last executing test programs: 15m32.858582342s ago: executing program 3 (id=7409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000440)={0xfffffffd}) 15m32.709072769s ago: executing program 3 (id=7411): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0800b1e688b8867d", 0x8}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x3ff}}], 0x18}, 0x24008004) 15m32.608807615s ago: executing program 3 (id=7413): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x400327c) 15m32.452287182s ago: executing program 3 (id=7416): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 15m32.002252645s ago: executing program 3 (id=7422): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) 15m31.586240067s ago: executing program 3 (id=7429): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xe, 0x4) 15m31.240620754s ago: executing program 32 (id=7429): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xe, 0x4) 7m47.946329233s ago: executing program 2 (id=14237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af80200000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) 7m47.674279247s ago: executing program 2 (id=14239): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x0, '\x00', @string=0x0}}) 7m47.605254561s ago: executing program 2 (id=14240): r0 = socket(0x18, 0x0, 0x2) getpeername$netrom(r0, 0x0, &(0x7f0000000080)=0xffffffffffffff77) 7m47.42799232s ago: executing program 2 (id=14243): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 7m47.092204007s ago: executing program 2 (id=14245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f00)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000e40, 0x0, 0x0, 0x200000000e70, 0x200000000ea0], 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000fbffffff0000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 7m46.84488928s ago: executing program 2 (id=14247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) 7m46.25400047s ago: executing program 33 (id=14247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) 9.807341223s ago: executing program 0 (id=20185): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x4000) 8.211486836s ago: executing program 0 (id=20198): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 7.225887757s ago: executing program 0 (id=20210): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x14, 0x10, "b3e5664f9c3531eb48b527bde605112b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.147026564s ago: executing program 0 (id=20232): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 4.0543124s ago: executing program 4 (id=20243): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x0, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3.773924815s ago: executing program 4 (id=20244): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x13, 0x14, 0x0}) 3.494188559s ago: executing program 4 (id=20246): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x401, 0x0, 0x3, 0x8, 0x9a, 0x61e883bb, 0x4, 0x284f97, 0x7ff, 0x7, 0x1, 0xf, 0xff, 0x5, 0x8, {0x0, 0x7fffffff}, 0x0, 0x1}}) 3.396292624s ago: executing program 0 (id=20247): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.195110074s ago: executing program 4 (id=20248): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4030582b, &(0x7f0000000940)={@id={0x2, 0x0, @b}}) 1.72628875s ago: executing program 5 (id=20255): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x6612, 0x0) 1.306085662s ago: executing program 4 (id=20258): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@sysvgroups}, {@delalloc}, {@debug}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000008c0)={0x81, 0x9, 0x1, 0xe0e, 0x3, 0x6f7a}) 1.283348693s ago: executing program 5 (id=20259): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002580)={0x1e0, 0x0, r1, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0) 1.222067836s ago: executing program 1 (id=20260): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.086193773s ago: executing program 0 (id=20261): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "f0"}, @main=@item_4={0x3, 0x0, 0xb, "0f550299"}]}}, 0x0}, 0x0) 839.838336ms ago: executing program 5 (id=20262): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) r0 = syz_io_uring_setup(0x6e88, &(0x7f0000000080)={0x0, 0xc97a, 0x3000, 0x1, 0x35b}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) poll(&(0x7f00000001c0)=[{r0, 0x8002}], 0x1, 0x0) 836.231226ms ago: executing program 1 (id=20263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 668.951835ms ago: executing program 1 (id=20264): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 469.596175ms ago: executing program 5 (id=20265): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffffff, 0x10000, 0xffffffff, 0x1, 0x0, 0x27}, 0x1c) 419.325268ms ago: executing program 1 (id=20266): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4dc881, 0x15) 313.827713ms ago: executing program 5 (id=20267): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 244.569287ms ago: executing program 1 (id=20268): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) splice(r1, &(0x7f0000000180)=0xfffffffffffffff4, r0, 0x0, 0x4, 0xf) 98.523554ms ago: executing program 4 (id=20269): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 594.859µs ago: executing program 5 (id=20270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20008000) 0s ago: executing program 1 (id=20271): unshare(0x4000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) kernel console output (not intermixed with test programs): 652][T16896] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1420.365366][T15031] loop4: detected capacity change from 0 to 4096 [ 1420.395894][T15031] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1420.412278][T10687] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1420.420278][T16896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1420.455955][T16896] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1420.468368][T16896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.486176][T16896] usb 6-1: Product: syz [ 1420.501674][T16896] usb 6-1: Manufacturer: syz [ 1420.506345][T16896] usb 6-1: SerialNumber: syz [ 1420.543993][T16896] usb 6-1: config 0 descriptor?? [ 1420.550028][T15021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1420.560739][T15037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18618'. [ 1420.579015][T15021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1420.597680][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18618'. [ 1420.614973][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 1420.621613][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 1420.630793][T16896] port100 6-1:0.0: NFC: Could not get supported command types [ 1420.650893][T10687] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1420.664279][T10687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.687096][T15031] ntfs3: loop4: failed to convert "c46c" to cp861 [ 1420.696130][T10687] usb 1-1: config 0 descriptor?? [ 1420.714001][T10687] cp210x 1-1:0.0: cp210x converter detected [ 1420.907142][T16896] usb 6-1: USB disconnect, device number 38 [ 1421.177296][T10687] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1421.196018][T10687] usb 1-1: USB disconnect, device number 9 [ 1421.232095][T10687] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1421.287480][T10687] cp210x 1-1:0.0: device disconnected [ 1421.605694][T15059] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 1421.646234][T15059] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1422.101591][T15079] netlink: 'syz.1.18639': attribute type 1 has an invalid length. [ 1422.121461][T13162] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1422.215379][T15081] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.18640'. [ 1422.353788][T13162] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1422.371782][T13162] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1422.384121][T13162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.414787][T13162] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1422.461579][T13162] usb 6-1: config 1 has no interface number 0 [ 1422.472023][T13162] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1422.487944][T13162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.526470][T13162] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1422.703474][T15074] loop0: detected capacity change from 0 to 32768 [ 1422.749442][T13162] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1422.759631][T13162] snd_usb_pod 6-1:1.1: invalid control EP [ 1422.766521][T13162] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1422.774178][T15074] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1422.775019][T13162] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1422.800081][T13162] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 1422.801191][T15074] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1422.816918][T16896] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1423.011483][T16896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1423.012879][T15074] XFS (loop0): Ending clean mount [ 1423.034617][T21167] usb 6-1: USB disconnect, device number 39 [ 1423.042011][T16896] usb 5-1: not running at top speed; connect to a high speed hub [ 1423.063178][T16896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.084783][T16896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1423.118159][T15074] XFS (loop0): Quotacheck needed: Please wait. [ 1423.120306][T16896] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1423.168329][T16896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.202849][T15074] XFS (loop0): Quotacheck: Done. [ 1423.211799][T16896] usb 5-1: Product: syz [ 1423.232914][T16896] usb 5-1: Manufacturer: syz [ 1423.251648][T16896] usb 5-1: SerialNumber: syz [ 1423.415224][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.421810][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.428557][ T5766] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1423.542926][T16896] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1423.571728][T13162] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1423.584622][T16896] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1423.621489][T16896] usb 5-1: USB disconnect, device number 81 [ 1423.725884][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.781480][T13162] usb 2-1: Using ep0 maxpacket: 16 [ 1423.806013][T13162] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.825791][T13162] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1423.854197][T13162] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1423.864145][T13162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.881432][T13162] usb 2-1: Product: syz [ 1423.891806][T13162] usb 2-1: Manufacturer: syz [ 1423.901850][T13162] usb 2-1: SerialNumber: syz [ 1423.913662][T13162] r8152-cfgselector 2-1: config 0 descriptor?? [ 1424.166298][T13162] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1424.249519][T15123] netlink: 'syz.0.18657': attribute type 2 has an invalid length. [ 1424.409970][T13162] usb 2-1: USB disconnect, device number 102 [ 1425.134609][T15151] loop5: detected capacity change from 0 to 1024 [ 1425.362741][T19712] hfsplus: b-tree write err: -5, ino 25 [ 1425.368766][T19712] hfsplus: b-tree write err: -5, ino 4 [ 1425.396987][T19712] hfsplus: b-tree write err: -5, ino 2 [ 1425.411801][T19712] hfsplus: b-tree write err: -5, ino 26 [ 1425.509129][T15163] loop4: detected capacity change from 0 to 512 [ 1425.562634][T15163] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1425.678016][T15163] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1425.743300][T15163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.18678: bg 0: block 248: padding at end of block bitmap is not set [ 1425.758836][T15163] Quota error (device loop4): write_blk: dquota write failed [ 1425.766926][T15163] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1425.778452][T15163] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.18678: Failed to acquire dquot type 1 [ 1425.816514][T15163] EXT4-fs (loop4): 1 truncate cleaned up [ 1425.834635][T15163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1426.100664][T22203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1426.118132][T15184] loop0: detected capacity change from 0 to 1024 [ 1426.130587][T19712] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 1426.161627][T19712] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 1426.315088][ T2568] hfsplus: b-tree write err: -5, ino 25 [ 1426.320941][ T2568] hfsplus: b-tree write err: -5, ino 4 [ 1426.355712][ T2568] hfsplus: b-tree write err: -5, ino 2 [ 1426.395531][ T2568] hfsplus: b-tree write err: -5, ino 26 [ 1426.406188][T15190] loop1: detected capacity change from 0 to 16 [ 1426.436672][T15190] erofs: (device loop1): mounted with root inode @ nid 36. [ 1426.808653][T15204] loop0: detected capacity change from 0 to 1024 [ 1426.917899][T15204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1427.231976][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.278002][T15222] netlink: 'syz.4.18705': attribute type 7 has an invalid length. [ 1427.286385][T15222] netlink: 'syz.4.18705': attribute type 8 has an invalid length. [ 1427.663726][T15235] netlink: 84 bytes leftover after parsing attributes in process `syz.1.18708'. [ 1427.781426][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1427.795732][T15237] loop5: detected capacity change from 0 to 1024 [ 1427.832642][T15237] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1427.999573][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.028071][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1428.068624][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.111543][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1428.123707][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.144446][ T23] usb 1-1: Product: syz [ 1428.148692][ T23] usb 1-1: Manufacturer: syz [ 1428.154384][ T23] usb 1-1: SerialNumber: syz [ 1428.170333][ T23] usb 1-1: config 0 descriptor?? [ 1428.229362][T15249] loop4: detected capacity change from 0 to 512 [ 1428.322368][T15249] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1428.391518][T15249] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1428.433399][T15249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.496420][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18721'. [ 1428.552439][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18721'. [ 