last executing test programs: 2m43.091190777s ago: executing program 0 (id=1679): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa01, 0x63c, 0x1, 0x2, 0xd59f86, 0x2ea, 0x3f, 0x19ef, 0x0, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xe, 0x9}}) 2m42.967154549s ago: executing program 0 (id=1681): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc847c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00000000000000988309e751e0eec20f77"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) 2m42.758039482s ago: executing program 0 (id=1685): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='L', 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 2m42.644825123s ago: executing program 0 (id=1688): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 2m42.543881465s ago: executing program 0 (id=1689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 2m42.095388561s ago: executing program 0 (id=1699): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x9, 0xd, 0x401, 0x4}, 0x3, r1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m41.739714066s ago: executing program 32 (id=1699): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x9, 0xd, 0x401, 0x4}, 0x3, r1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m28.934697785s ago: executing program 4 (id=2342): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000082, &(0x7f0000000f40)={[{@utf8no}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@fat=@uid}, {@shortname_mixed}, {@fat=@errors_remount}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x25, 0x35d, &(0x7f0000001100)="$eJzs3T1onGUcAPD/9U1ySbDmBqHodLoJpTQVB50SSoViBq0cfi0eNvUjdxZyeBCHXG5Ri5PiIujkVkHHzuIg4ubgagWpiovdCg2+cnfvfd/pFbxY8fcbwp//8/zf5yMved+E5MlLjdi5uBiXbt68EcvLuVjYOLsRt3JRiGORRMdBTPTe0uQ8AHCXu5Wm8Xva8fe9P1jtRp79APDf1X7+v3K8n8iP9/ns5JTiK/fMbV4AwPzM+P3/UxOzl+c2LQBgjsae/w8NNY/8mH+h9zsBHSvznyAA8I975vkXntzcirhQLC5HVN+pl+qleLzfvnkpXotKbMfpWIvDiM6LQudtofXxifNb504XW34uRKlVUS9FVBv1UudNYTNp1+djPdaikNWnvfqkVb/eri9GxEGjPX5Uc/XSYqxm4/+wGttxJtbivrH6iPNb587kswuUqt36RkQzlruLaM3/VKzFdy/H5ajExWjV9ue/v14snk23hurrV/PtfgAAAAAAAAAAAAAAAAAAAAAAMA+nij2F3vk3abVRf/vCaIfC0Pk4pU5zdj5Qs3M+UJrvns5zJRk9H2j4fJ56aSGO/asrBwAAAAAAAAAAAAAAAAAAgLtHbW8pypXK9m5t762dwaAxkHnjm8+/Wolu00JW+nrSr4osOXSdbseBKyfRGyLtlafJUJ8sSCK6nQ/KV6/1ZjzYJ99bxVh5K8iPNeWyOZUrleMP/vTxpKo/WsFBO5PE2LYMB7ls/IGm6r2txHJEHE6rmh68mxvbsaHgepqm08r3PxrNZEcxNO54GjMEX9949f5HaicebWe+zEZ6+OTas9c//PTXnXIlmp2VVCpLu7XDdIYrRy5ivCkZ2I1cts+5CXfC5KDZzzR3a3vl5Pvfnnvg/W9HOieT7590MPPm9LG+GM0sdYJcRKG7CX811cVjMePOv3i7d/fe+SfuxCcb5Wv7P/4ya9XAFwkHdQAAAAAAAAAAAAAAAAAAwJHo/9HvSEOapo2pVY89PfeJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAR6v///4GgOZaZJbjdiPGm/PZubergK0e6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sf+DAAA//9co3rM") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m28.497329692s ago: executing program 4 (id=2349): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 1m28.351406424s ago: executing program 4 (id=2352): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 1m28.119940827s ago: executing program 4 (id=2355): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)={[{@umask}, {@type={'type', 0x3d, "ee149ac3"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m28.008573379s ago: executing program 4 (id=2358): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) 1m27.506578357s ago: executing program 4 (id=2363): io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = eventfd2(0x9, 0x80801) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x7, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x1, r1}]) 1m27.050160123s ago: executing program 33 (id=2363): io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = eventfd2(0x9, 0x80801) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x7, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x1, r1}]) 4.472878804s ago: executing program 5 (id=3244): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.311923977s ago: executing program 5 (id=3247): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0x6, 0x10, 0x0, 0x0}], 0x1}) 3.158856324s ago: executing program 1 (id=3264): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010080, &(0x7f0000000300)=ANY=[@ANYBLOB='discard=0x0000000000000001,grpquota,iocharset=macromanian,errors=continue,quota,noquota,integrity\x00noquota,umask=0x7fffffffffffffff,umask=0x0000000000000002,nodiscard,iocharset=cp869,errors=continue,discard,dont_appraise,mask=MAY_EXEC,measure,smackfstransmute=errors=continue,func=CREDS_CHECK,audit,fowner=', @ANYRES8, @ANYRESOCT], 0x1, 0x61c9, &(0x7f000000d7c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.107897204s ago: executing program 2 (id=3265): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@clear_cache}, {@noacl}, {@nossd}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 2.244411267s ago: executing program 1 (id=3266): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) 1.919999401s ago: executing program 2 (id=3268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}}, 0x0) 1.876135312s ago: executing program 1 (id=3270): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x83, 0x7, 0xa, 0x4b, "fb01120000007800", "39e80000000000000000e30f00"}) 1.682933185s ago: executing program 1 (id=3272): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001000)=""/91) 1.654338086s ago: executing program 5 (id=3273): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1534, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r0, &(0x7f0000000140)=""/194, 0xc2) 1.34003085s ago: executing program 2 (id=3275): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.33985227s ago: executing program 5 (id=3276): unshare(0x2040400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0xfffffffb, 0x1}) 1.145920933s ago: executing program 5 (id=3278): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000140)={[{@localalloc={'localalloc', 0x3d, 0xf}}, {@heartbeat_none}, {@heartbeat_none}, {@inode64}, {@coherency_full}, {@resv_level={'resv_level', 0x3d, 0x20}}, {@err_cont}, {@user_xattr}, {@acl}, {@data_writeback}, {@preferred_slot={'preferred_slot', 0x3d, 0x7}}, {@journal_async_commit}]}, 0x1, 0x444c, &(0x7f00000088c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 876.879057ms ago: executing program 1 (id=3280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) 675.78361ms ago: executing program 1 (id=3282): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0x6, 0x10, 0x0, 0x0}], 0x1}) 675.48445ms ago: executing program 3 (id=3283): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) read$alg(r0, 0x0, 0x0) 585.029661ms ago: executing program 3 (id=3284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) 475.982763ms ago: executing program 2 (id=3285): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x19, r0) 419.974623ms ago: executing program 3 (id=3286): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 343.150245ms ago: executing program 2 (id=3287): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000029c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 312.366535ms ago: executing program 5 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3a12388a8", 0x1b}], 0x2) 231.871026ms ago: executing program 3 (id=3289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) 152.605947ms ago: executing program 3 (id=3290): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) 124.712347ms ago: executing program 2 (id=3291): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2ea, &(0x7f0000000700)="$eJzs3T9v004cx/HPOUn/q7/82v70k1hAhUqwVBQYEEsQysrOhIAmlSqiItoiAQsFMSIeADtPgZmZBcQTgImJB5Dt0F3OiZM6TgNJ3Yb3S2pkn+/OX2NffF+j1gLw17pV/fb+6g/3Y6SCCpJuSJGkGako6T/9P/NkZ397v1GvZXVU8C3cj1GrpTlUZ3OnntbUtfMtgrJbK4ZyjJW19ub3zmrTWptnOMiJH/0pImk6jE2/fVLG5IF0Nu8YjlvyBJummnqqxRzDAQCcAOH+H4XbxIIvMooiaS3c9ifq/t/MO4DRutY4VJQ9jzdN6aP8/d/P7qxx5/cfv6mT7/kUzm2P4izxKMGUetan1LqyuiaYZlBW6WOJZre2i1rffKlapFeqBIlqK/6z1rp0YwOiXU3JTTP0762k23Oto/Ezyl5xSFvbjfq0W0iJf3m4Pf4588l8MXdNWe9Ua8//ita40+TPVLnnTEUlF//l/j3O+1aulkLaX6lUoq4q//qdnAl7CAYc5Ux6RpLsM35ocNCOICtOv++lrkcN8dFtDGi1nNaqLM221vq0WulqVQhXwvrmo0bmo5TxiA/RvDV3zKp+6oOqifl/5OJbU2JkZn3VG18zXBmt45lKr9n+t+nprjNczvXWnB7quBAUh6r9Rg90XYt7z54/LDQa9V23cD9l4fHCrgklpddSap3xLxSUUUcHnRLrvLD2qD3bcQZ/aaQduu+PdokbPmmV3Shrl0THfZombsGNlJRN1c/KuiBPz4K1Up9N4/qawkmyZ+KTHgpmcw4Ix83Nu0wr//Mz+TCr8ymS+yhnzNMH/mdRoseNdgbXPRVc8p9zQ2Vw8/0zuMQer/TJGX3Odf6idCFRaJS5x3KIc0KYqr7qHs//AQAAAAAAAAAAAAAAAAAATpsR/jpB/JuMhzblfIgAAAAAAAAAAAAAAAAAAAAAAJx6v/X+37S/Ee/f/1se5ft/FzLeaJL9ZiAAR/IrAAD//3OzdsI=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) sync() 0s ago: executing program 3 (id=3292): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6e6140, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) kernel console output (not intermixed with test programs): 844754][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.855836][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 322.865093][ T27] usb 4-1: config 1 has no interface number 1 [ 322.875639][ T27] usb 4-1: string descriptor 0 read error: -22 [ 322.882677][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.891920][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.915350][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 322.927478][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 322.934776][ T27] usb 4-1: MIDIStreaming interface descriptor not found [ 322.955017][ T61] team0 (unregistering): Port device team_slave_0 removed [ 322.992307][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 323.010210][ T9] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 323.017850][ T9] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 323.048208][ T9] nzxt-kraken2 0003:1E71:170E.002F: item fetching failed at offset 4/5 [ 323.065580][ T9] nzxt-kraken2 0003:1E71:170E.002F: hid parse failed with -22 [ 323.079728][ T9] nzxt-kraken2: probe of 0003:1E71:170E.002F failed with error -22 [ 323.174176][ T9] usb 4-1: USB disconnect, device number 23 [ 323.214581][ T5851] usb 2-1: USB disconnect, device number 24 [ 323.225808][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 323.260991][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.274253][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 323.287078][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.310015][ T8] usb 3-1: config 0 descriptor?? [ 323.647898][ T50] Bluetooth: hci1: command tx timeout [ 323.758297][ T8] kye 0003:0458:5005.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 323.791322][ T8] kye 0003:0458:5005.0030: unknown main item tag 0x2 [ 323.817578][ T8] kye 0003:0458:5005.0030: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 323.829238][ T8] kye 0003:0458:5005.0030: tablet-enabling feature report not found [ 323.837296][ T8] kye 0003:0458:5005.0030: tablet enabling failed [ 324.032597][ T8] usb 3-1: USB disconnect, device number 28 [ 324.106170][T11940] team0: Port device team_slave_0 added [ 324.162620][T11940] team0: Port device team_slave_1 added [ 324.268335][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.275362][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.316554][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.364365][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.391145][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.417556][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.508449][T11940] hsr_slave_0: entered promiscuous mode [ 324.514991][T11940] hsr_slave_1: entered promiscuous mode [ 324.524419][T11940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.532841][T11940] Cannot create hsr debugfs directory [ 324.608084][ T5831] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 324.808257][ T5831] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 324.834144][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.858591][ T5831] usb 4-1: config 0 descriptor?? [ 324.869887][ T5831] go7007: probe of 4-1:0.0 failed with error -12 [ 324.903577][T11940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.924921][T11940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.938278][T11940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.952044][T11940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.097689][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.111244][ T5831] usb 4-1: USB disconnect, device number 24 [ 325.161366][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.189845][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.197113][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.216949][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.224218][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.708141][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.717079][ T50] Bluetooth: hci1: command tx timeout [ 325.724905][T12045] loop1: detected capacity change from 0 to 32768 [ 325.820430][T12045] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 325.832330][T12062] loop3: detected capacity change from 0 to 4096 [ 325.845252][ T1092] (kworker/u4:8,1092,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1 [ 325.845314][T12062] EXT4-fs (loop3): Test dummy encryption mode enabled [ 325.873990][T12064] loop2: detected capacity change from 0 to 1024 [ 325.905206][T12062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.024393][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 326.139807][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.484411][T11940] veth0_vlan: entered promiscuous mode [ 326.528124][T11940] veth1_vlan: entered promiscuous mode [ 326.635740][T11940] veth0_macvtap: entered promiscuous mode [ 326.663034][T11940] veth1_macvtap: entered promiscuous mode [ 326.688266][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.700495][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.711994][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.724309][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.735390][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.746434][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.771906][T11940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.803816][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.828729][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.859236][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.874059][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.889712][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.901642][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.913478][T11940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.926755][T12096] tipc: Enabling of bearer rejected, media not registered [ 326.945587][T11940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.966257][T11940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.975113][T11940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.001006][T11940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.195050][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.218456][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.274185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.286931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.327939][T12106] loop3: detected capacity change from 0 to 1024 [ 327.341017][T12107] loop1: detected capacity change from 0 to 256 [ 327.426946][ T12] hfsplus: b-tree write err: -5, ino 4 [ 327.452538][T12111] loop5: detected capacity change from 0 to 256 [ 327.547524][T12111] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 327.695989][ T5851] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 327.796184][ T50] Bluetooth: hci1: command tx timeout [ 327.876133][ T5859] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 327.893997][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 327.937069][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.952802][ T5851] usb 3-1: config 6 has an invalid interface number: 3 but max is 2 [ 