table(): Disk read failed. [ 124.546583][ T4957] Dev nbd1: unable to read RDB block 0 [ 124.552960][ T4957] nbd1: unable to read partition table [ 124.559228][ T4553] hfsplus: b-tree write err: -5, ino 4 [ 124.573841][ T5211] ldm_validate_partition_table(): Disk read failed. [ 124.608630][ T5211] Dev nbd1: unable to read RDB block 0 [ 124.640859][ T5211] nbd1: unable to read partition table [ 124.658773][ T6498] usb 1-1: USB disconnect, device number 10 [ 124.700396][ T5211] ldm_validate_partition_table(): Disk read failed. [ 124.709160][ T5211] Dev nbd1: unable to read RDB block 0 [ 124.736066][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 124.762407][ T5211] nbd1: unable to read partition table [ 124.873586][ T6685] loop1: detected capacity change from 0 to 256 [ 124.974680][ T6685] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 125.007037][ T6685] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 125.124545][ T6678] loop4: detected capacity change from 0 to 40427 [ 125.170374][ T6498] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 125.205177][ T6698] program syz.1.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.218858][ T6678] F2FS-fs (loop4): invalid crc value [ 125.248659][ T6678] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.381565][ T6678] F2FS-fs (loop4): Start checkpoint disabled! [ 125.411056][ T6678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.570538][ T6498] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.595913][ T6498] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.620752][ T4254] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.636252][ T6498] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.649906][ T4282] attempt to access beyond end of device [ 125.649906][ T4282] loop4: rw=2049, want=40976, limit=40427 [ 125.671667][ T6498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.686282][ T6719] loop1: detected capacity change from 0 to 512 [ 125.880460][ T4254] usb 6-1: Using ep0 maxpacket: 16 [ 125.950775][ T6498] usb 3-1: GET_CAPABILITIES returned 0 [ 125.956681][ T6498] usbtmc 3-1:16.0: can't read capabilities [ 126.000618][ T4254] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.019812][ T4254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.036434][ T4254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.040495][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.047386][ T4254] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.069544][ T4254] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.160004][ T6496] usb 3-1: USB disconnect, device number 7 [ 126.160832][ T4254] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.180239][ T4254] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.188790][ T4254] usb 6-1: Manufacturer: syz [ 126.202319][ T4254] usb 6-1: config 0 descriptor?? [ 126.267622][ T6728] loop1: detected capacity change from 0 to 65 [ 126.283893][ T6728] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 126.390334][ T4188] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.399807][ T6731] loop1: detected capacity change from 0 to 128 [ 126.454251][ T6731] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 126.472259][ T6731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.481878][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.495906][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.506755][ T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 126.516837][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.545994][ T7] usb 1-1: config 0 descriptor?? [ 126.580457][ T4254] rc_core: IR keymap rc-hauppauge not found [ 126.586424][ T4254] Registered IR keymap rc-empty [ 126.593258][ T6734] loop1: detected capacity change from 0 to 4096 [ 126.599775][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.630398][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.650354][ T4188] usb 5-1: Using ep0 maxpacket: 8 [ 126.651774][ T6735] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.666691][ T4254] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 126.706959][ T4254] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 126.727344][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.770483][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.797598][ T6738] MPI: mpi too large (187712 bits) [ 126.810405][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.857258][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.894323][ T6742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.901631][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.941652][ T4188] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 126.960475][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 126.979725][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.995444][ T4188] usb 5-1: Product: syz [ 126.999635][ T4188] usb 5-1: Manufacturer: syz [ 127.011153][ T6746] input: syz1 as /devices/virtual/input/input13 [ 127.015191][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 127.025012][ T4188] usb 5-1: SerialNumber: syz [ 127.044393][ T4188] usb 5-1: config 0 descriptor?? [ 127.056858][ T7] hid-led 0003:04D8:F372.000A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 127.060752][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 127.082753][ T4188] gspca_main: se401-2.14.0 probing 047d:5003 [ 127.102431][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 127.131009][ T4254] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 127.132882][ T7] hid-led 0003:04D8:F372.000A: Greynut Luxafor initialized [ 127.162751][ T4254] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 127.198038][ T4254] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.354146][ T4254] usb 1-1: USB disconnect, device number 11 [ 127.394419][ T6166] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 127.409223][ T6166] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 127.428359][ T6166] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 127.437336][ T6166] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 127.452552][ T6166] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 