1428.599854][T22203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.772959][T15263] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1428.824308][T22513] usb 1-1: USB disconnect, device number 10 [ 1429.519088][T15288] loop1: detected capacity change from 0 to 16 [ 1429.571892][T15288] erofs: (device loop1): mounted with root inode @ nid 36. [ 1429.854753][T15297] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18741'. [ 1429.895932][T15297] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1429.946027][T15297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1430.026127][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18745'. [ 1430.045816][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18745'. [ 1430.225682][T15311] loop1: detected capacity change from 0 to 1024 [ 1430.601827][T15323] SET target dimension over the limit! [ 1431.369601][T15351] loop0: detected capacity change from 0 to 512 [ 1431.458055][T15351] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1431.555421][T15351] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1431.602896][T15351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.18767: bg 0: block 248: padding at end of block bitmap is not set [ 1431.619916][T15351] Quota error (device loop0): write_blk: dquota write failed [ 1431.628850][T15351] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1431.640656][T15351] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.18767: Failed to acquire dquot type 1 [ 1431.659284][T15351] EXT4-fs (loop0): 1 truncate cleaned up [ 1431.666691][T15351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1431.740685][T15367] loop5: detected capacity change from 0 to 64 [ 1431.835487][T15367] syz.5.18773: attempt to access beyond end of device [ 1431.835487][T15367] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1431.879225][T15367] Buffer I/O error on dev loop5, logical block 512, async page read [ 1431.881616][T15371] tc_dump_action: action bad kind [ 1431.907010][T15367] syz.5.18773: attempt to access beyond end of device [ 1431.907010][T15367] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1431.929409][T15367] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1431.942832][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1431.963333][ T2568] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 1431.985181][ T2568] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 1432.626841][T15397] loop0: detected capacity change from 0 to 256 [ 1432.987245][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18793'. [ 1433.005737][T15409] loop5: detected capacity change from 0 to 64 [ 1433.050435][T15411] loop4: detected capacity change from 0 to 256 [ 1433.068694][T15409] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1433.212054][T13162] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1433.416445][T13162] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1433.433101][T13162] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1433.447492][T15419] loop4: detected capacity change from 0 to 512 [ 1433.467174][T13162] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1433.511174][T13162] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1433.520417][T15419] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1433.567723][T13162] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1433.626507][T13162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.671592][T13162] usb 2-1: Product: syz [ 1433.693162][T13162] usb 2-1: Manufacturer: syz [ 1433.718322][T13162] usb 2-1: SerialNumber: syz [ 1433.744146][T13162] smsusb:smsusb_probe: board id=8, interface number 0 [ 1433.988887][T22203] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1433.998465][T13162] smsusb:smsusb_probe: Device initialized with return code -19 [ 1434.212056][T22513] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1434.244367][T15445] loop4: detected capacity change from 0 to 256 [ 1434.256700][T16896] usb 2-1: USB disconnect, device number 103 [ 1434.262734][T15445] exfat: Deprecated parameter 'namecase' [ 1434.311987][T15445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1434.351133][T15445] exFAT-fs (loop4): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1434.431009][T22513] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1434.443312][T22513] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1434.443522][T15448] netlink: 'syz.5.18811': attribute type 21 has an invalid length. [ 1434.472615][T22513] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1434.491742][T15448] netlink: 132 bytes leftover after parsing attributes in process `syz.5.18811'. [ 1434.493066][T22513] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1434.516496][T22513] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1434.525761][T15448] netlink: 'syz.5.18811': attribute type 1 has an invalid length. [ 1434.531421][T22513] usb 1-1: Product: syz [ 1434.541659][T22513] usb 1-1: Manufacturer: syz [ 1434.546330][T22513] usb 1-1: SerialNumber: syz [ 1434.554632][T22513] usb 1-1: config 0 descriptor?? [ 1434.572771][T22513] hub 1-1:0.0: bad descriptor, ignoring hub [ 1434.578797][T22513] hub: probe of 1-1:0.0 failed with error -5 [ 1434.594888][T22513] usb 1-1: selecting invalid altsetting 0 [ 1434.949652][T15456] loop1: detected capacity change from 0 to 256 [ 1434.950374][T15455] loop5: detected capacity change from 0 to 256 [ 1435.007001][T15456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1435.008372][T15455] FAT-fs (loop5): Directory bread(block 64) failed [ 1435.057402][T15455] FAT-fs (loop5): Directory bread(block 65) failed [ 1435.089472][T15455] FAT-fs (loop5): Directory bread(block 66) failed [ 1435.096822][T16896] usb 1-1: USB disconnect, device number 11 [ 1435.126471][T15455] FAT-fs (loop5): Directory bread(block 67) failed [ 1435.148363][T15455] FAT-fs (loop5): Directory bread(block 68) failed [ 1435.183630][T15455] FAT-fs (loop5): Directory bread(block 69) failed [ 1435.200328][T15455] FAT-fs (loop5): Directory bread(block 70) failed [ 1435.207786][T15455] FAT-fs (loop5): Directory bread(block 71) failed [ 1435.232234][T15455] FAT-fs (loop5): Directory bread(block 72) failed [ 1435.269507][T15455] FAT-fs (loop5): Directory bread(block 73) failed [ 1435.444040][T15450] loop4: detected capacity change from 0 to 32768 [ 1435.463285][T15450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.18812 (15450) [ 1435.508745][T15461] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18817'. [ 1435.526184][T15461] netlink: 'syz.1.18817': attribute type 1 has an invalid length. [ 1435.530174][T15450] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1435.555436][T15450] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1435.558836][T15461] netlink: 'syz.1.18817': attribute type 2 has an invalid length. [ 1435.564738][T15450] BTRFS info (device loop4): using free space tree [ 1435.595840][T15461] netlink: 116 bytes leftover after parsing attributes in process `syz.1.18817'. [ 1435.808883][T15450] BTRFS info (device loop4): enabling ssd optimizations [ 1435.851583][T15450] BTRFS info (device loop4): auto enabling async discard [ 1436.270634][T22203] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1436.426265][T15500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1436.496680][T15496] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 1436.578193][T15496] Remounting filesystem read-only [ 1436.988050][T15508] set_capacity_and_notify: 1 callbacks suppressed [ 1436.988070][T15508] loop0: detected capacity change from 0 to 512 [ 1437.074267][T15508] FAT-fs (loop0): Invalid FSINFO signature: 0x41615208, 0x61417272 (sector = 1) [ 1437.131614][T15508] FAT-fs (loop0): Directory bread(block 159) failed [ 1437.138434][T15508] FAT-fs (loop0): Directory bread(block 160) failed [ 1437.177329][T15518] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1437.198003][T15508] FAT-fs (loop0): Directory bread(block 161) failed [ 1437.214492][T15508] FAT-fs (loop0): Directory bread(block 162) failed [ 1437.234018][T15518] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 1437.243440][T15508] FAT-fs (loop0): Directory bread(block 163) failed [ 1437.261471][T15508] FAT-fs (loop0): Directory bread(block 164) failed [ 1437.303369][T15508] FAT-fs (loop0): Directory bread(block 165) failed [ 1437.310084][T15508] FAT-fs (loop0): Directory bread(block 166) failed [ 1437.393217][T15508] FAT-fs (loop0): Directory bread(block 159) failed [ 1437.400927][T15508] FAT-fs (loop0): Directory bread(block 160) failed [ 1437.642459][ T40] FAT-fs (loop0): Invalid FSINFO signature: 0x41615208, 0x61417272 (sector = 1) [ 1438.093314][T15542] netlink: 'syz.5.18848': attribute type 5 has an invalid length. [ 1438.099326][T15546] loop4: detected capacity change from 0 to 8 [ 1438.123951][T15548] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1438.131463][T15542] netlink: 'syz.5.18848': attribute type 11 has an invalid length. [ 1438.795716][T15570] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1438.812311][ T9] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1438.986026][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18864'. [ 1439.061860][ T9] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1439.166205][T15578] loop5: detected capacity change from 0 to 2048 [ 1439.204576][T15578] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1439.303353][T15584] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1439.521435][T15578] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=32, inode=11, rec_len=4096, name_len=0 [ 1439.626639][T15578] Remounting filesystem read-only [ 1439.731940][ T40] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1440.261713][T15611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1440.297214][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18882'. [ 1440.701481][T10687] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1440.773172][ T4615] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1440.811790][ T4615] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1440.895622][T10687] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1440.911444][T10687] usb 2-1: config 0 has no interface number 0 [ 1440.924920][T10687] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1440.975835][T10687] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 1441.018196][T10687] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1441.052632][T10687] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1441.072295][T15640] cgroup: name respecified [ 1441.082893][T10687] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1441.091244][T10687] usb 2-1: Product: syz [ 1441.102074][ T9] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1441.121535][T10687] usb 2-1: Manufacturer: syz [ 1441.131628][T10687] usb 2-1: SerialNumber: syz [ 1441.147903][T10687] usb 2-1: config 0 descriptor?? [ 1441.172746][T15617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1441.201199][T10687] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1441.270563][T15641] loop0: detected capacity change from 0 to 4096 [ 1441.504758][ T9] usb 2-1: USB disconnect, device number 104 [ 1442.085458][T15668] loop5: detected capacity change from 0 to 512 [ 1442.133919][T15668] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1442.215933][T15668] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1442.262387][T15678] loop0: detected capacity change from 0 to 1024 [ 1442.270360][T15678] EXT4-fs: Ignoring removed bh option [ 1442.282206][T15668] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.18910: bg 0: block 248: padding at end of block bitmap is not set [ 1442.307450][T15668] Quota error (device loop5): write_blk: dquota write failed [ 1442.315177][T15668] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1442.341043][T15668] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.18910: Failed to acquire dquot type 1 [ 1442.358499][T15678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.406212][T15668] EXT4-fs (loop5): 1 truncate cleaned up [ 1442.451065][T15668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1442.528438][T15678] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.18914: reserved inode found cleared - inode=18 [ 1442.563275][T15678] EXT4-fs (loop0): Remounting filesystem read-only [ 1442.585823][T15686] loop4: detected capacity change from 0 to 4096 [ 1442.642641][T15686] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1442.683151][T19708] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 1442.705011][T19708] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 1442.713259][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.800731][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1443.094122][T15689] loop0: detected capacity change from 0 to 2048 [ 1443.124434][T15689] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1443.189270][T15695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1443.189605][T15689] syz.0.18918: attempt to access beyond end of device [ 1443.189605][T15689] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1443.366275][T15699] loop4: detected capacity change from 0 to 64 [ 1443.395737][T15689] syz.0.18918: attempt to access beyond end of device [ 1443.395737][T15689] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 1443.441763][T15689] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 1444.137755][T15722] ALSA: mixer_oss: invalid OSS volume 'u' [ 1444.481235][T15738] netlink: 'syz.5.18942': attribute type 3 has an invalid length. [ 1444.621590][ C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1444.650470][T15744] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1445.094197][T15755] loop5: detected capacity change from 0 to 8192 [ 1445.120215][T15755] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1445.151027][T15755] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1445.161885][T15755] REISERFS (device loop5): using ordered data mode [ 1445.168493][T15755] reiserfs: using flush barriers [ 1445.203976][T15755] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1445.237466][T15755] REISERFS (device loop5): checking transaction log (loop5) [ 1445.284217][T15755] REISERFS (device loop5): Using rupasov hash to sort names [ 1445.302876][T15755] REISERFS (device loop5): using 3.5.x disk format [ 1445.319494][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.346580][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.381831][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.421741][T15755] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1445.442036][T15755] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1445.557179][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.588689][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.600867][T15755] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1445.993776][T15786] loop4: detected capacity change from 0 to 256 [ 1446.012532][T15786] exfat: Deprecated parameter 'namecase' [ 1446.041480][T15786] exfat: Deprecated parameter 'namecase' [ 1446.047374][T15786] exfat: Deprecated parameter 'utf8' [ 1446.156363][T15786] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1446.501546][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18971'. [ 1446.763756][T15784] loop0: detected capacity change from 0 to 32768 [ 1446.779307][T15784] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.18963 (15784) [ 1446.825376][T15784] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1446.849399][T15784] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1446.882870][T15784] BTRFS info (device loop0): using free space tree [ 1447.128509][T15784] BTRFS info (device loop0): enabling ssd optimizations [ 1447.164585][T15784] BTRFS info (device loop0): auto enabling async discard [ 1447.379678][T15826] loop5: detected capacity change from 0 to 4096 [ 1447.503180][ T5766] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1447.515603][T15826] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1447.857211][ T6295] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (6295) [ 1448.869314][T15867] loop5: detected capacity change from 0 to 256 [ 1449.012070][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.588116][T15888] netlink: 'syz.4.19007': attribute type 10 has an invalid length. [ 1449.611790][T15890] [U] ^R [ 1449.623493][T15888] macvlan0: entered promiscuous mode [ 1449.647757][T15888] macvlan0: entered allmulticast mode [ 1449.655913][T15888] veth1_vlan: entered allmulticast mode [ 1449.703006][T15888] team0: Port device macvlan0 added [ 1449.956975][T15900] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1450.041488][T10687] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1450.171509][T13162] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1450.255991][T10687] usb 2-1: Using ep0 maxpacket: 16 [ 1450.277484][T10687] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1450.298023][T10687] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1450.324092][T10687] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1450.337539][T10687] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1450.356937][T10687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.367491][T10687] usb 2-1: Product: syz [ 1450.379569][T10687] usb 2-1: Manufacturer: syz [ 1450.385896][T10687] usb 2-1: SerialNumber: syz [ 1450.393907][T13162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1450.407015][T10687] usb 2-1: config 0 descriptor?? [ 1450.415690][T13162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1450.429967][T13162] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1450.440083][T13162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.459937][T13162] usb 5-1: Product: syz [ 1450.468483][T13162] usb 5-1: Manufacturer: syz [ 1450.478609][T13162] usb 5-1: SerialNumber: syz [ 1450.489642][T13162] usb 5-1: config 0 descriptor?? [ 1450.509507][T13162] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input77 [ 1450.716305][T13162] usb 5-1: USB disconnect, device number 82 [ 1450.717529][T15906] loop5: detected capacity change from 0 to 32768 [ 1450.734945][T15906] [ 1450.734945][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.734945][T15906] [ 1450.775812][T15906] [ 1450.775812][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.775812][T15906] [ 1450.790063][T15906] [ 1450.790063][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.790063][T15906] [ 1450.802673][T15906] [ 1450.802673][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.802673][T15906] [ 1450.831285][T15906] [ 1450.831285][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.831285][T15906] [ 1450.854452][T15906] [ 1450.854452][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.854452][T15906] [ 1450.867960][T15906] [ 1450.867960][T15906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.867960][T15906] [ 1450.899717][T10687] usb 2-1: USB disconnect, device number 105 [ 1450.910618][ T112] [ 1450.910618][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.910618][ T112] [ 1450.940063][ T5222] [ 1450.940063][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.940063][ T5222] [ 1450.959884][ T5222] [ 1450.959884][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1450.959884][ T5222] [ 1451.055243][T15914] [U] ^R [ 1451.560840][T15926] loop5: detected capacity change from 0 to 1024 [ 1451.607678][T15926] EXT4-fs: inline encryption not supported [ 1451.633310][T15926] EXT4-fs (loop5): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1451.647378][T15931] loop0: detected capacity change from 0 to 256 [ 1451.709813][T15926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.727415][T15932] loop4: detected capacity change from 0 to 2048 [ 1451.765558][T15931] FAT-fs (loop0): Directory bread(block 64) failed [ 1451.800227][T15932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.803836][T15931] FAT-fs (loop0): Directory bread(block 65) failed [ 1451.854906][T15931] FAT-fs (loop0): Directory bread(block 66) failed [ 1451.881542][T15931] FAT-fs (loop0): Directory bread(block 67) failed [ 1451.911980][T15931] FAT-fs (loop0): Directory bread(block 68) failed [ 1451.918725][T15931] FAT-fs (loop0): Directory bread(block 69) failed [ 1451.951631][T15931] FAT-fs (loop0): Directory bread(block 70) failed [ 1451.958530][T15931] FAT-fs (loop0): Directory bread(block 71) failed [ 1451.996305][T15931] FAT-fs (loop0): Directory bread(block 72) failed [ 1452.015887][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19031'. [ 1452.025704][T15931] FAT-fs (loop0): Directory bread(block 73) failed [ 1452.033028][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.034052][T22203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.061710][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19031'. [ 1452.082272][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19031'. [ 1452.218257][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19032'. [ 1452.231521][ C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1452.259110][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19032'. [ 1452.291607][T15943] tc_dump_action: action bad kind [ 1452.577094][T15945] loop1: detected capacity change from 0 to 4096 [ 1452.603306][T15945] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1452.650395][T15945] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 1452.666299][T15945] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1452.706853][T15945] ntfs: volume version 3.1. [ 1452.833495][T15960] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1452.852102][T13162] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1453.064536][T13162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1453.090960][T13162] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1453.116370][T13162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1453.142909][T13162] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1453.148308][T15968] loop4: detected capacity change from 0 to 4096 [ 1453.178642][T13162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.200820][T13162] usb 1-1: Product: syz [ 1453.208292][T13162] usb 1-1: Manufacturer: syz [ 1453.218556][T13162] usb 1-1: SerialNumber: syz [ 1453.228295][T13162] usb 1-1: config 0 descriptor?? [ 1453.250852][T13162] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 1453.268863][T15968] ntfs: volume version 3.1. [ 1453.308923][T15968] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1453.347767][T15968] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1453.377363][T15968] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1453.445949][T15968] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1453.497675][T15968] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1453.527547][T15968] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1453.545436][T13162] usb 1-1: USB disconnect, device number 12 [ 1455.183605][T16024] loop4: detected capacity change from 0 to 1024 [ 1455.326249][T16024] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1455.357899][T16024] hfsplus: xattr searching failed [ 1455.385579][T16024] syz.4.19071: attempt to access beyond end of device [ 1455.385579][T16024] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1455.438694][T16024] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1455.474308][T16024] hfsplus: unable to mark blocks free: error -5 [ 1455.497216][T16024] hfsplus: can't free extent [ 1455.532906][T16034] loop0: detected capacity change from 0 to 256 [ 1456.520807][T16069] loop1: detected capacity change from 0 to 128 [ 1456.578991][T16069] syz.1.19094: attempt to access beyond end of device [ 1456.578991][T16069] loop1: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 1456.641523][T16069] Buffer I/O error on dev loop1, logical block 12837, async page read [ 1456.888138][T16079] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1457.130699][T16088] netlink: 'syz.1.19102': attribute type 2 has an invalid length. [ 1457.140718][T16091] loop5: detected capacity change from 0 to 1024 [ 1457.288015][T16093] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19105'. [ 1457.547906][T16104] netlink: 'syz.4.19109': attribute type 1 has an invalid length. [ 1457.566454][T16100] netlink: 'syz.0.19110': attribute type 10 has an invalid length. [ 1457.730807][T16107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19112'. [ 1457.759029][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19113'. [ 1457.957541][T16113] loop0: detected capacity change from 0 to 4096 [ 1458.152484][T16113] ntfs3: loop0: Failed to load $Extend (-22). [ 1458.158803][T16113] ntfs3: loop0: Failed to initialize $Extend. [ 1458.644978][T16137] loop1: detected capacity change from 0 to 256 [ 1458.689884][T16137] exfat: Deprecated parameter 'namecase' [ 1458.697603][T16137] exfat: Deprecated parameter 'utf8' [ 1458.710493][T16137] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1458.732667][T16137] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1458.868191][T16145] loop5: detected capacity change from 0 to 256 [ 1458.961433][T16145] FAT-fs (loop5): Directory bread(block 64) failed [ 1458.968058][T16145] FAT-fs (loop5): Directory bread(block 65) failed [ 1459.010166][T16145] FAT-fs (loop5): Directory bread(block 66) failed [ 1459.032385][T16145] FAT-fs (loop5): Directory bread(block 67) failed [ 1459.048868][T16149] loop1: detected capacity change from 0 to 128 [ 1459.065276][T16145] FAT-fs (loop5): Directory bread(block 68) failed [ 1459.081763][T16145] FAT-fs (loop5): Directory bread(block 69) failed [ 1459.095947][T16145] FAT-fs (loop5): Directory bread(block 70) failed [ 1459.104981][T16145] FAT-fs (loop5): Directory bread(block 71) failed [ 1459.118256][T16149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e803c018, mo2=0082] [ 1459.121568][T16145] FAT-fs (loop5): Directory bread(block 72) failed [ 1459.141947][T16145] FAT-fs (loop5): Directory bread(block 73) failed [ 1459.149321][T16149] System zones: 1-3, 19-19, 35-36 [ 1459.158390][T16149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1459.171900][T16149] ext4 filesystem being mounted at /4755/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.190960][T16149] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 1459.399666][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1459.978602][T16176] ieee802154 phy0 wpan0: encryption failed: -22 [ 1460.205406][T16188] binder: 16186:16188 unknown command 1074553619 [ 1460.212251][T16188] binder: 16186:16188 ioctl c0306201 200000000640 returned -22 [ 1460.428600][T16191] loop5: detected capacity change from 0 to 4096 [ 1460.476993][T16191] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1460.679393][T16191] ntfs3: loop5: failed to convert "c46c" to macroman [ 1460.736415][T16199] infiniband syz2: set down [ 1461.417215][T16213] loop0: detected capacity change from 0 to 256 [ 1461.443994][T16185] loop1: detected capacity change from 0 to 40427 [ 1461.480014][T16185] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1461.562300][T16185] F2FS-fs (loop1): invalid crc value [ 1461.592016][T16185] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1461.642683][T16201] loop4: detected capacity change from 0 to 32768 [ 1461.669885][T16201] [ 1461.669885][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.669885][T16201] [ 1461.746195][T16219] qrtr: Invalid version 15 [ 1461.769418][T16185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1461.778107][T16201] [ 1461.778107][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.778107][T16201] [ 1461.812246][T16201] [ 1461.812246][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.812246][T16201] [ 1461.849401][T16201] [ 1461.849401][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.849401][T16201] [ 1461.881464][T16201] [ 1461.881464][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.881464][T16201] [ 1461.952617][T16201] [ 1461.952617][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1461.952617][T16201] [ 1462.000423][T16201] [ 1462.000423][T16201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1462.000423][T16201] [ 1462.038347][ T111] [ 1462.038347][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1462.038347][ T111] [ 1462.179890][T22203] [ 1462.179890][T22203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1462.179890][T22203] [ 1462.215635][T22203] [ 1462.215635][T22203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1462.215635][T22203] [ 1462.455924][T16232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19174'. [ 1462.607803][T16234] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19175'. [ 1462.859966][T16243] loop0: detected capacity change from 0 to 1024 [ 1462.910333][T16243] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1462.924911][T16243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1462.936906][T16243] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1462.947787][T16243] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1462.957402][T16243] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.19177: Inode bitmap for bg 0 marked uninitialized [ 1462.988819][T16243] EXT4-fs (loop0): Remounting filesystem read-only [ 