327.970387][ T5851] usb 3-1: config 6 has an invalid interface number: 255 but max is 2 [ 327.985665][ T5851] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 328.015892][ T5851] usb 3-1: config 6 has no interface number 0 [ 328.022089][ T5851] usb 3-1: config 6 has no interface number 1 [ 328.051797][ T5851] usb 3-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 328.055860][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 328.080116][ T5851] usb 3-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 328.088614][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.105256][ T5851] usb 3-1: config 6 interface 2 has no altsetting 0 [ 328.124953][ T5859] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 328.125603][ T5851] usb 3-1: config 6 interface 255 has no altsetting 0 [ 328.141009][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.146715][ T5859] usb 4-1: config 0 descriptor?? [ 328.188603][ T5851] usb 3-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 328.204534][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.223084][ T5851] usb 3-1: Product: syz [ 328.233210][ T5851] usb 3-1: Manufacturer: syz [ 328.243316][ T5851] usb 3-1: SerialNumber: syz [ 328.255838][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 328.453616][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.483410][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.486841][ T5851] usb 3-1: selecting invalid altsetting 0 [ 328.504681][ T23] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 328.512569][ T5851] usb 3-1: Could not set interface, error -22 [ 328.524078][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.534884][ T5851] usb 3-1: USB disconnect, device number 29 [ 328.546688][ T23] usb 2-1: config 0 descriptor?? [ 328.588698][ T5859] megaworld 0003:07B5:0312.0031: item fetching failed at offset 10/11 [ 328.611420][ T5859] megaworld 0003:07B5:0312.0031: parse failed [ 328.618152][ T5859] megaworld: probe of 0003:07B5:0312.0031 failed with error -22 [ 328.782196][T12133] loop5: detected capacity change from 0 to 32768 [ 328.792320][T12133] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2439 (12133) [ 328.797341][ T5859] usb 4-1: USB disconnect, device number 25 [ 328.818934][T12133] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.829421][T12133] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 328.838564][T12133] BTRFS info (device loop5): using free space tree [ 328.878540][T12133] BTRFS info (device loop5): enabling ssd optimizations [ 328.885704][T12133] BTRFS info (device loop5): auto enabling async discard [ 328.986039][ T23] itetech 0003:06CB:2968.0032: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.1-1/input0 [ 328.986575][T11940] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.267242][ T5851] usb 2-1: USB disconnect, device number 25 [ 329.434800][T12158] loop5: detected capacity change from 0 to 512 [ 329.465189][T12158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 329.494264][T12158] System zones: 1-12 [ 329.512166][T12158] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.2445: Directory hole found for htree index block 0 [ 329.532594][T12158] EXT4-fs (loop5): Remounting filesystem read-only [ 329.540463][T12158] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 329.549312][T12158] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 329.559772][T12158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.624946][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.908818][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2454'. [ 330.695988][T12204] loop2: detected capacity change from 0 to 512 [ 330.707353][T12204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.738962][T12204] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2466: invalid block [ 330.775743][T12204] EXT4-fs (loop2): Remounting filesystem read-only [ 330.783367][T12204] EXT4-fs (loop2): 2 truncates cleaned up [ 330.796798][T12204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.870546][T12192] loop5: detected capacity change from 0 to 32768 [ 330.950266][T12192] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.997693][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.196737][T12192] XFS (loop5): Ending clean mount [ 331.221518][T12192] XFS (loop5): Quotacheck needed: Please wait. [ 331.308163][T12192] XFS (loop5): Quotacheck: Done. [ 331.365578][T12211] loop3: detected capacity change from 0 to 32768 [ 331.406168][T11940] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.418391][T12211] read_mapping_page failed! [ 331.494101][ T113] read_mapping_page failed! [ 332.123273][T12247] loop1: detected capacity change from 0 to 4096 [ 332.153307][T12247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.222748][T12252] loop5: detected capacity change from 0 to 4096 [ 332.238648][T12252] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 332.253143][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.350184][ T28] audit: type=1800 audit(1752816270.334:145): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2483" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 332.487889][T12261] netlink: 'syz.1.2488': attribute type 3 has an invalid length. [ 332.513592][T12261] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 332.541798][T12261] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2488'. [ 332.572599][T12261] NCSI netlink: No device for ifindex 0 [ 332.738693][T12267] loop5: detected capacity change from 0 to 512 [ 332.767337][T12267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 332.783626][T12267] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.950987][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 333.194784][T12259] loop3: detected capacity change from 0 to 40427 [ 333.239905][T12259] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 333.253039][T12259] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 333.299253][T12259] F2FS-fs (loop3): invalid crc value [ 333.415917][T12266] loop1: detected capacity change from 0 to 40427 [ 333.447847][T12288] loop5: detected capacity change from 0 to 64 [ 333.466852][T12266] F2FS-fs (loop1): invalid crc value [ 333.484068][T12259] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 333.491211][T12266] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.497882][T12259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 333.626716][T12266] F2FS-fs (loop1): Start checkpoint disabled! [ 333.639235][T12266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 333.706804][ T28] audit: type=1800 audit(1752816271.695:146): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2490" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 333.797112][T12266] syz.1.2490: attempt to access beyond end of device [ 333.797112][T12266] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 334.019592][ T12] kworker/u4:1: attempt to access beyond end of device [ 334.019592][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 334.034237][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 334.041425][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 334.292756][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.308487][T12307] loop3: detected capacity change from 0 to 4096 [ 334.363239][T12308] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.512438][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 334.525194][ T8] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.542447][ T8] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.572479][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 334.579218][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 334.607900][T12314] loop3: detected capacity change from 0 to 256 [ 334.608733][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.635080][ T8] usb 6-1: config 0 descriptor?? [ 334.666143][T12314] FAT-fs (loop3): Directory bread(block 64) failed [ 334.676253][T12305] loop2: detected capacity change from 0 to 32768 [ 334.686223][T12314] FAT-fs (loop3): Directory bread(block 65) failed [ 334.695925][T12314] FAT-fs (loop3): Directory bread(block 66) failed [ 334.705580][T12314] FAT-fs (loop3): Directory bread(block 67) failed [ 334.712570][T12314] FAT-fs (loop3): Directory bread(block 68) failed [ 334.720132][T12314] FAT-fs (loop3): Directory bread(block 69) failed [ 334.728347][T12314] FAT-fs (loop3): Directory bread(block 70) failed [ 334.735694][T12305] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 334.742555][T12314] FAT-fs (loop3): Directory bread(block 71) failed [ 334.763890][T12314] FAT-fs (loop3): Directory bread(block 72) failed [ 334.788769][T12314] FAT-fs (loop3): Directory bread(block 73) failed [ 334.803554][T12326] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2512'. [ 334.818761][T12305] XFS (loop2): Ending clean mount [ 334.829749][T12305] XFS (loop2): Quotacheck needed: Please wait. [ 334.985530][T12305] XFS (loop2): Quotacheck: Done. [ 335.061021][ T8] wacom 0003:056A:0094.0033: Using device in hidraw-only mode [ 335.087350][ T8] wacom 0003:056A:0094.0033: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 335.133852][ T5790] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 335.277379][ T8] usb 6-1: USB disconnect, device number 2 [ 335.881891][T12355] loop1: detected capacity change from 0 to 32768 [ 335.936425][T12355] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 336.032691][T12355] XFS (loop1): Ending clean mount [ 336.047330][T12355] XFS (loop1): Quotacheck needed: Please wait. [ 336.049840][T12380] netlink: 'syz.3.2535': attribute type 28 has an invalid length. [ 336.121452][T12355] XFS (loop1): Quotacheck: Done. [ 336.317232][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 336.442731][T12390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.817103][T12401] loop3: detected capacity change from 0 to 128 [ 336.856284][T12401] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.879695][T12404] loop2: detected capacity change from 0 to 128 [ 336.903119][T12404] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 336.920793][T12401] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.961267][T12401] ext4 filesystem being mounted at /653/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.994643][T12401] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2542: No space for directory leaf checksum. Please run e2fsck -D. [ 337.047627][T12401] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.2542: checksumming directory block 0 [ 337.160024][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.184098][T12385] loop5: detected capacity change from 0 to 32768 [ 337.208482][T12385] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 337.226891][T12385] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 337.302859][T12385] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 337.440636][T12385] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 337.676721][T12428] loop3: detected capacity change from 0 to 1024 [ 337.690334][T12428] hfsplus: unable to parse mount options [ 337.766348][T12428] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 337.821258][T12428] CIFS mount error: No usable UNC path provided in device string! [ 337.821258][T12428] [ 337.851781][T12428] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 337.961138][ T5859] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 338.124795][T12441] syz.3.2552 (12441): /proc/12441/oom_adj is deprecated, please use /proc/12441/oom_score_adj instead. [ 338.165137][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.196181][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.218732][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.233252][ T5859] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.253909][T12444] loop1: detected capacity change from 0 to 2048 [ 338.256694][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.305165][ T5859] usb 3-1: config 0 descriptor?? [ 338.327482][T12444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.400062][T12444] MPI: mpi too large (113288 bits) [ 338.539025][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.726022][ T5859] plantronics 0003:047F:FFFF.0034: report is too long [ 338.740853][ T5859] plantronics 0003:047F:FFFF.0034: item 0 4 0 8 parsing failed [ 338.749277][ T5859] plantronics 0003:047F:FFFF.0034: parse failed [ 338.772959][ T5859] plantronics: probe of 0003:047F:FFFF.0034 failed with error -22 [ 338.820318][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 338.966477][ T8] usb 3-1: USB disconnect, device number 30 [ 339.010343][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 339.018355][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.036030][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.054864][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.080274][ T5859] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 339.090763][ T27] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 339.110225][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.126631][ T27] usb 6-1: config 0 descriptor?? [ 339.293669][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.305578][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.316425][ T5859] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 339.326367][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.345481][ T5859] usb 4-1: config 0 descriptor?? [ 339.558656][ T27] hid-generic 0003:0457:07DA.0035: item 0 4 0 11 parsing failed [ 339.577078][ T27] hid-generic: probe of 0003:0457:07DA.0035 failed with error -22 [ 339.772847][ T27] usb 6-1: USB disconnect, device number 3 [ 339.789264][ T5859] stadia 0003:18D1:9400.0036: item fetching failed at offset 4/5 [ 339.814871][ T5859] stadia 0003:18D1:9400.0036: parse failed [ 339.825414][ T5859] stadia: probe of 0003:18D1:9400.0036 failed with error -22 [ 339.848051][T12504] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2572'. [ 339.913158][T12506] devpts: called with bogus options [ 340.009530][ T5859] usb 4-1: USB disconnect, device number 26 [ 340.155305][T12514] loop1: detected capacity change from 0 to 256 [ 340.175129][T12514] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d) [ 340.320212][T12508] loop2: detected capacity change from 0 to 32768 [ 340.335797][T12508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2575 (12508) [ 340.355218][T12508] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.379350][T12508] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 340.388570][T12508] BTRFS info (device loop2): using free space tree [ 340.498443][T12508] BTRFS info (device loop2): enabling ssd optimizations [ 340.505579][T12508] BTRFS info (device loop2): auto enabling async discard [ 340.626674][ T5790] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.816556][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'. [ 340.843702][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2583'. [ 340.869269][T12537] netlink: 'syz.5.2583': attribute type 7 has an invalid length. [ 341.071551][T12543] loop5: detected capacity change from 0 to 1024 [ 341.196863][T12542] syz.5.2586: attempt to access beyond end of device [ 341.196863][T12542] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 341.239302][T12542] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 341.268994][T12542] hfsplus: unable to mark blocks free: error -5 [ 341.275687][T12542] hfsplus: can't free extent [ 341.587146][T12558] usb usb6: usbfs: process 12558 (syz.3.2593) did not claim interface 63 before use [ 341.614276][T12559] loop2: detected capacity change from 0 to 512 [ 341.624257][T12516] loop1: detected capacity change from 0 to 65536 [ 341.656270][T12561] loop5: detected capacity change from 0 to 1764 [ 341.665553][T12516] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 