127.472095][ T6166] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 127.486189][ T6166] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 127.496970][ T6166] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 127.509254][ T6166] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 127.520200][ T6166] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 127.533508][ T4188] gspca_se401: Frame size: 0x0 1/16th janggu [ 127.544544][ T6166] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 127.561741][ T6166] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 127.574423][ T6166] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 127.585351][ T6166] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 127.597134][ T6166] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 127.605871][ T6166] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 127.618182][ T6166] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 127.627975][ T6166] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 127.660469][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.695224][ T6768] loop1: detected capacity change from 0 to 128 [ 127.741631][ T4188] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 127.768367][ T4188] usb 5-1: USB disconnect, device number 7 [ 127.920466][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 128.050668][ T7] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 128.089117][ T7] usb 3-1: config 0 has no interface number 0 [ 128.109986][ T6783] loop0: detected capacity change from 0 to 1024 [ 128.110946][ T7] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 128.166999][ T7] usb 3-1: config 0 interface 196 has no altsetting 0 [ 128.250565][ T6787] tipc: Started in network mode [ 128.259707][ T6787] tipc: Node identity ac14140f, cluster identity 4711 [ 128.271175][ T6787] tipc: New replicast peer: 255.255.255.255 [ 128.279054][ T6787] tipc: Enabled bearer , priority 10 [ 128.288708][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 128.298225][ T6787] tipc: Disabling bearer [ 128.387915][ T6498] usb 6-1: USB disconnect, device number 6 [ 128.394096][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 128.420468][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.428536][ T7] usb 3-1: Product: syz [ 128.435771][ T7] usb 3-1: Manufacturer: syz [ 128.445681][ T7] usb 3-1: SerialNumber: syz [ 128.464820][ T7] usb 3-1: config 0 descriptor?? [ 128.500833][ T6760] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.633375][ T6811] loop0: detected capacity change from 0 to 256 [ 128.659919][ T6813] loop5: detected capacity change from 0 to 128 [ 128.684184][ T6811] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.701046][ T6811] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 128.716556][ T6811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 128.765563][ T6813] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 128.785519][ T6813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.809091][ T6813] [U] [ 128.817842][ T6813] [U] [ 128.821967][ T6813] [U] \N.Z9QZ׎ۤ!QH'ݝ͎ [ 128.834098][ T6813] [U] L [ 128.837876][ T6813] [U] $GETPRYEJGM)GWE9U_OZCV?ϛ\9:_%SA3KC2:0PW>VĩC2BJɱ [ 128.868987][ T6813] [U] S,̛K,;#ݻɚY~CI{\'1Q'V۹ -ɃLW2=6Ή{AE\۳'էIFXGFBCWY/֤~3B? 6>ICSAɱEŴ ҖF;ʱW ۛ;O_Oߟ,I=۞^Ֆ~[L+Q~;LOH؄FV\M«߷E-,ֿ?ROT&Ȳ=ΦƜ:$ǯ]͒ AD9=Z&7VۿVÿ#;J[D;UJL,%KŧF&RBO6SЁL,TE.̳ڕ.?UJ;JRO,KTW>U]FOݴP~~?XZƩ٤ڿY}1 [ 128.920806][ T6813] [U] 8Rԅ֪DNX HGX [ 128.925279][ T6813] [U] [ 128.927977][ T6813] [U] [ 128.930673][ T6813] [U] [ 129.012780][ T7] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 129.081357][ T6813] [U] [ 129.084094][ T6813] [U] [ 129.086798][ T6813] [U] [ 129.112434][ T6812] [U] [ 129.345356][ T6837] loop5: detected capacity change from 0 to 512 [ 129.511491][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 129.570438][ T6837] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.625706][ T4254] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.638069][ T6857] loop4: detected capacity change from 0 to 256 [ 129.739103][ T6857] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 129.890390][ T4254] usb 1-1: Using ep0 maxpacket: 8 [ 130.010451][ T4254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.032562][ T4254] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.054379][ T4254] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.116075][ T4254] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 130.156006][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.193835][ T6498] usb 3-1: USB disconnect, device number 8 [ 130.222351][ T6884] loop5: detected capacity change from 0 to 256 [ 130.232589][ T4254] usb 1-1: config 0 descriptor?? [ 130.260042][ T6884] exfat: Deprecated parameter 'utf8' [ 130.298186][ T6884] exfat: Deprecated parameter 'namecase' [ 130.372561][ T6884] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 130.390232][ T6498] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 130.455663][ T26] audit: type=1804 audit(1764039683.822:20): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.880" name="/newroot/67/file0/file1" dev="loop5" ino=1048641 res=1 errno=0 [ 130.672987][ T6867] loop1: detected capacity change from 0 to 32768 [ 130.692319][ T6905] loop5: detected capacity change from 0 to 128 [ 130.703777][ T4254] hid-retrode 0003:0403:97C1.000B: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 130.727805][ T6905] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.735571][ T6909] loop4: detected capacity change from 0 to 256 [ 130.787447][ T6905] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.797601][ T6909] exfat: Deprecated parameter 'utf8' [ 130.814384][ T6909] exfat: Deprecated parameter 'utf8' [ 130.824753][ T6909] exfat: Deprecated parameter 'utf8' [ 130.847264][ T6867] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.864534][ T6909] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 130.909344][ T6168] usb 1-1: USB disconnect, device number 12 [ 130.971209][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 130.994004][ T6919] loop2: detected