1463.046501][T16243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1463.137914][T16244] loop5: detected capacity change from 0 to 4096 [ 1463.165356][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.273862][T16244] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1463.355877][T16244] ntfs3: loop5: Failed to load $Extend (-22). [ 1463.382042][T16244] ntfs3: loop5: Failed to initialize $Extend. [ 1464.392052][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19202'. [ 1464.861079][T16310] netlink: 'syz.1.19211': attribute type 29 has an invalid length. [ 1465.081735][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1465.184376][T16295] loop0: detected capacity change from 0 to 32768 [ 1465.303055][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1465.328382][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.345001][ T9] usb 5-1: Product: syz [ 1465.357354][ T9] usb 5-1: Manufacturer: syz [ 1465.374346][ T9] usb 5-1: SerialNumber: syz [ 1465.393760][ T9] usb 5-1: config 0 descriptor?? [ 1465.414961][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 083 [ 1465.830253][ T9] (null): failure reading functionality [ 1465.873908][ T9] i2c i2c-2: failure reading functionality [ 1465.918019][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 1465.953047][ T9] usb 5-1: USB disconnect, device number 83 [ 1466.147911][T16338] loop0: detected capacity change from 0 to 4096 [ 1466.170380][T16338] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1466.301181][T16346] loop1: detected capacity change from 0 to 256 [ 1466.329208][T16338] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 1466.338238][T16346] exfat: Deprecated parameter 'utf8' [ 1466.387884][T16346] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1466.577121][T16350] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1467.131666][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19239'. [ 1467.137965][T16373] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1467.208612][T16375] loop1: detected capacity change from 0 to 512 [ 1467.252611][T16375] EXT4-fs: Ignoring removed orlov option [ 1467.284535][T16375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1467.342458][T16375] EXT4-fs (loop1): 1 orphan inode deleted [ 1467.372859][T16375] EXT4-fs (loop1): 1 truncate cleaned up [ 1467.380117][T16375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.485157][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.571535][ C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1468.329650][ T27] audit: type=1326 audit(2000001455.152:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.0.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1468.417309][ T27] audit: type=1326 audit(2000001455.152:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.0.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1468.501449][ T27] audit: type=1326 audit(2000001455.152:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.0.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1468.568272][ T27] audit: type=1326 audit(2000001455.152:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.0.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1468.631836][ T27] audit: type=1326 audit(2000001455.152:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.0.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1469.051529][T13162] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1469.241592][T13162] usb 1-1: Using ep0 maxpacket: 16 [ 1469.254284][T13162] usb 1-1: config 0 has no interfaces? [ 1469.264529][T13162] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1469.282164][T16454] loop4: detected capacity change from 0 to 16 [ 1469.288454][T13162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.303106][T13162] usb 1-1: Product: syz [ 1469.307369][T13162] usb 1-1: Manufacturer: syz [ 1469.318874][T13162] usb 1-1: SerialNumber: syz [ 1469.324246][T16454] erofs: (device loop4): mounted with root inode @ nid 36. [ 1469.340128][T13162] r8152-cfgselector 1-1: config 0 descriptor?? [ 1469.569089][T13162] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1469.660531][T16462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1469.777122][T13162] usb 1-1: USB disconnect, device number 13 [ 1469.832512][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19287'. [ 1469.877545][T16472] loop5: detected capacity change from 0 to 8 [ 1470.462560][T16492] netlink: 'syz.0.19298': attribute type 27 has an invalid length. [ 1470.818633][T16504] loop4: detected capacity change from 0 to 764 [ 1470.857595][T16504] Symlink component flag not implemented [ 1470.878911][T16504] Symlink component flag not implemented [ 1471.560079][T16525] loop5: detected capacity change from 0 to 512 [ 1471.602649][T16525] EXT4-fs: Ignoring removed orlov option [ 1471.637434][T16525] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1471.720463][T16525] EXT4-fs (loop5): 1 orphan inode deleted [ 1471.726511][T16525] EXT4-fs (loop5): 1 truncate cleaned up [ 1471.753264][T16525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.844616][T16506] loop1: detected capacity change from 0 to 32768 [ 1471.929722][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.982428][T16506] JBD2: Ignoring recovery information on journal [ 1472.062398][T22513] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1472.083266][T16544] CIFS mount error: No usable UNC path provided in device string! [ 1472.083266][T16544] [ 1472.091518][T16506] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1472.094056][T16544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1472.225922][T16506] (syz.1.19306,16506,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1472.235759][T16506] (syz.1.19306,16506,0):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 1472.273673][T22513] usb 1-1: config 2 has an invalid interface number: 112 but max is 0 [ 1472.282841][T22513] usb 1-1: config 2 has no interface number 0 [ 1472.289080][T22513] usb 1-1: config 2 interface 112 has no altsetting 0 [ 1472.308072][T22513] usb 1-1: New USB device found, idVendor=9171, idProduct=32e3, bcdDevice=91.99 [ 1472.331470][T22513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.362118][T22513] usb 1-1: Product: syz [ 1472.366573][T22513] usb 1-1: Manufacturer: syz [ 1472.391564][T22513] usb 1-1: SerialNumber: syz [ 1472.448981][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 1472.538439][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19325'. [ 1472.633986][T22513] usb 1-1: bad CDC descriptors [ 1472.678746][T22513] usb 1-1: USB disconnect, device number 14 [ 1472.704884][T16556] loop5: detected capacity change from 0 to 4096 [ 1472.744942][T16556] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1473.211983][T22513] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1473.277489][T16570] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.19333'. [ 1473.288916][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19334'. [ 1473.404199][T22513] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1473.420908][T22513] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.437249][T22513] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1473.467222][T22513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.495091][T22513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.514234][T22513] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1473.531746][T22513] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1473.540496][T22513] usb 5-1: Product: syz [ 1473.570541][T22513] usb 5-1: Manufacturer: syz [ 1473.595624][T22513] cdc_wdm 5-1:1.0: skipping garbage [ 1473.621708][T22513] cdc_wdm 5-1:1.0: skipping garbage [ 1473.641851][T22513] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1473.656122][T22513] cdc_wdm 5-1:1.0: Unknown control protocol [ 1473.903209][T16560] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1473.914572][ T23] usb 5-1: USB disconnect, device number 84 [ 1474.077284][T16594] loop0: detected capacity change from 0 to 764 [ 1474.151613][T22513] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1474.268950][T16598] loop0: detected capacity change from 0 to 256 [ 1474.287070][T16598] exfat: Deprecated parameter 'utf8' [ 1474.315469][T16598] exfat: Deprecated parameter 'namecase' [ 1474.322208][T16598] exfat: Deprecated parameter 'namecase' [ 1474.370372][T22513] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.382626][T16598] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 1474.395192][T22513] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1474.411949][T22513] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1474.421217][T22513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.445944][T22513] usb 2-1: config 0 descriptor?? [ 1474.849327][T16610] loop5: detected capacity change from 0 to 4096 [ 1474.900038][T22513] Bluetooth: Can't get state to change to load configuration err [ 1474.911286][T16610] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1474.921825][T22513] Bluetooth: Loading sysconfig file failed [ 1474.927775][T22513] ath3k: probe of 2-1:0.0 failed with error -16 [ 1474.936598][T16610] ntfs3: loop5: Failed to load $Extend (-22). [ 1474.950909][T22513] usb 2-1: USB disconnect, device number 106 [ 1474.951553][T16896] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1474.967916][T16610] ntfs3: loop5: Failed to initialize $Extend. [ 1475.238014][T16896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1475.266998][T16616] loop0: detected capacity change from 0 to 128 [ 1475.273844][T16896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.293274][T16616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1475.316159][T16896] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1475.316858][T16616] hpfs: filesystem error: improperly stopped [ 1475.347755][T16896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.348871][T16616] [ 1475.371047][T16896] hub 5-1:4.0: USB hub found [ 1475.388552][T16616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1475.414231][T16616] hpfs: You really don't want any checks? You are crazy... [ 1475.423132][T16616] hpfs: hpfs_map_sector(): read error [ 1475.428601][T16616] hpfs: code page support is disabled [ 1475.435186][T16616] hpfs: hpfs_map_4sectors(): unaligned read [ 1475.441816][T16616] hpfs: hpfs_map_4sectors(): unaligned read [ 1475.447839][T16616] hpfs: filesystem error: unable to find root dir [ 1475.609943][T16896] hub 5-1:4.0: 9 ports detected [ 1475.621777][T16896] usb 5-1: selecting invalid altsetting 1 [ 1475.627595][T16896] hub 5-1:4.0: Using single TT (err -22) [ 1475.639955][T16896] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1475.783419][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19361'. [ 1475.825999][T16896] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1475.840568][T16896] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1475.900821][T16896] usb 5-1: USB disconnect, device number 85 [ 1475.931564][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1476.116108][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1476.130832][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.166729][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.180902][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.196914][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.208054][ T9] usb 6-1: Product: syz [ 1476.214120][ T9] usb 6-1: Manufacturer: syz [ 1476.218986][ T9] usb 6-1: SerialNumber: syz [ 1476.444666][ T9] usb 6-1: 0:2 : does not exist [ 1476.453649][ T9] usb 6-1: unit 3 not found! [ 1476.487381][ T9] usb 6-1: USB disconnect, device number 40 [ 1476.544941][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.601626][T16896] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1476.777458][T16652] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.19374'. [ 1476.803525][T16896] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1476.821191][T16896] usb 2-1: config 0 has no interface number 0 [ 1476.828988][T16896] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 1476.840538][T16896] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 1476.878891][T16896] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1476.888761][T16896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.922969][T16896] usb 2-1: config 0 descriptor?? [ 1476.933195][T16896] ttusbir 2-1:0.83: cannot find expected altsetting [ 1477.211694][ T23] usb 2-1: USB disconnect, device number 107 [ 1477.935084][T16686] loop1: detected capacity change from 0 to 64 [ 1478.226950][T16672] loop4: detected capacity change from 0 to 32768 [ 1478.327850][T16696] SET target dimension over the limit! [ 1478.340626][T16672] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1478.587825][T22203] ocfs2: Unmounting device (7,4) on (node local) [ 1479.172984][T16718] loop5: detected capacity change from 0 to 512 [ 1479.252723][T16718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.328230][T16718] ext4 filesystem being mounted at /1255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.579202][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.606992][T16702] loop1: detected capacity change from 0 to 32768 [ 1479.668645][T16702] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.085832][T16702] XFS (loop1): Ending clean mount [ 1480.259373][T16753] loop0: detected capacity change from 0 to 1024 [ 1480.318019][T16753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1480.368833][T16753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1480.385620][T16753] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38790!