341.683403][T12559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.699520][T12559] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.700316][T12516] XFS (loop1): Ending clean mount [ 341.724077][T12559] EXT4-fs warning (device loop2): ext4_group_extend:1897: can't read last block, resize aborted [ 341.736506][T12516] XFS (loop1): Quotacheck needed: Please wait. [ 341.838081][T12516] XFS (loop1): Quotacheck: Done. [ 341.847634][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.011703][ T5782] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 342.011954][T12583] usb usb1: check_ctrlrecip: process 12583 (syz.3.2599) requesting ep 01 but needs 81 [ 342.709708][T12591] loop3: detected capacity change from 0 to 32768 [ 342.717961][T12591] XFS: noikeep mount option is deprecated. [ 342.757952][T12591] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.861567][T12597] loop2: detected capacity change from 0 to 32768 [ 342.864873][T12591] XFS (loop3): Ending clean mount [ 342.881538][T12591] XFS (loop3): Quotacheck needed: Please wait. [ 342.938310][T12597] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 342.958014][T12591] XFS (loop3): Quotacheck: Done. [ 343.052882][T12597] XFS (loop2): Ending clean mount [ 343.066749][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.101403][T12601] loop5: detected capacity change from 0 to 32768 [ 343.155568][ T5790] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 343.703484][ T28] audit: type=1326 audit(1752816281.700:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.1.2616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa742f8e9a9 code=0x0 [ 344.179330][T12640] xt_hashlimit: max too large, truncated to 1048576 [ 344.206070][T12640] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 344.912167][T12670] loop1: detected capacity change from 0 to 24 [ 344.928825][T12670] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 344.955198][T12670] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 345.387107][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 345.412445][T12685] raw_sendmsg: syz.5.2640 forgot to set AF_INET. Fix it! [ 345.544450][T12689] usb usb8: usbfs: process 12689 (syz.5.2642) did not claim interface 0 before use [ 345.599290][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.636981][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.667660][ T9] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 345.678454][T12679] loop3: detected capacity change from 0 to 32768 [ 345.696905][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.712361][ T9] usb 2-1: config 0 descriptor?? [ 345.728492][T12679] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 345.763285][T12679] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 345.841278][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 345.860819][T12700] loop5: detected capacity change from 0 to 64 [ 346.154261][ T9] greenasia 0003:0E8F:0012.0037: unknown main item tag 0x0 [ 346.169001][ T9] greenasia 0003:0E8F:0012.0037: unknown main item tag 0x0 [ 346.176309][ T9] greenasia 0003:0E8F:0012.0037: unknown main item tag 0x0 [ 346.204229][ T9] greenasia 0003:0E8F:0012.0037: unknown main item tag 0x0 [ 346.221992][ T9] greenasia 0003:0E8F:0012.0037: unknown main item tag 0x0 [ 346.239019][ T9] greenasia 0003:0E8F:0012.0037: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 346.260829][ T9] greenasia 0003:0E8F:0012.0037: no inputs found [ 346.367919][ T9] usb 2-1: USB disconnect, device number 26 [ 346.411076][T12710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.677045][T12706] loop2: detected capacity change from 0 to 32768 [ 346.684457][T12706] XFS: ikeep mount option is deprecated. [ 346.725455][T12713] loop3: detected capacity change from 0 to 4096 [ 346.739044][T12706] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 346.791431][T12713] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 346.801162][T12706] XFS (loop2): Ending clean mount [ 346.811774][T12713] ntfs3: loop3: Failed to load $Extend (-22). [ 346.824103][T12706] XFS (loop2): Quotacheck needed: Please wait. [ 346.830587][T12713] ntfs3: loop3: Failed to initialize $Extend. [ 346.934075][T12706] XFS (loop2): Quotacheck: Done. [ 347.098547][ T5790] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 347.797867][T12749] loop2: detected capacity change from 0 to 4096 [ 347.813415][T12737] loop5: detected capacity change from 0 to 32768 [ 347.829841][T12737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2660 (12737) [ 347.871680][T12737] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.886284][T12737] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 347.900167][T12737] BTRFS info (device loop5): turning on sync discard [ 347.916127][T12737] BTRFS info (device loop5): use zlib compression, level 3 [ 347.923595][T12737] BTRFS info (device loop5): turning off barriers [ 347.945903][T12737] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 347.967281][T12737] BTRFS info (device loop5): trying to use backup root at mount time [ 347.975452][T12737] BTRFS info (device loop5): enabling auto defrag [ 347.988724][ T28] audit: type=1800 audit(1752816285.982:148): pid=12749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2666" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 348.010879][T12737] BTRFS info (device loop5): max_inline at 0 [ 348.036100][T12737] BTRFS info (device loop5): using free space tree [ 348.115163][ T42] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 348.175327][T12737] BTRFS error (device loop5): failed to load root extent [ 348.195125][T12737] BTRFS warning (device loop5): try to load backup roots slot 1 [ 348.233767][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 348.259718][T12737] BTRFS warning (device loop5): couldn't read tree root [ 348.300151][T12737] BTRFS warning (device loop5): try to load backup roots slot 2 [ 348.321106][ T42] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 348.365722][T12737] BTRFS warning (device loop5): couldn't read tree root [ 348.383728][T12737] BTRFS warning (device loop5): try to load backup roots slot 3 [ 348.424665][T12737] BTRFS info (device loop5): enabling ssd optimizations [ 348.447037][T12737] BTRFS info (device loop5): rebuilding free space tree [ 348.455293][T12760] loop3: detected capacity change from 0 to 32768 [ 348.467771][T12760] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2671 (12760) [ 348.488424][T12737] BTRFS info (device loop5): checking UUID tree [ 348.507257][T12760] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 348.519355][T12760] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 348.533937][T12760] BTRFS info (device loop3): using free space tree [ 348.596883][T11940] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.673234][T12760] BTRFS info (device loop3): enabling ssd optimizations [ 348.705750][T12760] BTRFS info (device loop3): auto enabling async discard [ 348.766434][T12756] loop1: detected capacity change from 0 to 32768 [ 349.089877][T12776] loop2: detected capacity change from 0 to 40427 [ 349.117952][T12776] F2FS-fs (loop2): invalid crc value [ 349.139157][ T5788] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 349.140850][T12776] F2FS-fs (loop2): Found nat_bits in checkpoint [ 349.345657][T12776] F2FS-fs (loop2): Start checkpoint disabled! [ 349.372520][T12776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 349.507978][ T28] audit: type=1800 audit(1752816287.502:149): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2672" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 349.601983][T12776] syz.2.2672: attempt to access beyond end of device [ 349.601983][T12776] loop2: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 349.826656][T12810] loop1: detected capacity change from 0 to 512 [ 349.866186][T12810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 349.902532][T12810] EXT4-fs (loop1): 1 truncate cleaned up [ 349.926044][T12810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.000048][ T12] kworker/u4:1: attempt to access beyond end of device [ 350.000048][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 350.025032][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.034246][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 350.071029][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 350.134684][ T5851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 350.273603][T12826] vcan0: MTU too low for tipc bearer [ 350.289609][T12826] tipc: Enabling of bearer rejected, failed to enable media [ 350.314610][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 350.331076][ T5851] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 350.350624][ T5851] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 350.384502][ T5851] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 350.393649][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.637063][ T5851] usb 6-1: string descriptor 0 read error: -71 [ 350.658121][ T5851] usb 6-1: USB disconnect, device number 4 [ 350.724376][ T5859] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 350.785766][T12830] loop3: detected capacity change from 0 to 32768 [ 350.810733][T12830] syz.3.2690: attempt to access beyond end of device [ 350.810733][T12830] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 350.825559][T12830] lbmIODone: I/O error in JFS log [ 350.831129][T12830] *** Log Format Error ! *** [ 350.836489][T12830] lmLogInit: exit(-22) [ 350.840829][T12830] lmLogOpen: exit(-22) [ 350.908097][ T5859] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 350.935515][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.946638][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.966943][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 350.996466][ T5859] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 351.006284][ T5859] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 351.024190][ T5859] usb 2-1: Manufacturer: syz [ 351.035355][ T5859] usb 2-1: config 0 descriptor?? [ 351.229749][T12842] loop2: detected capacity change from 0 to 512 [ 351.260478][T12842] EXT4-fs: Ignoring removed bh option [ 351.274164][T12842] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.284597][T12842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 351.331919][T12842] EXT4-fs (loop2): 1 truncate cleaned up [ 351.352138][T12842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.444792][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.454371][ T5859] appleir 0003:05AC:8243.0038: item fetching failed at offset 0/1 [ 351.471210][ T5859] appleir 0003:05AC:8243.0038: parse failed [ 351.484050][ T5859] appleir: probe of 0003:05AC:8243.0038 failed with error -22 [ 351.658713][ T5859] usb 2-1: USB disconnect, device number 27 [ 351.677564][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2700'. [ 351.715441][T12838] loop3: detected capacity change from 0 to 40427 [ 351.748814][T12838] F2FS-fs (loop3): invalid crc value [ 351.760660][T12838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 351.871268][T12838] F2FS-fs (loop3): Start checkpoint disabled! [ 351.889184][T12838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 351.950193][ T28] audit: type=1800 audit(1752816289.944:150): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2691" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 351.980228][T12838] syz.3.2691: attempt to access beyond end of device [ 351.980228][T12838] loop3: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 352.234376][ T12] kworker/u4:1: attempt to access beyond end of device [ 352.234376][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 352.259546][T12868] loop1: detected capacity change from 0 to 128 [ 352.263602][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 352.273089][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 352.294245][T12868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 352.308541][T12868] System zones: 1-3, 19-19, 35-36 [ 352.314081][T12852] loop2: detected capacity change from 0 to 32768 [ 352.325043][T12868] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.353174][T12868] ext4 filesystem being mounted at /660/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.442693][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.453546][ T27] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 352.664987][ T27] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 352.683334][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.694105][T12874] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 352.704556][ T27] usb 6-1: config 0 descriptor?? [ 353.139665][ T27] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 353.169893][ T27] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 353.178236][ T27] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 353.191252][ T27] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 353.198565][ T27] macally 0003:060B:0001.0039: unknown main item tag 0x0 [ 353.212629][ T27] macally 0003:060B:0001.0039: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.5-1/input0 [ 353.225422][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.311527][T12880] loop3: detected capacity change from 0 to 32768 [ 353.313053][ T5851] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 353.319176][T12880] XFS: ikeep mount option is deprecated. [ 353.340668][T12880] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.342199][ T8] usb 6-1: USB disconnect, device number 5 [ 353.373252][T12880] XFS (loop3): Ending clean mount [ 353.383137][T12880] XFS (loop3): Quotacheck needed: Please wait. [ 353.425058][T12880] XFS (loop3): Quotacheck: Done. [ 353.460201][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.515605][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 353.522588][ T5851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.532130][ T5851] usb 3-1: config 0 has no interface number 0 [ 353.538356][ T5851] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.549348][ T5851] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.559223][ T5851] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 353.568348][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.578716][ T5851] usb 3-1: config 0 descriptor?? [ 353.924189][T12896] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2715'. [ 353.933667][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2715'. [ 353.995312][ T5851] hid (null): invalid report_count 1405183649 [ 354.202691][ T5851] uclogic 0003:28BD:0071.003A: failed retrieving string descriptor #100: -71 [ 354.222640][ T5851] uclogic 0003:28BD:0071.003A: failed retrieving pen parameters: -71 [ 354.230828][ T5851] uclogic 0003:28BD:0071.003A: pen probing failed: -71 [ 354.238386][ T5851] uclogic 0003:28BD:0071.003A: failed probing parameters: -71 [ 354.247497][ T5851] uclogic: probe of 0003:28BD:0071.003A failed with error -71 [ 354.258360][ T5851] usb 3-1: USB disconnect, device number 31 [ 354.412460][T12908] loop1: detected capacity change from 0 to 1764 [ 354.430258][T12898] loop5: detected capacity change from 0 to 40427 [ 354.443244][T12898] F2FS-fs (loop5): invalid crc value [ 354.451915][T12898] F2FS-fs (loop5): Found nat_bits in checkpoint [ 354.510690][T12898] F2FS-fs (loop5): Start checkpoint disabled! [ 354.518387][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2723'. [ 354.529429][T12898] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 354.571384][ T28] audit: type=1800 audit(1752816292.565:151): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2714" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 354.591954][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.639743][T12898] syz.5.2714: attempt to access beyond end of device [ 354.639743][T12898] loop5: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 354.975758][ T42] kworker/u4:2: attempt to access beyond end of device [ 