capacity change from 0 to 512 [ 131.156242][ T6927] fido_id[6927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.166758][ T6929] loop5: detected capacity change from 0 to 512 [ 131.294391][ T6929] EXT4-fs (loop5): Ignoring removed orlov option [ 131.325764][ T6929] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 131.339881][ T6936] loop1: detected capacity change from 0 to 64 [ 131.428174][ T6945] loop2: detected capacity change from 0 to 128 [ 131.487245][ T6929] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.893: corrupted in-inode xattr [ 131.514329][ T6945] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 131.538930][ T6929] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.893: couldn't read orphan inode 15 (err -117) [ 131.556844][ T6929] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none. [ 131.681049][ T6496] kernel write not supported for file /dsp (pid: 6496 comm: kworker/0:15) [ 131.725578][ T6945] FAT-fs (loop2): FAT read failed (blocknr 128) [ 131.854579][ T6970] loop0: detected capacity change from 0 to 512 [ 131.877698][ T4566] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.091021][ T6970] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.146243][ T6970] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.904: No space for directory leaf checksum. Please run e2fsck -D. [ 132.175796][ T6970] EXT4-fs error (device loop0): ext4_readdir:223: inode #2: comm syz.0.904: path (unknown): directory fails checksum at offset 0 [ 132.199470][ T6994] loop1: detected capacity change from 0 to 256 [ 132.314112][ T26] audit: type=1326 audit(1764039685.682:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea9db3749 code=0x7ffc0000 [ 132.345416][ T7000] loop2: detected capacity change from 0 to 512 [ 132.383650][ T7001] loop4: detected capacity change from 0 to 512 [ 132.436280][ T26] audit: type=1326 audit(1764039685.682:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ea9db3749 code=0x7ffc0000 [ 132.492527][ T7001] EXT4-fs (loop4): Ignoring removed orlov option [ 132.501182][ T7000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.501299][ T26] audit: type=1326 audit(1764039685.682:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ea9db3783 code=0x7ffc0000 [ 132.529770][ T26] audit: type=1326 audit(1764039685.682:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ea9db21ff code=0x7ffc0000 [ 132.548154][ T7004] loop5: detected capacity change from 0 to 128 [ 132.551891][ T26] audit: type=1326 audit(1764039685.682:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6ea9db37d7 code=0x7ffc0000 [ 132.579100][ T7010] loop0: detected capacity change from 0 to 8 [ 132.582203][ T26] audit: type=1326 audit(1764039685.682:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ea9db1f90 code=0x7ffc0000 [ 132.602437][ T7000] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.917: bad orphan inode 13 [ 132.620445][ T7001] EXT4-fs (loop4): bad block size 65536 [ 132.626198][ T26] audit: type=1326 audit(1764039685.682:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ea9db334b code=0x7ffc0000 [ 132.662494][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.669019][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.669316][ T26] audit: type=1326 audit(1764039685.732:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ea9db23aa code=0x7ffc0000 [ 132.702711][ T7000] ext4_test_bit(bit=12, block=18) = 1 [ 132.708108][ T7000] is_bad_inode(inode)=0 [ 132.726687][ T7015] loop1: detected capacity change from 0 to 512 [ 132.733136][ T7000] NEXT_ORPHAN(inode)=2130706432 [ 132.738084][ T7000] max_ino=32 [ 132.765781][ T7004] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 132.780364][ T7000] i_nlink=1 [ 132.788418][ T7000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.814907][ T7010] SQUASHFS error: Failed to read block 0x260685: -5 [ 132.826875][ T26] audit: type=1326 audit(1764039685.732:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.2.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ea9db23aa code=0x7ffc0000 [ 132.867182][ T7015] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 132.870567][ T7010] SQUASHFS error: Unable to read metadata cache entry [260685] [ 132.913616][ T7015] EXT4-fs (loop1): Ignoring removed nobh option [ 132.919918][ T7015] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 132.934995][ T7000] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 132.956421][ T7010] SQUASHFS error: Unable to read directory block [260685:0] [ 132.989775][ T7015] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 133.079159][ T7004] FAT-fs (loop5): FAT read failed (blocknr 128) [ 133.113601][ T7000] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 133.219895][ T7024] loop4: detected capacity change from 0 to 4096 [ 133.248449][ T7028] loop0: detected capacity change from 0 to 512 [ 133.345006][ T7024] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.390711][ T4282] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 133.408078][ T7028] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.539613][ T7037] loop2: detected capacity change from 0 to 128 [ 133.562341][ T7028] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.678190][ T7028] EXT4-fs (loop0): 1 truncate cleaned up [ 133.738455][ T7028] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 133.793735][ T7024] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.856260][ T7037] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 133.888798][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 134.077318][ T4186] sysv_free_block: trying to free block not in datazone [ 134.120478][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 134.505123][ T7065] loop4: detected capacity change from 0 to 64 [ 134.538410][ T7051] loop1: detected capacity change from 0 to 32768 [ 134.568527][ T7070] loop0: detected capacity change from 0 to 128 [ 134.644992][ T7051] jfs_readdir called with invalid offset! [ 134.667039][ T7070] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 134.805304][ T7070] FAT-fs (loop0): FAT read failed (blocknr 128) [ 