=20869) [ 1480.407513][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.421612][T16753] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1480.465325][T16753] JBD2: no valid journal superblock found [ 1480.570759][T16753] EXT4-fs (loop0): Could not load journal inode [ 1482.226273][T16817] loop1: detected capacity change from 0 to 256 [ 1482.395975][T16822] loop0: detected capacity change from 0 to 164 [ 1482.501470][T16822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1482.574369][T16827] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1482.593177][T16827] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1482.871950][T16832] [U] [ 1483.193446][T16847] loop0: detected capacity change from 0 to 256 [ 1483.257805][T16847] FAT-fs (loop0): Directory bread(block 64) failed [ 1483.281885][T16847] FAT-fs (loop0): Directory bread(block 65) failed [ 1483.288622][T16847] FAT-fs (loop0): Directory bread(block 66) failed [ 1483.342185][T16847] FAT-fs (loop0): Directory bread(block 67) failed [ 1483.348922][T16847] FAT-fs (loop0): Directory bread(block 68) failed [ 1483.379353][T16847] FAT-fs (loop0): Directory bread(block 69) failed [ 1483.393056][T16847] FAT-fs (loop0): Directory bread(block 70) failed [ 1483.399663][T16847] FAT-fs (loop0): Directory bread(block 71) failed [ 1483.449052][T16847] FAT-fs (loop0): Directory bread(block 72) failed [ 1483.459089][T16847] FAT-fs (loop0): Directory bread(block 73) failed [ 1483.641920][ T23] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1483.696118][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19472'. [ 1483.868867][ T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1483.901531][ T23] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1483.920128][ T23] usb 2-1: Product: syz [ 1483.930263][ T23] usb 2-1: Manufacturer: syz [ 1483.944141][ T23] usb 2-1: SerialNumber: syz [ 1483.960129][ T23] usb 2-1: config 0 descriptor?? [ 1483.983125][ T23] ch341 2-1:0.0: ch341-uart converter detected [ 1484.211647][T13162] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1484.285290][T16882] netlink: 'syz.5.19480': attribute type 7 has an invalid length. [ 1484.293550][T16882] netlink: 'syz.5.19480': attribute type 8 has an invalid length. [ 1484.422278][ T23] usb 2-1: failed to send control message: -71 [ 1484.425259][T13162] usb 1-1: Using ep0 maxpacket: 32 [ 1484.428644][ T23] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1484.470381][T13162] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1484.472374][ T23] usb 2-1: USB disconnect, device number 108 [ 1484.496976][T13162] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1484.512709][ T23] ch341 2-1:0.0: device disconnected [ 1484.520172][T13162] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1484.529647][T13162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.562560][T13162] usb 1-1: config 0 descriptor?? [ 1484.795982][T13162] usbhid 1-1:0.0: can't add hid device: -71 [ 1484.814372][T13162] usbhid: probe of 1-1:0.0 failed with error -71 [ 1484.846045][T13162] usb 1-1: USB disconnect, device number 15 [ 1484.857088][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.863672][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.039896][ T27] audit: type=1326 audit(2000000003.440:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.4.19489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ea59c819 code=0x7ffc0000 [ 1485.062573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.091661][ T27] audit: type=1326 audit(2000000003.490:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.4.19489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ea59c819 code=0x7ffc0000 [ 1485.114388][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.136532][ T27] audit: type=1326 audit(2000000003.500:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.4.19489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f90ea59c819 code=0x7ffc0000 [ 1485.159329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.218095][ T27] audit: type=1326 audit(2000000003.500:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.4.19489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ea59c819 code=0x7ffc0000 [ 1485.635207][T16918] loop5: detected capacity change from 0 to 1024 [ 1485.752831][T16918] 9pnet_fd: p9_fd_create_unix (16918): problem connecting socket: ./file1: -13 [ 1485.918795][T16929] [U] [ 1485.921685][T16929] [U] [ 1485.924475][T16929] [U] [ 1485.927206][T16929] [U] [ 1485.971724][T16929] [U] [ 1485.974520][T16929] [U] [ 1485.977274][T16929] [U] [ 1485.980069][T16929] [U] [ 1486.048504][T16929] [U] [ 1486.051304][T16929] [U] [ 1486.054036][T16929] [U] [ 1486.056774][T16929] [U] [ 1486.071494][T16935] netlink: 'syz.1.19507': attribute type 1 has an invalid length. [ 1486.080029][T16929] [U] [ 1486.082787][T16929] [U] [ 1486.085526][T16929] [U] [ 1486.088270][T16929] [U] [ 1486.158154][T16927] [U] [ 1486.359265][T16942] loop0: detected capacity change from 0 to 164 [ 1486.402289][T16942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1486.444897][T16942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1486.484114][T16942] Symlink component flag not implemented [ 1486.489825][T16942] Symlink component flag not implemented [ 1486.511655][T16942] Symlink component flag not implemented (7) [ 1486.517718][T16942] Symlink component flag not implemented (116) [ 1486.565650][T16945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.656153][T16947] 9pnet_fd: Insufficient options for proto=fd [ 1486.880512][T16933] loop5: detected capacity change from 0 to 32768 [ 1486.929377][T16933] [ 1486.929377][T16933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1486.929377][T16933] [ 1487.138465][ T2568] ERROR: (device loop5): diWrite: ixpxd invalid [ 1487.138465][ T2568] [ 1487.165696][ T2568] ERROR: (device loop5): txCommit: [ 1487.165696][ T2568] [ 1487.186560][ T2568] jfs_write_inode: jfs_commit_inode failed! [ 1487.210799][ T5222] [ 1487.210799][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1487.210799][ T5222] [ 1487.234287][ T5222] [ 1487.234287][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1487.234287][ T5222] [ 1487.515816][T16970] loop0: detected capacity change from 0 to 512 [ 1487.548509][T16970] EXT4-fs: inline encryption not supported [ 1487.629131][T16970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1487.632311][T16978] netlink: 152 bytes leftover after parsing attributes in process `syz.5.19521'. [ 1487.653452][T16970] ext4 filesystem being mounted at /5166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.692357][T16978] bond0: (slave 5@): Releasing backup interface [ 1487.778137][T16970] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1487.800822][T16970] Quota error (device loop0): write_blk: dquota write failed [ 1487.807613][T16978] A link change request failed with some changes committed already. Interface 5@ may have been left with an inconsistent configuration, please check. [ 1487.810616][T13162] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1487.841674][T16970] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1487.859511][T16970] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.19527: Failed to acquire dquot type 0 [ 1488.048036][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.137141][T13162] usb 5-1: config 0 has no interfaces? [ 1488.153540][T13162] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1488.179962][T13162] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1488.216194][T13162] usb 5-1: Manufacturer: syz [ 1488.226337][T13162] usb 5-1: config 0 descriptor?? [ 1488.533689][T22513] usb 5-1: USB disconnect, device number 86 [ 1488.551423][T13162] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1488.742170][T13162] usb 2-1: Using ep0 maxpacket: 32 [ 1488.759448][T13162] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1488.779135][T13162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.799366][T13162] usb 2-1: Product: syz [ 1488.804081][T13162] usb 2-1: Manufacturer: syz [ 1488.808810][T13162] usb 2-1: SerialNumber: syz [ 1488.832661][T13162] usb 2-1: config 0 descriptor?? [ 1488.869194][T16986] loop5: detected capacity change from 0 to 32768 [ 1489.241944][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19538'. [ 1489.341260][T13162] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 1489.359334][T13162] airspy 2-1:0.0: Could not detect board [ 1489.391473][T13162] airspy: probe of 2-1:0.0 failed with error -71 [ 1489.410831][T13162] usb 2-1: USB disconnect, device number 109 [ 1489.700552][T17010] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19544'. [ 1489.723557][T17010] bond0: (slave 5@): Releasing backup interface [ 1489.770604][T17010] A link change request failed with some changes committed already. Interface 5@ may have been left with an inconsistent configuration, please check. [ 1489.958282][T17018] netlink: 'syz.0.19547': attribute type 1 has an invalid length. [ 1490.091578][T13162] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1490.190884][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19551'. [ 1490.200155][T17028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.19551'. [ 1490.285797][T13162] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1490.310941][T13162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.337513][T13162] usb 6-1: Product: syz [ 1490.351693][T13162] usb 6-1: Manufacturer: syz [ 1490.356664][T13162] usb 6-1: SerialNumber: syz [ 1490.380853][T13162] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1490.390378][T17033] loop4: detected capacity change from 0 to 256 [ 1490.417257][T17034] binder: Bad value for 'stats' [ 1490.423706][T22513] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1490.508276][T17033] FAT-fs (loop4): Directory bread(block 64) failed [ 1490.563584][T17033] FAT-fs (loop4): Directory bread(block 65) failed [ 1490.570325][T17033] FAT-fs (loop4): Directory bread(block 66) failed [ 1490.600836][T17033] FAT-fs (loop4): Directory bread(block 67) failed [ 1490.630164][T17033] FAT-fs (loop4): Directory bread(block 68) failed [ 1490.647954][T17033] FAT-fs (loop4): Directory bread(block 69) failed [ 1490.670256][T17033] FAT-fs (loop4): Directory bread(block 70) failed [ 1490.697918][T17033] FAT-fs (loop4): Directory bread(block 71) failed [ 1490.722475][T17033] FAT-fs (loop4): Directory bread(block 72) failed [ 1490.729089][T17033] FAT-fs (loop4): Directory bread(block 73) failed [ 1490.950125][T17044] netlink: 'syz.1.19560': attribute type 15 has an invalid length. [ 1491.002729][T13162] usb 6-1: USB disconnect, device number 41 [ 1491.022119][ T27] audit: type=1800 audit(2000000009.430:1537): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19553" name="file1" dev="loop4" ino=1048729 res=0 errno=0 [ 1491.423057][T17058] xt_cgroup: path and classid specified [ 1491.506646][T22513] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1491.534227][T22513] ath9k_htc: Failed to initialize the device [ 1491.551164][T13162] usb 6-1: ath9k_htc: USB layer deinitialized [ 1491.681723][T17064] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 1491.767869][T17067] bridge12: entered promiscuous mode [ 1491.776060][T17067] bridge12: entered allmulticast mode [ 1492.529884][T17096] loop4: detected capacity change from 0 to 164 [ 1493.497507][T17075] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.507038][T17075] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.520030][T17075] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.529086][T17075] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.808689][T17075] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 42469 - 0 [ 1493.818206][T17075] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 42469 - 0 [ 1493.827595][T17075] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 42469 - 0 [ 1493.836872][T17075] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 42469 - 0 [ 1493.846157][T17075] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 60876 - 0 [ 1493.855499][T17075] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 60876 - 0 [ 1493.864852][T17075] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 60876 - 0 [ 1493.874102][T17075] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 60876 - 0 [ 1494.321216][T17127] netlink: 13 bytes leftover after parsing attributes in process `syz.1.19598'. [ 1494.481911][ T6242] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1494.692163][ T6242] usb 6-1: Using ep0 maxpacket: 32 [ 1494.703392][ T6242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.734399][ T6242] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1494.766689][ T6242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.801417][ T6242] usb 6-1: Product: syz [ 1494.805677][ T6242] usb 6-1: Manufacturer: syz [ 1494.810315][ T6242] usb 6-1: SerialNumber: syz [ 1494.839762][ T6242] usb 6-1: config 0 descriptor?? [ 1494.854152][ T6242] cdc_ether: probe of 6-1:0.0 failed with error -22 [ 1494.876744][ T6242] usb 6-1: unsupported MDLM descriptors [ 1495.099998][T17154] SET target dimension over the limit! [ 1495.100347][ T9] usb 6-1: USB disconnect, device number 42 [ 1495.130429][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19608'. [ 1495.376379][T17136] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1495.705152][T17174] loop0: detected capacity change from 0 to 1024 [ 1495.900647][ T40] hfsplus: b-tree write err: -5, ino 25 [ 1495.920024][ T40] hfsplus: b-tree write err: -5, ino 4 [ 1495.944987][ T40] hfsplus: b-tree write err: -5, ino 2 [ 1496.056654][T17185] CIFS mount error: No usable UNC path provided in device string! [ 1496.056654][T17185] [ 1496.111455][T17185] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1496.476861][T17202] openvswitch: netlink: Actions may not be safe on all matching packets [ 1496.612228][ T5082] Bluetooth: hci0: command tx timeout [ 1496.747488][T17212] ip6tnl1: entered allmulticast mode [ 1497.011672][ C0] ip6_tunnel: ip6gretap7 xmit: Local address not yet configured! [ 1497.243147][T17229] loop0: detected capacity change from 0 to 1764 [ 1497.381613][T17236] No such timeout policy "syz1" [ 1497.625833][T17244] loop0: detected capacity change from 0 to 512 [ 1497.658149][T17244] EXT4-fs: inline encryption not supported [ 1497.751842][T17244] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.19642: bad orphan inode 15 [ 1497.818377][T17244] ext4_test_bit(bit=14, block=5) = 0 [ 1497.862909][T17244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1497.993295][T17244] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1498.074972][T17244] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.19642: bit already cleared for inode 13 [ 1498.224878][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.460056][T17278] loop0: detected capacity change from 0 to 164 [ 1499.011555][T17294] netlink: 'syz.4.19662': attribute type 29 has an invalid length. [ 1499.071111][T17294] netlink: 'syz.4.19662': attribute type 29 has an invalid length. [ 1499.665109][T17319] loop4: detected capacity change from 0 to 4096 [ 1499.732336][T17323] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1499.816006][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19676'. [ 1499.835850][T17325] netlink: 'syz.5.19676': attribute type 1 has an invalid length. [ 1499.838832][T17319] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1499.861449][T17325] netlink: 'syz.5.19676': attribute type 2 has an invalid length. [ 1499.885729][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19676'. [ 