354.975758][ T42] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 355.000607][ T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 355.010053][ T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 355.748905][T12920] loop1: detected capacity change from 0 to 40427 [ 355.785400][T12920] F2FS-fs (loop1): invalid crc value [ 355.820660][T12924] loop2: detected capacity change from 0 to 32768 [ 355.838513][T12939] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2734'. [ 355.840496][T12920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 355.862853][T12924] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 355.880652][T12939] netlink: 'syz.3.2734': attribute type 3 has an invalid length. [ 355.924726][T12924] XFS (loop2): Ending clean mount [ 355.932592][T12946] loop5: detected capacity change from 0 to 2048 [ 355.947356][T12946] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.949322][T12920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 355.983669][ T28] audit: type=1800 audit(1752816293.986:152): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2727" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 356.034063][T12924] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 356.071280][T12953] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.083243][ T5782] syz-executor: attempt to access beyond end of device [ 356.083243][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.100423][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 356.214379][ T5790] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 356.921790][T12969] trusted_key: encrypted_key: insufficient parameters specified [ 356.958637][T12955] loop3: detected capacity change from 0 to 40427 [ 356.969584][T12955] F2FS-fs (loop3): invalid crc value [ 356.984372][T12955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 357.060267][T12955] F2FS-fs (loop3): Start checkpoint disabled! [ 357.075810][T12955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 357.155538][ T28] audit: type=1800 audit(1752816295.156:153): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2737" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 357.181452][ T5859] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 357.217758][T12955] syz.3.2737: attempt to access beyond end of device [ 357.217758][T12955] loop3: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 357.319739][T12979] loop1: detected capacity change from 0 to 4096 [ 357.362583][T12979] NILFS (loop1): invalid segment: Checksum error in segment payload [ 357.376491][T12979] NILFS (loop1): trying rollback from an earlier position [ 357.387504][ T5859] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 357.399445][T12981] loop2: detected capacity change from 0 to 256 [ 357.405885][ T5859] usb 6-1: config 0 has no interface number 0 [ 357.423270][ T5859] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 357.432668][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.443113][ T5859] usb 6-1: Product: syz [ 357.449349][ T5859] usb 6-1: Manufacturer: syz [ 357.454724][ T5859] usb 6-1: SerialNumber: syz [ 357.463913][ T61] kworker/u4:5: attempt to access beyond end of device [ 357.463913][ T61] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 357.465774][ T5859] usb 6-1: config 0 descriptor?? [ 357.479445][ T61] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 357.484464][T12979] NILFS (loop1): recovery complete [ 357.495938][ T61] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 357.502623][T12982] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.537108][T12981] FAT-fs (loop2): Directory bread(block 64) failed [ 357.553331][T12981] FAT-fs (loop2): Directory bread(block 65) failed [ 357.560153][T12981] FAT-fs (loop2): Directory bread(block 66) failed [ 357.568462][T12981] FAT-fs (loop2): Directory bread(block 67) failed [ 357.579018][T12981] FAT-fs (loop2): Directory bread(block 68) failed [ 357.608902][T12981] FAT-fs (loop2): Directory bread(block 69) failed [ 357.620496][T12981] FAT-fs (loop2): Directory bread(block 70) failed [ 357.639660][T12981] FAT-fs (loop2): Directory bread(block 71) failed [ 357.650431][T12981] FAT-fs (loop2): Directory bread(block 72) failed [ 357.660567][T12981] FAT-fs (loop2): Directory bread(block 73) failed [ 357.708365][ T5859] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 357.728358][ T5859] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 357.750885][ T5859] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 357.769151][ T5859] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 357.791096][ T5859] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 358.136000][ T5859] usb 6-1: USB disconnect, device number 6 [ 358.145800][ T5859] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 358.172256][ T5859] keyspan 6-1:0.133: device disconnected [ 358.197309][T12996] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 358.210740][T12996] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 358.217378][T12996] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 358.241432][T13001] support for cryptoloop has been removed. Use dm-crypt instead. [ 358.249478][T12996] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 358.259635][T12996] comedi comedi3: 8255: I/O port conflict (0x40088d6,4) [ 358.286552][T12996] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 358.294227][T12996] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 358.307227][T12996] comedi comedi3: 8255: I/O port conflict (0x100810,4) [ 358.315203][T12996] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 358.327458][T12996] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 358.350663][T12996] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 358.370623][T12996] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 358.383366][T12996] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 358.390034][T12996] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 358.409174][T12996] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 358.439291][T12996] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 358.460471][T12996] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 358.467084][T12996] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 358.486915][T12996] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 358.525782][T13010] bridge1: entered promiscuous mode [ 358.541396][T13010] bridge1: entered allmulticast mode [ 358.559272][T13010] team0: Port device bridge1 added [ 358.673333][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 358.820646][ T5859] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 359.000625][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 359.023170][ T5859] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 359.046439][ T5859] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 359.057751][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 359.073967][ T5859] usb 2-1: config 1 has no interface number 0 [ 359.074613][T13034] loop5: detected capacity change from 0 to 512 [ 359.083372][ T5859] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.105827][ T5859] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 359.106077][T13034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.126829][ T5859] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 359.145000][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.179171][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 359.197893][T13034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.221109][T13034] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.272431][T13034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 359.377822][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.388945][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 359.606959][T13030] loop3: detected capacity change from 0 to 40427 [ 359.622211][T13030] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 359.634790][T13030] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 359.654741][T13030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 359.758922][T13030] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 359.777716][T13030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 359.819043][ T5859] usb 2-1: USB disconnect, device number 28 [ 359.827658][ T5859] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 359.840204][T13030] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 360.254015][T13062] loop2: detected capacity change from 0 to 512 [ 360.294705][T13062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.339558][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 360.508970][T13054] loop5: detected capacity change from 0 to 32768 [ 360.542656][T13054] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.577642][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.634753][T13054] XFS (loop5): Ending clean mount [ 360.700953][T11940] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.966119][T13089] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 361.069340][ T5859] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 361.264928][T13099] overlayfs: missing 'workdir' [ 361.270294][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 361.286096][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.313871][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.334657][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.362536][ T5859] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 361.383119][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.402761][ T28] audit: type=1326 audit(1752816299.398:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13074 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0b98e9a9 code=0x7fc00000 [ 361.451171][T13101] loop2: detected capacity change from 0 to 64 [ 361.460373][ T5859] usb 2-1: config 0 descriptor?? [ 361.623080][T13105] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2800'. [ 361.892773][ T5859] hid-generic 0003:0457:07DA.003B: item 0 4 0 11 parsing failed [ 361.915690][ T5859] hid-generic: probe of 0003:0457:07DA.003B failed with error -22 [ 362.061964][T13117] loop2: detected capacity change from 0 to 128 [ 362.074496][ T5859] kernel write not supported for file /input/event2 (pid: 5859 comm: kworker/1:5) [ 362.084945][T13117] EXT4-fs: Ignoring removed oldalloc option [ 362.095923][T13117] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 362.110696][T13093] loop5: detected capacity change from 0 to 65536 [ 362.119107][T13117] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.137803][ T8] usb 2-1: USB disconnect, device number 29 [ 362.159964][T13117] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz.2.2806: No space for directory leaf checksum. Please run e2fsck -D. [ 362.188811][T13117] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #11: comm syz.2.2806: checksumming directory block 0 [ 362.208748][T13093] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 362.236841][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.271959][T13093] XFS (loop5): Ending clean mount [ 362.280169][T13093] XFS (loop5): Quotacheck needed: Please wait. [ 362.333071][T13093] XFS (loop5): Quotacheck: Done. [ 362.437353][T11940] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 362.648565][T13136] loop2: detected capacity change from 0 to 32768 [ 362.664378][T13136] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 362.701293][T13136] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 362.777675][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 362.905268][T13144] loop1: detected capacity change from 0 to 512 [ 362.919280][T13144] EXT4-fs: Ignoring removed i_version option [ 362.930320][T13144] EXT4-fs: Ignoring removed nobh option [ 362.943000][T13144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.974551][T13144] EXT4-fs (loop1): 1 truncate cleaned up [ 362.985298][T13144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.079953][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.534427][ T5859] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 363.717876][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 363.725374][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.737912][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 363.739118][ T5859] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 363.767842][ T5859] usb 2-1: config 13 has no interface number 0 [ 363.774130][ T5859] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 363.805139][ T5859] usb 2-1: config 13 interface 50 has no altsetting 0 [ 363.818320][ T5859] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 363.827957][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.836035][ T5859] usb 2-1: Product: syz [ 363.857806][ T5859] usb 2-1: Manufacturer: syz [ 363.863364][ T5859] usb 2-1: SerialNumber: syz [ 363.876699][T13160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.940042][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 363.963107][ T8] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 363.987740][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.010635][ T8] usb 3-1: Product: syz [ 364.014896][ T8] usb 3-1: Manufacturer: syz [ 364.024850][ T28] audit: type=1326 audit(1752816302.020:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.5.2811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f64b8e9a9 code=0x0 [ 364.047223][ T8] usb 3-1: SerialNumber: syz [ 364.058879][ T8] usb 3-1: config 0 descriptor?? [ 364.074509][ T8] usbtouchscreen: probe of 3-1:0.0 failed with error -32 [ 364.101814][ T5859] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 364.112700][ T5859] usb 2-1: MIDIStreaming interface descriptor not found [ 364.162414][ T5859] usb 2-1: USB disconnect, device number 30 [ 364.233059][T13166] loop3: detected capacity change from 0 to 65536 [ 364.245662][T13166] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 364.278217][ T23] usb 3-1: USB disconnect, device number 32 [ 364.295193][T13166] XFS (loop3): Ending clean mount [ 364.302500][T13166] XFS (loop3): Quotacheck needed: Please wait. [ 364.352412][T13166] XFS (loop3): Quotacheck: Done. [ 364.387922][ T5788] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 364.929389][T13189] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2829'. [ 365.117636][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 365.254433][T13201] loop2: detected capacity change from 0 to 2048 [ 365.274294][T13185] loop1: detected capacity change from 0 to 32768 [ 365.276502][T13201] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 365.284276][T13185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2827 (13185) [ 365.315600][T13201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.333084][T13185] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.354308][T13185] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 365.367346][T13185] BTRFS info (device loop1): turning on sync discard [ 365.374313][T13185] BTRFS info (device loop1): use zlib compression, level 3 [ 365.384702][T13185] BTRFS info (device loop1): turning off barriers [ 365.391806][T13185] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 365.428250][T13185] BTRFS info (device loop1): trying to use backup root at mount time [ 365.446953][T13185] BTRFS info (device loop1): enabling auto defrag [ 365.453532][T13185] BTRFS info (device loop1): max_inline at 0 [ 365.474629][ T28] audit: type=1326 audit(1752816303.480:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.5.2838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f64b8e9a9 code=0x0 [ 365.476980][T13185] BTRFS info (device loop1): using free space tree [ 365.546330][ T1080] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 365.560916][T13185] BTRFS error (device loop1): failed to load root extent [ 365.569278][T13185] BTRFS warning (device