135.088557][ T7084] loop1: detected capacity change from 0 to 4096 [ 135.099167][ T144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 135.232741][ T7084] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.291962][ T7084] ntfs3: loop1: Failed to load $Extend. [ 135.325358][ T7093] loop0: detected capacity change from 0 to 1024 [ 135.488009][ T7093] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 135.505958][ T7093] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.530067][ T7093] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.949: lblock 3 mapped to illegal pblock 3 (length 3) [ 135.578595][ T7093] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 135.664376][ T7093] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.664376][ T7093] [ 135.730916][ T7108] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.949: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 135.844391][ T7108] EXT4-fs error (device loop0) in ext4_setattr:5622: Corrupt filesystem [ 135.967268][ T7127] mmap: syz.5.965 (7127) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 136.045557][ T7131] loop1: detected capacity change from 0 to 512 [ 136.106180][ T7131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.178604][ T7131] EXT4-fs (loop1): 1 truncate cleaned up [ 136.184946][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 136.535189][ T7160] loop5: detected capacity change from 0 to 256 [ 136.866513][ T7171] netlink: 165 bytes leftover after parsing attributes in process `syz.2.987'. [ 136.895915][ T7175] loop5: detected capacity change from 0 to 512 [ 136.925590][ T7175] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.010169][ T7175] EXT4-fs (loop5): 1 truncate cleaned up [ 137.041412][ T7175] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 137.563148][ T7158] loop0: detected capacity change from 0 to 32768 [ 137.610805][ T7198] loop4: detected capacity change from 0 to 256 [ 137.648580][ T1223] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.826547][ T7158] XFS (loop0): Mounting V5 Filesystem [ 137.928410][ T7158] XFS (loop0): Ending clean mount [ 138.111300][ T7183] loop2: detected capacity change from 0 to 32768 [ 138.161377][ T4184] XFS (loop0): Unmounting Filesystem [ 138.178666][ T7183] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.991 (7183) [ 138.280303][ T7183] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 138.344662][ T7183] BTRFS info (device loop2): using free space tree [ 138.363678][ T7183] BTRFS info (device loop2): has skinny extents [ 138.561743][ T7217] loop4: detected capacity change from 0 to 32768 [ 138.608089][ T7206] loop1: detected capacity change from 0 to 32768 [ 138.619192][ T7217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1003 (7217) [ 138.709192][ T7217] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 138.717981][ T7217] BTRFS info (device loop4): setting nodatacow, compression disabled [ 138.726170][ T7217] BTRFS info (device loop4): enabling auto defrag [ 138.732687][ T7217] BTRFS info (device loop4): max_inline at 0 [ 138.738683][ T7217] BTRFS info (device loop4): using free space tree [ 138.745380][ T7217] BTRFS info (device loop4): has skinny extents [ 138.919560][ T7183] BTRFS info (device loop2): enabling ssd optimizations [ 139.087614][ T7260] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 139.136350][ T7261] loop1: detected capacity change from 0 to 1024 [ 139.323291][ T7261] hfsplus: bad catalog entry type [ 139.700733][ T4188] Bluetooth: hci5: command 0x1003 tx timeout [ 139.712213][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 139.899232][ T7282] loop0: detected capacity change from 0 to 512 [ 139.951329][ T7282] EXT4-fs (loop0): Ignoring removed oldalloc option [ 139.959871][ T4282] hfsplus: b-tree write err: -5, ino 4 [ 139.970206][ T7282] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 139.974752][ T7290] loop2: detected capacity change from 0 to 512 [ 140.005027][ T7282] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.015343][ T7282] __quota_error: 11 callbacks suppressed [ 140.015361][ T7282] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 140.051733][ T7282] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 140.082863][ T7290] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.114175][ T7282] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1009: Failed to acquire dquot type 1 [ 140.177360][ T7290] EXT4-fs (loop2): 1 truncate cleaned up [ 140.195605][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 140.225658][ T7282] EXT4-fs (loop0): 1 truncate cleaned up [ 140.232013][ T7282] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 140.430454][ T7282] EXT4-fs (loop0): Ignoring removed orlov option [ 140.436977][ T7282] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 140.448114][ T7282] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 140.485527][ T7282] EXT4-fs error (device loop0): ext4_remount:6035: comm syz.0.1009: Abort forced by user [ 140.496768][ T7282] EXT4-fs (loop0): Remounting filesystem read-only [ 140.504108][ T7282] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 140.520735][ T7282] ext4 filesystem being remounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.649984][ T7307] loop4: detected capacity change from 0 to 256 [ 140.689943][ T26] audit: type=1326 audit(1764039694.052:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96735749 code=0x7ffc0000 [ 140.702076][ T7311] loop0: detected capacity change from 0 to 512 [ 140.722539][ T26] audit: type=1326 audit(1764039694.052:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96735749 code=0x7ffc0000 [ 140.752560][ T7307] exfat: Deprecated parameter 'namecase' [ 140.752970][ T26] audit: type=1326 audit(1764039694.062:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee96735749 code=0x7ffc0000 [ 140.758895][ T7307] exfat: Deprecated parameter 'namecase' [ 140.780996][ T26] audit: type=1326 audit(1764039694.062:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee96735783 code=0x7ffc0000 [ 140.811026][ T26] audit: type=1326 