1500.271573][ T27] audit: type=1326 audit(2000000018.670:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17338 comm="syz.0.19684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1500.371524][ T27] audit: type=1326 audit(2000000018.670:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17338 comm="syz.0.19684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1500.449482][ T27] audit: type=1326 audit(2000000018.710:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17338 comm="syz.0.19684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1500.540041][ T27] audit: type=1326 audit(2000000018.710:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17338 comm="syz.0.19684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1500.681742][T17351] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1501.296548][T17371] tmpfs: Bad value for 'mpol' [ 1501.354311][T17373] tmpfs: Bad value for 'mpol' [ 1501.461712][T17377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19701'. [ 1501.504610][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19701'. [ 1502.777161][T17421] loop5: detected capacity change from 0 to 1024 [ 1502.831115][T17426] loop4: detected capacity change from 0 to 164 [ 1504.201712][T13162] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1504.317805][T17479] loop4: detected capacity change from 0 to 4096 [ 1504.336621][T17479] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1504.392427][T17483] netlink: 'syz.1.19751': attribute type 5 has an invalid length. [ 1504.402180][T13162] usb 6-1: Using ep0 maxpacket: 16 [ 1504.410089][T13162] usb 6-1: config 0 has no interfaces? [ 1504.430235][T13162] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1504.442746][T13162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.451207][T13162] usb 6-1: Product: syz [ 1504.469990][T17485] loop0: detected capacity change from 0 to 256 [ 1504.481954][T13162] usb 6-1: Manufacturer: syz [ 1504.487144][T13162] usb 6-1: SerialNumber: syz [ 1504.496962][T17485] exfat: Deprecated parameter 'utf8' [ 1504.512512][T13162] r8152-cfgselector 6-1: config 0 descriptor?? [ 1504.527226][T17485] exfat: Deprecated parameter 'namecase' [ 1504.561702][T17485] exfat: Deprecated parameter 'namecase' [ 1504.576503][T17479] ntfs3: loop4: failed to convert "c46c" to koi8-u [ 1504.696192][T17485] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1504.778945][T13162] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1505.013624][T13162] usb 6-1: USB disconnect, device number 43 [ 1505.088149][T17497] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1505.569481][T17513] loop0: detected capacity change from 0 to 1024 [ 1505.608230][T17513] EXT4-fs: Ignoring removed mblk_io_submit option [ 1505.621496][T17513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1505.630279][T17513] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1505.713385][T17513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1505.762592][T17521] binder: 17520:17521 ioctl c018620c 200000000280 returned -22 [ 1505.817564][T17523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.873333][T17523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.894374][T17513] EXT4-fs: Ignoring removed mblk_io_submit option [ 1505.895256][T17523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.923953][T17513] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1505.959369][T17523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.963694][T17513] EXT4-fs: Cannot change quota options when quota turned on [ 1506.098487][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.345265][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19777'. [ 1506.665199][T17549] loop4: detected capacity change from 0 to 64 [ 1506.749511][T17547] loop5: detected capacity change from 0 to 4096 [ 1506.797463][T17547] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1506.880460][T17547] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1506.914706][T17547] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1507.013069][T17553] overlayfs: conflicting options: metacopy=off,verity=on [ 1507.645874][T17576] loop0: detected capacity change from 0 to 256 [ 1507.701960][T17576] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1508.033572][T17587] xfrm0: entered allmulticast mode [ 1508.221627][T17593] netlink: 'syz.5.19804': attribute type 2 has an invalid length. [ 1508.262934][ T27] audit: type=1326 audit(2000000026.670:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.0.19806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1508.285482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.365572][ T27] audit: type=1326 audit(2000000026.700:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.0.19806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1508.463502][ T27] audit: type=1326 audit(2000000026.720:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.0.19806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1508.486150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.561525][ T27] audit: type=1326 audit(2000000026.720:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.0.19806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1508.584210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.348559][ T27] audit: type=1326 audit(2000000027.750:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.412383][ T27] audit: type=1326 audit(2000000027.780:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.481551][ T27] audit: type=1326 audit(2000000027.790:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.517893][ T27] audit: type=1326 audit(2000000027.790:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.548152][ T27] audit: type=1326 audit(2000000027.790:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.19828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.587845][T17646] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1509.594626][T17646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1509.622009][ T27] audit: type=1326 audit(2000000028.010:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.0.19830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1509.635411][T17646] vhci_hcd vhci_hcd.0: Device attached [ 1509.891841][ T23] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1509.941469][ T6242] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1510.134429][ T6242] usb 6-1: config 0 has no interfaces? [ 1510.140351][ T6242] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1510.161782][T17663] loop4: detected capacity change from 0 to 2048 [ 1510.176272][ T6242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.186400][T17664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1510.247430][ T6242] usb 6-1: config 0 descriptor?? [ 1510.265454][T17663] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1510.323369][T17663] Remounting filesystem read-only [ 1510.537965][ T6242] usb 6-1: USB disconnect, device number 44 [ 1510.556960][T17647] vhci_hcd: connection reset by peer [ 1510.575294][T19704] vhci_hcd: stop threads [ 1510.579620][T19704] vhci_hcd: release socket [ 1510.604671][T19704] vhci_hcd: disconnect device [ 1510.987075][T17692] netlink: 'syz.4.19851': attribute type 7 has an invalid length. [ 1511.001360][T17692] netlink: 'syz.4.19851': attribute type 8 has an invalid length. [ 1511.009360][T17692] netlink: 'syz.4.19851': attribute type 15 has an invalid length. [ 1511.222269][T17700] netlink: 640 bytes leftover after parsing attributes in process `syz.5.19855'. [ 1511.428820][T17709] netlink: 232 bytes leftover after parsing attributes in process `syz.1.19859'. [ 1512.131467][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1512.325094][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1512.345702][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1512.362133][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.390657][ T9] usb 6-1: Product: syz [ 1512.408784][ T9] usb 6-1: Manufacturer: syz [ 1512.419819][ T9] usb 6-1: SerialNumber: syz [ 1512.435412][ T9] usb 6-1: config 0 descriptor?? [ 1512.453238][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1512.468407][ T9] usb 6-1: Detected FT-X [ 1512.610796][T17754] loop4: detected capacity change from 0 to 64 [ 1512.710128][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1512.751155][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1512.781855][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1512.798676][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1512.828656][ T9] usb 6-1: USB disconnect, device number 45 [ 1512.870103][T17760] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.19884'. [ 1512.870527][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1512.932367][ T9] ftdi_sio 6-1:0.0: device disconnected [ 1513.134178][T17765] netlink: 'syz.4.19887': attribute type 1 has an invalid length. [ 1513.157671][T17765] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19887'. [ 1513.279274][T17769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19889'. [ 1513.308729][T17769] netlink: ct family unspecified [ 1513.314622][T17769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1514.868433][T17818] netlink: 'syz.5.19913': attribute type 15 has an invalid length. [ 1514.896954][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19913'. [ 1515.020258][ T23] vhci_hcd: vhci_device speed not set [ 1515.128775][T17829] netdevsim netdevsim1 : renamed from netdevsim0 [ 1515.328214][T17836] loop0: detected capacity change from 0 to 764 [ 1515.361827][T17836] Symlink component flag not implemented [ 1515.368066][T17836] Symlink component flag not implemented [ 1515.385769][T17836] Symlink component flag not implemented (129) [ 1515.411594][T17836] Symlink component flag not implemented (6) [ 1515.806003][T17851] ieee802154 phy0 wpan0: encryption failed: -22 [ 1515.821535][T17854] netlink: 'syz.5.19929': attribute type 21 has an invalid length. [ 1516.140052][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19939'. [ 1516.914226][T17896] loop0: detected capacity change from 0 to 1764 [ 1517.089602][T17901] netlink: 'syz.4.19953': attribute type 29 has an invalid length. [ 1517.127686][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19953'. [ 1517.272253][T17907] loop0: detected capacity change from 0 to 64 [ 1517.382199][T17909] ieee802154 phy0 wpan0: encryption failed: -22 [ 1517.637689][T17919] binder: BC_ACQUIRE_RESULT not supported [ 1517.661525][T17919] binder: 17916:17919 ioctl c0306201 200000000040 returned -22 [ 1517.891134][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19965'. [ 1517.977312][T17931] loop1: detected capacity change from 0 to 2048 [ 1518.050527][T17931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1518.632743][ T23] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1518.769080][T17955] loop4: detected capacity change from 0 to 4096 [ 1518.790528][T17955] __ntfs_warning: 8 callbacks suppressed [ 1518.790546][T17955] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1518.853103][T17955] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1518.871873][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1518.891486][T17955] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1518.900516][T17955] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1518.900940][ T23] usb 6-1: not running at top speed; connect to a high speed hub [ 1518.936359][T17961] loop1: detected capacity change from 0 to 8 [ 1518.953234][T17955] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1518.998042][ T23] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1519.030809][ T23] usb 6-1: config 0 has no interface number 0 [ 1519.071001][ T23] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1519.077671][T17955] ntfs: volume version 3.1. [ 1519.100310][ T23] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1519.132294][ T23] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1519.156181][ T23] usb 6-1: string descriptor 0 read error: -22 [ 1519.163192][ T23] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1519.197141][ T23] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1519.240572][ T23] usb 6-1: config 0 descriptor?? [ 1519.257382][ T23] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input81 [ 1519.259287][T17968] loop0: detected capacity change from 0 to 8 [ 1519.340323][T17955] ntfs: (device loop4): map_mft_record_page(): Mft record 0x44 is corrupt. Run chkdsk. [ 1519.354235][ T23] input: failed to attach handler mousedev to device input81, error: -5 [ 1519.382584][T17955] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 1519.421804][T17955] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 1519.588508][ T3553] udevd[3553]: Error opening device "/dev/input/event4": Input/output error [ 1519.613807][ T3553] udevd[3553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1519.641695][ T3553] udevd[3553]: Unable to EVIOCGABS device "/dev/input/event4" [ 1519.701679][ T23] usb 6-1: USB disconnect, device number 46 [ 1520.906196][T18010] loop5: detected capacity change from 0 to 256 [ 1521.471454][ T23] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1521.679911][ T23] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.690603][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1521.705700][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.766683][ T23] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1522.258566][ T27] audit: type=1326 audit(2000000040.660:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.0.20030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1522.319933][ T27] audit: type=1326 audit(2000000040.660:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.0.20030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed76f9c819 code=0x7ffc0000 [ 1522.459857][T18069] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20035'. [ 1522.862213][ T23] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1523.064368][ T23] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1523.096280][ T23] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1523.132011][ T23] usb 5-1: USB disconnect, device number 87 [ 1523.479370][T18095] loop1: detected capacity change from 0 to 4096 [ 1523.516586][T18095] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1524.200425][T18118] netlink: 'syz.1.20059': attribute type 1 has an invalid length. [ 1524.209433][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20059'. [ 1524.236616][T18119] loop4: detected capacity change from 0 to 512 [ 