loop1): try to load backup roots slot 1 [ 365.579161][ T1080] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 365.595292][T13185] BTRFS warning (device loop1): couldn't read tree root [ 365.604014][T13185] BTRFS warning (device loop1): try to load backup roots slot 2 [ 365.612475][ T1080] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 365.626462][T13185] BTRFS warning (device loop1): couldn't read tree root [ 365.634283][T13185] BTRFS warning (device loop1): try to load backup roots slot 3 [ 365.662321][T13185] BTRFS info (device loop1): enabling ssd optimizations [ 365.671857][T13185] BTRFS info (device loop1): rebuilding free space tree [ 365.711067][T13185] BTRFS info (device loop1): checking UUID tree [ 365.791045][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.347538][T13235] loop3: detected capacity change from 0 to 32768 [ 366.416158][T13235] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 366.504609][ T5859] IPVS: starting estimator thread 0... [ 366.578013][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.603540][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 366.616388][T13250] IPVS: using max 18 ests per chain, 43200 per kthread [ 367.038884][T13254] loop2: detected capacity change from 0 to 32768 [ 367.493214][T13260] loop5: detected capacity change from 0 to 32768 [ 367.538056][T13261] loop3: detected capacity change from 0 to 32768 [ 367.554920][T13261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2853 (13261) [ 367.557167][T13260] syz.5.2861: attempt to access beyond end of device [ 367.557167][T13260] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 367.585231][T13260] lbmIODone: I/O error in JFS log [ 367.590909][T13260] *** Log Format Error ! *** [ 367.596121][T13265] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2855'. [ 367.606513][T13260] lmLogInit: exit(-22) [ 367.610730][T13260] lmLogOpen: exit(-22) [ 367.623094][T13261] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 367.646951][T13261] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 367.672477][T13261] BTRFS info (device loop3): turning on sync discard [ 367.679395][T13261] BTRFS info (device loop3): use zlib compression, level 3 [ 367.696050][T13261] BTRFS info (device loop3): turning off barriers [ 367.706055][T13261] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 367.719122][T13261] BTRFS info (device loop3): trying to use backup root at mount time [ 367.725174][T13269] loop1: detected capacity change from 0 to 256 [ 367.727523][T13261] BTRFS info (device loop3): enabling auto defrag [ 367.740457][T13261] BTRFS info (device loop3): max_inline at 0 [ 367.747786][T13261] BTRFS info (device loop3): using free space tree [ 367.748538][T13269] FAT-fs (loop1): Unrecognized mount option "coDepage=865" or missing value [ 367.799642][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 367.818172][T13261] BTRFS error (device loop3): failed to load root extent [ 367.825573][T13261] BTRFS warning (device loop3): try to load backup roots slot 1 [ 367.834322][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 367.847124][T13269] hugetlbfs: Bad value for 'size' [ 367.852697][T13261] BTRFS warning (device loop3): couldn't read tree root [ 367.866480][T13261] BTRFS warning (device loop3): try to load backup roots slot 2 [ 367.877427][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 367.902822][T13261] BTRFS warning (device loop3): couldn't read tree root [ 367.915904][T13261] BTRFS warning (device loop3): try to load backup roots slot 3 [ 367.946063][ T5859] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 367.976147][T13261] BTRFS info (device loop3): enabling ssd optimizations [ 367.995380][T13261] BTRFS info (device loop3): rebuilding free space tree [ 368.040924][T13261] BTRFS info (device loop3): checking UUID tree [ 368.147948][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 368.155060][ T5788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.176715][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 368.196202][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 368.233401][ T5859] usb 3-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 368.253213][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.292712][ T5859] usb 3-1: config 0 descriptor?? [ 368.315846][T13267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.438487][T13299] loop5: detected capacity change from 0 to 1024 [ 368.552088][ T61] hfsplus: b-tree write err: -5, ino 4 [ 368.758607][ T5859] hid-generic 0003:046D:E104.003C: unbalanced collection at end of report description [ 368.796636][ T5859] hid-generic: probe of 0003:046D:E104.003C failed with error -22 [ 368.873096][T13315] loop5: detected capacity change from 0 to 256 [ 368.920516][T13315] FAT-fs (loop5): Directory bread(block 64) failed [ 368.940336][T13315] FAT-fs (loop5): Directory bread(block 65) failed [ 368.950727][T13315] FAT-fs (loop5): Directory bread(block 66) failed [ 368.969648][ T8] usb 3-1: USB disconnect, device number 33 [ 368.975915][T13315] FAT-fs (loop5): Directory bread(block 67) failed [ 368.983476][T13315] FAT-fs (loop5): Directory bread(block 68) failed [ 368.997170][T13315] FAT-fs (loop5): Directory bread(block 69) failed [ 369.003897][T13315] FAT-fs (loop5): Directory bread(block 70) failed [ 369.010728][T13315] FAT-fs (loop5): Directory bread(block 71) failed [ 369.017486][T13315] FAT-fs (loop5): Directory bread(block 72) failed [ 369.027642][T13315] FAT-fs (loop5): Directory bread(block 73) failed [ 369.049867][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2875'. [ 369.346601][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2879'. [ 369.677725][T13322] loop3: detected capacity change from 0 to 40427 [ 369.689020][T13322] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 369.727524][T13322] F2FS-fs (loop3): invalid crc value [ 369.753920][T13322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 369.867508][T13322] F2FS-fs (loop3): Start checkpoint disabled! [ 369.883343][T13322] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 370.012044][T13329] loop1: detected capacity change from 0 to 32768 [ 370.132693][T13332] loop5: detected capacity change from 0 to 32768 [ 370.142249][T13332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2881 (13332) [ 370.162893][T13332] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.173892][T13332] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 370.189655][T13332] BTRFS info (device loop5): metadata ratio 2 [ 370.197856][T13332] BTRFS info (device loop5): allowing degraded mounts [ 370.208838][ T12] kworker/u4:1: attempt to access beyond end of device [ 370.208838][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 370.212775][T13332] BTRFS info (device loop5): force zlib compression, level 3 [ 370.244590][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 370.251866][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 370.260188][T13332] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 370.270584][T13332] BTRFS info (device loop5): use zstd compression, level 3 [ 370.278088][T13332] BTRFS info (device loop5): force clearing of disk cache [ 370.285818][T13332] BTRFS info (device loop5): max_inline at 0 [ 370.291844][T13332] BTRFS info (device loop5): using free space tree [ 370.434590][T13332] BTRFS info (device loop5): enabling ssd optimizations [ 370.470851][T13332] BTRFS info (device loop5): rebuilding free space tree [ 370.660745][T13340] loop2: detected capacity change from 0 to 32768 [ 370.667735][T11940] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.834491][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 370.884102][T13359] ubi31: attaching mtd0 [ 370.890745][T13359] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 371.054831][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 371.076301][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.097111][ T23] usb 2-1: config 179 has no interface number 0 [ 371.103453][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 371.140800][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 371.167703][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 371.203120][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 371.224428][ T23] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.259224][ T23] usb 2-1: config 179 interface 65 has no altsetting 0 [ 371.259272][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 371.259299][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.290439][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input47 [ 371.324508][ T5141] input input47: unable to receive magic message: -110 [ 371.339192][ T5141] input input47: unable to receive magic message: -32 [ 371.348918][ T5141] input input47: unable to receive magic message: -32 [ 371.355579][ T5141] input input47: unable to receive magic message: -32 [ 371.577444][T13377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2896'. [ 371.660901][T13383] loop5: detected capacity change from 0 to 128 [ 371.671848][T13383] EXT4-fs: Ignoring removed nobh option [ 371.683545][T13383] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.701598][T13383] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.718096][T13357] input input47: unable to receive magic message: -32 [ 371.738240][ T27] usb 2-1: USB disconnect, device number 31 [ 371.738302][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.772963][ T27] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 371.793450][T11940] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.944772][T13396] loop2: detected capacity change from 0 to 1764 [ 372.047512][ T27] IPVS: starting estimator thread 0... [ 372.071010][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2905'. [ 372.143680][T13401] IPVS: using max 18 ests per chain, 43200 per kthread [ 372.158267][T13406] loop2: detected capacity change from 0 to 1024 [ 372.753826][T13431] loop5: detected capacity change from 0 to 4096 [ 372.783452][ T27] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 372.941086][T13440] loop5: detected capacity change from 0 to 512 [ 372.979407][T13440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 373.003328][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 373.013771][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.034012][T13440] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.2923: bg 0: block 5: invalid block bitmap [ 373.040799][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.079966][ T27] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 373.080127][T13440] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 373.099449][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.123148][T13440] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2923: invalid indirect mapped block 3 (level 2) [ 373.138930][ T27] usb 2-1: config 0 descriptor?? [ 373.166300][T13440] EXT4-fs (loop5): 2 truncates cleaned up [ 373.192920][T13440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.248599][T13440] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.2923: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 373.370197][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.445230][T13435] loop2: detected capacity change from 0 to 40427 [ 373.455197][T13435] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 373.469242][T13435] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 373.474556][T13437] loop3: detected capacity change from 0 to 32768 [ 373.488117][T13437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2922 (13437) [ 373.501223][T13435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 373.521482][T13437] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.542162][T13437] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 373.561744][T13437] BTRFS info (device loop3): using free space tree [ 373.572151][ T27] hid-picolcd 0003:04D8:F002.003D: unknown main item tag 0x0 [ 373.620913][T13435] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 373.628673][T13435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 373.648959][T13437] BTRFS info (device loop3): enabling ssd optimizations [ 373.656514][T13437] BTRFS info (device loop3): auto enabling async discard [ 373.673166][ T27] hid-picolcd 0003:04D8:F002.003D: No report with id 0xf3 found [ 373.683355][ T27] hid-picolcd 0003:04D8:F002.003D: No report with id 0xf4 found [ 373.685947][T13435] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 373.742960][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.776602][ T27] usb 2-1: USB disconnect, device number 32 [ 374.828234][T13473] loop5: detected capacity change from 0 to 32768 [ 375.042337][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 375.095394][T13476] loop3: detected capacity change from 0 to 32768 [ 375.152315][T13476] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.222079][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 375.234261][ T8] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 375.252222][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.259251][T13482] loop2: detected capacity change from 0 to 40427 [ 375.269179][ T8] usb 2-1: config 0 descriptor?? [ 375.273374][T13482] F2FS-fs (loop2): invalid crc value [ 375.290377][T13482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 375.336420][T13476] XFS (loop3): Ending clean mount [ 375.353538][T13482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 375.435883][ T28] audit: type=1800 audit(1752816313.435:157): pid=13482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2931" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 375.461224][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.474029][ T5790] syz-executor: attempt to access beyond end of device [ 375.474029][ T5790] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 375.521974][ T5790] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 375.723354][ T8] thrustmaster 0003:044F:B65A.003E: hidraw0: USB HID v0.03 Device [HID 044f:b65a] on usb-dummy_hcd.1-1/input0 [ 375.762285][ T8] thrustmaster 0003:044F:B65A.003E: no inputs found [ 375.901552][ T23] usb 2-1: USB disconnect, device number 33 [ 375.961167][T13505] loop3: detected capacity change from 0 to 2048 [ 375.978689][T13505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.171939][ T5851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.186553][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.213155][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.334245][T13502] loop5: detected capacity change from 0 to 40427 [ 376.342376][T13502] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 376.351882][T13502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 376.378212][T13502] F2FS-fs (loop5): Found nat_bits in checkpoint [ 376.381545][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 376.493715][T13502] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 376.509260][T13502] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 376.582667][T13523] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2944'. [ 376.593553][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.605070][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.613257][T13502] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 376.625125][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.654104][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 376.697905][T13527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 376.699230][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 376.783297][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.801252][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.809324][ T8] usb 4-1: Product: syz [ 376.821220][ T8] usb 4-1: Manufacturer: syz [ 376.843439][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 