audit(1764039694.062:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee967341ff code=0x7ffc0000 [ 140.843710][ T7307] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 140.858752][ T7311] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.886855][ T7311] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1012: bad orphan inode 13 [ 140.915726][ T26] audit: type=1326 audit(1764039694.072:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fee967357d7 code=0x7ffc0000 [ 140.923621][ T7316] loop2: detected capacity change from 0 to 1024 [ 140.956523][ T7311] ext4_test_bit(bit=12, block=18) = 1 [ 140.981153][ T7311] is_bad_inode(inode)=0 [ 140.985797][ T7311] NEXT_ORPHAN(inode)=2130706432 [ 140.990775][ T7311] max_ino=32 [ 140.993983][ T7311] i_nlink=1 [ 140.997370][ T7311] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.010660][ T26] audit: type=1326 audit(1764039694.072:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee96733f90 code=0x7ffc0000 [ 141.044040][ T7316] hfsplus: invalid length 32517 has been corrected to 255 [ 141.050345][ T26] audit: type=1326 audit(1764039694.072:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee9673534b code=0x7ffc0000 [ 141.097229][ T7316] hfsplus: invalid length 32517 has been corrected to 255 [ 141.101912][ T7311] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 141.131361][ T7319] tap0: tun_chr_ioctl cmd 1074812118 [ 141.158936][ T7311] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 141.603247][ T7338] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1028'. [ 141.769293][ T7348] loop2: detected capacity change from 0 to 2048 [ 141.780426][ T6166] Bluetooth: hci5: command 0x1001 tx timeout [ 141.787997][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 141.822114][ T7348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.929457][ T7355] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 141.950012][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.976123][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.992433][ T7355] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 142.100171][ T7353] loop1: detected capacity change from 0 to 32768 [ 142.210317][ T7356] loop4: detected capacity change from 0 to 32768 [ 142.233049][ T7353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1035 (7353) [ 142.280620][ T7353] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 142.289822][ T7353] BTRFS info (device loop1): using free space tree [ 142.296777][ T7353] BTRFS info (device loop1): has skinny extents [ 142.328268][ T7356] [ 142.328268][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.328268][ T7356] [ 142.360105][ T7356] [ 142.360105][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.360105][ T7356] [ 142.371137][ T7356] [ 142.371137][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.371137][ T7356] [ 142.381730][ T7356] [ 142.381730][ T7356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.381730][ T7356] [ 142.429983][ T276] [ 142.429983][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.429983][ T276] [ 142.501711][ T4185] [ 142.501711][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.501711][ T4185] [ 142.536198][ T4185] [ 142.536198][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.536198][ T4185] [ 142.653892][ T7366] loop0: detected capacity change from 0 to 32768 [ 142.800386][ T7366] [ 142.800386][ T7366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.800386][ T7366] [ 142.807446][ T7361] loop2: detected capacity change from 0 to 40427 [ 142.840477][ T7353] BTRFS info (device loop1): enabling ssd optimizations [ 142.877839][ T7366] ERROR: (device loop0): diWrite: ixpxd invalid [ 142.877839][ T7366] [ 142.891924][ T7366] ERROR: (device loop0): txCommit: [ 142.891924][ T7366] [ 142.960748][ T7361] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 143.030488][ T4184] [ 143.030488][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.030488][ T4184] [ 143.048553][ T7361] F2FS-fs (loop2): invalid crc value [ 143.107661][ T7361] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.120193][ T4184] [ 143.120193][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.120193][ T4184] [ 143.246354][ T7391] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1042'. [ 143.262848][ T7361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.271677][ T5211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5211) [ 143.516180][ T4186] attempt to access beyond end of device [ 143.516180][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 143.580779][ T7398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'. [ 143.860607][ T6157] Bluetooth: hci5: command 0x1009 tx timeout [ 144.213337][ T7399] loop4: detected capacity change from 0 to 32768 [ 144.251905][ T7396] loop0: detected capacity change from 0 to 32768 [ 144.303431][ T7399] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1045 (7399) [ 144.327118][ T7401] loop1: detected capacity change from 0 to 32768 [ 144.378692][ T7399] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 144.420465][ T7399] BTRFS info (device loop4): enabling auto defrag [ 144.426974][ T7399] BTRFS info (device loop4): force clearing of disk cache [ 144.464106][ T7399] BTRFS info (device loop4): enabling disk space caching [ 144.487797][ T7399] BTRFS info (device loop4): max_inline at 0 [ 144.520397][ T7399] BTRFS info (device loop4): disk space caching is enabled [ 144.535369][ T7399] BTRFS info (device loop4): has skinny extents [ 144.622061][ T7415] loop1: detected capacity change from 0 to 512 [ 144.658825][ T7405] loop2: detected capacity change from 0 to 32768 [ 144.705735][ T7415] EXT4-fs (loop1): Ignoring removed oldalloc option [ 144.748440][ T7405] JBD2: Ignoring recovery information on journal [ 144.761710][ T7415] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 144.785397][ T7415] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.813797][ T7415] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1051: Failed to acquire dquot type 1 [ 144.845052][ T7399] BTRFS info (device loop4): enabling ssd optimizations [ 144.848188][ T7405] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.865447][ T7399] BTRFS info (device loop4): clearing free space tree [ 144.873668][ T7399] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.889730][ T7399] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.907308][ T7415] EXT4-fs (loop1): 1 truncate cleaned up [ 144.949351][ T7415] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 145.056552][ T7415] EXT4-fs (loop1): Ignoring removed orlov option [ 145.096848][ T7415] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 145.146794][ T7415] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 145.216777][ T7415] EXT4-fs error (device loop1): ext4_remount:6035: comm syz.1.1051: Abort forced by user [ 145.245916][ T7415] EXT4-fs (loop1): Remounting filesystem read-only [ 145.275225][ T7415] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 145.343806][ T7415] ext4 filesystem being remounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.449441][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 145.530166][ T7442] netlink: 'syz.0.1057': attribute type 15 has an invalid length. [ 145.551501][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 145.570687][ T7442] bond0: option resend_igmp: invalid value (65535) [ 145.590523][ T7442] bond0: option resend_igmp: allowed values 0 - 255 [ 146.011570][ T7461] loop1: detected capacity change from 0 to 512 [ 146.076745][ T7461] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 146.119590][ T7461] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.150398][ T6495] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.258887][ T7461] __quota_error: 18 callbacks suppressed [ 146.258907][ T7461] Quota error (device loop1): find_block_dqentry: Quota for id 62708 referenced but not present [ 146.263101][ T7463] loop2: detected capacity change from 0 to 32768 [ 146.268318][ T7461] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 62708 [ 146.293306][ T7461] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1064: Failed to acquire dquot type 0 [ 146.339548][ T7463] JFS: Invalid stbl[0] = -1 for inode 2, block = 0 [ 146.530478][ T6495] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 146.538785][ T6495] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 146.547724][ T6495] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 146.558604][ T6495] usb 1-1: config 220 has no interface number 2 [ 146.564960][ T6495] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 146.578134][ T6495] usb 1-1: config 220 interface 0 has no altsetting 0 [ 146.584986][ T6495] usb 1-1: config 220 interface 76 has no altsetting 0 [ 146.592177][ T6495] usb 1-1: config 220 interface 1 has no altsetting 0 [ 146.750729][ T6495] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 146.760235][ T6495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.768344][ T6495] usb 1-1: Product: syz [ 146.772707][ T6495] usb 1-1: Manufacturer: syz [ 146.777301][ T6495] usb 1-1: SerialNumber: syz [ 146.819961][ T7471] loop4: detected capacity change from 0 to 256 [ 146.835051][ T7473] loop1: detected capacity change from 0 to 512 [ 146.905947][ T7473] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.929825][ T7473] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.953927][ T7471] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.981655][ T7471] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 147.020933][ T7471] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 147.069802][ T7479] [ 147.072154][ T7479] ====================================================== [ 147.079170][ T7479] WARNING: possible circular locking dependency detected [ 147.086284][ T7479] syzkaller #0 Not tainted [ 147.090704][ T7479] ------------------------------------------------------ [ 147.097710][ T7479] syz.1.1077/7479 is trying to acquire lock: [ 147.103685][ T7479] ffff88805c07e5e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 147.112577][ T7479] [ 147.112577][ T7479] but task is already holding lock: [ 147.119938][ T7479] ffff8880606cf020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 147.129438][ T7479] [ 147.129438][ T7479] which lock already depends on the new lock. [ 147.129438][ T7479] [ 147.139842][ T7479] [ 147.139842][ T7479] the existing dependency chain (in reverse order) is: [ 147.148954][ T7479] [ 147.148954][ T7479] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 147.150673][ T6495] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 147.156789][ T7479] down_read+0x44/0x2e0 [ 147.156816][ T7479] ext4_map_blocks+0x32f/0x1b30 [ 147.156833][ T7479] ext4_getblk+0x16d/0x630 [ 147.171759][ T6495] usb 1-1: No valid video chain found. [ 147.173258][ T7479] ext4_bread+0x26/0x180 [ 147.173283][ T7479] ext4_quota_write+0x230/0x570 [ 147.178361][ T6495] usb 1-1: selecting invalid altsetting 0 [ 147.183644][ T7479] get_free_dqblk+0x387/0x7d0 [ 147.183672][ T7479] do_insert_tree+0x214/0x1970 [ 147.183688][ T7479] do_insert_tree+0x5b1/0x1970 [ 147.183705][ T7479] do_insert_tree+0x5b1/0x1970 [ 147.183721][ T7479] do_insert_tree+0x5b1/0x1970 [ 147.183737][ T7479] qtree_write_dquot+0x361/0x4b0 [ 147.231325][ T7479] v2_write_dquot+0x108/0x190 [ 147.236538][ T7479] dquot_acquire+0x2d5/0x520 [ 147.241659][ T7479] ext4_acquire_dquot+0x2d9/0x4a0 [ 147.247215][ T7479] dqget+0x778/0xeb0 [ 147.251635][ T7479] __dquot_initialize+0x3b6/0xcb0 [ 147.257176][ T7479] ext4_process_orphan+0x54/0x300 [ 147.262762][ T7479] ext4_orphan_cleanup+0xaa9/0x12e0 [ 147.268484][ T7479] ext4_fill_super+0x92f0/0x9a60 [ 147.273939][ T7479] mount_bdev+0x287/0x3c0 [ 147.278776][ T7479] legacy_get_tree+0xe6/0x180 [ 147.283961][ T7479] vfs_get_tree+0x88/0x270 [ 147.288884][ T7479] do_new_mount+0x24a/0xa40 [ 147.293893][ T7479] __se_sys_mount+0x2d6/0x3c0 [ 147.299074][ T7479] do_syscall_64+0x4c/0xa0 [ 147.303995][ T7479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.310409][ T7479] [ 147.310409][ T7479] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 147.318480][ T7479] down_read+0x44/0x2e0 [ 147.323164][ T7479] v2_read_dquot+0x4a/0x110 [ 147.328314][ T7479] dquot_acquire+0x152/0x520 [ 147.333442][ T7479] ext4_acquire_dquot+0x2d9/0x4a0 [ 147.339183][ T7479] dqget+0x778/0xeb0 [ 147.343592][ T7479] __dquot_initialize+0x3b6/0xcb0 [ 147.349136][ T7479] ext4_process_orphan+0x54/0x300 [ 147.354665][ T7479] ext4_orphan_cleanup+0xaa9/0x12e0 [ 147.360366][ T7479] ext4_fill_super+0x92f0/0x9a60 [ 147.365807][ T7479] mount_bdev+0x287/0x3c0 [ 147.370843][ T7479] legacy_get_tree+0xe6/0x180 [ 147.376073][ T7479] vfs_get_tree+0x88/0x270 [ 147.381016][ T7479] do_new_mount+0x24a/0xa40 [ 147.386026][ T7479] __se_sys_mount+0x2d6/0x3c0 [ 147.391292][ T7479] do_syscall_64+0x4c/0xa0 [ 147.396249][ T7479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.402767][ T7479] [ 147.402767][ T7479] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 147.410401][ T7479] __lock_acquire+0x2c33/0x7c60 [ 147.415782][ T7479] lock_acquire+0x197/0x3f0 [ 147.420803][ T7479] __mutex_lock_common+0x1eb/0x2390 [ 147.426545][ T7479] mutex_lock_nested+0x17/0x20 [ 147.431829][ T7479] dquot_commit+0x5a/0x410 [ 147.436768][ T7479] ext4_write_dquot+0x1f0/0x360 [ 147.442320][ T7479] mark_all_dquot_dirty+0xf9/0x400 [ 147.447955][ T7479] __dquot_alloc_space+0x5d0/0xe20 [ 147.453750][ T7479] ext4_mb_new_blocks+0xf68/0x4940 [ 147.459372][ T7479] ext4_ext_map_blocks+0x191a/0x6650 [ 147.465170][ T7479] ext4_map_blocks+0x981/0x1b30 [ 147.470744][ T7479] ext4_getblk+0x16d/0x630 [ 147.475682][ T7479] ext4_bread+0x26/0x180 [ 147.480798][ T7479] ext4_append+0x2c3/0x560 [ 147.485850][ T7479] ext4_init_new_dir+0x2a2/0x940 [ 147.491741][ T7479] ext4_mkdir+0x47d/0xc50 [ 147.496585][ T7479] vfs_mkdir+0x387/0x570 [ 147.501348][ T7479] do_mkdirat+0x1d7/0x5a0 [ 147.506200][ T7479] __x64_sys_mkdirat+0x85/0x90 [ 147.511468][ T7479] do_syscall_64+0x4c/0xa0 [ 147.516390][ T7479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.522784][ T7479] [ 147.522784][ T7479] other info that might help us debug this: [ 147.522784][ T7479] [ 147.532994][ T7479] Chain exists of: [ 147.532994][ T7479] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 147.532994][ T7479] [ 147.546833][ T7479] Possible unsafe locking scenario: [ 147.546833][ T7479] [ 147.554275][ T7479] CPU0 CPU1 [ 147.559634][ T7479] ---- ---- [ 147.564974][ T7479] lock(&ei->i_data_sem/2); [ 147.569563][ T7479] lock(&s->s_dquot.dqio_sem); [ 147.576913][ T7479] lock(&ei->i_data_sem/2); [ 147.584006][ T7479] lock(&dquot->dq_lock); [ 147.588403][ T7479] [ 147.588403][ T7479] *** DEADLOCK *** [ 147.588403][ T7479] [ 147.596520][ T7479] 4 locks held by syz.1.1077/7479: [ 147.601610][ T7479] #0: ffff888059f3e460 (sb_writers#5){++++}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 147.610744][ T7479] #1: ffff88805c072bd0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 147.621345][ T7479] #2: ffff8880606cf020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 147.631339][ T7479] #3: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 147.640365][ T7479] [ 147.640365][ T7479] stack backtrace: [ 147.646237][ T7479] CPU: 1 PID: 7479 Comm: syz.1.1077 Not tainted syzkaller #0 [ 147.653585][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.663624][ T7479] Call Trace: [ 147.666885][ T7479] [ 147.669799][ T7479] dump_stack_lvl+0x168/0x230 [ 147.674464][ T7479] ? load_image+0x3b0/0x3b0 [ 147.678951][ T7479] ? show_regs_print_info+0x20/0x20 [ 147.684137][ T7479] ? print_circular_bug+0x12b/0x1a0 [ 147.689314][ T7479] check_noncircular+0x274/0x310 [ 147.694233][ T7479] ? add_chain_block+0x940/0x940 [ 147.699149][ T7479] ? lockdep_lock+0xdc/0x1e0 [ 147.703732][ T7479] ? mark_lock+0x94/0x320 [ 147.708043][ T7479] __lock_acquire+0x2c33/0x7c60 [ 147.712874][ T7479] ? hlock_conflict+0x59/0x1f0 [ 147.717625][ T7479] ? check_noncircular+0x16f/0x310 [ 147.722715][ T7479] ? add_chain_block+0x940/0x940 [ 147.727630][ T7479] ? lockdep_lock+0xdc/0x1e0 [ 147.732213][ T7479] ? verify_lock_unused+0x140/0x140 [ 147.737391][ T7479] ? lockdep_unlock+0x134/0x2d0 [ 147.742222][ T7479] ? lockdep_lock+0x1e0/0x1e0 [ 147.746881][ T7479] ? check_noncircular+0x16f/0x310 [ 147.751991][ T7479] ? mark_lock+0x94/0x320 [ 147.756303][ T7479] ? __lock_acquire+0x13ad/0x7c60 [ 147.761314][ T7479] lock_acquire+0x197/0x3f0 [ 147.765798][ T7479] ? dquot_commit+0x5a/0x410 [ 147.770373][ T7479] ? __might_sleep+0xf0/0xf0 [ 147.774942][ T7479] ? read_lock_is_recursive+0x10/0x10 [ 147.780300][ T7479] ? dquot_commit+0x5a/0x410 [ 147.784872][ T7479] __mutex_lock_common+0x1eb/0x2390 [ 147.790051][ T7479] ? dquot_commit+0x5a/0x410 [ 147.794625][ T7479] ? __might_sleep+0xf0/0xf0 [ 147.799279][ T7479] ? mutex_lock_io_nested+0x60/0x60 [ 147.804462][ T7479] mutex_lock_nested+0x17/0x20 [ 147.809206][ T7479] dquot_commit+0x5a/0x410 [ 147.813606][ T7479] ? __ext4_journal_start_sb+0x1bd/0x360 [ 147.819222][ T7479] ext4_write_dquot+0x1f0/0x360 [ 147.824057][ T7479] mark_all_dquot_dirty+0xf9/0x400 [ 147.829155][ T7479] __dquot_alloc_space+0x5d0/0xe20 [ 147.834252][ T7479] ext4_mb_new_blocks+0xf68/0x4940 [ 147.839365][ T7479] ? ext4_mb_pa_callback+0xd0/0xd0 [ 147.844461][ T7479] ? ext4_ext_check_overlap+0x15f/0x560 [ 147.849990][ T7479] ? ext4_inode_to_goal_block+0x313/0x450 [ 147.855692][ T7479] ext4_ext_map_blocks+0x191a/0x6650 [ 147.860958][ T7479] ? kasan_quarantine_put+0xd4/0x220 [ 147.866243][ T7479] ? ext4_ext_release+0x10/0x10 [ 147.871076][ T7479] ? rwsem_write_trylock+0x12f/0x1b0 [ 147.876344][ T7479] ? ext4_es_lookup_extent+0x60a/0xa00 [ 147.881789][ T7479] ext4_map_blocks+0x981/0x1b30 [ 147.886619][ T7479] ? ext4_map_blocks+0x55d/0x1b30 [ 147.891627][ T7479] ? ext4_issue_zeroout+0x250/0x250 [ 147.896820][ T7479] ? ext4_map_blocks+0x6a2/0x1b30 [ 147.901827][ T7479] ext4_getblk+0x16d/0x630 [ 147.906228][ T7479] ? ext4_get_block_unwritten+0x30/0x30 [ 147.911755][ T7479] ? __brelse+0x55/0x90 [ 147.915891][ T7479] ext4_bread+0x26/0x180 [ 147.920113][ T7479] ext4_append+0x2c3/0x560 [ 147.924511][ T7479] ? ext4_init_new_dir+0x940/0x940 [ 147.929605][ T7479] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 147.935311][ T7479] ext4_init_new_dir+0x2a2/0x940 [ 147.940243][ T7479] ext4_mkdir+0x47d/0xc50 [ 147.944560][ T7479] ? ext4_symlink+0xcc0/0xcc0 [ 147.949221][ T7479] ? inode_permission+0xef/0x480 [ 147.954149][ T7479] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 147.959175][ T7479] ? security_inode_mkdir+0xb3/0x100 [ 147.964443][ T7479] vfs_mkdir+0x387/0x570 [ 147.968673][ T7479] do_mkdirat+0x1d7/0x5a0 [ 147.972984][ T7479] ? vfs_mkdir+0x570/0x570 [ 147.977380][ T7479] ? getname_flags+0x1fe/0x500 [ 147.982125][ T7479] __x64_sys_mkdirat+0x85/0x90 [ 147.986869][ T7479] do_syscall_64+0x4c/0xa0 [ 147.991269][ T7479] ? clear_bhb_loop+0x30/0x80 [ 147.995925][ T7479] ? clear_bhb_loop+0x30/0x80 [ 148.000589][ T7479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.006467][ T7479] RIP: 0033:0x7fc17628d749 [ 148.010862][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.030449][ T7479] RSP: 002b:00007fc1744d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 148.038842][ T7479] RAX: ffffffffffffffda RBX: 00007fc1764e4090 RCX: 00007fc17628d749 [ 148.046793][ T7479] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 148.054744][ T7479] RBP: 00007fc176311f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.062695][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=75460 recv=15484 n=-1 (errno 104: Connection reset by peer) [ 148.070644][ T7479] R13: 00007fc1764e4128 R14: 00007fc1764e4090 R15: 00007ffedda5d2a8 [ 148.078606][ T7479] [ 148.083365][ T6495] usb 1-1: selecting invalid altsetting 0 [ 148.089106][ T6495] usbtest: probe of 1-1:220.1 failed with error -22 [ 148.096444][ T263] block nbd0: Possible stuck request ffff8880210e8000: control (read@0,4096B). Runtime 30 seconds [ 148.120382][ T6495] usb 1-1: USB disconnect, device number 13 [ 148.547175][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.713728][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.809562][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.863298][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.479274][ T144] device hsr_slave_0 left promiscuous mode [ 149.485931][ T144] device hsr_slave_1 left promiscuous mode [ 149.492317][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.499729][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.510599][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.518365][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.526227][ T144] device bridge_slave_1 left promiscuous mode [ 149.532458][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.540195][ T144] device bridge_slave_0 left promiscuous mode [ 149.546536][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.555622][ T144] device veth1_macvtap left promiscuous mode [ 149.561833][ T144] device veth0_macvtap left promiscuous mode [ 149.567866][ T144] device veth1_vlan left promiscuous mode [ 149.573707][ T144] device veth0_vlan left promiscuous mode [ 149.649453][ T144] team0 (unregistering): Port device team_slave_1 removed [ 149.661008][ T144] team0 (unregistering): Port device team_slave_0 removed [ 149.670780][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.682807][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.720213][ T144] bond0 (unregistering): Released all slaves [ 150.405458][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.438855][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.503926][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.564691][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.631327][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.673808][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.716275][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.764418][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.836092][ T144] tipc: Left network mode [ 151.601929][ T144] device hsr_slave_0 left promiscuous mode [ 151.608486][ T144] device hsr_slave_1 left promiscuous mode [ 151.615076][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.623001][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.631974][ T144] device bridge_slave_1 left promiscuous mode [ 151.638147][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.647089][ T144] device bridge_slave_0 left promiscuous mode [ 151.654505][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.665852][ T144] device hsr_slave_0 left promiscuous mode [ 151.673420][ T144] device hsr_slave_1 left promiscuous mode [ 151.679912][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.687762][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.697047][ T144] device bond1 left promiscuous mode [ 151.703533][ T144] bridge0: port 3(bond1) entered disabled state [ 151.712792][ T144] device bridge_slave_0 left promiscuous mode [ 151.718954][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.732711][ T144] device veth1_macvtap left promiscuous mode [ 151.738740][ T144] device veth0_macvtap left promiscuous mode [ 151.745053][ T144] device veth1_vlan left promiscuous mode [ 151.752077][ T144] device veth0_vlan left promiscuous mode [ 151.758583][ T144] device veth1_macvtap left promiscuous mode [ 151.765142][ T144] device veth0_macvtap left promiscuous mode [ 151.772597][ T144] device veth1_vlan left promiscuous mode [ 151.778371][ T144] device veth0_vlan left promiscuous mode [ 151.877191][ T144] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 151.892859][ T144] team0 (unregistering): Port device team_slave_1 removed [ 151.903374][ T144] team0 (unregistering): Port device team_slave_0 removed [ 151.913773][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.926609][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.963860][ T144] bond0 (unregistering): Released all slaves [ 152.015316][ T144] bond1 (unregistering): Released all slaves [ 152.048476][ T144] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 152.060150][ T144] team0 (unregistering): Port device team_slave_1 removed [ 152.073384][ T144] team0 (unregistering): Port device team_slave_0 removed [ 152.083745][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.095198][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.135639][ T144] bond0 (unregistering): Released all slaves