1524.295171][T18119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1524.334902][T18119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 1524.348727][T18119] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1524.364576][T18119] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1524.476494][T18119] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1524.533224][T18119] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #13: comm syz.4.20060: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1524.603150][T18119] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.20060: couldn't read orphan inode 13 (err -117) [ 1524.648758][T18119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1524.801872][T18119] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1524.818264][T18119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 1524.858188][T18119] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1524.866876][T18111] loop0: detected capacity change from 0 to 32768 [ 1524.959105][T22203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.969975][T18134] loop5: detected capacity change from 0 to 4096 [ 1524.978550][T18111] JBD2: Ignoring recovery information on journal [ 1525.022195][T18134] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1525.068723][T18111] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1525.141161][T18141] netlink: 14 bytes leftover after parsing attributes in process `syz.4.20068'. [ 1525.209796][T18111] (syz.0.20056,18111,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1525.259332][T18111] (syz.0.20056,18111,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1525.322329][T18111] (syz.0.20056,18111,1):ocfs2_mknod:298 ERROR: status = -2 [ 1525.347065][T18111] (syz.0.20056,18111,1):ocfs2_mknod:502 ERROR: status = -2 [ 1525.395373][T18111] (syz.0.20056,18111,1):ocfs2_create:676 ERROR: status = -2 [ 1525.625155][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 1525.800967][T18155] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.837235][T18155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.871531][T18155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.907390][T18155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.917894][T18159] loop5: detected capacity change from 0 to 512 [ 1525.935074][T18155] geneve4: entered promiscuous mode [ 1525.937949][T18159] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1525.989323][T18159] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.20079: dx entry: limit 0 != root limit 125 [ 1526.037450][T18159] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.20079: Corrupt directory, running e2fsck is recommended [ 1526.132105][T18159] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1526.150785][T18159] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.20079: corrupted in-inode xattr: invalid ea_ino [ 1526.196276][T18159] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.20079: couldn't read orphan inode 15 (err -117) [ 1526.258324][T18159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.352594][T18159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.820673][T18189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20092'. [ 1526.847892][T18189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20092'. [ 1526.954792][T18193] loop1: detected capacity change from 0 to 1024 [ 1526.993895][T18193] EXT4-fs: inline encryption not supported [ 1527.045018][T18197] program syz.4.20096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1527.063091][T18193] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1527.093345][T18197] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1527.133094][T18193] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.20094: lblock 2 mapped to illegal pblock 2 (length 1) [ 1527.153434][T18193] EXT4-fs (loop1): Remounting filesystem read-only [ 1527.160297][T18193] __quota_error: 3 callbacks suppressed [ 1527.160312][T18193] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1527.278961][T18193] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1527.342855][T18193] EXT4-fs (loop1): 1 orphan inode deleted [ 1527.350228][T18193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.505543][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.696454][T18218] loop5: detected capacity change from 0 to 512 [ 1527.812905][T18218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.892302][T18218] ext4 filesystem being mounted at /1406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.038019][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.051472][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1528.277346][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1528.312192][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.320316][ T23] usb 1-1: Product: syz [ 1528.341410][ T23] usb 1-1: Manufacturer: syz [ 1528.346115][ T23] usb 1-1: SerialNumber: syz [ 1528.351815][T18216] loop4: detected capacity change from 0 to 32768 [ 1528.422073][T18216] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1528.766347][T18216] XFS (loop4): Ending clean mount [ 1528.904780][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1528.940472][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1528.953179][T18216] syz.4.20106: attempt to access beyond end of device [ 1528.953179][T18216] loop4: rw=4096, sector=4227071, nr_sectors = 1 limit=32768 [ 1529.012322][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1529.012389][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1529.014814][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1529.063190][ T23] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1529.111806][ T23] usb 1-1: USB disconnect, device number 16 [ 1529.138038][T22203] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1529.563531][T18264] netlink: 'syz.5.20125': attribute type 1 has an invalid length. [ 1529.588335][T18264] netlink: 244 bytes leftover after parsing attributes in process `syz.5.20125'. [ 1529.816993][T18274] netlink: 660 bytes leftover after parsing attributes in process `syz.0.20127'. [ 1529.985259][T18276] loop4: detected capacity change from 0 to 2048 [ 1530.008765][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20130'. [ 1530.031397][T18276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1530.064312][T18281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1530.085276][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20130'. [ 1530.136208][T18276] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1530.200506][T18285] loop0: detected capacity change from 0 to 256 [ 1530.249562][T18276] Remounting filesystem read-only [ 1530.289879][T18276] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 1530.322466][T18276] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1530.341521][T18276] NILFS (loop4): error -5 truncating bmap (ino=15) [ 1530.369381][T18283] loop5: detected capacity change from 0 to 4096 [ 1530.420551][T18287] netlink: 'syz.1.20134': attribute type 21 has an invalid length. [ 1530.431943][T18283] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 1530.438522][T18283] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1530.535657][T22203] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1530.554272][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1530.581406][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1530.590389][T22203] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 1530.641413][T22203] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 1530.652141][ T1133] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 1530.665964][ T5222] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 1530.673988][T22203] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1530.684676][ T5222] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1530.704804][T22203] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 1530.713881][ T5222] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 1530.720586][ T2568] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 1530.727598][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1530.757393][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1530.771802][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1530.797582][T22203] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 1530.823209][T22203] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1530.847125][T22203] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1530.861842][ T27] audit: type=1400 audit(2000000049.250:1565): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=18294 comm="syz.5.20138" [ 1530.892007][T22203] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1530.899424][T22203] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1530.977098][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1531.008116][T22203] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 1531.022742][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1531.035830][T18299] loop5: detected capacity change from 0 to 512 [ 1531.042424][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1531.054975][T22203] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 1531.063478][T22203] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1531.083838][T18299] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1531.202280][T18299] EXT4-fs (loop5): 1 truncate cleaned up [ 1531.209449][T18299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.321650][T18309] binder: BINDER_SET_CONTEXT_MGR already set [ 1531.346592][T18309] binder: 18306:18309 ioctl 40046207 0 returned -16 [ 1531.372264][T18311] loop0: detected capacity change from 0 to 1024 [ 1531.381888][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.502540][T18311] hfsplus: bad catalog entry type [ 1531.572013][T18316] program syz.5.20146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.611500][T19704] hfsplus: b-tree write err: -5, ino 25 [ 1531.617474][T19704] hfsplus: b-tree write err: -5, ino 4 [ 1531.664228][T19704] hfsplus: b-tree write err: -5, ino 2 [ 1531.830168][T18321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20150'. [ 1531.908151][T18327] loop4: detected capacity change from 0 to 1024 [ 1532.112470][T19704] hfsplus: b-tree write err: -5, ino 25 [ 1532.137910][T19704] hfsplus: b-tree write err: -5, ino 4 [ 1532.154338][T19704] hfsplus: b-tree write err: -5, ino 2 [ 1532.171879][T19704] hfsplus: b-tree write err: -5, ino 17 [ 1532.218003][T18336] 9pnet_rdma: rdma_create_trans (18336): problem binding to privport: 13 [ 1532.358750][T18340] loop4: detected capacity change from 0 to 512 [ 1532.613104][T18347] loop5: detected capacity change from 0 to 256 [ 1532.709336][T18351] IPVS: stopping master sync thread 12832 ... [ 1532.747916][T18347] FAT-fs (loop5): Directory bread(block 64) failed [ 1532.792291][T18347] FAT-fs (loop5): Directory bread(block 65) failed [ 1532.833971][T18347] FAT-fs (loop5): Directory bread(block 66) failed [ 1532.862179][T18347] FAT-fs (loop5): Directory bread(block 67) failed [ 1532.869084][T18347] FAT-fs (loop5): Directory bread(block 68) failed [ 1532.907857][T18347] FAT-fs (loop5): Directory bread(block 69) failed [ 1532.940319][T18347] FAT-fs (loop5): Directory bread(block 70) failed [ 1532.960031][T18347] FAT-fs (loop5): Directory bread(block 71) failed [ 1532.971549][T18347] FAT-fs (loop5): Directory bread(block 72) failed [ 1532.978223][T18347] FAT-fs (loop5): Directory bread(block 73) failed [ 1532.994865][T18359] loop0: detected capacity change from 0 to 2048 [ 1533.033728][T18359] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1533.170463][T18364] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1533.902297][T18386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20181'. [ 1533.985997][T18380] loop5: detected capacity change from 0 to 8192 [ 1534.048574][T18380] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1534.122597][T18380] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1534.163140][T18380] REISERFS (device loop5): using ordered data mode [ 1534.169770][T18380] reiserfs: using flush barriers [ 1534.176859][T18380] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1534.199085][T18380] REISERFS (device loop5): checking transaction log (loop5) [ 1534.469632][T18380] REISERFS (device loop5): Using tea hash to sort names [ 1534.492030][T18380] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1534.933950][T18406] tmpfs: Cannot retroactively limit inodes [ 1534.973359][T18408] ptrace attach of "./syz-executor exec"[5222] was attempted by " [ 1535.156986][T18412] netlink: 332 bytes leftover after parsing attributes in process `syz.1.20199'. [ 1535.229257][T18398] loop0: detected capacity change from 0 to 40427 [ 1535.248750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.285691][T18412] netlink: 'syz.1.20199': attribute type 9 has an invalid length. [ 1535.289024][T18414] mkiss: ax0: crc mode is auto. [ 1535.299826][T18412] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20199'. [ 1535.320032][T18412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20199'. [ 1535.345474][T18398] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 1535.370496][T18398] F2FS-fs (loop0): invalid crc value [ 1535.387316][T18398] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1535.560942][T18398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1535.653502][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20195'. [ 1535.668478][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20194'. [ 1535.819336][ T5766] syz-executor: attempt to access beyond end of device [ 1535.819336][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1535.874046][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1536.501618][T18444] loop4: detected capacity change from 0 to 256 [ 1536.565634][T18444] FAT-fs (loop4): Directory bread(block 64) failed [ 1536.607668][T18444] FAT-fs (loop4): Directory bread(block 65) failed [ 1536.631564][T18444] FAT-fs (loop4): Directory bread(block 66) failed [ 1536.638228][T18444] FAT-fs (loop4): Directory bread(block 67) failed [ 1536.660646][T18444] FAT-fs (loop4): Directory bread(block 68) failed [ 1536.684002][T18444] FAT-fs (loop4): Directory bread(block 69) failed [ 1536.702383][T18444] FAT-fs (loop4): Directory bread(block 70) failed [ 1536.714131][T18444] FAT-fs (loop4): Directory bread(block 71) failed [ 1536.724343][T18444] FAT-fs (loop4): Directory bread(block 72) failed [ 1536.733739][T18444] FAT-fs (loop4): Directory bread(block 73) failed [ 1536.884747][T18452] loop5: detected capacity change from 0 to 1024 [ 1537.089334][ T40] hfsplus: b-tree write err: -5, ino 25 [ 1537.102504][ T40] hfsplus: b-tree write err: -5, ino 4 [ 1537.108159][ T40] hfsplus: b-tree write err: -5, ino 2 [ 1537.292743][ T23] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1537.418818][T18466] loop1: detected capacity change from 0 to 2048 [ 1537.468417][T18469] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1537.503932][ T23] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1537.519191][ T23] usb 1-1: config 0 has no interface number 0 [ 1537.533831][ T23] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1537.554808][T18466] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 1537.591940][ T23] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1537.608809][T18471] loop4: detected capacity change from 0 to 256 [ 1537.615890][ T23] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1537.624271][T18466] Remounting filesystem read-only [ 1537.629604][ T23] usb 1-1: Manufacturer: syz [ 1537.655727][ T23] usb 1-1: SerialNumber: syz [ 1537.673649][ T23] usb 1-1: config 0 descriptor?? [ 1537.727646][T18471] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1537.996709][T18479] loop5: detected capacity change from 0 to 64 [ 1538.308079][ T23] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1538.328806][ T23] usb 1-1: USB disconnect, device number 17 [ 1538.454547][T18481] loop4: detected capacity change from 0 to 32768 [ 1538.665789][T18489] loop5: detected capacity change from 0 to 256 [ 1538.679852][T18489] exfat: Deprecated parameter 'namecase' [ 1538.689830][T18489] exfat: Deprecated parameter 'namecase' [ 1538.756576][T18489] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d) [ 1538.981869][T18495] nbd: couldn't find device at index 10240 [ 1539.515686][T18506] loop1: detected capacity change from 0 to 4096 [ 1539.575018][T18511] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1539.851443][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20240'. [ 1539.893834][T18497] loop0: detected capacity change from 0 to 32768 [ 1539.913319][T18497] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.20232 (18497) [ 1539.954773][T18518] loop1: detected capacity change from 0 to 4096 [ 1539.971456][T18497] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1540.022954][T18497] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1540.041141][T18497] BTRFS info (device loop0): using free space tree [ 1540.049124][T18523] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1540.131835][ T23] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1540.179013][T18518] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1540.213202][T18497] BTRFS info (device loop0): enabling ssd optimizations [ 1540.251429][T18518] Remounting filesystem read-only [ 1540.275968][T18497] BTRFS info (device loop0): auto enabling async discard [ 1540.331495][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1540.362468][ T23] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1540.408267][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.435988][ T23] usb 6-1: Product: syz [ 1540.459984][ T23] usb 6-1: Manufacturer: syz [ 1540.467886][ T23] usb 6-1: SerialNumber: syz [ 1540.502307][ T23] usb 6-1: config 0 descriptor?? [ 1540.523350][ T23] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1540.545860][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 1540.552480][ T27] audit: type=1800 audit(2000000058.950:1566): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20232" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1540.600002][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1540.641878][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 1540.647789][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1540.672977][ T5766] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1540.730908][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1540.782136][ T23] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1540.812007][ T23] usb 6-1: media controller created [ 1540.897540][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1540.975330][ T3553] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (3553) [ 1540.982621][ T23] usb 6-1: selecting invalid altsetting 3 [ 1541.003277][ T23] ttusb2: set interface to alts=3 failed [ 1541.145999][ T23] DVB: Unable to find symbol tda10086_attach() [ 1541.181592][ T23] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1541.191081][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 1541.197409][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1541.208426][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 1541.214943][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1541.243459][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1541.276915][T18555] hfsplus: bad catalog entry type [ 1541.279889][ T23] usb 6-1: USB disconnect, device number 47 [ 1541.402102][T22513] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1541.445230][ T4615] hfsplus: b-tree write err: -5, ino 25 [ 1541.446201][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1541.451104][ T4615] hfsplus: b-tree write err: -5, ino 4 [ 1541.520497][T18557] set_capacity_and_notify: 2 callbacks suppressed [ 1541.520514][T18557] loop5: detected capacity change from 0 to 136 [ 1541.540062][ T4615] hfsplus: b-tree write err: -5, ino 2 [ 1541.601658][T22513] usb 1-1: Using ep0 maxpacket: 32 [ 1541.627594][T22513] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1541.651566][T18557] Attempt to read inode for relocated directory [ 1541.671684][T22513] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1541.718958][T22513] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1541.771011][T22513] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1541.832383][T22513] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1541.862317][T22513] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1541.901491][T22513] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1541.951331][T22513] usb 1-1: Product: syz [ 1541.960956][T22513] usb 1-1: Manufacturer: syz [ 1541.981160][T22513] usb 1-1: SerialNumber: syz [ 1542.014730][T22513] usb 1-1: config 0 descriptor?? [ 1542.041966][T22513] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1542.099292][T22513] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1542.174725][T18549] loop4: detected capacity change from 0 to 32768 [ 1542.278130][T18549] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1542.288394][T22513] usb 1-1: USB disconnect, device number 18 [ 1542.315584][T22513] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1542.368359][T18568] loop5: detected capacity change from 0 to 2048 [ 1542.382810][T18549] JBD2: Ignoring recovery information on journal [ 1542.391813][T18568] EXT4-fs: Ignoring removed oldalloc option [ 1542.470269][T18549] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1542.485908][T18568] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 1542.511837][T18568] System zones: 0-7 [ 1542.529883][T18568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.606891][T18568] EXT4-fs error (device loop5): ext4_ext_precache:637: inode #2: comm syz.5.20255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1542.680872][T18568] EXT4-fs (loop5): Remounting filesystem read-only [ 1542.756657][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.790371][T22203] ocfs2: Unmounting device (7,4) on (node local) [ 1542.954137][T18578] netlink: 'syz.1.20260': attribute type 10 has an invalid length. [ 1542.974946][T18578] netlink: 'syz.1.20260': attribute type 10 has an invalid length. [ 1543.001690][T18578] dummy0: left promiscuous mode [ 1543.006761][T18578] dummy0: left allmulticast mode [ 1543.009933][T18580] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1543.026777][T18580] CUSE: unknown device info "3ܟ,̘" [ 1543.038236][T18580] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1543.038236][T18580] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1543.070628][T18578] team0: Port device dummy0 removed [ 1543.092091][T18580] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1543.110551][T18578] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1543.119442][T18580] CUSE: DEVNAME unspecified [ 1543.240866][T18584] loop4: detected capacity change from 0 to 128 [ 1543.281016][ T27] audit: type=1326 audit(2000000061.680:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.317415][ T27] audit: type=1326 audit(2000000061.680:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.321712][ T23] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1543.383495][ T27] audit: type=1326 audit(2000000061.720:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.390249][T18584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 1543.412775][ T27] audit: type=1326 audit(2000000061.720:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e5259c582 code=0x7ffc0000 [ 1543.438798][ T27] audit: type=1326 audit(2000000061.720:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e5259c582 code=0x7ffc0000 [ 1543.461890][ T27] audit: type=1326 audit(2000000061.770:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.478014][T18584] System zones: [ 1543.484971][ T27] audit: type=1326 audit(2000000061.770:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.503544][T18584] 1-3 [ 1543.511596][ T27] audit: type=1326 audit(2000000061.830:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.540108][ T27] audit: type=1326 audit(2000000061.830:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.5.20262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f2e5259c819 code=0x7ffc0000 [ 1543.554616][T18584] , 19-19, 35-36 [ 1543.582859][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1543.604447][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.629659][T18584] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1543.657406][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1543.670893][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.679426][T18584] ext4 filesystem being mounted at /3119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.704829][ T23] usb 1-1: config 0 descriptor?? [ 1543.843972][T18597] loop5: detected capacity change from 0 to 64 [ 1543.956030][T22203] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1544.010161][T19704] ------------[ cut here ]------------ [ 1544.015954][T19704] kernel BUG at fs/hfs/inode.c:449! [ 1544.041516][T19704] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1544.047674][T19704] CPU: 1 PID: 19704 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1544.055320][T19704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1544.065563][T19704] Workqueue: writeback wb_workfn (flush-7:5) [ 1544.071575][T19704] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1544.077223][T19704] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1544.097900][T19704] RSP: 0018:ffffc9000474f340 EFLAGS: 00010293 [ 1544.103992][T19704] RAX: ffffffff825b5f5a RBX: ffff88805a4fa228 RCX: ffff888023ce9e00 [ 1544.112126][T19704] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 1544.120137][T19704] RBP: ffffc9000474f4d0 R08: ffff888023ce9e00 R09: 0000000000000003 [ 1544.128431][T19704] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1544.136522][T19704] R13: 1ffff920008e9e6c R14: ffff88805a4fa1d8 R15: 0000000000000000 [ 1544.144785][T19704] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1544.153735][T19704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1544.160415][T19704] CR2: 00007fff1b49adc0 CR3: 0000000018eca000 CR4: 00000000003506e0 [ 1544.168405][T19704] Call Trace: [ 1544.171805][T19704] [ 1544.174752][T19704] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1544.180255][T19704] ? __rwlock_init+0x150/0x150 [ 1544.185134][T19704] __writeback_single_inode+0x705/0xec0 [ 1544.190710][T19704] writeback_sb_inodes+0x7cd/0xf50 [ 1544.195855][T19704] ? queue_io+0x550/0x550 [ 1544.200300][T19704] ? rcu_is_watching+0x15/0xb0 [ 1544.205095][T19704] wb_writeback+0x46a/0xbf0 [ 1544.209626][T19704] ? queue_io+0x351/0x550 [ 1544.214132][T19704] ? percpu_ref_tryget+0x250/0x250 [ 1544.219256][T19704] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1544.225250][T19704] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.230479][T19704] wb_workfn+0x400/0xe60 [ 1544.234762][T19704] ? inode_wait_for_writeback+0x230/0x230 [ 1544.240702][T19704] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1544.246725][T19704] ? read_lock_is_recursive+0x20/0x20 [ 1544.252210][T19704] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.257518][T19704] ? process_scheduled_works+0x96f/0x15d0 [ 1544.263338][T19704] ? process_scheduled_works+0x96f/0x15d0 [ 1544.269071][T19704] process_scheduled_works+0xa5d/0x15d0 [ 1544.274742][T19704] ? worker_attach_to_pool+0x380/0x380 [ 1544.280216][T19704] ? assign_work+0x3d2/0x5d0 [ 1544.284827][T19704] worker_thread+0xa55/0xfc0 [ 1544.289485][T19704] kthread+0x2fa/0x390 [ 1544.293568][T19704] ? pr_cont_work+0x560/0x560 [ 1544.298272][T19704] ? kthread_blkcg+0xd0/0xd0 [ 1544.302963][T19704] ret_from_fork+0x48/0x80 [ 1544.307396][T19704] ? kthread_blkcg+0xd0/0xd0 [ 1544.311998][T19704] ret_from_fork_asm+0x11/0x20 [ 1544.316781][T19704] [ 1544.319950][T19704] Modules linked in: [ 1544.323864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.357401][T19704] ---[ end trace 0000000000000000 ]--- [ 1544.363183][T19704] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1544.368952][T19704] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1544.382137][ T23] isku 0003:1E7D:319C.0003: unbalanced collection at end of report description [ 1544.398186][T19704] RSP: 0018:ffffc9000474f340 EFLAGS: 00010293 [ 1544.398216][T19704] RAX: ffffffff825b5f5a RBX: ffff88805a4fa228 RCX: ffff888023ce9e00 [ 1544.398232][T19704] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 1544.398245][T19704] RBP: ffffc9000474f4d0 R08: ffff888023ce9e00 R09: 0000000000000003 [ 1544.398259][T19704] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1544.447180][ T23] isku 0003:1E7D:319C.0003: parse failed [ 1544.452681][T19704] R13: 1ffff920008e9e6c R14: ffff88805a4fa1d8 R15: 0000000000000000 [ 1544.461531][T19704] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1544.470637][T19704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1544.478106][T19704] CR2: 00007f2c29de7158 CR3: 0000000026d8c000 CR4: 00000000003506f0 [ 1544.486362][ T23] isku: probe of 0003:1E7D:319C.0003 failed with error -22 [ 1544.498701][T19704] Kernel panic - not syncing: Fatal exception [ 1544.515897][T19704] Kernel Offset: disabled [ 1544.520279][T19704] Rebooting in 86400 seconds..