376.848709][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 376.851952][T13529] loop2: detected capacity change from 0 to 1024 [ 376.875435][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 376.896712][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 376.917141][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 377.027287][T13534] loop1: detected capacity change from 0 to 256 [ 377.073271][ T8] usb 4-1: USB disconnect, device number 27 [ 377.311280][T13541] loop5: detected capacity change from 0 to 1024 [ 377.332985][T13541] hfsplus: bad catalog entry type [ 377.389887][ T12] hfsplus: b-tree write err: -5, ino 4 [ 377.422822][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'. [ 377.724816][T13537] loop1: detected capacity change from 0 to 40427 [ 377.745668][T13537] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 377.756667][T13537] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.812179][T13537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 377.858001][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2961'. [ 377.894049][T13537] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 377.905023][T13537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 377.987826][ T5782] syz-executor: attempt to access beyond end of device [ 377.987826][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 378.027461][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 378.247391][T13574] loop5: detected capacity change from 0 to 64 [ 378.263870][T13574] syz.5.2969: attempt to access beyond end of device [ 378.263870][T13574] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 378.278312][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 378.289343][T13574] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 378.348157][T13577] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 378.363676][T13576] IPVS: stopping backup sync thread 13577 ... [ 378.486689][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 378.506487][ T9] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 378.526784][ T9] usb 3-1: Product: syz [ 378.536867][ T9] usb 3-1: Manufacturer: syz [ 378.553653][ T9] usb 3-1: SerialNumber: syz [ 378.565724][ T9] usb 3-1: config 0 descriptor?? [ 378.595303][T13583] loop5: detected capacity change from 0 to 1024 [ 378.692705][ T42] hfsplus: b-tree write err: -5, ino 4 [ 378.727044][T13589] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2975'. [ 378.751033][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.934295][T13599] loop3: detected capacity change from 0 to 128 [ 379.130146][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 379.202595][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 379.222319][ T9] asix: probe of 3-1:0.0 failed with error -71 [ 379.236194][ T9] usb 3-1: USB disconnect, device number 34 [ 379.264591][T13612] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2986'. [ 379.320039][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 379.337402][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.357559][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.387738][ T23] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 379.404167][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.423760][ T23] usb 6-1: config 0 descriptor?? [ 379.848719][ T23] elecom 0003:056E:00E6.003F: unknown main item tag 0xe [ 379.862408][ T23] elecom 0003:056E:00E6.003F: unknown main item tag 0x0 [ 379.894763][ T23] elecom 0003:056E:00E6.003F: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.5-1/input0 [ 379.973009][T13614] loop3: detected capacity change from 0 to 40427 [ 379.993476][T13614] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 380.014167][T13614] F2FS-fs (loop3): invalid crc value [ 380.042844][T13614] F2FS-fs (loop3): Found nat_bits in checkpoint [ 380.106698][ T23] usb 6-1: USB disconnect, device number 7 [ 380.166473][T13614] F2FS-fs (loop3): Start checkpoint disabled! [ 380.177070][T13614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 380.246514][T13622] loop1: detected capacity change from 0 to 40427 [ 380.257137][T13622] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 380.266585][T13622] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 380.283060][T13622] F2FS-fs (loop1): invalid crc value [ 380.292924][T13622] F2FS-fs (loop1): Found nat_bits in checkpoint [ 380.317185][ T1080] kworker/u4:7: attempt to access beyond end of device [ 380.317185][ T1080] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 380.333312][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 380.343846][ T1080] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 380.363249][T13622] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 380.370410][T13622] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.439675][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 380.578659][ T12] kworker/u4:1: attempt to access beyond end of device [ 380.578659][ T12] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 380.641067][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 380.661223][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.682936][ T9] usb 3-1: config 0 has no interface number 0 [ 380.710229][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 380.715382][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 380.719999][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.744394][ T9] usb 3-1: Product: syz [ 380.748709][ T9] usb 3-1: Manufacturer: syz [ 380.754954][ T9] usb 3-1: SerialNumber: syz [ 380.766897][ T9] usb 3-1: config 0 descriptor?? [ 380.775830][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 380.799138][ T9] usb 3-1: selecting invalid altsetting 1 [ 380.819360][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 380.844500][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 380.871863][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 380.880761][ T9] usb 3-1: media controller created [ 380.914242][T13640] loop3: detected capacity change from 0 to 64 [ 380.926324][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.203743][T13646] loop5: detected capacity change from 0 to 2048 [ 381.204943][T13644] loop1: detected capacity change from 0 to 4096 [ 381.224158][T13646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.259819][T13644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.306879][T13652] loop3: detected capacity change from 0 to 256 [ 381.326133][T13644] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 381.345947][T13652] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 381.385326][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.929539][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.009025][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 382.026813][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 382.050901][T13629] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 382.146324][ T9] usb 3-1: USB disconnect, device number 35 [ 382.917237][T13697] loop5: detected capacity change from 0 to 128 [ 382.955925][T13697] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 382.984880][T13697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.188090][ T5859] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 383.354486][T13711] loop5: detected capacity change from 0 to 2048 [ 383.368129][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 383.378522][T13711] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 383.390777][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 383.412410][ T5859] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 383.427994][T13713] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.435533][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.457772][ T5859] usb 3-1: config 0 descriptor?? [ 383.464019][T13696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.560936][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 383.580097][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.614595][ T23] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 383.630028][ T23] usb 4-1: config 13 has no interface number 0 [ 383.643622][ T23] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 383.656335][ T23] usb 4-1: config 13 interface 50 has no altsetting 0 [ 383.668103][ T23] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 383.684151][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.693650][ T23] usb 4-1: Product: syz [ 383.702973][ T23] usb 4-1: Manufacturer: syz [ 383.709652][ T23] usb 4-1: SerialNumber: syz [ 383.733299][T13702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 383.896917][ T5859] ntrig 0003:1B96:000E.0040: unbalanced delimiter at end of report description [ 383.917777][ T5859] ntrig 0003:1B96:000E.0040: parse failed [ 383.925002][ T5859] ntrig: probe of 0003:1B96:000E.0040 failed with error -22 [ 383.964264][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 383.973493][ T23] usb 4-1: MIDIStreaming interface descriptor not found [ 384.021677][ T23] usb 4-1: USB disconnect, device number 28 [ 384.113594][ T5859] usb 3-1: USB disconnect, device number 36 [ 384.196485][T13731] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3040'. [ 384.238210][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.309606][T13733] loop1: detected capacity change from 0 to 1024 [ 384.324187][T13735] loop5: detected capacity change from 0 to 256 [ 384.348837][T13733] hfsplus: bad catalog entry type [ 384.977429][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 385.169022][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.194747][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.215279][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.247062][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 385.267808][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.288761][ T9] usb 6-1: config 0 descriptor?? [ 385.461294][T13738] loop1: detected capacity change from 0 to 32768 [ 385.488973][T13738] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.3043 (13738) [ 385.543620][T13738] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 385.575550][T13738] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 385.601503][T13738] BTRFS info (device loop1): using free space tree [ 385.720412][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.735329][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.752982][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.765495][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.775912][ T5851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.801541][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.814524][T13738] BTRFS info (device loop1): enabling ssd optimizations [ 385.821907][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.833872][T13738] BTRFS info (device loop1): auto enabling async discard [ 385.841258][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.859059][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.866214][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.896909][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.904048][ T9] hid-rmi 0003:06CB:81A7.0041: unknown main item tag 0x0 [ 385.926494][ T9] hid-rmi 0003:06CB:81A7.0041: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 385.946461][ T9] usb 6-1: USB disconnect, device number 8 [ 385.947131][ T23] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 386.047255][ T5782] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 386.166699][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 386.197567][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 386.241453][ T23] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 386.256570][ T23] usb 3-1: config 13 has no interface number 0 [ 386.266711][ T23] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 386.296518][ T23] usb 3-1: config 13 interface 50 has no altsetting 0 [ 386.356591][ T23] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 386.365804][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.391708][ T23] usb 3-1: Product: syz [ 386.395946][ T23] usb 3-1: Manufacturer: syz [ 386.406944][ T23] usb 3-1: SerialNumber: syz [ 386.452571][T13763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 386.688167][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 386.699134][ T23] usb 3-1: MIDIStreaming interface descriptor not found [ 386.799980][ T23] usb 3-1: USB disconnect, device number 37 [ 387.229632][T13812] bridge0: port 3(syz_tun) entered blocking state [ 387.244140][T13812] bridge0: port 3(syz_tun) entered disabled state [ 387.251529][T13812] syz_tun: entered allmulticast mode [ 387.259211][T13812] syz_tun: entered promiscuous mode [ 387.267824][T13812] bridge0: port 3(syz_tun) entered blocking state [ 387.275143][T13812] bridge0: port 3(syz_tun) entered forwarding state [ 387.495410][T13816] loop3: detected capacity change from 0 to 4096 [ 387.624278][T13816] ntfs3: loop3: failed to convert "0080" to cp862 [ 387.648268][T13816] ntfs3: loop3: failed to convert name for inode 1e. [ 387.687488][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.932542][T13828] tmpfs: Cannot change global quota limit on remount [ 388.220282][T13820] loop2: detected capacity change from 0 to 32768 [ 388.253288][T13820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3075 (13820) [ 388.309026][T13820] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.330759][T13820] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 388.355897][T13820] BTRFS info (device loop2): metadata ratio 2 [ 388.372299][T13820] BTRFS info (device loop2): allowing degraded mounts [ 388.392529][T13820] BTRFS info (device loop2): force zlib compression, level 3 [ 388.418967][T13820] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 388.449964][T13820] BTRFS info (device loop2): use zstd compression, level 3 [ 388.465454][T13820] BTRFS info (device loop2): force clearing of disk cache [ 388.482985][T13820] BTRFS info (device loop2): max_inline at 0 [ 388.495413][T13820] BTRFS info (device loop2): using free space tree [ 388.592788][T13832] loop5: detected capacity change from 0 to 32768 [ 388.637469][T13832] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 388.675673][T13820] BTRFS info (device loop2): enabling ssd optimizations [ 388.697329][T13820] BTRFS info (device loop2): rebuilding free space tree [ 388.781520][T13834] loop3: detected capacity change from 0 to 32768 [ 388.798458][T11940] ocfs2: Unmounting device (7,5) on (node local) [ 388.876663][T13834] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 389.013748][T13834] XFS (loop3): Ending clean mount [ 389.021955][T13834] XFS (loop3): Quotacheck needed: Please wait. [ 389.122311][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.223246][T13834] XFS (loop3): Quotacheck: Done. [ 389.467637][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 389.808811][T13867] loop2: detected capacity change from 0 to 128 [ 389.900624][T13867] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.915355][T13867] ext4 filesystem being mounted at /724/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.918820][T13865] loop5: detected capacity change from 0 to 32768 [ 390.014816][T13865] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.086477][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.241553][T13865] XFS (loop5): Ending clean mount [ 390.248706][T13838] loop1: detected capacity change from 0 to 65536 [ 390.287563][T13838] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 390.362931][T13838] XFS (loop1): Ending clean mount [ 390.385842][T11940] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.490598][ T5782] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 390.722475][T13893] loop2: detected capacity change from 0 to 4096 [ 390.731824][T13893] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 390.989958][T13897] loop2: detected capacity change from 0 to 1024 [ 391.029829][T13899] loop5: detected capacity change from 0 to 256 [ 391.068665][T13897] hfsplus: bad catalog entry type [ 391.076343][T13899] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 391.192600][ T61] hfsplus: b-tree write err: -5, ino 4 [ 391.322427][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3097'. [ 391.755399][T13927] loop5: detected capacity change from 0 to 512 [ 391.810144][T13927] EXT4-fs (loop5): 1 orphan inode deleted [ 391.825274][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 391.852089][T13927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.873514][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 391.911049][T13927] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.944023][T13925] loop3: detected capacity change from 0 to 4096 [ 391.971229][T13925] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 392.041402][T13939] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 392.062096][T13939] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3112'. [ 392.076522][T13939] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 392.081712][T13925] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 392.089161][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.107906][T13939] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3112'. [ 392.204243][ T48] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 392.211246][ T5788] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 392.230306][ T5788] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 392.246665][ T5788] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 392.254434][ T61] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 392.284682][T13944] sp0: Synchronizing with TNC [ 392.405603][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 392.416162][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 392.427853][T13952] netlink: 'syz.3.3116': attribute type 6 has an invalid length. [ 392.432296][T13950] loop1: detected capacity change from 0 to 2048 [ 392.436945][T13954] loop5: detected capacity change from 0 to 256 [ 392.452463][T13954] exfat: Deprecated parameter 'utf8' [ 392.458468][T13954] exfat: Deprecated parameter 'namecase' [ 392.466120][T13950] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.466266][T13954] exfat: Deprecated parameter 'namecase' [ 392.503115][T13955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.508436][T13954] exfat: Deprecated parameter 'utf8' [ 392.555250][T13957] loop2: detected capacity change from 0 to 128 [ 392.563579][T13954] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 392.605346][T13957] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.639444][T13960] loop3: detected capacity change from 0 to 512 [ 392.643044][T13957] ext4 filesystem being mounted at /736/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.651093][T13960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 392.669163][ T28] audit: type=1800 audit(1752816330.684:158): pid=13954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3119" name="file1" dev="loop5" ino=1048802 res=0 errno=0 [ 392.700222][T13960] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3121: bad orphan inode 131083 [ 392.734680][T13960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.799635][T13963] loop1: detected capacity change from 0 to 512 [ 392.812947][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.848748][T13963] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3122: bad orphan inode 11 [ 392.870447][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.906127][T13963] ext4_test_bit(bit=10, block=4) = 1 [ 392.911490][T13963] is_bad_inode(inode)=0 [ 392.953538][T13963] NEXT_ORPHAN(inode)=2080374784 [ 392.958467][T13963] max_ino=32 [ 392.961703][T13963] i_nlink=0 [ 392.983612][T13963] EXT4-fs (loop1): 1 truncate cleaned up [ 392.990696][T13963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.102231][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.377778][T13987] loop3: detected capacity change from 0 to 512 [ 393.420498][T13987] EXT4-fs: Ignoring removed i_version option [ 393.444027][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.450300][T13991] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 393.500470][T13987] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.3133: corrupted in-inode xattr: overlapping e_value [ 393.508116][T13995] nbd: must specify a size in bytes for the device [ 393.549313][T13997] loop5: detected capacity change from 0 to 128 [ 393.559850][T13987] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3133: couldn't read orphan inode 15 (err -117) [ 393.595939][T13987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.655101][T13994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 393.755049][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.881276][T14010] loop2: detected capacity change from 0 to 512 [ 393.905344][T14010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0002] [ 393.928899][T14008] loop3: detected capacity change from 0 to 4096 [ 393.940288][T14010] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3143: corrupted in-inode xattr: e_value size too large [ 393.957487][T14013] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.977279][T14010] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3143: couldn't read orphan inode 15 (err -117) [ 394.005584][T14010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.022710][ T5851] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 394.061520][ T28] audit: type=1800 audit(1752816332.075:159): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3143" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 394.218637][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.222683][ T5851] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.251337][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.285858][ T5851] usb 2-1: config 0 descriptor?? [ 394.303969][ T5851] cp210x 2-1:0.0: cp210x converter detected [ 394.357011][T14023] loop5: detected capacity change from 0 to 1024 [ 394.382052][T14023] hfsplus: bad catalog entry type [ 394.416381][ T61] hfsplus: b-tree write err: -5, ino 4 [ 394.642569][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 394.714799][ T5851] usb 2-1: cp210x converter now attached to ttyUSB0 [ 394.822605][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 394.830287][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.843901][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 394.853521][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.866702][ T23] usb 4-1: config 0 descriptor?? [ 394.917840][ T5859] usb 2-1: USB disconnect, device number 34 [ 394.936720][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.956717][ T5859] cp210x 2-1:0.0: device disconnected [ 394.979202][T14031] loop5: detected capacity change from 0 to 32768 [ 395.026949][T14031] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 395.077380][T14031] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 395.116894][T14031] XFS (loop5): Starting recovery (logdev: internal) [ 395.148907][T14031] XFS (loop5): Ending recovery (logdev: internal) [ 395.159155][T14031] XFS (loop5): Quotacheck needed: Please wait. [ 395.220769][T14031] XFS (loop5): Quotacheck: Done. [ 395.304710][T14045] loop2: detected capacity change from 0 to 4096 [ 395.306220][ T23] wacom 0003:056A:003F.0042: unknown main item tag 0x0 [ 395.318588][ T23] wacom 0003:056A:003F.0042: unknown main item tag 0x0 [ 395.335482][ T23] wacom 0003:056A:003F.0042: unknown main item tag 0x0 [ 395.343901][ T23] wacom 0003:056A:003F.0042: unknown main item tag 0x0 [ 395.357250][T11940] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 395.362324][ T5851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.369952][ T23] wacom 0003:056A:003F.0042: unknown main item tag 0x0 [ 395.391241][T14045] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 395.391458][ T23] wacom 0003:056A:003F.0042: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 395.420589][T14045] ntfs3: loop2: failed to convert "0000" to maccroatian [ 395.535021][ T5830] usb 4-1: USB disconnect, device number 29 [ 395.837427][T14057] loop2: detected capacity change from 0 to 2048 [ 395.860403][T14057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.866332][T14059] loop5: detected capacity change from 0 to 256 [ 395.892790][T14059] exfat: Deprecated parameter 'utf8' [ 395.906100][T14059] exfat: Deprecated parameter 'namecase' [ 395.912320][T14059] exfat: Deprecated parameter 'utf8' [ 395.926649][T14061] loop1: detected capacity change from 0 to 256 [ 395.930257][T14059] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 395.934736][T14061] exfat: Deprecated parameter 'namecase' [ 395.974984][T14061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 396.432260][T14077] loop1: detected capacity change from 0 to 1024 [ 396.441666][ T5859] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 396.664126][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.689485][T14069] loop3: detected capacity change from 0 to 32768 [ 396.698441][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.724091][ T5859] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 396.742241][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.743914][T14069] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 396.762538][ T5859] usb 3-1: config 0 descriptor?? [ 396.795137][T14091] loop5: detected capacity change from 0 to 2048 [ 396.816996][T14091] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 396.839659][T14091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.849203][T14069] XFS (loop3): Ending clean mount [ 396.930923][ T5788] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 397.191110][ T5859] saitek 0003:06A3:0CCD.0043: unknown main item tag 0x1 [ 397.221457][ T5859] saitek 0003:06A3:0CCD.0043: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 397.396729][ T23] usb 3-1: USB disconnect, device number 38 [ 397.483411][T14097] loop1: detected capacity change from 0 to 32768 [ 397.650634][T14099] loop5: detected capacity change from 0 to 40427 [ 397.659060][T14099] F2FS-fs (loop5): Invalid log sectorsize (131081) [ 397.665952][T14099] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 397.671704][ T5859] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 397.677760][T14099] F2FS-fs (loop5): invalid crc value [ 397.777521][T14099] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 397.784935][T14099] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 397.880745][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 397.896895][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 397.927653][ T5859] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 397.950738][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.971808][ T5859] usb 4-1: config 0 descriptor?? [ 398.397305][ T5859] wacom 0003:056A:0013.0044: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 398.423068][ T5859] wacom 0003:056A:0013.0044: hidraw0: USB HID v20.00 Device [HID 056a:0013] on usb-dummy_hcd.3-1/input0 [ 398.442520][ T5859] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0013.0044/input/input52 [ 398.527884][T14125] loop5: detected capacity change from 0 to 64 [ 398.563751][ T1092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.587661][T14127] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3190'. [ 398.611055][ T5859] usb 4-1: USB disconnect, device number 30 [ 398.611784][T14127] netlink: 'syz.1.3190': attribute type 9 has an invalid length. [ 398.647732][ T28] audit: type=1804 audit(1752816336.657:160): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3189" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=21 res=1 errno=0 [ 398.659059][T14127] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3190'. [ 398.689588][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.734877][T14129] loop2: detected capacity change from 0 to 1024 [ 398.734898][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3190'. [ 398.811412][T14129] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 398.825232][T14129] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 398.884804][ T48] hfsplus: b-tree write err: -5, ino 4 [ 399.039755][T14139] loop2: detected capacity change from 0 to 1024 [ 399.056414][T14139] EXT4-fs: Ignoring removed i_version option [ 399.085483][T14139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.216639][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.230265][T14150] program syz.3.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.341180][T14156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3202'. [ 399.452081][T14161] tipc: Started in network mode [ 399.457031][T14161] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 399.477981][T14161] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 399.497749][T14161] tipc: Enabled bearer , priority 10 [ 399.515965][T14164] loop2: detected capacity change from 0 to 1024 [ 399.857890][T14179] loop3: detected capacity change from 0 to 1024 [ 399.894264][T14179] hfsplus: bad catalog entry type [ 399.912803][T14177] loop5: detected capacity change from 0 to 4096 [ 399.949777][T14177] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 399.997791][ T48] hfsplus: b-tree write err: -5, ino 4 [ 400.063404][T14177] ntfs3: loop5: ino=1f, "file2" failed to open parent directory r=5 to update [ 400.166663][ T1080] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update [ 400.250075][T14195] loop2: detected capacity change from 0 to 128 [ 400.295776][T14195] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 400.344731][T14195] ext4 filesystem being mounted at /766/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.434570][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.612604][ T5851] tipc: Node number set to 1 [ 400.745459][T14223] loop5: detected capacity change from 0 to 512 [ 400.756460][T14223] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.3234: corrupted in-inode xattr: invalid ea_ino [ 400.772875][T14223] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3234: couldn't read orphan inode 15 (err -117) [ 400.786456][T14223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.829760][T11940] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.989438][ T27] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 401.199306][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 401.212076][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.227615][ T27] usb 3-1: config 0 has no interface number 0 [ 401.242432][ T27] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.259315][ T27] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.274859][ T27] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 401.287606][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.303048][ T27] usb 3-1: config 0 descriptor?? [ 401.798883][ T5851] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 401.943968][ T27] uclogic 0003:28BD:0094.0045: failed retrieving string descriptor #100: -71 [ 401.968667][ T27] uclogic 0003:28BD:0094.0045: failed retrieving pen parameters: -71 [ 401.983427][ T27] uclogic 0003:28BD:0094.0045: pen probing failed: -71 [ 401.985721][T14253] loop3: detected capacity change from 0 to 32768 [ 401.996981][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 401.997054][ T27] uclogic 0003:28BD:0094.0045: failed probing parameters: -71 [ 402.022900][ T27] uclogic: probe of 0003:28BD:0094.0045 failed with error -71 [ 402.030796][ T5851] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.044138][ T27] usb 3-1: USB disconnect, device number 39 [ 402.062375][ T5851] usb 6-1: config 0 has no interface number 0 [ 402.082711][ T5851] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 402.108684][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.131325][ T5851] usb 6-1: Product: syz [ 402.135560][ T5851] usb 6-1: Manufacturer: syz [ 402.143873][ T5851] usb 6-1: SerialNumber: syz [ 402.154880][ T5851] usb 6-1: config 0 descriptor?? [ 402.165081][ T5851] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 402.194555][ T5851] usb 6-1: selecting invalid altsetting 1 [ 402.204959][ T5851] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 402.222319][ T5851] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 402.234054][ T5851] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 402.245644][ T5851] usb 6-1: media controller created [ 402.271883][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.347058][T14268] netlink: 'syz.1.3257': attribute type 2 has an invalid length. [ 403.356273][T14282] loop2: detected capacity change from 0 to 32768 [ 403.367834][T14282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3265 (14282) [ 403.368098][ T5851] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 403.396478][T14282] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.406768][ T5851] zl10353_read_register: readreg error (reg=127, ret==-110) [ 403.422160][T14282] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 403.433158][T14282] BTRFS info (device loop2): enabling disk space caching [ 403.446555][T14250] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 403.455964][T14282] BTRFS info (device loop2): doing ref verification [ 403.459217][T14286] loop1: detected capacity change from 0 to 32768 [ 403.468841][T14282] BTRFS info (device loop2): use zlib compression, level 3 [ 403.484867][T14282] BTRFS info (device loop2): force clearing of disk cache [ 403.492865][T14282] BTRFS info (device loop2): doing ref verification [ 403.496757][T14284] loop3: detected capacity change from 0 to 32768 [ 403.505610][T14282] BTRFS info (device loop2): disk space caching is enabled [ 403.514823][ T5851] usb 6-1: USB disconnect, device number 9 [ 403.628908][T14282] BTRFS info (device loop2): auto enabling async discard [ 403.652571][T14282] BTRFS info (device loop2): rebuilding free space tree [ 403.679473][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.700804][T14282] BTRFS info (device loop2): disabling free space tree [ 403.707877][T14282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 403.717586][T14282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 403.859313][ T5790] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.283077][T14318] loop5: detected capacity change from 0 to 256 [ 404.284003][T14318] exfat: Deprecated parameter 'utf8' [ 404.284071][T14318] exfat: Deprecated parameter 'utf8' [ 404.377049][T14318] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 404.670100][T14326] loop3: detected capacity change from 0 to 64 [ 404.968084][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.414779][T14329] loop5: detected capacity change from 0 to 32768 [ 405.457748][T14329] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 405.507146][ T55] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 405.534653][T11940] (syz-executor,11940,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 405.559401][T11940] ocfs2: Unmounting device (7,5) on (node local) [ 405.608545][T14353] loop2: detected capacity change from 0 to 512 [ 405.615995][T14353] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.718528][T14355] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 405.718528][T14355] program syz.3.3290 not setting count and/or reply_len properly [ 405.737036][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 405.749928][ T55] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.758681][ T55] usb 2-1: config 0 has no interface number 0 [ 405.789180][ T55] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 405.798581][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.806611][ T55] usb 2-1: Product: syz [ 405.831365][ T55] usb 2-1: Manufacturer: syz [ 405.836009][T14358] loop2: detected capacity change from 0 to 64 [ 405.836036][ T55] usb 2-1: SerialNumber: syz [ 405.873445][T14358] [ 405.875859][T14358] ====================================================== [ 405.877751][ T55] usb 2-1: config 0 descriptor?? [ 405.882883][T14358] WARNING: possible circular locking dependency detected [ 405.882905][T14358] 6.6.99-syzkaller #0 Not tainted [ 405.899924][T14358] ------------------------------------------------------ [ 405.906969][T14358] syz.2.3291/14358 is trying to acquire lock: [ 405.913056][T14358] ffff888025aaa0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 405.922440][T14358] [ 405.922440][T14358] but task is already holding lock: [ 405.929838][T14358] ffff88807b1134f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 405.931030][ T55] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 405.940648][T14358] [ 405.940648][T14358] which lock already depends on the new lock. [ 405.940648][T14358] [ 405.940658][T14358] [ 405.940658][T14358] the existing dependency chain (in reverse order) is: [ 405.940665][T14358] [ 405.940665][T14358] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 405.940707][T14358] __mutex_lock+0x129/0xcc0 [ 405.955092][ T55] usb 2-1: selecting invalid altsetting 1 [ 405.959872][T14358] hfs_extend_file+0xdb/0x1220 [ 405.959897][T14358] hfs_bmap_reserve+0x107/0x430 [ 405.959926][T14358] __hfs_ext_write_extent+0x1fa/0x470 [ 405.959952][T14358] __hfs_ext_cache_extent+0x6b/0x9b0 [ 405.970513][ T55] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 405.978158][T14358] hfs_extend_file+0x317/0x1220 [ 405.978183][T14358] hfs_get_block+0x3d8/0xbd0 [ 405.978200][T14358] __block_write_begin_int+0x566/0x1ad0 [ 405.978230][T14358] block_write_begin+0x9a/0x1e0 [ 405.978256][T14358] cont_write_begin+0x5c8/0x7e0 [ 405.978283][T14358] hfs_write_begin+0x8b/0xd0 [ 405.978299][T14358] cont_write_begin+0x2ad/0x7e0 [ 405.978327][T14358] hfs_write_begin+0x8b/0xd0 [ 405.978344][T14358] hfs_file_truncate+0x191/0x9b0 [ 405.978361][T14358] hfs_inode_setattr+0x4af/0x6e0 [ 405.978379][T14358] notify_change+0xb0d/0xe10 [ 405.978401][T14358] do_truncate+0x19b/0x220 [ 405.978419][T14358] vfs_truncate+0x266/0x300 [ 405.978437][T14358] do_sys_truncate+0xe0/0x1a0 [ 405.978455][T14358] do_syscall_64+0x55/0xb0 [ 405.978476][T14358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.978514][T14358] [ 405.978514][T14358] -> #0 [ 405.988171][ T55] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.989250][T14358] (&tree->tree_lock [ 405.995068][ T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 405.999893][T14358] /1){+.+.}-{3:3}: [ 405.999917][T14358] __lock_acquire+0x2ddb/0x7c80 [ 405.999946][T14358] lock_acquire+0x197/0x410 [ 406.006896][ T55] usb 2-1: media controller created [ 406.011631][T14358] __mutex_lock+0x129/0xcc0 [ 406.011663][T14358] hfs_find_init+0x15f/0x1d0 [ 406.040220][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.040673][T14358] hfs_extend_file+0x2ef/0x1220 [ 406.167586][T14365] loop3: detected capacity change from 0 to 512 [ 406.169288][T14358] hfs_bmap_reserve+0x107/0x430 [ 406.177390][T14365] EXT4-fs (loop3): Test dummy encryption mode enabled [ 406.180906][T14358] hfs_cat_create+0x1b4/0x620 [ 406.186567][T14365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 406.193090][T14358] hfs_create+0x66/0xd0 [ 406.193116][T14358] path_openat+0x1277/0x3190 [ 406.203483][T14365] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3294: bad orphan inode 131083 [ 406.208116][T14358] do_filp_open+0x1c5/0x3d0 [ 406.208176][T14358] do_sys_openat2+0x12c/0x1c0 [ 406.208201][T14358] __x64_sys_openat+0x139/0x160 [ 406.215682][T14365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.217986][T14358] do_syscall_64+0x55/0xb0 [ 406.218013][T14358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.218046][T14358] [ 406.218046][T14358] other info that might help us debug this: [ 406.218046][T14358] [ 406.277793][T14358] Possible unsafe locking scenario: [ 406.277793][T14358] [ 406.285289][T14358] CPU0 CPU1 [ 406.290688][T14358] ---- ---- [ 406.296106][T14358] lock(&HFS_I(tree->inode)->extents_lock); [ 406.302148][T14358] lock(&tree->tree_lock/1); [ 406.309404][T14358] lock(&HFS_I(tree->inode)->extents_lock); [ 406.317961][T14358] lock(&tree->tree_lock/1); [ 406.322704][T14358] [ 406.322704][T14358] *** DEADLOCK *** [ 406.322704][T14358] [ 406.330885][T14358] 4 locks held by syz.2.3291/14358: [ 406.333904][T14365] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 406.336091][T14358] #0: ffff888025aac418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 406.353399][T14358] #1: ffff88807b111cb8 (&type->i_mutex_dir_key#22){++++}-{3:3}, at: path_openat+0x7c6/0x3190 [ 406.356862][T14365] overlayfs: upper fs needs to support d_type. [ 406.363731][T14358] #2: ffff888025aa80b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 406.379518][T14358] #3: ffff88807b1134f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 406.390816][T14358] [ 406.390816][T14358] stack backtrace: [ 406.396745][T14358] CPU: 0 PID: 14358 Comm: syz.2.3291 Not tainted 6.6.99-syzkaller #0 [ 406.404855][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.414958][T14358] Call Trace: [ 406.418270][T14358] [ 406.421241][T14358] dump_stack_lvl+0x16c/0x230 [ 406.425967][T14358] ? load_image+0x3b0/0x3b0 [ 406.430535][T14358] ? show_regs_print_info+0x20/0x20 [ 406.435785][T14358] ? print_circular_bug+0x12b/0x1a0 [ 406.441030][T14358] check_noncircular+0x2bd/0x3c0 [ 406.446017][T14358] ? look_up_lock_class+0x75/0x140 [ 406.451183][T14358] ? print_deadlock_bug+0x5d0/0x5d0 [ 406.456428][T14358] ? lockdep_lock+0xe0/0x220 [ 406.461064][T14358] ? _find_first_zero_bit+0xd3/0x100 [ 406.466401][T14358] __lock_acquire+0x2ddb/0x7c80 [ 406.471305][T14358] ? lock_chain_count+0x20/0x20 [ 406.473294][T14365] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 406.476269][T14358] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 406.476310][T14358] ? verify_lock_unused+0x140/0x140 [ 406.476335][T14358] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 406.476368][T14358] ? _raw_spin_unlock+0x40/0x40 [ 406.505582][T14358] ? stack_trace_save+0x9c/0xe0 [ 406.510481][T14358] ? stack_trace_snprint+0xf0/0xf0 [ 406.515658][T14358] lock_acquire+0x197/0x410 [ 406.520201][T14358] ? hfs_find_init+0x15f/0x1d0 [ 406.524387][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /830/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 406.525005][T14358] ? hfs_extend_file+0x2ef/0x1220 [ 406.525032][T14358] ? hfs_bmap_reserve+0x107/0x430 [ 406.555512][T14358] ? __x64_sys_openat+0x139/0x160 [ 406.560599][T14358] ? __might_sleep+0xe0/0xe0 [ 406.565244][T14358] ? read_lock_is_recursive+0x20/0x20 [ 406.570675][T14358] __mutex_lock+0x129/0xcc0 [ 406.575227][T14358] ? hfs_find_init+0x15f/0x1d0 [ 406.580044][T14358] ? hfs_find_init+0x15f/0x1d0 [ 406.584874][T14358] ? mutex_lock_nested+0x20/0x20 [ 406.589852][T14358] ? __kmem_cache_alloc_node+0x13e/0x260 [ 406.595534][T14358] ? hfs_find_init+0x88/0x1d0 [ 406.600691][T14358] ? hfs_find_init+0x88/0x1d0 [ 406.605399][T14358] ? __kmalloc+0xe2/0x240 [ 406.609757][T14358] hfs_find_init+0x15f/0x1d0 [ 406.614373][T14358] hfs_extend_file+0x2ef/0x1220 [ 406.619261][T14358] ? hfs_get_block+0xbd0/0xbd0 [ 406.624040][T14358] ? rcu_is_watching+0x15/0xb0 [ 406.628834][T14358] ? trace_contention_end+0x39/0xe0 [ 406.634061][T14358] ? __mutex_lock+0x304/0xcc0 [ 406.638792][T14358] ? hfs_find_init+0x15f/0x1d0 [ 406.643607][T14358] ? mutex_lock_nested+0x20/0x20 [ 406.648594][T14358] hfs_bmap_reserve+0x107/0x430 [ 406.653516][T14358] hfs_cat_create+0x1b4/0x620 [ 406.658249][T14358] ? hfs_cat_build_key+0x170/0x170 [ 406.663403][T14358] ? _raw_spin_unlock+0x28/0x40 [ 406.668285][T14358] ? hfs_new_inode+0x92b/0xbf0 [ 406.673081][T14358] hfs_create+0x66/0xd0 [ 406.677282][T14358] ? hfs_lookup+0x2a0/0x2a0 [ 406.681822][T14358] path_openat+0x1277/0x3190 [ 406.686467][T14358] ? do_filp_open+0x3d0/0x3d0 [ 406.691198][T14358] do_filp_open+0x1c5/0x3d0 [ 406.695729][T14358] ? vfs_tmpfile+0x490/0x490 [ 406.700358][T14358] ? _raw_spin_unlock+0x28/0x40 [ 406.705354][T14358] ? alloc_fd+0x58f/0x630 [ 406.709717][T14358] do_sys_openat2+0x12c/0x1c0 [ 406.714437][T14358] ? do_sys_open+0xe0/0xe0 [ 406.718872][T14358] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 406.724890][T14358] ? lock_chain_count+0x20/0x20 [ 406.729772][T14358] __x64_sys_openat+0x139/0x160 [ 406.734651][T14358] do_syscall_64+0x55/0xb0 [ 406.739099][T14358] ? clear_bhb_loop+0x40/0x90 [ 406.743798][T14358] ? clear_bhb_loop+0x40/0x90 [ 406.748507][T14358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.754441][T14358] RIP: 0033:0x7f268678e9a9 [ 406.758875][T14358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.778507][T14358] RSP: 002b:00007f2687691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.786969][T14358] RAX: ffffffffffffffda RBX: 00007f26869b5fa0 RCX: 00007f268678e9a9 [ 406.794974][T14358] RDX: 0000000000105042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 406.803133][T14358] RBP: 00007f2686810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 406.811137][T14358] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000 [ 406.819169][T14358] R13: 0000000000000000 R14: 00007f26869b5fa0 R15: 00007ffc86bcfff8 [ 406.827287][T14358] [ 406.830422][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.889491][ T8062] bridge0: port 3(syz_tun) entered disabled state [ 406.942052][ T8062] syz_tun (unregistering): left allmulticast mode [ 406.948728][ T8062] syz_tun (unregistering): left promiscuous mode [ 406.959218][ T8062] bridge0: port 3(syz_tun) entered disabled state [ 407.119655][ T55] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 407.121585][ T8062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.127158][ T55] zl10353_read_register: readreg error (reg=127, ret==-110) [ 407.160703][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.171783][T14340] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 407.208002][ T55] usb 2-1: USB disconnect, device number 35 [ 407.259640][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.313354][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.399266][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.509599][ T42] tipc: Left network mode [ 408.311497][ T42] hsr_slave_0: left promiscuous mode [ 408.324846][ T42] hsr_slave_1: left promiscuous mode [ 408.331047][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.343177][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.351192][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.360729][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.368814][ T42] bridge_slave_1: left allmulticast mode [ 408.374588][ T42] bridge_slave_1: left promiscuous mode [ 408.380652][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.390450][ T42] bridge_slave_0: left allmulticast mode [ 408.396386][ T42] bridge_slave_0: left promiscuous mode [ 408.402140][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.418392][ T42] veth1_macvtap: left promiscuous mode [ 408.423965][ T42] veth0_macvtap: left promiscuous mode [ 408.431357][ T42] veth1_vlan: left promiscuous mode [ 408.437747][ T42] veth0_vlan: left promiscuous mode [ 408.551718][ T42] bond1 (unregistering): Released all slaves [ 408.795723][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.853216][ T42] team0 (unregistering): Port device team_slave_1 removed [ 408.902581][ T42] team0 (unregistering): Port device team_slave_0 removed [ 408.950137][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.002243][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.129410][ T42] bond0 (unregistering): Released all slaves [ 409.549368][ T42] IPVS: stop unused estimator thread 0... [ 410.714610][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.553903][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration