last executing test programs: 2m38.086674306s ago: executing program 4 (id=7484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "a4d13cccb5"}]}], {0x14}}, 0x90}}, 0x0) 2m37.953892213s ago: executing program 4 (id=7486): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, '4'}, @main=@item_012={0x2, 0x0, 0xa, "0080"}, @global=@item_012={0x1, 0x1, 0x7, '\x00'}]}}, 0x0}, 0x0) 2m35.885781602s ago: executing program 4 (id=7527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbf9, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x20000000) 2m35.839444445s ago: executing program 4 (id=7528): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffb, 0x8}}, 0x28) 2m35.704004133s ago: executing program 4 (id=7530): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m34.811543153s ago: executing program 4 (id=7545): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0xa}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m19.628872647s ago: executing program 32 (id=7545): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0xa}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4.455445185s ago: executing program 0 (id=9530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000050000000060a090400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0) 4.230602267s ago: executing program 0 (id=9532): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r1, @ANYBLOB="1800088014"], 0x40}}, 0x880) 4.101754025s ago: executing program 0 (id=9536): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x8042, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x800) 3.630810342s ago: executing program 0 (id=9546): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902000905820300"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) 3.154305639s ago: executing program 1 (id=9551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) setreuid(0x0, 0xee00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 3.018505087s ago: executing program 1 (id=9553): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x7}, 0x0}) 2.065811592s ago: executing program 5 (id=9571): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003a80)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, 0x3}, 0x10) 1.926369349s ago: executing program 5 (id=9572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) 1.821452686s ago: executing program 5 (id=9574): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000540)={0x2, 0x110000002000003, 0x1, 0x0, 0x1, 0x0, [{0x5, 0xc, 0x80000000, '\x00', 0x280c}]}) 1.04805674s ago: executing program 3 (id=9588): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x800802, &(0x7f00000000c0)={[{@file_umask}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@umask={'umask', 0x3d, 0x58d6}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}]}, 0x0, 0x306, &(0x7f0000000240)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.032843161s ago: executing program 2 (id=9589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080006400000000900000000000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 964.117735ms ago: executing program 2 (id=9590): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=@newtaction={0x3d04, 0x30, 0x10, 0x70b925, 0x25dfdbfb, {}, [{0xbd0, 0x1, [@m_police={0x848, 0xb, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d4, 0xd8, 0x0, 0x8, 0x80000000, 0x9, 0x9, 0x9, 0x9, 0xb9b, 0x8, 0x9, 0x9, 0x1, 0xc, 0x6, 0x5, 0x6, 0x9, 0x0, 0x40, 0x100, 0x62, 0x0, 0x3, 0x4, 0x3, 0x1, 0x48, 0x1, 0x0, 0x3ea581b3, 0x7, 0x9, 0xa, 0xffffffff, 0x1, 0x8, 0x101, 0x2, 0x7ff, 0x4, 0x10f4, 0x6, 0x4, 0x7, 0x3, 0x8001, 0x4, 0x7, 0x85, 0x6, 0xfffffffd, 0x1, 0x3, 0x0, 0x6, 0x3dd, 0x0, 0x99f, 0x1, 0x401, 0x9, 0x40, 0x0, 0x1, 0x7, 0x5, 0x1, 0x7, 0xa, 0x2, 0xa3, 0x89, 0x5, 0x7ff, 0x2, 0x2, 0xfae4, 0xb0, 0x1, 0x2, 0x10001, 0x5, 0x5, 0xd9000000, 0x4, 0x5, 0x3, 0x7, 0xb8ff, 0x5, 0x3, 0x8, 0x5, 0x4, 0x3, 0x0, 0x6, 0x5, 0x9, 0x5, 0xa, 0x3, 0x1000, 0x6, 0x10000, 0x2, 0x5, 0x9, 0xd, 0x4, 0x5, 0x200, 0x3, 0x4fa3, 0x1, 0x3, 0xb, 0x9, 0x6, 0x400, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7, 0x1, 0x80000000, 0x0, 0x0, 0x9, 0xfffffeff, 0x2ac6, 0x6, 0x3, 0x3, 0x80, 0x0, 0x2, 0x9, 0x9, 0xc8, 0x7ff, 0x5, 0x9a, 0x80000001, 0xc, 0x9, 0xcd, 0x8, 0x3, 0x5, 0xe77, 0x0, 0xfa4f, 0x42, 0x7, 0x80000000, 0x8, 0x1, 0x2, 0xffffffff, 0x7f8, 0x1, 0x7, 0x6, 0x2, 0x4, 0x100, 0x4, 0x2, 0x7, 0xcdae, 0x4, 0x6, 0x2, 0x8, 0x8, 0xd7, 0x65, 0xffffffff, 0x400, 0x8, 0x81, 0x2, 0x6, 0x0, 0x0, 0x80000000, 0x9, 0x6, 0x9, 0xe, 0x80000000, 0x0, 0x4, 0x8, 0xa47, 0x10000, 0x3, 0x6, 0x7fffffff, 0xf4, 0x5, 0x0, 0xc, 0x10001, 0x4, 0x1, 0x7fffffff, 0x2, 0xffffffff, 0xc08b, 0x6, 0x0, 0x8, 0x6, 0x9, 0xffff, 0x4, 0x5, 0x6, 0x86f, 0x2, 0x2, 0x401, 0x9ce2, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x9, 0xe, 0x10001, 0x7, 0x10000, 0x6, 0xfffffff8, 0x1, 0x6, 0x7, 0xfffffffa, 0x1, 0x8, 0x8000, 0x8, 0x5, 0x7f, 0xfffffffe, 0x6, 0x9, 0x8, 0x2800, 0xfffff032]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x9, 0x3, 0x5, 0x5, 0x9, 0xc, 0x5d, 0xc3, 0x8, 0x0, 0x6, 0xb, 0xf0e1, 0x3, 0x7, 0x7, 0x4, 0x8, 0xe, 0x2, 0xe7db, 0x0, 0x9, 0x2, 0xffff, 0x669, 0x6, 0x4, 0x8, 0x3ff, 0x0, 0x5, 0x1, 0x6702, 0x800, 0x40, 0xc2, 0x8a, 0x0, 0x100, 0x6, 0x3, 0x7, 0x7, 0xffff8000, 0x40, 0x4, 0x800, 0x10000, 0x3, 0x400, 0x2, 0x7ff, 0xf, 0x0, 0x3, 0x5, 0x1ff, 0xfffffffc, 0x7, 0x10, 0x2e, 0x0, 0x5, 0x6, 0x9, 0x241b, 0x200, 0x6, 0x6, 0x2, 0x3, 0xffff, 0x4, 0x6, 0x5, 0x372, 0x5, 0x2, 0x9, 0x6, 0x7, 0x1, 0x5106bac2, 0x8000, 0x7, 0x0, 0xe, 0x7fff, 0x1, 0xc, 0xd, 0x3, 0x0, 0x1, 0x7, 0xfff, 0x1, 0x8, 0x9, 0x46005ff0, 0xfff, 0x4, 0x6, 0x3, 0x8, 0x7, 0x132, 0x80, 0x9, 0xffffdb80, 0x7, 0x2, 0x2, 0xe5d0, 0x7f, 0x62, 0x5, 0xc213, 0x2, 0x6f8, 0xb, 0x20000000, 0x1c4, 0xbfe, 0x9c3a, 0x928, 0xebaf, 0x247f, 0xd, 0x400, 0x8d8f17c5, 0x2, 0xf00, 0x7, 0x81, 0x101, 0x1, 0x6, 0x9, 0x400, 0x9, 0xfff, 0x8000, 0x1, 0x5d98fb49, 0x0, 0x6, 0x9, 0x2, 0x8, 0x1000, 0x1, 0x3, 0x7fffffff, 0x8, 0xfffeffff, 0x0, 0x3ff, 0x6, 0x9, 0x3, 0x334c90ee, 0x7, 0x5, 0x1, 0x7, 0x2, 0x1, 0x3552, 0xc511, 0x2, 0x9c, 0x9, 0x7, 0x7, 0x5, 0x5, 0x7ff, 0x4, 0x0, 0x7f, 0x4f5e, 0x6, 0xf2, 0x5, 0x8fc, 0x8, 0x0, 0x2, 0x7ff, 0xdbf, 0x8, 0x8, 0xfffff528, 0x6, 0x80000001, 0x4, 0x3, 0x7, 0x3, 0x5, 0x4, 0x9, 0x6, 0x80000001, 0x4, 0x0, 0x10001, 0xfffffa2c, 0x76a, 0x3, 0x1, 0x9, 0x800, 0x98, 0x7, 0x1439, 0x8, 0x8, 0x2, 0x7, 0x8, 0x180, 0x9, 0x1, 0x6, 0x9cf, 0x9, 0x8, 0x33, 0x8000, 0x5, 0xffffffff, 0xb99, 0x1, 0x8000, 0x7, 0x3, 0xfffffff9, 0x1000, 0x4, 0x1, 0x1, 0x7f, 0x9, 0xf, 0x8, 0x664, 0xfffffffb, 0x9, 0x9, 0x8, 0x3]}]]}, {0x11, 0x6, "ca90bbb40ee65c2ec05b3bcf9d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xffff, 0x6, 0x73, 0x4}, {0x2, 0x6, 0x4, 0x2ea}, {0x4, 0x7f, 0xd, 0xfff}, {0x400, 0x7b, 0xc, 0x8dae}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7f, 0xfffffffc, 0x7, 0x9, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6c, 0x9, 0x4, 0x7, 0x3}}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x3, 0xff, 0x559c}, {0x101, 0x9, 0x1, 0x8}, {0x2, 0x0, 0xf9, 0x6}, {0x190, 0x4, 0x7f, 0x3}, {0x3, 0x0, 0x3, 0xd}, {0x0, 0x1, 0x81}, {0x9d7a, 0xc, 0x1, 0x4}, {0x0, 0x2, 0xd, 0x6}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xa0, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8, 0x7, 0x3ff, 0x10000}}]}, {0x59, 0x6, "8d3c962f38d40f5a30b370c71d571b50de7478106278ea9edddb2320abc33f9407b6f3da78ffc408b413d56d4cf947dbde2a4345482a4e9ca211456574297e4cebeb32d69ddb0405cb0172cae9e283ae7ae9ab5e28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xfc, 0x16, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xb90, 0xffffffffffffffff, 0xc, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x4, 0x4, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1351, 0x20000004}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f51, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xfffffffb, 0x4, 0x4, 0x6}}]}, {0x6d, 0x6, "4cbf5559b7e93ce5193d7d886d806b229c8a75045c49da4dce6fd81ce119fe0f7c789e9e36f326c78b5b50b9502ce41cb70fdec98e53460fb52af16d6878af06fe2f8cf5bed03c9ed7b8eb265779fdbd47d8a948a087a596364857c746c8c9a95fb161f396ddd7eddb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf4fc}]}, {0x91, 0x6, "1d63b78b499184caed02a8f472cfd5e07410f1e87cf417cf27f3e1cb7f0b904a5a10e41e704f1a6d10533ad01a80fb2d090151b962ddc91166caa38b4aca0c122de20340317f99829aea1dc823942a60fc80b87b1837ba055b030469766c22f0e50aa296a5320a05a9b26695d811ef23dc176ed5702b4f6d172db3f8f21ae14aeb49d875ad3775e81392a210dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x4c, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x113b, 0x4}}]}, {0x12, 0x6, "91bd9b5137028ea5a324ed975424"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x2fd8, 0x1, [@m_police={0x2edc, 0x4, 0x0, 0x0, {{0xb}, {0x2dc4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xc92, 0x0, 0x6, 0x730, 0x0, 0x2, 0x3, 0x5, 0x1d, 0x3, 0x23c1, 0x50, 0x5, 0x137, 0x7, 0x8, 0x6, 0x8001, 0x2, 0x7fffffff, 0x2, 0x403, 0x400, 0x68669e76, 0x6, 0x8, 0x7f, 0xffffffff, 0x1, 0x800, 0xf9, 0x101, 0xfff, 0x0, 0x9, 0x9, 0x1f, 0x9, 0x0, 0x4, 0x7, 0x9, 0x80000000, 0x81, 0x7, 0x80000001, 0x2, 0x40, 0x81, 0x0, 0x4, 0x0, 0x6, 0x6, 0x80000000, 0x7, 0xcc7, 0x7, 0x4, 0x1, 0x80, 0xf2df, 0x4, 0x6, 0x3, 0x8, 0x1, 0x1, 0xb66b, 0x20000000, 0x4, 0x200000, 0x9, 0x8000, 0x2b, 0x400, 0xfffffffa, 0x6, 0x0, 0x1, 0xe, 0x9, 0x1000, 0x6, 0xf, 0x7fff, 0x1, 0x1, 0xd, 0x3, 0x200, 0x6, 0x10, 0xd000, 0xe, 0x1, 0x8001, 0x3, 0x5, 0xc5, 0xc00, 0x5, 0x0, 0x26, 0x8, 0x1, 0x2, 0x400, 0xbfd, 0x2, 0x3, 0xffffff80, 0x2, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffe00, 0xede, 0x5, 0x3, 0x1ff, 0x5, 0xe8d, 0x47, 0x0, 0x5, 0x7fff, 0x4, 0x1, 0xca8e, 0x5, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfff, 0x4, 0x1, 0x9, 0x2, 0x80000000, 0x7, 0x1000, 0x4, 0xfffffffa, 0xfffffffb, 0x7, 0xd393, 0x4, 0xda, 0xa774, 0x4, 0x8, 0x10001, 0xefc, 0x8001, 0x36e, 0x10, 0x5062, 0x400, 0x616a, 0x0, 0x91d, 0x6, 0xffffff53, 0x6, 0x2, 0x1, 0x3, 0xa0, 0x1, 0x2, 0x401, 0xf6ea, 0x7, 0x1, 0x7, 0xb69a, 0x6, 0x1, 0xffff, 0x4, 0xb1a6, 0xb4a, 0x0, 0xfff, 0x0, 0x10, 0x7, 0xa665, 0x0, 0x1, 0x800, 0x10000, 0x40, 0x6, 0x3, 0x3, 0x7, 0x3c35bb25, 0x4, 0x1, 0x7, 0xfffffffe, 0x8, 0x1ff, 0x7, 0x9, 0x6, 0xce, 0x7fffffff, 0xffff, 0x22, 0x3, 0x20000, 0xffffff54, 0x7, 0xffffffff, 0x7, 0x1fc5, 0x2, 0xf81, 0x7fff, 0x4, 0x4, 0xff, 0x0, 0xfe00, 0xfffffffc, 0x9032, 0x544, 0xa, 0x7, 0x4, 0x401, 0x0, 0xe525, 0x9, 0xd4, 0x3, 0x1, 0xe, 0x0, 0x40, 0x9, 0x4, 0x6, 0x9a, 0x1, 0x1000, 0x10, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x2, 0x0, 0x4, {0x1, 0x2, 0xddfd, 0x3, 0x2, 0x8}, {0xef, 0x0, 0x4, 0x6, 0x4, 0x401}, 0x20000000, 0x0, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffb, 0xfffffff9, 0x8, 0x8217, 0x799, 0xbf, 0x9773, 0x0, 0x4, 0x5, 0x0, 0x1, 0x2, 0x8, 0x9, 0x10001, 0x0, 0x400, 0x8, 0x1ff, 0x8000, 0x9, 0x4, 0xe8, 0x5, 0x3, 0x9, 0x64, 0x1, 0x56f, 0x4, 0x8001, 0xb91f91c, 0x0, 0x7, 0x7fff, 0xffff8001, 0x6, 0x80000000, 0x4, 0x3, 0x9, 0x4a, 0x2, 0xfffffffe, 0x9, 0x7, 0x4, 0x6, 0xadd3, 0x6, 0x7, 0xc41, 0x4, 0x2, 0x2, 0x80000000, 0x318, 0xe4d6, 0x8, 0x9, 0x400, 0x3, 0xffff, 0x7, 0x8, 0x5, 0xc, 0x80000001, 0x6, 0x8, 0x7, 0x7, 0xe, 0x2, 0x7, 0x9, 0x2da8, 0xfffffe45, 0x0, 0x8, 0x7, 0x7, 0x4, 0xfffffff8, 0x3a, 0x7, 0x9, 0x0, 0xffff, 0x6e9, 0x80000000, 0xeac, 0x100, 0x6, 0xe5d, 0xffffffff, 0xf946, 0x8, 0x1, 0x7, 0x1, 0x1, 0x1, 0x8, 0x3, 0x359e, 0x7, 0x9, 0xa, 0x5, 0xd812, 0x863, 0x8, 0x400, 0x8, 0xfffffff6, 0x260, 0xa, 0x0, 0x8, 0xfffffff9, 0x9, 0x6, 0x34, 0x200, 0x9, 0x2, 0x5, 0x3, 0x5, 0x6335, 0xb6, 0x14, 0x8, 0x4430, 0x8, 0xc3ce, 0x3, 0x3, 0x1ff, 0x8, 0x9, 0xfffffc93, 0x7, 0x29, 0xfffffffd, 0xd6a0, 0x2, 0x3, 0x2, 0x10000, 0x5, 0x4, 0x7, 0x9, 0x7fffffff, 0x101, 0x8, 0x8, 0x5, 0x8, 0x5250, 0x7fff, 0x3ff, 0xd, 0x3, 0x5, 0xf29, 0x5, 0x10, 0xf, 0x8, 0x2, 0x8, 0x4, 0x4, 0x8, 0x4, 0x9, 0x0, 0x4, 0x9, 0x2, 0x0, 0x0, 0x3, 0x7, 0x1, 0x1, 0x4, 0xce, 0x0, 0x1, 0x4, 0x3, 0x6, 0x2, 0x4, 0x1b, 0x1c7a, 0x81, 0x7ff, 0x1ec, 0x9, 0x4, 0x2, 0x0, 0x4, 0x3, 0x2, 0x5, 0x9ed, 0x35b0baac, 0x1e85, 0x4df, 0x81, 0xfffffffc, 0x3, 0x2df7, 0x7, 0x73, 0x1, 0x7a84, 0x39, 0x4, 0xc962, 0x6, 0xfff, 0x400, 0x81, 0xff3, 0xffffff05, 0x9, 0x7, 0x5, 0x135, 0xc88f, 0x6, 0x5, 0x8, 0x400, 0xf20d, 0x9, 0x2, 0x9, 0x80000001, 0x9, 0xd4, 0xef4e, 0x6, 0x6, 0xffff, 0xfffffffd, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x301, 0x1, 0x10, 0x4, 0x9, 0xc891, 0x400, 0x7, 0x1000, 0x3, 0x6, 0x4, 0x7, 0x7, 0x80, 0x5, 0x3ff, 0x1873e1e4, 0x4, 0x8, 0x4, 0x5, 0x8, 0xfffffff7, 0x7ca52685, 0x81, 0x5, 0x9, 0x80000000, 0x6, 0x6, 0x3, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8dc, 0x83f, 0xfff, 0xfffffffe, 0x3, 0x80000000, 0x81, 0x1, 0x80000000, 0x4, 0x1, 0x48, 0x1000, 0x4, 0x4, 0x7, 0x7, 0x7, 0x0, 0x0, 0x6, 0x0, 0x83ea, 0x28, 0x2, 0xc, 0x4, 0x4, 0x1, 0x2, 0x185, 0xd29, 0x8, 0x4, 0x5, 0xa5fd, 0x9, 0x9, 0xffffffff, 0x3, 0x5, 0x0, 0x5, 0xb7, 0xd3, 0x7, 0x9, 0x8000, 0xe, 0xf3a, 0x1, 0xfffffff7, 0x1, 0x831, 0x4, 0x2, 0x0, 0x9, 0x3, 0x3, 0x3, 0x8, 0x0, 0x7f, 0xfff, 0x9, 0xffffff9a, 0xda34, 0x8001, 0x8, 0x100, 0xffff, 0x8000, 0x4, 0x7, 0x1, 0x1, 0x8, 0x5, 0x7, 0x10, 0x5, 0x0, 0x10000, 0x6, 0x80, 0x3, 0x1, 0xd9ba, 0xe9e, 0x3, 0x6, 0xb0, 0xf29, 0xd, 0x9, 0xc, 0xe410, 0x1000, 0x1ff, 0x66c3, 0x0, 0x4, 0x0, 0x7ff, 0x8, 0x3, 0xfe, 0xfffffff9, 0x2, 0x9, 0xed2, 0x3, 0x1, 0xf, 0x2, 0x6, 0x44, 0xfffffeff, 0xfffffff7, 0x80, 0x9, 0x5, 0x7, 0x7, 0x8591, 0x4, 0x5, 0x5, 0x7, 0x2, 0x2, 0x831, 0x8, 0x6, 0x5, 0x1, 0x3, 0x40, 0x9, 0x8000, 0xfffffffa, 0x3, 0x5, 0x5, 0x3, 0x5, 0x100, 0x6, 0x7e, 0xfb7, 0x4, 0xffffffff, 0x6, 0xff, 0x3, 0x8, 0xffff, 0x0, 0x42e2, 0x80, 0x2, 0x401, 0x3, 0x8, 0x0, 0xc868, 0x9, 0x5, 0x100, 0x7, 0x4, 0x0, 0x5, 0x6, 0x5, 0x2, 0xffff, 0x5, 0x10000, 0x0, 0x2, 0x6, 0x7f, 0x6, 0x8, 0xa7a, 0x5, 0xffff0001, 0x0, 0x101, 0x10, 0x95, 0xb, 0x2, 0x8, 0x2, 0xfff, 0x3, 0x2, 0x81, 0x101, 0x1, 0x1, 0xff, 0x100, 0x2, 0x8, 0xc, 0x9, 0xffff1f6b, 0x3, 0x6, 0xfa, 0x6, 0x2, 0x58]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x4b, 0x2, 0x1, 0x3, 0x7fff, 0x8, 0x7, 0x1, 0x4, 0x11051d62, 0x4, 0x6, 0x680, 0x0, 0x800, 0x7, 0x40, 0x0, 0x2, 0x3, 0x9, 0x8, 0x0, 0x6, 0x6, 0x5, 0x2, 0x0, 0x8, 0x401, 0x7, 0xa00, 0x400, 0x10001, 0x3, 0x5b, 0x1, 0x2, 0x8, 0x3, 0x4, 0x47, 0x1, 0xe, 0x7, 0xfffffffa, 0xfffffff9, 0x2, 0x4, 0x0, 0x6, 0x200, 0x6, 0xebb, 0x0, 0x5, 0x7fffffff, 0x10001, 0x5, 0x8, 0x77ba, 0x7, 0x100, 0x42, 0x99, 0xfffffff7, 0x7, 0x0, 0x8001, 0x5000, 0x8000, 0x8, 0x1, 0x9, 0x6, 0xaf, 0x4, 0x7, 0x3, 0x0, 0xd2b6, 0x5, 0x22, 0x4, 0x8, 0x80000000, 0x9bc, 0x8, 0x4, 0x9, 0x4, 0x2, 0x2, 0x0, 0x9, 0xffff, 0x800, 0xff, 0x6, 0x7, 0x9, 0x4ea, 0x80000001, 0x10, 0x10001, 0xfffffff9, 0x1000, 0x3, 0x7ff, 0x9, 0x1ff, 0x80000000, 0x6, 0xffffffff, 0x1ff, 0x1000000, 0xffffffff, 0x5, 0x3, 0x7f, 0x7, 0x1ff, 0x8, 0x7, 0x0, 0xffff, 0x2, 0x4, 0x8, 0x0, 0x1000, 0x3, 0xb, 0x8, 0x2, 0x8ea, 0x2, 0x13, 0x1, 0x6, 0x3, 0x9, 0xffffffff, 0x6, 0x1, 0x4, 0x101, 0xb81, 0x1, 0x2, 0x6, 0x9, 0x2, 0x4, 0x3, 0x8, 0x3f4, 0x6, 0x81, 0x4, 0xff, 0x9, 0x6, 0xed6, 0xce26, 0x3, 0x7, 0x4, 0x401, 0x1, 0x3, 0xfffffffe, 0xfffffffb, 0x25f, 0x5, 0x9, 0xe, 0x400, 0xd, 0x4b, 0x9, 0x3ff, 0x3, 0x7, 0xfffffff8, 0xd, 0x5, 0xff, 0x401, 0x7, 0x0, 0x8dc, 0xd, 0x7, 0x200, 0x11be, 0x7fffffff, 0xd, 0x9, 0xa, 0x6, 0xe5c7, 0xf, 0x9, 0x11729ae2, 0x5, 0x2, 0x7fffffff, 0x6, 0x0, 0xc, 0x7fffffff, 0x4823c1d4, 0x10000, 0x2, 0x8, 0x9, 0x4, 0xd451, 0x1, 0x7, 0x7ff, 0xc, 0x81, 0xfffffffd, 0x7, 0x1, 0xe, 0x0, 0x3, 0xd7d30d5, 0x1048, 0x5, 0x1, 0x1f, 0x3, 0x8, 0xfffffff7, 0x8, 0x400, 0x230ad6d2, 0x8af0, 0x3, 0xf, 0xde53, 0xbfb2, 0x6, 0x40, 0x4, 0x7, 0x3, 0x4, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe4f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x4, 0xdb6, 0x2, 0xb, 0x1, 0x9, 0xf3, 0x1, 0xff, 0xbd79, 0x9, 0xf, 0x5, 0x8000, 0x7, 0xffffff80, 0x8, 0x769, 0x2, 0x5, 0x6, 0x8000, 0x4, 0x400, 0x10, 0x1, 0x10, 0x1ff, 0x0, 0x2a, 0x1, 0x0, 0x3, 0x400000, 0xb2, 0x2, 0x9, 0x9, 0x8, 0x80000000, 0x401, 0x1000, 0x817, 0xb318, 0x6, 0xfff, 0x0, 0x3, 0x2, 0x4, 0x8, 0x14600000, 0x81, 0x80000000, 0x9, 0xa, 0x1, 0xbe21, 0x9, 0x3, 0x6, 0x1, 0x0, 0x1e7b8445, 0x4, 0xfe, 0x80000000, 0x6, 0x200, 0x2, 0x3, 0x3, 0x1000, 0x4, 0x7, 0x9d7, 0x172, 0x4, 0x6, 0x9, 0x0, 0x6, 0x1, 0x4, 0x8, 0x7fffffff, 0x80, 0x0, 0x7, 0x5, 0x7, 0x401, 0x3, 0x6, 0xffff, 0x6, 0x2, 0x0, 0x4, 0x8, 0x6, 0x9, 0x0, 0x4, 0x7f, 0x4, 0x80000001, 0xd22b, 0xe8be, 0xf, 0x6, 0x85bf, 0xa, 0x3, 0x5, 0xc, 0x4, 0x3, 0x9, 0x6, 0x7, 0x3, 0x0, 0x3, 0x40, 0x5, 0x6, 0x1, 0x8, 0x9946, 0x6, 0x2681, 0x10000, 0xfedfa29, 0x8, 0x6, 0x8, 0xffff0000, 0x5faa, 0x7, 0x2, 0x2, 0x7, 0x1, 0x43a, 0x780, 0x5, 0x9, 0xb8e, 0x8000, 0x2, 0x4, 0x5a4, 0x9, 0x6, 0x8, 0x1, 0xfffffffc, 0xfffffbff, 0x9, 0x100, 0x200, 0x9, 0x9, 0x20000000, 0x79c, 0x1, 0x0, 0x2, 0x7576, 0x7, 0xfffffff7, 0x0, 0x80000001, 0x401, 0x8, 0x5, 0x1, 0x3, 0x1, 0x3dc4, 0x276e, 0x0, 0xffff7c08, 0x3, 0x7fff, 0xfffffff4, 0x5, 0x9, 0x3ff, 0x7, 0x8f8, 0x5, 0x9, 0x0, 0x4, 0x6, 0x8, 0x8, 0x7fff, 0x80000001, 0x10, 0x7fffffff, 0x8dff, 0x2, 0x3, 0xd, 0x2, 0x0, 0x1, 0x2, 0xf, 0x0, 0x5, 0x2, 0x13a, 0x0, 0x6, 0x3, 0x9, 0x3, 0x6, 0x1, 0x3, 0x1, 0x200, 0x5, 0x6, 0x0, 0xfffffffe, 0x94d0, 0x1, 0xec, 0x6, 0x7, 0xa00000, 0x7, 0xb7, 0x2, 0xfffffffb, 0x8, 0x3, 0x9, 0x8, 0xaa64, 0x6, 0x40, 0x7, 0xff, 0x3, 0x2, 0x3, 0x1, 0x3, 0xb64c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x401, 0x7, 0x6, 0x4, 0xff, 0x0, 0x10, 0x2204, 0x3, 0x3, 0x400, 0x4, 0xff7d, 0x2, 0x879, 0x4db4, 0x5, 0x6, 0xd, 0x0, 0x1db9, 0x0, 0x3, 0x2, 0x1, 0x6, 0xffffffff, 0x1, 0x80000, 0x6, 0x9, 0x80000000, 0x2, 0xbfcb, 0x4b, 0x8, 0x8, 0x3, 0x8, 0xf6d, 0x3, 0x6, 0xffffffff, 0x5, 0x10001, 0x1, 0x1, 0x8, 0x0, 0x1, 0x8, 0xfff, 0x100, 0x566, 0x9, 0xff, 0x347bba8, 0x9, 0x9, 0x8, 0x3c97, 0x2, 0xc, 0x5f, 0xc, 0x9, 0x9, 0x2, 0x10001, 0x7, 0xfffffffc, 0xf30, 0xc, 0x124, 0x9, 0x1ff, 0x7, 0x3, 0x9e5, 0x2, 0x6, 0x7, 0x0, 0x48f4, 0x49d, 0x1, 0x62d, 0xa278, 0x40000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0xc, 0x6, 0xfffffffd, 0x5, 0x401, 0x6, 0x7, 0xf672, 0x4, 0x3, 0x3d0, 0xb, 0x1, 0x0, 0x5, 0x8, 0x7fffffff, 0x2, 0x5, 0xb95, 0x40, 0xfffffe12, 0x5, 0x9, 0x800, 0x3, 0x0, 0x0, 0xe8, 0xc16, 0x0, 0x6, 0x4, 0x2, 0x4, 0x0, 0x8, 0xc, 0x2, 0x6, 0x200, 0xd, 0x100, 0x2, 0xa73c, 0x1, 0x1, 0x2, 0x3, 0xfffffffc, 0x14a, 0x5000000, 0x3, 0x0, 0x4, 0x3, 0x9, 0x5, 0x3, 0x81, 0x0, 0x200, 0x8, 0x3c0, 0x5, 0xd, 0x1, 0xb, 0x6, 0x1, 0x9f5, 0x7c, 0xfffff633, 0xae, 0x418, 0x4, 0x9, 0x9c, 0x1, 0x3, 0x2, 0x0, 0x1, 0x8, 0x8, 0xaa, 0x9, 0x3, 0x36a, 0x5, 0x8, 0x6, 0x32e3, 0x1, 0x7, 0x5, 0x3, 0x3ff, 0x25, 0x100, 0x3, 0x6f5c, 0x8, 0xe, 0x73, 0x8001, 0x401, 0xfffff8b7, 0x1, 0x20000000, 0x5, 0x9, 0x2, 0x1, 0xffffffff, 0x9, 0x7, 0x0, 0x0, 0x101, 0x6, 0x6, 0xa5, 0xfffffffc, 0x8, 0x5, 0x401, 0x646017aa, 0x7, 0x80000001, 0x72bf, 0x0, 0xa5c4, 0xe5, 0x10, 0x9, 0x3, 0x4, 0xffffffff, 0x10, 0x8000, 0x6, 0x7, 0x1324, 0x9, 0xb, 0xffff, 0x401, 0x4, 0x80, 0x6, 0x7fff, 0x80000000, 0x3, 0xe, 0x0, 0x10000000, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x2, 0x5, 0x7, 0x40, 0xfda, 0x5, 0x6, 0xfffff001, 0x80, 0x7, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0xb, 0x7ff, 0x8, 0x6, 0x8, 0x8000, 0x2, 0x8, 0x9, 0x7fff, 0xfd, 0x0, 0x3, 0xc7, 0x2, 0x2, 0x9, 0x6, 0x5, 0x3, 0x7fffffff, 0x80000000, 0x0, 0x5, 0x6, 0x4, 0x8, 0x5, 0x7, 0x9, 0xff, 0x5, 0x5, 0xe, 0x2, 0x3, 0x9, 0x5, 0x94, 0x8, 0xede, 0x4, 0x52d, 0x43, 0x3ff, 0x8407000, 0x3, 0x9, 0x5, 0x8, 0x81, 0xa170, 0xd, 0xb3a, 0x7, 0x1, 0x7ff, 0x800, 0x1000, 0x0, 0x7, 0x6, 0xeba, 0xfffffffa, 0x7fffffff, 0x4, 0x7, 0x6, 0x101, 0x6, 0x3c6, 0x3, 0xfe76, 0x2, 0x0, 0x8799, 0x8, 0x100, 0x1ff, 0x2, 0xa4, 0x7, 0x7, 0x1, 0x80000000, 0x5, 0x1, 0x5, 0x7, 0x2, 0x8000, 0x1, 0xfffffff7, 0x2, 0x1, 0x9, 0x4, 0xfffffffb, 0xef3b, 0x9, 0x9, 0xba, 0x80000000, 0x5672, 0x762, 0x8000, 0x1, 0x7, 0x4, 0x5, 0xa32d, 0x9, 0xfffffffe, 0x8, 0x77082ffc, 0x269, 0x10001, 0x4, 0x80, 0x7, 0xb9e, 0xd, 0x56, 0x8, 0x2, 0x7, 0xd, 0xfffffc01, 0x13, 0x1, 0xc7b, 0x4, 0xfffffff9, 0x8, 0xb, 0x7fffffff, 0x7fffffff, 0x7, 0xa, 0x6, 0x101, 0x9, 0x0, 0x5, 0x1ff, 0x7, 0x5, 0x7b, 0x8, 0xfff, 0x7, 0x0, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0x4, 0x1, 0x1, 0x1764, 0x0, 0x2, 0x3, 0x3, 0x7, 0x7fffffff, 0x1ff, 0x0, 0x100, 0x1, 0x5, 0x7, 0x7ff, 0x3, 0x6, 0x6, 0x5, 0x4, 0x2, 0x8, 0xa4, 0x5, 0x81, 0x10000000, 0x2001, 0x7, 0x5, 0x1, 0x7ff, 0x0, 0x564, 0x0, 0x9, 0x651dc437, 0x4, 0x0, 0x10001, 0x9c, 0x5b0a, 0x401, 0x9, 0x0, 0xfffffffd, 0x80, 0x7, 0x9, 0x4, 0xb, 0x7, 0x80000001, 0x10000, 0x3, 0x4, 0x5, 0x1, 0x1, 0x55, 0x2, 0x8, 0xfffffffe, 0xfffffff8, 0x7, 0xfffffff0, 0x245, 0x6, 0x0, 0x3, 0x0, 0x4, 0xe, 0x8, 0x893, 0x6, 0x9, 0x7b, 0x7fffffff, 0x9c]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xeb37}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x9, 0x9, 0xe435, 0x2, 0x7ff, 0xfffffe00, 0x10, 0x1, 0x1, 0x7, 0xfffff8dd, 0x0, 0x7, 0x8000, 0xa, 0x9, 0x2, 0x4, 0xc6, 0x403310c6, 0x100, 0x6d, 0x4ba, 0x6, 0x1, 0x7, 0x8, 0x1, 0xffffffff, 0x8, 0x101, 0x6, 0x2, 0x0, 0x8, 0xff, 0x9, 0xf, 0x5de4, 0x8, 0x1000, 0x4, 0xfffffffa, 0x10, 0x100, 0x358, 0x80000000, 0x80000001, 0x0, 0x5, 0xfffffff5, 0x4, 0x61, 0x0, 0x9, 0x10000, 0x20000, 0x7fffffff, 0x3, 0x200, 0x8, 0x1, 0x4, 0x8, 0x81, 0x5, 0x6, 0x4, 0x2, 0x7, 0x8, 0x2, 0x1, 0x6, 0x9, 0x0, 0x72c, 0x80000000, 0x1, 0x5, 0x8, 0x6, 0x8, 0xc, 0x21e, 0x4, 0x1e54, 0x5, 0x7fff, 0x2, 0xffffffff, 0x5, 0xffffff7f, 0x9, 0x8, 0x10000, 0x5, 0x4, 0x0, 0xff, 0x9, 0x2, 0x3, 0x335, 0x2, 0x8, 0x4, 0x1, 0x7, 0x7, 0x5, 0x7fffffff, 0x5ecf, 0x20080, 0x9, 0x0, 0xc9, 0xeb800000, 0x5, 0x6, 0xfff, 0x4, 0x101, 0x4, 0x4e, 0x2, 0x4, 0xf, 0x2, 0x5, 0x3, 0x7fffffff, 0xc, 0x3b, 0xfffeffff, 0x1ff, 0x5, 0x4, 0x7, 0x9, 0x1, 0x9, 0x80000001, 0x0, 0xa, 0x7, 0x2e6, 0x4, 0xea48, 0x4ef1, 0x40, 0x2, 0xfffffff8, 0x2, 0x5, 0x100, 0x0, 0x1, 0x81, 0x5, 0xd2c7, 0x1, 0x7, 0x6, 0x2, 0x0, 0x0, 0x8, 0x80, 0x4, 0x7, 0x7, 0x4, 0x0, 0x1000, 0x7, 0x9, 0x3, 0xffffffff, 0x1, 0xfffffffb, 0x8, 0x9, 0xe, 0x3, 0x24, 0x7, 0x8, 0x7, 0x4, 0x9, 0xa, 0x8000, 0x10, 0xfe, 0x1, 0x3, 0xe, 0x7, 0x10, 0x1, 0x6, 0x8ee1, 0x1, 0x400, 0x2, 0x9, 0xb1d1, 0x8000, 0xb, 0x6, 0x9, 0x4, 0x2, 0xc, 0x40, 0x20, 0x3, 0x9, 0x1, 0x7, 0x7, 0x80000000, 0x401, 0x401, 0x9, 0x5, 0x3, 0xcd8f, 0x1ff, 0x5, 0x8, 0xfff, 0xfff, 0x1ee6, 0x2ba65061, 0x1, 0x9, 0x8, 0xf5c1, 0xfffff000, 0x2f800000, 0x0, 0xfffffff7, 0x80, 0x8, 0x0, 0x3, 0xa, 0x2, 0x1, 0x281, 0x4, 0x7b29]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x3, 0x8, 0x100, 0x10001, {0x1, 0x0, 0x4, 0x9, 0x7}, {0x4a, 0x0, 0xfeff, 0x8000, 0x9, 0xfff}, 0x1ff, 0x0, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xc, 0x39, 0xe, 0x3, 0x5, 0x5c, 0x4, 0x4, 0xf, 0xffffff81, 0x7, 0x8, 0x40, 0x800, 0x3, 0x6, 0x0, 0x4ce, 0x9, 0x4, 0x5, 0x7, 0x1ea45b65, 0x3dff, 0x6, 0x1, 0x5, 0x80, 0xc, 0xfffffffe, 0x6, 0x4, 0x200, 0x4, 0x3bd, 0xffff, 0x3, 0xfffffffc, 0x3, 0x5, 0x1000, 0x1, 0x5, 0x5, 0x7, 0x4, 0xff, 0x2, 0x9, 0x6, 0x7f, 0x8, 0x5, 0x2, 0xc, 0x80000001, 0x2, 0x7, 0x10001, 0x9, 0x43, 0xc, 0xb2e, 0x9, 0x200, 0x2b2, 0x100, 0x2, 0x10, 0x5, 0x9, 0x9, 0x6, 0x2, 0x5, 0x570, 0x5, 0x9, 0x40, 0x5, 0x8000, 0x81, 0xf3, 0x1ff, 0x2, 0xc, 0x3, 0x0, 0x20000, 0x7fffffff, 0x3, 0x4, 0x400, 0xc, 0x2, 0x6fb, 0x1, 0x407, 0x4, 0x6, 0xb, 0x80000000, 0x100, 0x0, 0xfffff800, 0x7, 0x101, 0x4, 0x6, 0x0, 0x778c, 0x3, 0x87, 0x1, 0x8000, 0x4, 0x44, 0x7, 0x5, 0x4, 0xac, 0x101, 0x3, 0x5, 0x5, 0x9, 0x7, 0x4, 0x1, 0x1, 0xa, 0x7ff, 0x3, 0x89, 0x2, 0x800, 0x0, 0x9, 0x6, 0x3, 0x5, 0x2, 0x1, 0x4, 0x3, 0xfff, 0x7, 0x3, 0x80000001, 0x5, 0x5, 0x500000, 0x401, 0x6, 0x9, 0x0, 0x78, 0x116930c, 0x3, 0x7f, 0xffff, 0x1, 0x8, 0x3, 0x4, 0x0, 0x9, 0x3ff, 0x8, 0xfffffffb, 0x7, 0xcf24, 0x7, 0x2, 0x10, 0x80000000, 0x2, 0xb, 0xffff, 0x7, 0xfffffffe, 0x1000, 0x0, 0x7, 0xb0, 0x2, 0x3, 0x5, 0x1800, 0x240, 0x7ff, 0x9, 0x3, 0x6, 0x7fff, 0x5, 0x800, 0x8001, 0x1, 0x7, 0x7, 0x8, 0x9, 0x8000, 0x1, 0x1, 0x800, 0x10001, 0x1, 0x6619, 0x6, 0xf8, 0x18, 0x4, 0x7fff, 0xb2d0, 0x1, 0x2, 0x0, 0x6, 0x4, 0xffffffff, 0x1, 0x3, 0x512, 0x4, 0x8, 0x4, 0xa, 0x85dd, 0x5, 0x59a7, 0x1, 0x1, 0xc94, 0x872, 0x1, 0x2, 0x3, 0x8000, 0xfffffffe, 0x800, 0x9, 0x4, 0x9, 0x3ad, 0x7, 0x401, 0x4, 0xec1, 0x2, 0x1, 0x401, 0xfff, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x7, 0x0, 0x48b, 0xfffffff9, 0xffffff12, 0x9, 0xffffff94, 0x1, 0x1, 0x80, 0x5, 0x8, 0x6, 0x1, 0x2, 0x3ff, 0x4, 0x0, 0x6, 0x9, 0xc, 0xf0ef, 0x7, 0x200, 0x4, 0x8, 0x3ff, 0x80, 0x8, 0x1, 0xfffffff4, 0x7fffffff, 0x4, 0x3ff, 0x8, 0x2, 0x6, 0x5, 0x7ff, 0xfff, 0xcf25, 0x1, 0x20c, 0xfff, 0x0, 0x6, 0x4, 0x101, 0x1, 0xfffffff8, 0x0, 0x0, 0x7, 0x1, 0xe2, 0x8b, 0x8, 0x2, 0x3, 0xc91, 0x9, 0x5, 0x9, 0x1d8c, 0x8764, 0x6, 0x0, 0xae, 0x6, 0x1, 0x400040, 0x8, 0x4, 0xffffffff, 0x3, 0x9c26, 0x75a, 0x1000, 0x2, 0x95, 0x7, 0x313d, 0x5c000, 0x7f, 0x2, 0xfffffff8, 0x1, 0x800, 0x1, 0x700de95d, 0x7f, 0x9, 0x7, 0x9, 0xffff, 0x6, 0x24000000, 0xfffffff4, 0xfffffffc, 0x10, 0x4, 0x621a, 0x805, 0x8, 0x9, 0xec, 0x3, 0xbf, 0x80000000, 0x5, 0x9, 0x123e, 0x200, 0xd29, 0x10001, 0xe, 0x6, 0x4, 0x6, 0x1, 0x5, 0x10001, 0x76, 0x8, 0x118f, 0x8, 0xc, 0x4, 0x4, 0x7, 0x0, 0x0, 0x2, 0xfffffffa, 0x7fffffff, 0x8000, 0x4b, 0x8, 0x8, 0x10100, 0x2, 0x9f05, 0x1, 0x7, 0x4, 0xb, 0xc7e, 0x80b, 0x7fff, 0x3, 0xb7, 0x3c, 0x9, 0x1, 0x0, 0x6, 0x3, 0x8, 0x3, 0xc, 0xb0, 0x7f, 0xc82e, 0x3, 0x9, 0x8, 0x0, 0x630, 0x0, 0x7, 0x7f, 0x1, 0x47, 0x200, 0x5, 0xd, 0x1ff, 0x6, 0x3, 0x9, 0x4, 0x1c0, 0x2, 0x7, 0x8, 0x3, 0x9, 0x1, 0xb, 0xfffffff7, 0x30f3, 0x8, 0x10000, 0x1, 0x5b7, 0x8, 0x9, 0x4, 0x0, 0xfaf, 0xffff223c, 0x3ff, 0x6, 0x5, 0x4, 0x9434, 0x7, 0x58, 0x9, 0x6, 0xa8b, 0x7, 0xd, 0xffffffff, 0x200, 0x2, 0xffffffff, 0x3, 0x9, 0xfffffc00, 0x1, 0x3, 0x3, 0x5, 0x10000, 0xd, 0x205, 0x6, 0xd, 0x4, 0x0, 0x9, 0x66336227, 0x2, 0x0, 0x3d4000, 0x1, 0x9, 0xfffffff9, 0xffffffff, 0x9b2, 0x2, 0x8, 0xffff, 0xb8d6, 0x0, 0x100, 0x9, 0x1, 0x81, 0xfffffe00, 0x79be, 0x8, 0x3, 0x53c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x200, 0x36, 0xb2f9, {0x1, 0x1, 0x1, 0x6, 0xc000, 0xf}, {0xc, 0x1, 0x6, 0x771e, 0xc010, 0x10001}, 0x3, 0xc6db, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x6, 0x2, 0x5, 0xa, 0x4, 0x4, 0xd, 0xd, 0xfff, 0xa9, 0x466d, 0xe, 0xd49, 0xfffffffe, 0xd, 0x4, 0x61, 0xfffffc01, 0x8, 0x1, 0x3, 0x5000000, 0x8, 0x6, 0xcf1e, 0x9, 0x1, 0x8, 0x5, 0xbe3, 0x1, 0x1, 0xc050, 0xffffffff, 0x10000, 0x7, 0x6, 0x0, 0xa, 0x2, 0x80, 0xc, 0x9, 0x7fffffff, 0xa5, 0x5, 0x6, 0x800, 0x8, 0x10001, 0x4, 0x4, 0x0, 0x2, 0x2, 0xe, 0x400, 0x1, 0xf, 0x4, 0x6, 0x1f8c, 0x5, 0x0, 0x7, 0xbfd6, 0x3, 0x5, 0xfffffff7, 0x5, 0x2, 0x2, 0x10, 0x5, 0x7, 0x9, 0x9, 0x5, 0x7f, 0x7, 0x40000000, 0x7, 0x5, 0x5, 0x4, 0x6, 0x6b, 0xdce, 0x2, 0x0, 0x1534b0b6, 0x5, 0x7f, 0x892, 0x6e, 0x80000001, 0x7, 0x6f2b, 0x7, 0x258b, 0x3, 0x4, 0x3, 0x3, 0x2, 0x5, 0x4, 0x10, 0x1, 0x7, 0x3, 0x5, 0x1, 0xc0af, 0x5, 0xac991999, 0xfa, 0x7ff, 0x5, 0x3ff, 0xee12, 0x9, 0x7, 0x6, 0x1, 0x9, 0x6, 0x7, 0x4, 0x4, 0x401, 0xf00, 0x0, 0x155, 0x9, 0x3, 0xffffffff, 0x1, 0x5, 0x462b, 0x6, 0x10001, 0x400, 0xba, 0x690, 0x9, 0x9, 0x62a4, 0xca3, 0x2dc, 0x69dc1e96, 0xb, 0xcfb9, 0xfff, 0x2, 0x78, 0x1000, 0x1, 0x7, 0x400, 0x6, 0x5, 0x400, 0x8, 0x6, 0x5, 0xffffffff, 0x7, 0xd0, 0x8, 0x10001, 0x7, 0x6, 0x1, 0x4, 0x401, 0x5, 0x9, 0x5, 0x3, 0x7f, 0xfffffff9, 0x4800, 0x0, 0x5, 0x5, 0x80000000, 0x3, 0x40, 0xf, 0x5, 0x1, 0x7fff, 0xa, 0x6, 0x4, 0x10, 0x0, 0x1a, 0x3, 0x2, 0x162ef5d7, 0xd65b, 0x7, 0x200, 0x8, 0xe, 0x1, 0x5, 0xfcf, 0x1, 0x91, 0x291e, 0xb, 0x2, 0x3, 0x671, 0x100, 0x9, 0x9d, 0x3dc, 0x2, 0x4, 0x1, 0x7, 0x90, 0xfff, 0x3, 0x2, 0x8, 0x7, 0x0, 0x9, 0x9, 0x6556, 0x6, 0x2, 0x8, 0x9, 0x4, 0xfffffffe, 0x2, 0x0, 0x5, 0x5, 0x8, 0x1e, 0x3af0, 0x80, 0x10, 0x5, 0xbc3b, 0xfffffff8, 0xb, 0x5d0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x1, 0x8, 0x899a, {0xff, 0x0, 0x22e, 0x0, 0x10, 0x4b}, {0x0, 0x2, 0xdd, 0xf, 0x7315, 0x1}, 0xe241, 0x5, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0xee, 0x6, "97674ab2886b3bddc1fe8cd785ec16e86ed40fe830d7fdbeba0539c11fa2e455d0b44d08dfba5daa401056da950e30accdc59732b5082fbf9dc78fe791b4f7e8e608a9878dbd22c4ba03809b623a82f5c2398c4008e22059bc87f76fc194c1add6252b7cc2fe095f82b4639abb222770c9d4df9ffd23bc877621bc922f169df6b1fb6e08f8a0f118413b607cc8f653b382b8b0ac855b3b52b432fab685b29ffdf8bd2730feba58b9508088b85202e23e55492c454dec400d0b457ca7bd33bd03305f7e150cfdccade6bc33ad08bcedc243e0099ce24658833fefb435f31a81813e2d34db81425f5c8f67"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xf8, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0xce, 0x6, "55fe11c8a7cd2bcd5881b864019e3284ced28788b7d48d2830b2116e871bcd37cf6f04e38b496233bd152d8bb1d84a2ddaef180176081a004b2e91e189468ee347c01c2817d432992bb8f374a5922e8c4499ef16240abb054330a29c8cba1607140b9f63f867f06f1a2e0abbfdabb78342d4f7fd83cec11264a477aceca9667d4cee69e5672776b386b1f7320cd77846fbf1ead4a9b0688c1bb1a3e94e2cc47be13ab834a074a2831d333b11c1c1b5d3d0ee8959efa1a15fc70e3c3169abeb489add4ce7c14459aa139f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x148, 0x1, [@m_skbedit={0x7c, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xd, 0x6, "3121cc2d397aa20bbf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xc8, 0x1d, 0x0, 0x0, {{0x7}, {0x4}, {0x9e, 0x6, "4d29aa33ed8bf99c06faff1eea6df41ca22f048cb9d872b60c97b1981b2e07c24a2a8172efac1ed4ce0f1b6c694ee14ae6f703ac0c262a96ef4fa0c549cd3bd08637b8d9254a19aa58faebbecc0dc83f253cb58ea2d120ce6b6e041f4ab04d8c3440c4905b878e50116492a6e8f780e1c5c3b5f2339f8a5e929f116d3c3791ade193e8f659566a2db47a46a5fb78816df200417152e947ca56a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x3d04}, 0x1, 0x0, 0x0, 0x40}, 0x0) 928.277537ms ago: executing program 3 (id=9591): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xce21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 753.787887ms ago: executing program 3 (id=9592): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 739.037218ms ago: executing program 2 (id=9593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) 672.250221ms ago: executing program 5 (id=9594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000006c0), 0x0}, 0x20) 642.170194ms ago: executing program 1 (id=9595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000002c0)=@v3={0x3000000, [{0x8, 0x10000}, {0xfffffff7, 0x8a7a}], r1}, 0x18, 0x0) 544.701119ms ago: executing program 3 (id=9596): syz_read_part_table(0x5c2, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 500.328222ms ago: executing program 5 (id=9597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, ' \x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 500.186812ms ago: executing program 1 (id=9598): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x1015, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'wlc\x00', 0x28, 0x323b, 0x55}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 436.422805ms ago: executing program 2 (id=9607): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/keys\x00', 0x0, 0x0) r1 = socket(0x22, 0x2, 0x1) sendfile(r1, r0, 0x0, 0xb) 435.720675ms ago: executing program 0 (id=9609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x66b3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 185.36734ms ago: executing program 5 (id=9599): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 184.73495ms ago: executing program 0 (id=9611): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 184.31902ms ago: executing program 1 (id=9600): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000002840), 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 184.24545ms ago: executing program 2 (id=9601): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x73, @empty, 0x4e23, 0x0, 'lc\x00', 0x0, 0x5, 0x9}, 0x2c) 184.11967ms ago: executing program 3 (id=9602): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x300) 20.35232ms ago: executing program 1 (id=9603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 19.106669ms ago: executing program 3 (id=9604): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 0s ago: executing program 2 (id=9605): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) kernel console output (not intermixed with test programs): n mount option "journal_ioprio=0x0000000000000006" [ 469.424839][T21951] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 469.485555][T21933] loop0: detected capacity change from 0 to 32768 [ 469.652248][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.804262][T21933] XFS (loop0): Mounting V5 Filesystem [ 469.874336][T21961] lo speed is unknown, defaulting to 1000 [ 469.956805][T21933] XFS (loop0): Ending clean mount [ 470.113150][ T4186] XFS (loop0): Unmounting Filesystem [ 470.530111][T21985] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 470.699955][T21987] loop5: detected capacity change from 0 to 1024 [ 470.976942][ T4256] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 471.336027][T22004] loop5: detected capacity change from 0 to 4096 [ 471.357400][ T4256] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.376653][ T4256] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.457646][ T4256] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.473796][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.484345][T22004] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 471.496418][ T4256] usb 2-1: SerialNumber: syz [ 471.502411][T22004] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 471.530426][T22004] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 471.559717][T22004] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 471.657138][T22004] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 471.708298][T22004] ntfs: volume version 3.1. [ 471.738698][T22004] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 471.781740][T22004] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 471.819876][ T4256] usb 2-1: 0:2 : does not exist [ 471.845343][ T4256] usb 2-1: unit 5: unexpected type 0x03 [ 471.849912][T22004] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 471.903196][T22004] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 472.128596][ T4256] usb 2-1: USB disconnect, device number 43 [ 472.306591][T22044] netlink: 388 bytes leftover after parsing attributes in process `syz.5.8358'. [ 472.388354][T18642] udevd[18642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.425704][T22047] loop3: detected capacity change from 0 to 256 [ 472.523811][T22047] FAT-fs (loop3): Directory bread(block 64) failed [ 472.548387][T22047] FAT-fs (loop3): Directory bread(block 65) failed [ 472.555254][T22047] FAT-fs (loop3): Directory bread(block 66) failed [ 472.615860][T22054] loop5: detected capacity change from 0 to 512 [ 472.631902][T22047] FAT-fs (loop3): Directory bread(block 67) failed [ 472.670482][T22047] FAT-fs (loop3): Directory bread(block 68) failed [ 472.687288][T22047] FAT-fs (loop3): Directory bread(block 69) failed [ 472.717393][T22047] FAT-fs (loop3): Directory bread(block 70) failed [ 472.724166][T22047] FAT-fs (loop3): Directory bread(block 71) failed [ 472.757099][T22047] FAT-fs (loop3): Directory bread(block 72) failed [ 472.763729][T22047] FAT-fs (loop3): Directory bread(block 73) failed [ 472.798554][T22054] EXT4-fs (loop5): 1 orphan inode deleted [ 472.806805][T22054] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 472.827713][T22054] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.904670][T22054] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 472.938255][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8366'. [ 473.407244][T19889] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 473.647018][T19889] usb 4-1: Using ep0 maxpacket: 8 [ 473.767233][T19889] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.787675][T19889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.810114][T19889] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 473.834295][T19889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.856121][T19889] usb 4-1: config 0 descriptor?? [ 474.368323][T19889] wacom 0003:056A:0336.000E: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0 [ 474.452608][T22111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8390'. [ 474.604189][T19889] usb 4-1: USB disconnect, device number 42 [ 474.642120][T22112] fido_id[22112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 474.991928][T22130] sock: sock_set_timeout: `syz.1.8398' (pid 22130) tries to set negative timeout [ 475.293037][T22103] loop5: detected capacity change from 0 to 40427 [ 475.352451][T22103] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 475.376237][T22103] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 475.407616][T22103] F2FS-fs (loop5): invalid crc value [ 475.428215][T22103] F2FS-fs (loop5): Found nat_bits in checkpoint [ 475.466451][T22138] loop1: detected capacity change from 0 to 4096 [ 475.566976][T22138] __ntfs_error: 7 callbacks suppressed [ 475.566996][T22138] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 475.677892][T22138] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 475.680984][T22103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 475.786904][T22138] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 475.845832][T22138] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 475.887767][T22138] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 475.973048][T20741] attempt to access beyond end of device [ 475.973048][T20741] loop5: rw=2049, want=45104, limit=40427 [ 475.990180][T22138] ntfs: volume version 3.1. [ 476.039758][T22138] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 476.100055][T22138] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 476.167678][T22138] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 476.228323][T22138] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 476.257492][T22138] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 476.791124][T22174] loop3: detected capacity change from 0 to 256 [ 476.813140][T22143] loop0: detected capacity change from 0 to 32768 [ 477.223259][T22190] loop1: detected capacity change from 0 to 128 [ 477.392036][T22200] loop0: detected capacity change from 0 to 128 [ 477.471861][T22200] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 477.496733][T22200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.811724][T22214] loop5: detected capacity change from 0 to 256 [ 477.967147][ T4256] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 478.187229][T19889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 478.247009][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 478.337696][T22196] loop3: detected capacity change from 0 to 32768 [ 478.377278][ T4256] usb 2-1: config 0 interface 0 altsetting 17 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.402918][ T4256] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.426467][ T4256] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 478.466380][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.479897][ T4256] usb 2-1: config 0 descriptor?? [ 478.558073][T19889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.706753][T22216] loop0: detected capacity change from 0 to 32768 [ 478.760566][T19889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.820930][T19889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.875171][T19889] usb 6-1: Product: syz [ 478.900673][T19889] usb 6-1: Manufacturer: syz [ 478.910837][T19889] usb 6-1: SerialNumber: syz [ 478.968924][ T4256] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 478.987055][ T4256] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 478.994461][ T4256] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 479.027003][ T4256] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 479.034153][ T4256] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 479.045346][T22216] XFS (loop0): Mounting V5 Filesystem [ 479.067613][ T4256] chicony 0003:04F2:1421.000F: hidraw0: USB HID v0.05 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 479.229104][ T4256] usb 2-1: USB disconnect, device number 44 [ 479.257439][T19889] cdc_ncm 6-1:1.0: bind() failure [ 479.289942][T19889] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 479.338096][T19889] cdc_ncm 6-1:1.1: bind() failure [ 479.343015][T22249] loop3: detected capacity change from 0 to 4096 [ 479.353931][T22248] fido_id[22248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 479.362652][T19889] usb 6-1: USB disconnect, device number 8 [ 479.425502][T22216] XFS (loop0): Ending clean mount [ 479.433976][T22216] XFS (loop0): Quotacheck needed: Please wait. [ 479.459987][T22255] program syz.2.8454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.496397][T22249] NILFS (loop3): invalid segment: Checksum error in segment payload [ 479.529659][T22249] NILFS (loop3): trying rollback from an earlier position [ 479.587569][T22216] XFS (loop0): Quotacheck: Done. [ 479.611512][T22249] NILFS (loop3): recovery complete [ 479.630468][T22256] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 479.682145][ T4186] XFS (loop0): Unmounting Filesystem [ 480.001607][T22265] MINIX-fs: bad superblock or unable to read bitmaps [ 480.171343][T22267] ntfs: volume version 3.1. [ 480.194512][T22268] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 480.245474][T22268] ext4 filesystem being mounted at /1688/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.437558][T22268] EXT4-fs (loop3): can't change dax mount option while remounting [ 480.558093][T22278] set_capacity_and_notify: 3 callbacks suppressed [ 480.558111][T22278] loop5: detected capacity change from 0 to 256 [ 480.694967][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 480.694984][ T26] audit: type=1326 audit(1770023894.762:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 480.830677][ T26] audit: type=1326 audit(1770023894.762:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 480.903988][ T26] audit: type=1326 audit(1770023894.802:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f50e001a3ac code=0x7ffc0000 [ 480.957071][ T13] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 481.045804][ T26] audit: type=1326 audit(1770023894.802:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f50e001a40e code=0x7ffc0000 [ 481.196656][ T26] audit: type=1326 audit(1770023894.802:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50e005db4b code=0x7ffc0000 [ 481.219847][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 481.312505][T22307] loop5: detected capacity change from 0 to 64 [ 481.322088][ T26] audit: type=1326 audit(1770023894.802:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 481.348906][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 481.371674][ T13] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 481.407432][ T13] usb 4-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 62 [ 481.431668][ T26] audit: type=1326 audit(1770023894.802:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 481.477239][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.495228][ T13] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 481.512675][T22310] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 481.522938][ T26] audit: type=1326 audit(1770023894.802:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 481.555864][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.572392][T22310] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 481.589621][ T13] usb 4-1: config 0 descriptor?? [ 481.611752][ T26] audit: type=1326 audit(1770023894.852:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 481.655504][ T26] audit: type=1326 audit(1770023894.862:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e005deb9 code=0x7ffc0000 [ 481.849680][T22292] loop1: detected capacity change from 0 to 32768 [ 482.079141][ T13] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 482.093118][ T13] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 482.110757][ T13] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 482.129431][ T13] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 482.142609][ T13] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 482.155989][ T13] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 482.229934][T22314] loop5: detected capacity change from 0 to 32768 [ 482.293799][ T13] hid-thrustmaster 0003:044F:B65D.0010: setup data couldn't be sent [ 482.315984][ T13] usb 4-1: USB disconnect, device number 43 [ 482.322061][ C0] hid-thrustmaster 0003:044F:B65D.0010: URB to get model id failed with error -71 [ 482.342128][T22314] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 482.382108][T22314] JBD2: Ignoring recovery information on journal [ 482.460269][T22321] fido_id[22321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 482.630467][T22314] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 482.849992][T22330] loop0: detected capacity change from 0 to 4096 [ 482.912378][T20741] ocfs2: Unmounting device (7,5) on (node local) [ 482.939806][T22330] NILFS (loop0): invalid segment: Checksum error in segment payload [ 482.961454][T22336] loop1: detected capacity change from 0 to 64 [ 482.969043][T22330] NILFS (loop0): trying rollback from an earlier position [ 483.089710][T22330] NILFS (loop0): recovery complete [ 483.156459][T22342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.265612][T22346] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 483.317630][T22346] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 483.518793][T22352] loop0: detected capacity change from 0 to 512 [ 483.694604][T22352] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 483.734735][T22352] ext4 filesystem being mounted at /1746/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.883412][T22364] loop5: detected capacity change from 0 to 256 [ 483.897623][T22352] EXT4-fs (loop0): can't change dax mount option while remounting [ 484.142439][T22344] loop3: detected capacity change from 0 to 32768 [ 484.231998][T22372] loop0: detected capacity change from 0 to 64 [ 484.274799][T22344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.8491 (22344) [ 484.405628][T22344] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 484.452351][T22344] BTRFS info (device loop3): force zlib compression, level 3 [ 484.482682][T22344] BTRFS info (device loop3): disabling free space tree [ 484.505977][T22344] BTRFS info (device loop3): enabling ssd optimizations [ 484.522563][T22344] BTRFS info (device loop3): allowing degraded mounts [ 484.548114][T22344] BTRFS info (device loop3): trying to use backup root at mount time [ 484.565656][T22344] BTRFS info (device loop3): enabling free space tree [ 484.587694][T22344] BTRFS info (device loop3): using free space tree [ 484.608181][T22344] BTRFS info (device loop3): has skinny extents [ 484.643255][T22385] lo speed is unknown, defaulting to 1000 [ 484.804782][T22344] BTRFS info (device loop3): checking UUID tree [ 484.875129][T22356] XFS (loop1): Mounting V5 Filesystem [ 485.022602][T22356] XFS (loop1): Ending clean mount [ 485.056690][T22356] XFS (loop1): Quotacheck needed: Please wait. [ 485.226696][T22356] XFS (loop1): Quotacheck: Done. [ 485.511304][ T4177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4177) [ 486.034688][ T4191] XFS (loop1): Unmounting Filesystem [ 486.491843][T22417] set_capacity_and_notify: 2 callbacks suppressed [ 486.491860][T22417] loop5: detected capacity change from 0 to 32768 [ 486.721344][T22417] XFS (loop5): Mounting V5 Filesystem [ 486.844803][T22417] XFS (loop5): Ending clean mount [ 486.995475][T20741] XFS (loop5): Unmounting Filesystem [ 487.611637][T22464] binder: BINDER_SET_CONTEXT_MGR already set [ 487.648268][T22465] loop3: detected capacity change from 0 to 256 [ 487.655039][T22464] binder: 22463:22464 ioctl 40046207 0 returned -16 [ 488.232357][T22459] loop1: detected capacity change from 0 to 32768 [ 488.571151][T22459] XFS (loop1): Mounting V5 Filesystem [ 488.852308][T22459] XFS (loop1): Starting recovery (logdev: internal) [ 488.919456][T22459] XFS (loop1): Ending recovery (logdev: internal) [ 489.100946][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8544'. [ 489.255391][ T4191] XFS (loop1): Unmounting Filesystem [ 489.765136][T22546] binder: BINDER_SET_CONTEXT_MGR already set [ 489.789989][T22545] loop3: detected capacity change from 0 to 1024 [ 489.809832][T22546] binder: 22544:22546 ioctl 40046207 0 returned -16 [ 489.899706][ T1487] hfsplus: b-tree write err: -5, ino 4 [ 490.597114][ T4293] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 490.886984][ T4293] usb 6-1: Using ep0 maxpacket: 32 [ 491.007287][ T4293] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 491.046920][ T4293] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 491.096714][T22552] loop0: detected capacity change from 0 to 32768 [ 491.104171][ T4293] usb 6-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 62 [ 491.148475][ T4293] usb 6-1: config 0 interface 0 has no altsetting 0 [ 491.163602][ T4293] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 491.243877][ T4293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.313311][T22552] XFS (loop0): Mounting V5 Filesystem [ 491.335549][ T4293] usb 6-1: config 0 descriptor?? [ 491.353756][T22555] loop1: detected capacity change from 0 to 40427 [ 491.496246][T22552] XFS (loop0): Starting recovery (logdev: internal) [ 491.518127][T22555] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 491.547492][T22555] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 491.611686][T22555] F2FS-fs (loop1): invalid crc value [ 491.618685][T22552] XFS (loop0): Ending recovery (logdev: internal) [ 491.662571][T22555] F2FS-fs (loop1): Found nat_bits in checkpoint [ 491.781210][T22569] loop3: detected capacity change from 0 to 32768 [ 491.839054][ T4293] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 491.870420][ T4186] XFS (loop0): Unmounting Filesystem [ 491.876970][ T4293] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 491.913672][T22555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 491.915419][ T4293] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 491.981489][ T4293] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 491.987420][T22569] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 492.011854][T22569] JBD2: Ignoring recovery information on journal [ 492.065197][ T4293] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.146676][ T4293] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 492.237272][ T4293] hid-thrustmaster 0003:044F:B65D.0011: setup data couldn't be sent [ 492.278738][T22569] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 492.286931][ C1] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -71 [ 492.297193][ T4191] attempt to access beyond end of device [ 492.297193][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 492.307345][ T4293] usb 6-1: USB disconnect, device number 9 [ 492.465128][T22600] fido_id[22600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 492.591388][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 493.364178][T22629] loop0: detected capacity change from 0 to 1024 [ 493.407336][ T4293] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 493.677126][ T4293] usb 2-1: Using ep0 maxpacket: 8 [ 493.765633][T22648] CIFS mount error: No usable UNC path provided in device string! [ 493.765633][T22648] [ 493.772843][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8599'. [ 493.787526][T22648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 493.832803][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.245201][T22656] loop3: detected capacity change from 0 to 32768 [ 494.319428][T22656] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 494.329313][T22656] gfs2: fsid=syz:syz: unknown hostdata (\) [ 494.346993][ T4293] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 494.356630][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.371206][ T4293] usb 2-1: Product: syz [ 494.375803][ T4293] usb 2-1: Manufacturer: syz [ 494.396952][ T4293] usb 2-1: SerialNumber: syz [ 494.433080][ T4293] usb 2-1: config 0 descriptor?? [ 494.493244][ T4293] usb 2-1: invalid MIDI EP [ 494.506168][T22673] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8612'. [ 494.525690][ T4293] usb 2-1: snd-bcd2000: error during probing [ 494.558076][ T4293] snd-bcd2000: probe of 2-1:0.0 failed with error -22 [ 494.582076][T22673] device gretap0 entered promiscuous mode [ 494.611075][T22679] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8612'. [ 494.683052][T22679] 0ªX¹¦D: renamed from gretap0 [ 494.695319][ T13] usb 2-1: USB disconnect, device number 45 [ 494.729997][T22679] device 30ªX¹¦D left promiscuous mode [ 494.736364][T22679] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 494.824808][T22679] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 494.921070][T22692] loop0: detected capacity change from 0 to 64 [ 495.130336][T22700] loop3: detected capacity change from 0 to 1024 [ 495.256507][T22710] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8630'. [ 495.299317][T22700] hfsplus: bad catalog entry type [ 495.354474][T22716] loop0: detected capacity change from 0 to 1024 [ 495.393466][ T8433] hfsplus: b-tree write err: -5, ino 4 [ 495.532227][T22716] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noload,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 495.837108][ T4293] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 495.966560][T22748] loop1: detected capacity change from 0 to 16 [ 496.102218][T22748] erofs: (device loop1): mounted with root inode @ nid 36. [ 496.126576][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 496.126592][ T26] audit: type=1800 audit(1770023910.192:50): pid=22748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8648" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 496.154734][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 496.272201][T22756] loop1: detected capacity change from 0 to 256 [ 496.317481][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.336996][ T4256] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 496.347267][ T4293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 496.386985][ T4293] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 496.397206][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.408360][T22740] loop0: detected capacity change from 0 to 32768 [ 496.429179][ T4293] usb 3-1: config 0 descriptor?? [ 496.504852][T22740] XFS (loop0): Mounting V5 Filesystem [ 496.581602][T22740] XFS (loop0): Ending clean mount [ 496.718425][ T4186] XFS (loop0): Unmounting Filesystem [ 496.727319][ T4256] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 496.745770][ T4256] usb 6-1: config 0 has no interface number 0 [ 496.752480][ T4256] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 496.762599][ T4256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.774258][ T4256] usb 6-1: config 0 descriptor?? [ 496.830677][ T4256] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 496.838190][ T4256] usb 6-1: setting power ON [ 496.864138][ T4256] dvb-usb: bulk message failed: -22 (2/0) [ 496.923301][ T4293] microsoft 0003:045E:07DA.0012: collection stack underflow [ 496.931002][ T4293] microsoft 0003:045E:07DA.0012: item 0 2 0 12 parsing failed [ 496.940011][ T4293] microsoft 0003:045E:07DA.0012: parse failed [ 496.946233][ T4293] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 497.017237][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 497.037424][T22431] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 497.124939][ T13] usb 3-1: USB disconnect, device number 46 [ 497.154865][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8655'. [ 497.168368][ T4256] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 497.200736][ T4256] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 497.217133][ T4256] dvb_usb_cxusb: probe of 6-1:0.30 failed with error -22 [ 497.226233][ T4256] usb 6-1: USB disconnect, device number 10 [ 497.407153][T22431] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.418623][T22431] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 497.429675][T22431] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.436350][T22431] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 497.445828][T22431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.456746][T22431] usb 2-1: config 0 descriptor?? [ 497.477339][T22770] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 497.939071][T22431] logitech 0003:046D:C24F.0013: unbalanced collection at end of report description [ 497.975706][T22431] logitech 0003:046D:C24F.0013: parse failed [ 498.007426][T22431] logitech: probe of 0003:046D:C24F.0013 failed with error -22 [ 498.141136][T22431] usb 2-1: USB disconnect, device number 46 [ 498.518555][T22836] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8681'. [ 498.560422][T22836] device gretap0 entered promiscuous mode [ 498.567954][ T4256] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 498.608611][T22838] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8681'. [ 498.634298][T22832] loop0: detected capacity change from 0 to 4096 [ 498.649485][T22838] 0ªX¹¦D: renamed from gretap0 [ 498.666526][T22838] device 30ªX¹¦D left promiscuous mode [ 498.694619][T22832] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 498.710518][T22838] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 498.853749][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 498.968031][T22851] loop1: detected capacity change from 0 to 512 [ 499.018007][ T4256] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 499.026231][ T4256] usb 4-1: config 0 has no interface number 0 [ 499.049106][ T4256] usb 4-1: config 0 interface 184 has no altsetting 0 [ 499.056104][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8692'. [ 499.130068][T22851] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 499.156096][T22851] ext4 filesystem being mounted at /1775/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.222526][T22851] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.8689: corrupted inode contents [ 499.247530][ T4256] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 499.256647][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.285542][ T4256] usb 4-1: Product: syz [ 499.295975][T22851] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.8689: mark_inode_dirty error [ 499.302754][ T4256] usb 4-1: Manufacturer: syz [ 499.319335][T22851] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.8689: corrupted inode contents [ 499.334994][ T4256] usb 4-1: SerialNumber: syz [ 499.368617][T22873] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.8689: corrupted inode contents [ 499.387885][ T4256] usb 4-1: config 0 descriptor?? [ 499.428982][T22873] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.8689: mark_inode_dirty error [ 499.447251][T22873] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.8689: corrupted inode contents [ 499.448122][ T4256] smsc75xx v1.0.0 [ 499.484604][T22878] loop5: detected capacity change from 0 to 128 [ 499.511416][T22881] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8700'. [ 499.536157][T22878] FAT-fs (loop5): Directory bread(block 162) failed [ 499.544107][T22878] FAT-fs (loop5): Directory bread(block 163) failed [ 499.562526][T22878] FAT-fs (loop5): Directory bread(block 164) failed [ 499.571040][T22878] FAT-fs (loop5): Directory bread(block 165) failed [ 499.578528][T22878] FAT-fs (loop5): Directory bread(block 166) failed [ 499.585408][T22881] device gretap0 entered promiscuous mode [ 499.598821][T22878] FAT-fs (loop5): Directory bread(block 167) failed [ 499.605517][T22878] FAT-fs (loop5): Directory bread(block 168) failed [ 499.611277][T22882] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8700'. [ 499.624395][T22878] FAT-fs (loop5): Directory bread(block 169) failed [ 499.637669][T22882] 0ªX¹¦D: renamed from gretap0 [ 499.701717][T22878] FAT-fs (loop5): Directory bread(block 162) failed [ 499.713053][T22882] device 30ªX¹¦D left promiscuous mode [ 499.728145][T22882] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 499.736060][T22882] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 499.755461][T22878] FAT-fs (loop5): Directory bread(block 163) failed [ 499.798371][T22878] attempt to access beyond end of device [ 499.798371][T22878] loop5: rw=3, want=232, limit=128 [ 499.887360][T22878] attempt to access beyond end of device [ 499.887360][T22878] loop5: rw=2051, want=234, limit=128 [ 500.115515][ T4256] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 500.156494][ T4256] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 500.178317][ T4256] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 500.189995][ T4256] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 500.202538][ T4256] usb 4-1: USB disconnect, device number 44 [ 500.450457][T22900] loop0: detected capacity change from 0 to 4096 [ 500.571814][T22900] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 500.627146][T22900] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 500.684180][T22900] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 500.702288][T22900] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 500.737172][T22900] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 500.830649][T22900] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 500.898034][T22900] ntfs: volume version 3.1. [ 500.902660][T22900] ntfs: (device loop0): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 500.987605][T22900] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 501.017099][T22900] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 501.218629][T22921] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8717'. [ 501.245480][T22902] loop1: detected capacity change from 0 to 32768 [ 501.256612][T22921] device gretap0 entered promiscuous mode [ 501.292426][T22923] device netdevsim0 entered promiscuous mode [ 501.307675][T22923] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 501.345952][T22923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 501.420628][T22924] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8717'. [ 501.472059][T22924] 0ªX¹¦D: renamed from gretap0 [ 501.497254][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.512213][T22906] loop5: detected capacity change from 0 to 32768 [ 501.536359][T22924] device 30ªX¹¦D left promiscuous mode [ 501.546795][T22902] XFS (loop1): Mounting V5 Filesystem [ 501.597594][T22906] JBD2: Ignoring recovery information on journal [ 501.599132][T22924] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 501.662948][T22902] XFS (loop1): Ending clean mount [ 501.705234][T22906] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 501.952666][T20741] ocfs2: Unmounting device (7,5) on (node local) [ 501.988254][ T4191] XFS (loop1): Unmounting Filesystem [ 502.125698][T22952] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 502.143843][T22952] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8727'. [ 502.153680][T22952] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8727'. [ 502.274965][T22956] loop5: detected capacity change from 0 to 256 [ 502.427512][T22956] FAT-fs (loop5): Directory bread(block 64) failed [ 502.434219][T22956] FAT-fs (loop5): Directory bread(block 65) failed [ 502.478231][T22956] FAT-fs (loop5): Directory bread(block 66) failed [ 502.484921][T22956] FAT-fs (loop5): Directory bread(block 67) failed [ 502.527396][T22956] FAT-fs (loop5): Directory bread(block 68) failed [ 502.534052][T22956] FAT-fs (loop5): Directory bread(block 69) failed [ 502.550293][T22956] FAT-fs (loop5): Directory bread(block 70) failed [ 502.560634][T22956] FAT-fs (loop5): Directory bread(block 71) failed [ 502.568576][T22956] FAT-fs (loop5): Directory bread(block 72) failed [ 502.582321][T22956] FAT-fs (loop5): Directory bread(block 73) failed [ 502.881518][T22971] loop3: detected capacity change from 0 to 8 [ 502.924395][T22977] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8734'. [ 502.967395][T22977] device gretap0 entered promiscuous mode [ 503.008871][T22981] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8734'. [ 503.037543][T22981] 0ªX¹¦D: renamed from gretap0 [ 503.062449][T22981] device 30ªX¹¦D left promiscuous mode [ 503.082326][T22975] loop5: detected capacity change from 0 to 4096 [ 503.094249][T22981] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 503.149682][T22981] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 503.193173][T22975] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 503.300182][T22992] device netdevsim0 entered promiscuous mode [ 503.319319][T22991] loop0: detected capacity change from 0 to 736 [ 503.323216][T22992] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 503.354799][T22992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 503.477362][ T4256] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 503.512221][T23000] netlink: 'syz.5.8750': attribute type 4 has an invalid length. [ 503.657574][ T21] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 503.846574][T23013] loop5: detected capacity change from 0 to 128 [ 503.887994][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.947574][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.949429][T23017] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8758'. [ 503.977923][ T4256] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 503.996313][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.020900][T20741] sysv_free_block: flc_count > flc_size [ 504.039860][ T4256] usb 3-1: config 0 descriptor?? [ 504.045091][T23017] device 30ªX¹¦D entered promiscuous mode [ 504.047575][T20741] sysv_free_block: flc_count > flc_size [ 504.067413][T20741] sysv_free_block: flc_count > flc_size [ 504.073025][T20741] sysv_free_block: flc_count > flc_size [ 504.073547][T23018] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8758'. [ 504.087318][T20741] sysv_free_block: flc_count > flc_size [ 504.093689][T20741] sysv_free_block: flc_count > flc_size [ 504.100647][T23018] 1ªX¹¦D: renamed from 30ªX¹¦D [ 504.115770][T20741] sysv_free_block: flc_count > flc_size [ 504.122405][ T21] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 504.137991][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 504.149542][T20741] sysv_free_block: flc_count > flc_size [ 504.158669][T20741] sysv_free_block: flc_count > flc_size [ 504.164248][T20741] sysv_free_block: flc_count > flc_size [ 504.167468][T23018] device 31ªX¹¦D left promiscuous mode [ 504.170336][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.176829][T23018] IPv6: ADDRCONF(NETDEV_CHANGE): 31ªX¹¦D: link becomes ready [ 504.191037][T20741] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 504.206329][T23018] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 504.399243][T23006] loop3: detected capacity change from 0 to 40427 [ 504.412264][T23006] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 504.445052][T23006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 504.495395][T23006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 504.507725][ T21] usb 2-1: string descriptor 0 read error: -22 [ 504.534620][ T21] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 504.555884][ T26] audit: type=1326 audit(1770023918.622:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 504.575127][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.593306][ T4256] wacom 0003:056A:00ED.0014: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 504.607180][T23006] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 504.626618][ T21] usb 2-1: config 0 descriptor?? [ 504.635210][ T26] audit: type=1326 audit(1770023918.622:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 504.641417][T23006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 504.663050][ T26] audit: type=1326 audit(1770023918.622:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 504.701025][ T21] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 504.734477][ T21] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 504.778047][ T26] audit: type=1326 audit(1770023918.622:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 504.790785][ T4234] usb 3-1: USB disconnect, device number 47 [ 504.888184][ T26] audit: type=1326 audit(1770023918.622:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 504.971934][T23033] fido_id[23033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 504.995784][ T26] audit: type=1326 audit(1770023918.622:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 505.018959][ T4187] attempt to access beyond end of device [ 505.018959][ T4187] loop3: rw=2049, want=45104, limit=40427 [ 505.047795][ T21] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 505.052657][ T26] audit: type=1326 audit(1770023918.622:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 505.081187][ T26] audit: type=1326 audit(1770023918.622:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 505.087600][ T21] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 505.104374][ T26] audit: type=1326 audit(1770023918.622:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.0.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcb5c5f6eb9 code=0x7ffc0000 [ 505.157525][ T21] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 505.164530][ T21] em28xx 2-1:0.0: No AC97 audio processor [ 505.208952][ T21] usb 2-1: USB disconnect, device number 47 [ 505.241735][ T21] em28xx 2-1:0.0: Disconnecting em28xx [ 505.285139][ T21] em28xx 2-1:0.0: Freeing device [ 505.693937][T23047] sp0: Synchronizing with TNC [ 505.738588][T23035] loop5: detected capacity change from 0 to 40427 [ 505.746519][T23046] [U] è [ 505.754951][T23051] loop1: detected capacity change from 0 to 1024 [ 505.791693][T23035] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 505.821293][T23035] F2FS-fs (loop5): invalid crc value [ 505.844651][T23051] hfsplus: request for non-existent node 134217728 in B*Tree [ 505.845599][T23035] F2FS-fs (loop5): Found nat_bits in checkpoint [ 505.874377][T23051] hfsplus: request for non-existent node 134217728 in B*Tree [ 505.946811][T23058] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8777'. [ 505.964109][T23035] F2FS-fs (loop5): recover fsync data on readonly fs [ 506.016471][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8777'. [ 506.024873][T23035] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 506.031365][T23058] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8777'. [ 506.091889][T23035] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 506.150377][T23035] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 506.277124][ T4234] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 506.308249][T23035] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0 [ 506.537196][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 506.657456][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.687273][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.723362][T23082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8788'. [ 506.732686][ T4234] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.740395][T23083] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 506.750173][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.764537][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8788'. [ 506.788570][ T4234] usb 2-1: config 0 descriptor?? [ 506.816279][T23082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8788'. [ 507.270357][ T4234] microsoft 0003:045E:07DA.0015: collection stack underflow [ 507.292692][ T4234] microsoft 0003:045E:07DA.0015: item 0 2 0 12 parsing failed [ 507.307609][ T4234] microsoft 0003:045E:07DA.0015: parse failed [ 507.314942][ T4234] microsoft: probe of 0003:045E:07DA.0015 failed with error -22 [ 507.527332][ T4234] usb 2-1: USB disconnect, device number 48 [ 507.678835][T23089] loop5: detected capacity change from 0 to 32768 [ 507.731249][T23088] loop3: detected capacity change from 0 to 32768 [ 507.875781][T23088] XFS (loop3): Mounting V5 Filesystem [ 508.042835][T23088] XFS (loop3): Ending clean mount [ 508.100248][T23088] XFS (loop3): Quotacheck needed: Please wait. [ 508.269504][T23088] XFS (loop3): Quotacheck: Done. [ 508.444783][T23131] loop0: detected capacity change from 0 to 256 [ 508.476359][ T26] audit: type=1326 audit(1770023922.542:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23132 comm="syz.5.8807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdbbdb8eb9 code=0x7ffc0000 [ 508.539632][ T4187] XFS (loop3): Unmounting Filesystem [ 508.639536][T23131] FAT-fs (loop0): Directory bread(block 64) failed [ 508.679467][T23131] FAT-fs (loop0): Directory bread(block 65) failed [ 508.728315][T23131] FAT-fs (loop0): Directory bread(block 66) failed [ 508.803270][T23131] FAT-fs (loop0): Directory bread(block 67) failed [ 508.827141][T23131] FAT-fs (loop0): Directory bread(block 68) failed [ 508.844208][T23131] FAT-fs (loop0): Directory bread(block 69) failed [ 508.893868][T23131] FAT-fs (loop0): Directory bread(block 70) failed [ 508.917538][T23131] FAT-fs (loop0): Directory bread(block 71) failed [ 508.934291][T23131] FAT-fs (loop0): Directory bread(block 72) failed [ 508.949577][T23131] FAT-fs (loop0): Directory bread(block 73) failed [ 509.158214][T23158] loop1: detected capacity change from 0 to 128 [ 509.192327][T23159] loop5: detected capacity change from 0 to 512 [ 509.285030][ T4191] sysv_free_block: flc_count > flc_size [ 509.337521][ T4191] sysv_free_block: flc_count > flc_size [ 509.343126][ T4191] sysv_free_block: flc_count > flc_size [ 509.359899][T23159] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 509.377103][ T4191] sysv_free_block: flc_count > flc_size [ 509.387195][ T4191] sysv_free_block: flc_count > flc_size [ 509.392961][ T4191] sysv_free_block: flc_count > flc_size [ 509.407931][T23159] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.419064][ T4191] sysv_free_block: flc_count > flc_size [ 509.423686][T23169] sp0: Synchronizing with TNC [ 509.427214][ T4191] sysv_free_block: flc_count > flc_size [ 509.454063][ T4191] sysv_free_block: flc_count > flc_size [ 509.467457][T23167] [U] è [ 509.468117][ T4191] sysv_free_block: flc_count > flc_size [ 509.491060][ T4191] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 509.504439][T23159] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.8817: corrupted inode contents [ 509.552171][T23159] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.8817: mark_inode_dirty error [ 509.573591][T23159] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.8817: corrupted inode contents [ 509.615675][T23171] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.8817: corrupted inode contents [ 509.638056][T23171] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.8817: mark_inode_dirty error [ 509.661181][T23171] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.8817: corrupted inode contents [ 509.677229][ T4293] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 510.065783][T23193] loop0: detected capacity change from 0 to 1024 [ 510.087662][ T4293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.108735][ T4293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.175239][T23193] hfsplus: request for non-existent node 134217728 in B*Tree [ 510.185286][T13509] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 510.203717][T23193] hfsplus: request for non-existent node 134217728 in B*Tree [ 510.227838][ T4293] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.249131][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.270842][ T4293] usb 4-1: SerialNumber: syz [ 510.428207][T23208] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 510.570301][ T4293] usb 4-1: 0:2 : does not exist [ 510.587594][T13509] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 510.601884][T13509] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 510.617816][ T4293] usb 4-1: USB disconnect, device number 45 [ 510.637075][T13509] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.661529][T13509] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 510.682303][T13509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.707525][T13509] usb 3-1: config 0 descriptor?? [ 510.727773][T23182] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 510.883088][T23201] loop1: detected capacity change from 0 to 32768 [ 510.888450][T23210] loop0: detected capacity change from 0 to 32768 [ 510.907737][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.924056][T23201] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.8836 (23201) [ 510.967381][T23201] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 510.993044][T23201] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 511.043929][T23201] BTRFS info (device loop1): use lzo compression, level 0 [ 511.054294][T23201] BTRFS info (device loop1): using free space tree [ 511.071504][T23201] BTRFS info (device loop1): has skinny extents [ 511.199550][T13509] logitech 0003:046D:C24F.0016: unbalanced collection at end of report description [ 511.228694][T13509] logitech 0003:046D:C24F.0016: parse failed [ 511.234943][T13509] logitech: probe of 0003:046D:C24F.0016 failed with error -22 [ 511.274262][T23226] loop0: detected capacity change from 0 to 128 [ 511.298005][T23228] loop3: detected capacity change from 0 to 512 [ 511.337193][ T4234] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 511.353290][T23226] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 511.386366][T23228] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 511.398303][T23228] ext4 filesystem being mounted at /1759/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.437665][ T4293] usb 3-1: USB disconnect, device number 48 [ 511.502888][T23201] BTRFS info (device loop1): enabling ssd optimizations [ 511.577087][ T4234] usb 6-1: Using ep0 maxpacket: 16 [ 511.697159][ T4234] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 511.717012][ T4234] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.779409][ T4234] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 511.826490][ T4234] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.846709][ T4234] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 511.856362][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.922322][ T4234] usb 6-1: config 0 descriptor?? [ 511.960267][T23252] sp0: Synchronizing with TNC [ 512.449809][ T4234] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 512.456826][ T4234] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 512.463775][ T4234] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 512.470687][ T4234] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 512.477567][ T4234] lua 0003:1E7D:2C2E.0017: unknown main item tag 0x0 [ 512.485397][ T4234] lua 0003:1E7D:2C2E.0017: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 512.652725][ T4293] usb 6-1: USB disconnect, device number 11 [ 512.715216][T23264] fido_id[23264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 512.769400][T23274] netlink: 'syz.2.8861': attribute type 2 has an invalid length. [ 512.815365][T23278] device vlan3 entered promiscuous mode [ 512.850054][T23278] device bridge0 entered promiscuous mode [ 512.870806][T23278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 512.889533][T23283] loop3: detected capacity change from 0 to 64 [ 512.922101][T23286] loop0: detected capacity change from 0 to 24 [ 512.978014][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 513.235848][T23299] loop5: detected capacity change from 0 to 64 [ 513.351952][T23305] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8875'. [ 513.402742][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8875'. [ 514.032807][T23326] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 514.106634][T23326] ntfs3: loop3: Failed to load $Extend. [ 514.115632][T23331] program syz.1.8889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.248953][T23335] set_capacity_and_notify: 2 callbacks suppressed [ 514.248972][T23335] loop5: detected capacity change from 0 to 512 [ 514.283274][T23337] loop1: detected capacity change from 0 to 512 [ 514.283659][T23307] loop0: detected capacity change from 0 to 32768 [ 514.394238][T23337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 514.427256][T23337] System zones: 1-12 [ 514.432540][T23337] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.8891: Directory hole found for htree index block 0 [ 514.452798][T23335] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 514.472219][T23307] JBD2: Ignoring recovery information on journal [ 514.486155][T23337] EXT4-fs (loop1): Remounting filesystem read-only [ 514.522173][T23337] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 514.531601][T23337] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.8891: Directory hole found for htree index block 0 [ 514.546792][T23337] EXT4-fs (loop1): Remounting filesystem read-only [ 514.554991][T23337] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 514.565053][T23337] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 514.588422][T23307] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 514.626968][ T4293] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 514.647771][T23353] loop3: detected capacity change from 0 to 1024 [ 514.704602][T23354] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 514.733888][T23354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 514.744686][T23354] OCFS2: File system is now read-only. [ 514.751299][T23354] (syz.0.8876,23354,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 514.760294][T23354] (syz.0.8876,23354,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 514.770198][T23354] (syz.0.8876,23354,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 514.801437][T23354] (syz.0.8876,23354,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 514.840020][T23354] (syz.0.8876,23354,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 514.865565][T23353] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 514.892516][T23354] (syz.0.8876,23354,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 514.907572][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 514.914878][T23354] (syz.0.8876,23354,0):ocfs2_mknod:385 ERROR: status = -30 [ 514.924571][T23354] (syz.0.8876,23354,0):ocfs2_mknod:502 ERROR: status = -30 [ 514.937968][T23354] (syz.0.8876,23354,1):ocfs2_mkdir:659 ERROR: status = -30 [ 515.037942][ T4293] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 515.086935][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.148547][ T4293] usb 3-1: config 0 descriptor?? [ 515.190219][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 515.239958][ T4293] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 515.435012][T23380] loop5: detected capacity change from 0 to 128 [ 515.616812][T23380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 515.697039][T23380] hpfs: filesystem error: improperly stopped [ 515.717830][T23380] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 515.743899][T23380] hpfs: You really don't want any checks? You are crazy... [ 515.765865][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 515.793957][T23380] hpfs: hpfs_map_sector(): read error [ 515.802110][T23390] loop3: detected capacity change from 0 to 512 [ 515.816288][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 515.825108][T23380] hpfs: code page support is disabled [ 515.834586][T23380] hpfs: hpfs_map_4sectors(): unaligned read [ 515.843223][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªX¹¦D: link becomes ready [ 515.856305][T23380] hpfs: hpfs_map_4sectors(): unaligned read [ 515.877200][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 515.887585][ T4293] gspca_sonixj: reg_w1 err -71 [ 515.890610][T23380] hpfs: filesystem error: unable to find root dir [ 515.892442][ T4293] sonixj: probe of 3-1:0.0 failed with error -71 [ 515.933433][T23390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 515.939555][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 515.950933][ T4293] usb 3-1: USB disconnect, device number 49 [ 515.953778][T23390] System zones: 1-12 [ 515.968372][T23390] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8912: Directory hole found for htree index block 0 [ 515.984190][T23390] EXT4-fs (loop3): Remounting filesystem read-only [ 516.016166][T23390] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 516.027494][T23390] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8912: Directory hole found for htree index block 0 [ 516.032552][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 516.050555][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.058778][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.069819][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.077947][T23389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.091627][T23389] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 516.091931][T23390] EXT4-fs (loop3): Remounting filesystem read-only [ 516.109425][ C0] Illegal XDP return value 16128, expect packet loss! [ 516.178063][T23390] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 516.186584][T23390] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 516.220071][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8914'. [ 516.248654][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8914'. [ 516.267692][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8914'. [ 516.347958][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8914'. [ 516.381044][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8914'. [ 516.558204][T23390] EXT4-fs (loop3): Can't set test_dummy_encryption on remount [ 516.662443][T23403] loop1: detected capacity change from 0 to 512 [ 516.835217][T23411] loop3: detected capacity change from 0 to 64 [ 516.880653][T23403] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.8919: invalid indirect mapped block 4294967295 (level 1) [ 516.911066][T23386] loop0: detected capacity change from 0 to 40427 [ 516.920908][T23403] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.8919: invalid indirect mapped block 4294967295 (level 1) [ 516.957511][T23403] EXT4-fs (loop1): 2 truncates cleaned up [ 516.963537][T23403] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 516.991498][T23386] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 517.004350][T23386] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 517.053329][T23403] EXT4-fs error (device loop1): ext4_get_parent:1906: inode #11: comm syz.1.8919: bad parent inode number: 3 [ 517.126034][T23386] F2FS-fs (loop0): Found nat_bits in checkpoint [ 517.314911][T23386] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 517.341762][T23386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 517.906692][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8941'. [ 517.934837][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8941'. [ 517.955801][T23451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8941'. [ 517.999150][T23453] loop1: detected capacity change from 0 to 512 [ 518.037610][T23453] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 518.203865][T23453] block device autoloading is deprecated and will be removed. [ 518.252494][T23453] EXT4-fs (loop1): external journal has bad superblock [ 518.813137][T23440] jfs_strtoUCS: char2uni returned -22. [ 518.831280][T23440] charset = cp950, char = 0xd4 [ 518.967476][T23469] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 519.056118][T23469] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 519.206045][T23469] ntfs3: loop0: ino=5, "/" directory corrupted [ 519.375868][T23486] __nla_validate_parse: 1 callbacks suppressed [ 519.375886][T23486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8956'. [ 519.380170][T23461] set_capacity_and_notify: 2 callbacks suppressed [ 519.380184][T23461] loop5: detected capacity change from 0 to 32768 [ 519.434815][T23488] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.8955'. [ 520.016462][T23506] loop5: detected capacity change from 0 to 1024 [ 520.144038][T23510] loop1: detected capacity change from 0 to 4096 [ 520.144719][T23509] loop0: detected capacity change from 0 to 4096 [ 520.162397][T23506] hfsplus: unable to parse mount options [ 520.218945][T23510] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 520.228203][T23509] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 520.279638][T23506] kAFS: unable to lookup cell '°ÇÈsYSÝ‹ñ½øAœ‹Ù¸ë±?Š¥hÆrÌF5=‰XŠ$jÕÎÓ‹Zçîñ^îÛº2Ûéí׳Hªq=V²ØÎÇÕJt›dçŽùzÏh¬D ŒøAšä[¹st­ç÷õëü¹L®ýâˆ}ŽZvæ“݌̥¹Ï³ñÒðÜy Ž4¥î3¨“Û£¤›ƒ#9ÿá89?‘¯Ó\ÿ¢?çmÌGiƒ™XˆR~õE¼ÚŸó[_¼÷rã/ÿó¯Wn”ÖnÞ¸¾qîOéPM…ÁLÔ{2ñÚð«/ÏD#ÍDkôLLî˜~‚ó8@•<ÙT4âlùݬ´oô\‚ïŵXŽ‹1óq)æâ±õ¾+ìT_^ËõÕþœd÷ZiçüVü™/õTúå>•Vš——zòÚ;ÓÕ²cùžË¿Š¹ž,½<üêû¯@' [ 520.371938][T23510] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 520.653089][ T4191] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 520.746406][T23525] loop5: detected capacity change from 0 to 256 [ 520.824645][T23531] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 520.927518][T13509] Bluetooth: hci5: command 0x0411 tx timeout [ 521.155248][T23542] loop0: detected capacity change from 0 to 1024 [ 521.255502][T23553] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 521.356283][T23542] EXT4-fs (loop0): filesystem is read-only [ 521.406806][T23542] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 521.520265][T23542] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 521.584062][T23542] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: comm syz.0.8982: inode #1: comm syz.0.8982: iget: illegal inode # [ 521.734554][T23542] EXT4-fs (loop0): no journal found [ 521.751478][T23555] loop1: detected capacity change from 0 to 65536 [ 521.767266][T23542] EXT4-fs (loop0): can't get journal size [ 521.800456][T23542] EXT4-fs error (device loop0): ext4_fill_super:4866: inode #2: comm syz.0.8982: iget: special inode unallocated [ 521.852000][T23542] EXT4-fs (loop0): get root inode failed [ 521.885104][T19889] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x3a7/0x490, xfs_sb block 0x0 [ 521.899687][T23542] EXT4-fs (loop0): mount failed [ 521.915647][T19889] XFS (loop1): Unmount and run xfs_repair [ 521.925664][T19889] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 521.935444][T19889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 80 00 XFSB............ [ 521.944929][T19889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 521.959155][T19889] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 521.973639][T19889] 00000030: 00 00 00 00 00 00 40 08 00 00 00 00 00 00 00 20 ......@........ [ 521.982864][T19889] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 521.992385][T19889] 00000050: 00 00 00 04 00 00 40 00 00 00 00 02 00 00 00 00 ......@......... [ 522.001747][T19889] 00000060: 00 00 04 98 b4 b5 02 00 02 00 00 02 00 00 00 00 ................ [ 522.011262][T19889] 00000070: 00 00 00 00 00 00 00 00 0a 09 09 01 0e 00 00 14 ................ [ 522.020983][T23555] XFS (loop1): SB validate failed with error -74. [ 522.382846][T23585] loop5: detected capacity change from 0 to 256 [ 522.415611][T23588] genirq: Flags mismatch irq 2. 00000000 (aio_iiro_16) vs. 00000000 (pcl818) [ 522.447061][T23585] exfat: Deprecated parameter 'namecase' [ 522.515889][T23592] loop1: detected capacity change from 0 to 2048 [ 522.560765][T23585] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 522.666488][T23592] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 522.683379][T23589] loop3: detected capacity change from 0 to 4096 [ 522.701907][T23598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.146425][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9013'. [ 523.367214][T23617] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 523.453534][ T4433] udevd[4433]: incorrect nilfs2 checksum on /dev/loop1 [ 523.497153][T23630] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.522937][T23628] EXT4-fs (loop5): Ignoring removed orlov option [ 523.562629][T23628] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 523.687578][T23628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814c018, mo2=0002] [ 523.695815][T23628] System zones: 0-1, 3-12 [ 523.709107][T23628] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,debug,,errors=continue. Quota mode: writeback. [ 523.731807][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.986931][T23625] JBD2: Ignoring recovery information on journal [ 524.076387][T23625] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 524.123190][T23625] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 524.160408][T23625] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 524.170862][T23625] OCFS2: File system is now read-only. [ 524.194665][T23652] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 524.198281][T23625] (syz.3.9017,23625,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 524.243896][T23625] (syz.3.9017,23625,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 524.264076][T23625] (syz.3.9017,23625,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 524.338191][T23625] (syz.3.9017,23625,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 524.408133][T23625] (syz.3.9017,23625,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 524.433050][T23625] (syz.3.9017,23625,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 524.468042][T23665] set_capacity_and_notify: 4 callbacks suppressed [ 524.468060][T23665] loop0: detected capacity change from 0 to 512 [ 524.527272][T23625] (syz.3.9017,23625,0):ocfs2_mknod:385 ERROR: status = -30 [ 524.565041][T23625] (syz.3.9017,23625,0):ocfs2_mknod:502 ERROR: status = -30 [ 524.588458][T23625] (syz.3.9017,23625,0):ocfs2_mkdir:659 ERROR: status = -30 [ 524.651920][T23665] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9032: invalid indirect mapped block 4294967295 (level 1) [ 524.692356][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 524.732719][T23665] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9032: invalid indirect mapped block 4294967295 (level 1) [ 524.820764][T23665] EXT4-fs (loop0): 2 truncates cleaned up [ 524.886782][T23665] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 525.081102][T23665] EXT4-fs error (device loop0): ext4_get_parent:1906: inode #11: comm syz.0.9032: bad parent inode number: 3 [ 525.549304][T23706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9051'. [ 525.769901][T23716] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 525.830619][T23717] loop3: detected capacity change from 0 to 2048 [ 525.892068][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9058'. [ 525.968480][T23717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.091314][T23689] loop1: detected capacity change from 0 to 32768 [ 526.542039][T23742] loop3: detected capacity change from 0 to 2048 [ 526.586463][T23744] loop5: detected capacity change from 0 to 764 [ 526.657923][T23742] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.663341][T23741] loop0: detected capacity change from 0 to 4096 [ 526.742262][T23741] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 527.158920][T23754] loop3: detected capacity change from 0 to 1024 [ 527.308403][T23763] SET target dimension over the limit! [ 527.314059][T23754] EXT4-fs (loop3): Ignoring removed orlov option [ 527.441292][T23754] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 527.555327][T23754] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 527.592672][T23773] loop1: detected capacity change from 0 to 256 [ 527.599608][T23754] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 528.116819][T23769] loop0: detected capacity change from 0 to 32768 [ 528.139249][T23775] loop5: detected capacity change from 0 to 65536 [ 528.255469][T23769] JBD2: Ignoring recovery information on journal [ 528.400598][T23769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 528.444324][T19889] XFS (loop5): Metadata CRC error detected at xfs_sb_read_verify+0x3a7/0x490, xfs_sb block 0x0 [ 528.497616][T19889] XFS (loop5): Unmount and run xfs_repair [ 528.503411][T19889] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 528.530515][T23769] (syz.0.9078,23769,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 528.569231][T19889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 80 00 XFSB............ [ 528.607105][T23769] (syz.0.9078,23769,0):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 528.620687][T19889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 528.643170][T19889] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 528.677317][T19889] 00000030: 00 00 00 00 00 00 40 08 00 00 00 00 00 00 00 20 ......@........ [ 528.698924][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 528.711539][T19889] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 528.726935][T19889] 00000050: 00 00 00 04 00 00 40 00 00 00 00 02 00 00 00 00 ......@......... [ 528.736184][T19889] 00000060: 00 00 04 98 b4 b5 02 00 02 00 00 02 00 00 00 00 ................ [ 528.744118][T23794] __ntfs_error: 8 callbacks suppressed [ 528.744135][T23794] ntfs: (device loop3): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 528.756935][T19889] 00000070: 00 00 00 00 00 00 00 00 0a 09 09 01 0e 00 00 14 ................ [ 528.792652][T23775] XFS (loop5): SB validate failed with error -74. [ 528.965428][T23794] ntfs: volume version 3.1. [ 529.793395][T23821] set_capacity_and_notify: 2 callbacks suppressed [ 529.793411][T23821] loop0: detected capacity change from 0 to 4096 [ 529.881758][T23817] loop3: detected capacity change from 0 to 4096 [ 529.940484][T23821] NILFS (loop0): invalid segment: Checksum error in segment payload [ 529.971904][T23801] loop1: detected capacity change from 0 to 32768 [ 529.974312][T23817] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 530.006237][T23821] NILFS (loop0): trying rollback from an earlier position [ 530.058465][T23821] NILFS (loop0): recovery complete [ 530.108361][T23835] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.207054][T23801] XFS (loop1): Mounting V5 Filesystem [ 530.332653][T23801] XFS (loop1): Ending clean mount [ 530.432676][ T4191] XFS (loop1): Unmounting Filesystem [ 531.106342][T23868] loop0: detected capacity change from 0 to 2048 [ 531.163120][ T4433] Alternate GPT is invalid, using primary GPT. [ 531.205649][ T4433] loop0: p1 p2 p3 [ 531.282408][T23874] comedi: No check for data length of config insn id 189 is implemented [ 531.282643][T23868] Alternate GPT is invalid, using primary GPT. [ 531.310186][T23874] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 531.328220][T19889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 531.371629][T23874] comedi: Assuming n=419 is correct [ 531.384532][T23868] loop0: p1 p2 p3 [ 531.582497][T23884] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 531.587093][T19889] usb 6-1: Using ep0 maxpacket: 8 [ 531.717151][T19889] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 531.745277][T19889] usb 6-1: config 2 has no interface number 0 [ 531.787696][T19889] usb 6-1: config 2 interface 31 has no altsetting 0 [ 531.867079][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 531.884257][T18642] udevd[18642]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 531.912861][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 531.947432][T19889] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 531.961204][T19889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.977933][T18642] udevd[18642]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 531.993778][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 532.004786][T19889] usb 6-1: Product: syz [ 532.016791][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 532.032256][T19889] usb 6-1: Manufacturer: syz [ 532.055381][T19889] usb 6-1: SerialNumber: syz [ 532.678388][ T4257] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 532.805481][T23899] loop3: detected capacity change from 0 to 40427 [ 532.939459][T19889] ch9200: probe of 6-1:2.31 failed with error -22 [ 532.952511][T23899] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 532.966163][T19889] usb 6-1: USB disconnect, device number 12 [ 532.972655][T23899] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 532.989024][T23899] F2FS-fs (loop3): invalid crc value [ 532.996813][T23899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 533.037326][ T4257] usb 2-1: config index 0 descriptor too short (expected 59684, got 36) [ 533.076688][ T4257] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 533.094935][ T4257] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 533.106100][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.112876][T23899] F2FS-fs (loop3): Start checkpoint disabled! [ 533.118010][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.134192][ T4257] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.08 [ 533.143802][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.154899][ T4257] usb 2-1: config 0 descriptor?? [ 533.160932][T23899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 533.647752][ T4257] lg-g15 0003:046D:C222.0018: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 533.844415][ T4257] usb 2-1: USB disconnect, device number 49 [ 533.909234][T23941] fido_id[23941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 533.936745][T23947] loop3: detected capacity change from 0 to 512 [ 534.017465][T23947] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 534.046312][T23947] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 534.057737][T23947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 534.087567][T23947] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 534.132341][T23929] loop5: detected capacity change from 0 to 32768 [ 534.139412][T23947] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 534.148333][T23947] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 534.190427][T23947] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.9153: dx entry: limit 65535 != root limit 120 [ 534.203649][T23947] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.9153: Corrupt directory, running e2fsck is recommended [ 534.342328][T23929] XFS (loop5): Mounting V5 Filesystem [ 534.534564][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9159'. [ 534.539448][T23929] XFS (loop5): Ending clean mount [ 534.695389][T20741] XFS (loop5): Unmounting Filesystem [ 534.986459][T23974] loop3: detected capacity change from 0 to 24 [ 535.219113][T23980] loop1: detected capacity change from 0 to 512 [ 535.259259][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 535.299163][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 535.317466][T23980] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.358263][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 535.376639][T23980] ext4 filesystem being mounted at /1855/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.387249][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 535.399173][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 535.436620][T23992] sp0: Synchronizing with TNC [ 535.516459][T23991] [U] è [ 535.710060][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9174'. [ 535.731114][T24002] loop5: detected capacity change from 0 to 128 [ 535.797813][T24002] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 535.826958][T19889] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 535.843439][T24002] hpfs: filesystem error: improperly stopped [ 535.870347][T24002] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 535.913572][T24002] hpfs: You really don't want any checks? You are crazy... [ 535.937298][T24002] hpfs: Code page index out of array [ 535.945613][T24002] hpfs: code page support is disabled [ 535.971254][T24002] hpfs: hpfs_map_4sectors(): unaligned read [ 536.003081][T24002] hpfs: hpfs_map_4sectors(): unaligned read [ 536.029047][T24002] hpfs: filesystem error: unable to find root dir [ 536.228914][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9184'. [ 536.274094][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9184'. [ 536.308461][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9184'. [ 536.357226][T19889] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 536.385830][T19889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.414378][T19889] usb 4-1: Product: syz [ 536.424551][T24026] sp0: Synchronizing with TNC [ 536.439797][T19889] usb 4-1: Manufacturer: syz [ 536.460060][T19889] usb 4-1: SerialNumber: syz [ 536.491072][T24025] [U] è [ 536.507713][T19889] usb 4-1: config 0 descriptor?? [ 536.549110][T19889] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 536.599999][T19889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.609937][T24036] loop0: detected capacity change from 0 to 16 [ 536.646236][ T4257] kernel write not supported for file /media6 (pid: 4257 comm: kworker/0:5) [ 536.660016][T19889] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 536.677329][T24036] erofs: (device loop0): mounted with root inode @ nid 36. [ 536.695969][T19889] usb 4-1: media controller created [ 536.702236][T24036] attempt to access beyond end of device [ 536.702236][T24036] loop0: rw=524288, want=34359738368, limit=16 [ 536.764092][T19889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.777043][T24036] attempt to access beyond end of device [ 536.777043][T24036] loop0: rw=0, want=34359738368, limit=16 [ 536.832546][ T26] audit: type=1800 audit(1770023950.902:69): pid=24036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9192" name="file3" dev="loop0" ino=41 res=0 errno=0 [ 536.984295][T19889] DVB: Unable to find symbol mt352_attach() [ 537.073608][T19889] DVB: Unable to find symbol nxt6000_attach() [ 537.093899][T19889] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 537.169040][T19889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 537.192965][T19889] dvb-usb: schedule remote query interval to 1000 msecs. [ 537.209849][T19889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 537.230679][T19889] dvb-usb: bulk message failed: -22 (7/0) [ 537.236466][T19889] dvb-usb: bulk message failed: -22 (7/0) [ 537.299241][T24037] loop1: detected capacity change from 0 to 32768 [ 537.301790][T19889] usb 4-1: USB disconnect, device number 46 [ 537.351081][T24037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9191 (24037) [ 537.431017][T24037] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 537.455888][T19889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 537.492982][T24037] BTRFS info (device loop1): using free space tree [ 537.518718][T24037] BTRFS info (device loop1): has skinny extents [ 537.591074][T24058] sp0: Synchronizing with TNC [ 537.682560][T24041] loop5: detected capacity change from 0 to 40427 [ 537.716509][T24041] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 537.749536][T24041] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 537.758519][T24041] F2FS-fs (loop5): build fault injection attr: rate: 2, type: 0x1ffff [ 537.767587][T24041] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 537.854172][T24041] F2FS-fs (loop5): invalid crc value [ 537.953234][T24087] sp0: Synchronizing with TNC [ 537.964863][T24037] BTRFS info (device loop1): enabling ssd optimizations [ 537.992041][T24041] F2FS-fs (loop5): Found nat_bits in checkpoint [ 538.018725][T24085] [U] è [ 538.317236][T24041] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 538.324404][T24041] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 538.455256][T24041] F2FS-fs (loop5) : inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x19e/0x300 [ 538.620566][T24103] loop0: detected capacity change from 0 to 4096 [ 538.823996][T24103] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 538.961699][T24103] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 538.990630][T24103] ntfs3: loop0: Failed to load $Extend. [ 539.287217][T19889] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 539.543151][T24128] loop5: detected capacity change from 0 to 64 [ 539.628880][T24128] hfs: keylen 94 too large [ 539.667280][T19889] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 539.676174][T19889] usb 3-1: config 0 has no interface number 0 [ 539.695919][T19889] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 539.707858][T19889] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 539.726980][T19889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.767479][T19889] usb 3-1: config 0 descriptor?? [ 539.830463][T19889] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input44 [ 540.019913][ T4257] usb 3-1: USB disconnect, device number 50 [ 540.160346][T24130] loop0: detected capacity change from 0 to 32768 [ 540.267181][T19889] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 540.508130][T24149] __nla_validate_parse: 3 callbacks suppressed [ 540.508147][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9230'. [ 540.547155][T19889] usb 6-1: Using ep0 maxpacket: 16 [ 540.667261][T19889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.697801][T19889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.727191][T19889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.754164][T19889] usb 6-1: New USB device found, idVendor=045e, idProduct=f9cf, bcdDevice=b1.a9 [ 540.775315][T24149] device virt_wifi0 left promiscuous mode [ 540.780182][T19889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.824782][T19889] usb 6-1: config 0 descriptor?? [ 540.941695][T24163] loop3: detected capacity change from 0 to 512 [ 540.962536][T24161] loop1: detected capacity change from 0 to 8192 [ 541.010966][T24163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 541.037578][T24161] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 541.087023][T24161] REISERFS (device loop1): using ordered data mode [ 541.092478][ T4257] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 541.107703][T24161] reiserfs: using flush barriers [ 541.108031][T24163] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.9239: bad orphan inode 131083 [ 541.127053][T24161] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 541.173880][T24161] REISERFS (device loop1): checking transaction log (loop1) [ 541.181452][T24163] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 541.217387][T24161] REISERFS (device loop1): Using r5 hash to sort names [ 541.241091][T24161] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 541.320134][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.336971][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.344426][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.377142][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.397304][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.404753][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.420417][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.437543][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.445397][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.477213][T19889] hid-generic 0003:045E:F9CF.0019: unknown main item tag 0x0 [ 541.490646][T19889] hid-generic 0003:045E:F9CF.0019: hidraw0: USB HID v0.00 Device [HID 045e:f9cf] on usb-dummy_hcd.5-1/input0 [ 541.521563][ T4257] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 541.549356][T19889] usb 6-1: USB disconnect, device number 13 [ 541.560857][ T4257] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 541.587118][ T4257] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 541.597736][ T4257] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 541.616977][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.667764][T24157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 541.670262][T24174] fido_id[24174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 541.748100][ T4257] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 541.826240][T24172] loop0: detected capacity change from 0 to 32768 [ 541.841593][T10981] udevd[10981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.931027][T24176] loop3: detected capacity change from 0 to 4096 [ 541.953995][T19889] usb 3-1: USB disconnect, device number 51 [ 541.994879][T24172] XFS (loop0): Mounting V5 Filesystem [ 542.012068][T24176] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 542.027670][T24176] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 542.073185][T24176] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 542.107529][T24176] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 542.137389][T24176] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 542.154258][T24172] XFS (loop0): Ending clean mount [ 542.172832][T24172] XFS (loop0): Quotacheck needed: Please wait. [ 542.203972][T24176] ntfs: volume version 3.1. [ 542.217954][T24176] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 542.218434][T24176] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 542.218939][T24176] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 542.218962][T24176] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 542.218980][T24176] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 542.398384][T24172] XFS (loop0): Quotacheck: Done. [ 542.476755][ T4186] XFS (loop0): Unmounting Filesystem [ 542.573801][T24199] loop1: detected capacity change from 0 to 256 [ 542.713438][T24199] FAT-fs (loop1): Directory bread(block 64) failed [ 542.713489][T24199] FAT-fs (loop1): Directory bread(block 65) failed [ 542.713610][T24199] FAT-fs (loop1): Directory bread(block 66) failed [ 542.713646][T24199] FAT-fs (loop1): Directory bread(block 67) failed [ 542.713716][T24199] FAT-fs (loop1): Directory bread(block 68) failed [ 542.713747][T24199] FAT-fs (loop1): Directory bread(block 69) failed [ 542.713821][T24199] FAT-fs (loop1): Directory bread(block 70) failed [ 542.713853][T24199] FAT-fs (loop1): Directory bread(block 71) failed [ 542.713965][T24199] FAT-fs (loop1): Directory bread(block 72) failed [ 542.713999][T24199] FAT-fs (loop1): Directory bread(block 73) failed [ 543.177304][T24220] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9261'. [ 543.177356][T24220] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9261'. [ 543.193751][ T4257] kernel write not supported for file /input/mice (pid: 4257 comm: kworker/0:5) [ 543.295617][T24225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9264'. [ 543.327177][T24228] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9265'. [ 543.624515][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9272'. [ 543.687383][T13509] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 543.876787][T24252] loop0: detected capacity change from 0 to 8192 [ 543.980517][T24252] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 544.035875][T24252] REISERFS (device loop0): using ordered data mode [ 544.045029][T24252] reiserfs: using flush barriers [ 544.054411][T24252] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 544.071974][T24252] REISERFS (device loop0): checking transaction log (loop0) [ 544.084370][T24252] REISERFS (device loop0): Using r5 hash to sort names [ 544.087049][T13509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 544.100561][T24252] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 544.141423][T24262] sp0: Synchronizing with TNC [ 544.146146][T13509] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 544.146178][T13509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 7724, setting to 1024 [ 544.146205][T13509] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 544.237571][T13509] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 544.251352][T13509] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 544.297853][T13509] usb 4-1: Manufacturer: syz [ 544.341630][T13509] usb 4-1: config 0 descriptor?? [ 544.405083][T24270] loop5: detected capacity change from 0 to 1024 [ 544.413286][T24231] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 544.439407][T13509] smsusb:smsusb_probe: board id=9, interface number 0 [ 544.485825][T24272] loop1: detected capacity change from 0 to 2048 [ 544.498493][T13509] smsusb:siano_media_device_register: media controller created [ 544.515548][T13509] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 544.532908][T13509] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 544.540778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542475][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542539][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542586][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542635][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542683][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542733][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542780][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542827][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.542874][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.620196][T13509] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 544.628701][T13509] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 544.633115][T24272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 544.667147][T24272] ext4 filesystem being mounted at /1880/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.669223][T13509] smsusb:smsusb_probe: Device initialized with return code -22 [ 544.759494][T24270] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.9283: lblock 2 mapped to illegal pblock 2 (length 1) [ 544.877833][T24270] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.9283: lblock 0 mapped to illegal pblock 48 (length 1) [ 544.893013][T13509] smsusb: probe of 4-1:0.0 failed with error -22 [ 544.938578][T13509] usb 4-1: USB disconnect, device number 47 [ 544.977659][T24270] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.9283: Failed to acquire dquot type 0 [ 545.050019][T24270] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 545.073382][T24275] loop0: detected capacity change from 0 to 32768 [ 545.147080][T24270] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.9283: mark_inode_dirty error [ 545.188221][T24270] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 545.199019][T24270] EXT4-fs (loop5): 1 orphan inode deleted [ 545.205882][T24270] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 545.257840][ T9] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 545.276321][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 545.295862][T24275] XFS (loop0): Mounting V5 Filesystem [ 545.333682][T24270] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.9283: Invalid inode table block 1 in block_group 0 [ 545.446925][T24270] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 545.475850][T24275] XFS (loop0): Ending clean mount [ 545.515176][T20741] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 545.564027][T24275] XFS (loop0): Quotacheck needed: Please wait. [ 545.604451][T20741] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 545.654170][T20741] EXT4-fs error (device loop5): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 545.685204][T24275] XFS (loop0): Quotacheck: Done. [ 545.941431][ T4186] XFS (loop0): Unmounting Filesystem [ 545.999468][T24330] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 546.448008][T24350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9315'. [ 547.040037][T24384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9330'. [ 547.238465][T24393] loop0: detected capacity change from 0 to 4096 [ 547.847144][ T4257] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 547.904882][T24416] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 548.139974][T24424] loop1: detected capacity change from 0 to 2048 [ 548.205997][T24424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.227178][ T4257] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 548.267108][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.299188][ T4257] usb 6-1: config 0 descriptor?? [ 548.522594][T24438] loop1: detected capacity change from 0 to 4096 [ 548.524439][T24440] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 548.707461][T13506] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 548.709897][T24447] loop0: detected capacity change from 0 to 128 [ 548.806538][T24447] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 548.816248][ T4257] uclogic 0003:28BD:0094.001A: No inputs registered, leaving [ 548.836017][ T4257] uclogic 0003:28BD:0094.001A: hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input0 [ 548.963263][ T4186] sysv_free_block: flc_count > flc_size [ 548.985667][T13506] usb 4-1: Using ep0 maxpacket: 16 [ 549.007556][ T4186] sysv_free_block: flc_count > flc_size [ 549.015292][ T4186] sysv_free_block: flc_count > flc_size [ 549.042162][ T4186] sysv_free_block: flc_count > flc_size [ 549.058062][ T4186] sysv_free_block: flc_count > flc_size [ 549.067774][ T4186] sysv_free_block: flc_count > flc_size [ 549.084900][T22432] usb 6-1: USB disconnect, device number 14 [ 549.099830][ T4186] sysv_free_block: flc_count > flc_size [ 549.105438][ T4186] sysv_free_block: flc_count > flc_size [ 549.113620][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9363'. [ 549.137604][T13506] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.142670][T24456] fido_id[24456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 549.150581][ T4186] sysv_free_block: flc_count > flc_size [ 549.170231][T13506] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.181976][ T4186] sysv_free_block: flc_count > flc_size [ 549.197645][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 549.246607][T24458] loop1: detected capacity change from 0 to 4096 [ 549.303321][T24464] loop0: detected capacity change from 0 to 128 [ 549.388207][T13506] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.405661][T24458] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 549.418023][T24458] ntfs3: loop1: Failed to load $Extend. [ 549.429776][T13506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.459789][T13506] usb 4-1: Product: syz [ 549.464019][T13506] usb 4-1: Manufacturer: syz [ 549.495044][T13506] usb 4-1: SerialNumber: syz [ 549.845804][T24482] loop5: detected capacity change from 0 to 256 [ 549.900232][T24486] loop0: detected capacity change from 0 to 128 [ 549.967556][T24482] FAT-fs (loop5): Directory bread(block 64) failed [ 549.997405][T24482] FAT-fs (loop5): Directory bread(block 65) failed [ 549.997605][T13506] usb 4-1: cannot find UAC_HEADER [ 550.021765][T24482] FAT-fs (loop5): Directory bread(block 66) failed [ 550.047149][T24482] FAT-fs (loop5): Directory bread(block 67) failed [ 550.085332][T24482] FAT-fs (loop5): Directory bread(block 68) failed [ 550.100745][T13506] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 550.116597][T24482] FAT-fs (loop5): Directory bread(block 69) failed [ 550.183814][T24482] FAT-fs (loop5): Directory bread(block 70) failed [ 550.205196][T13506] usb 4-1: USB disconnect, device number 48 [ 550.221424][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.238433][T24482] FAT-fs (loop5): Directory bread(block 71) failed [ 550.263205][T24482] FAT-fs (loop5): Directory bread(block 72) failed [ 550.285402][T24482] FAT-fs (loop5): Directory bread(block 73) failed [ 550.387342][T24496] loop0: detected capacity change from 0 to 4096 [ 550.441529][T24496] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 550.516819][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9385'. [ 550.547386][T24506] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9385'. [ 550.628322][T24510] loop5: detected capacity change from 0 to 128 [ 550.819347][T24510] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.831111][T24510] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 551.068646][T24531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 551.091624][T24520] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 551.207473][T24520] Remounting filesystem read-only [ 551.228244][T24534] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 551.286286][T24540] tipc: Started in network mode [ 551.330555][T24540] tipc: Node identity -, cluster identity 4711 [ 551.774799][T24562] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.9411: Invalid inode bitmap blk 4 in block_group 0 [ 551.887315][T24562] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 551.998892][T24578] xt_HMARK: spi-set and port-set can't be combined [ 552.015728][T24528] XFS (loop5): Mounting V5 Filesystem [ 552.117938][T24528] XFS (loop5): Ending clean mount [ 552.199909][T20741] XFS (loop5): Unmounting Filesystem [ 552.560943][T24600] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9426'. [ 553.259002][T24619] set_capacity_and_notify: 3 callbacks suppressed [ 553.259020][T24619] loop3: detected capacity change from 0 to 512 [ 553.449880][T24619] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,errors=remount-ro,init_itable,barrier=0x0000000000000040,nodiscard,. Quota mode: writeback. [ 553.478263][T24619] ext4 filesystem being mounted at /1876/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.586420][T24619] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.9435: verity file corrupted; can't find descriptor [ 553.628154][T24619] EXT4-fs (loop3): Remounting filesystem read-only [ 553.640682][T24619] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 553.841968][T24623] loop1: detected capacity change from 0 to 32768 [ 553.860307][T24636] loop3: detected capacity change from 0 to 4096 [ 553.902027][T24636] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 553.909805][T13507] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 553.933096][T24636] ntfs3: loop3: Failed to load $Extend. [ 553.977397][T24636] ntfs3: loop3: ino=5, "/" directory corrupted [ 554.007398][T24636] ntfs3: loop3: ino=5, "/" directory corrupted [ 554.317553][T13507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.344596][T13507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.390416][T13507] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 554.408492][T13507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.436707][T13507] usb 6-1: config 0 descriptor?? [ 554.504114][T24650] loop1: detected capacity change from 0 to 1024 [ 554.607864][ T1487] hfsplus: b-tree write err: -5, ino 4 [ 555.147958][T13507] hid-led: probe of 0003:0FC5:B080.001B failed with error -71 [ 555.169425][T13507] usb 6-1: USB disconnect, device number 15 [ 555.169889][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9453'. [ 555.215838][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9453'. [ 555.242310][T24661] netlink: 'syz.3.9453': attribute type 6 has an invalid length. [ 555.258099][T24661] netlink: 'syz.3.9453': attribute type 5 has an invalid length. [ 555.804311][T24674] loop3: detected capacity change from 0 to 4096 [ 555.849214][T24681] loop5: detected capacity change from 0 to 64 [ 555.885316][T24658] loop1: detected capacity change from 0 to 40427 [ 555.939773][T24684] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.992380][T24658] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 556.045983][T24658] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 556.069583][T24658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 556.249721][T24658] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 556.284414][T24658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 556.477706][T24658] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 557.561557][T24739] loop1: detected capacity change from 0 to 256 [ 557.579128][T24736] loop5: detected capacity change from 0 to 2048 [ 557.618928][T24739] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.689916][T24744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9491'. [ 557.799028][T24750] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.823775][T24736] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 557.887997][T24736] Remounting filesystem read-only [ 557.894352][T24754] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 558.145571][T24760] loop3: detected capacity change from 0 to 8192 [ 558.217984][ T4257] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 558.231331][T24760] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 558.262409][T24760] REISERFS (device loop3): using journaled data mode [ 558.284912][T24766] MPTCP: kernel_bind error, err=-99 [ 558.293087][T24760] reiserfs: using flush barriers [ 558.317465][T24760] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 558.347626][T24760] REISERFS (device loop3): checking transaction log (loop3) [ 558.368878][T24760] REISERFS (device loop3): Using r5 hash to sort names [ 558.407520][T24760] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 558.440787][T24760] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 558.587207][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 558.617484][ T4257] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 558.667008][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 7724, setting to 1024 [ 558.711997][ T4257] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 558.813495][ T4257] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 558.837050][ T4257] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 558.873948][ T4257] usb 2-1: Manufacturer: syz [ 558.901019][ T4257] usb 2-1: config 0 descriptor?? [ 558.917384][T24756] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 558.946324][ T4257] smsusb:smsusb_probe: board id=9, interface number 0 [ 559.016051][ T4257] smsusb:siano_media_device_register: media controller created [ 559.046464][ T4257] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 559.056883][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.064446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.071812][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.079091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.088668][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.095995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.103258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.110517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.117786][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.125044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 559.159905][ T4257] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 559.166348][T24791] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.9513'. [ 559.167892][ T4257] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 559.185053][ T4257] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 559.197465][ T4257] smsusb:smsusb_probe: Device initialized with return code -22 [ 559.360488][ T4257] smsusb: probe of 2-1:0.0 failed with error -22 [ 559.400621][ T4257] usb 2-1: USB disconnect, device number 50 [ 559.608561][T24803] loop3: detected capacity change from 0 to 4096 [ 559.661550][T24780] loop5: detected capacity change from 0 to 32768 [ 559.666697][T24809] netlink: 200 bytes leftover after parsing attributes in process `syz.2.9522'. [ 559.680056][T24803] __ntfs_error: 9 callbacks suppressed [ 559.680075][T24803] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 559.702629][T24803] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 559.718434][T24803] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 559.763405][T24780] JBD2: Ignoring recovery information on journal [ 559.814459][T24803] ntfs: volume version 3.1. [ 560.028758][T24780] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 560.212551][T24816] loop1: detected capacity change from 0 to 4096 [ 560.233038][ T4336] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 560.260719][T20741] ocfs2: Unmounting device (7,5) on (node local) [ 560.318197][ T4187] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 560.840164][T24841] loop0: detected capacity change from 0 to 512 [ 560.885843][T24841] EXT4-fs (loop0): Ignoring removed bh option [ 560.906424][T24841] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 561.007352][ T4257] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 561.030551][T24856] loop3: detected capacity change from 0 to 64 [ 561.032107][T24841] EXT4-fs (loop0): 1 truncate cleaned up [ 561.046278][T24857] loop1: detected capacity change from 0 to 512 [ 561.060819][T24841] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 561.151275][T24857] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 561.167360][T24857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 561.175825][T24857] System zones: 1-12 [ 561.181541][T24857] EXT4-fs (loop1): orphan cleanup on readonly fs [ 561.188487][T24857] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.9541: Directory hole found for htree index block 0 [ 561.206250][T24857] EXT4-fs (loop1): Remounting filesystem read-only [ 561.213429][T24857] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 561.222355][T24857] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.9541: Directory hole found for htree index block 0 [ 561.239887][T24857] EXT4-fs (loop1): Remounting filesystem read-only [ 561.247424][T24857] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 561.255623][T24857] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 561.367367][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 561.396952][ T4257] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 561.396986][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 7724, setting to 1024 [ 561.397014][ T4257] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 561.534888][T24868] loop5: detected capacity change from 0 to 4096 [ 561.577395][ T4257] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 561.588120][T24872] loop3: detected capacity change from 0 to 256 [ 561.598575][T24868] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 561.626950][ T4257] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 561.648283][ T4257] usb 3-1: Manufacturer: syz [ 561.687511][ T4257] usb 3-1: config 0 descriptor?? [ 561.747934][T24837] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 561.768977][ T4257] smsusb:smsusb_probe: board id=9, interface number 0 [ 561.791479][T24868] ntfs: volume version 3.1. [ 561.840151][ T4257] smsusb:siano_media_device_register: media controller created [ 561.858323][ T4257] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 561.876924][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.884263][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.891633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.899008][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.906391][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.914063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.921346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.928828][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.936107][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.943486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 561.973379][ T4257] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 561.981940][ T4257] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 561.990672][ T4257] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 562.010201][T24868] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 562.034272][ T4257] smsusb:smsusb_probe: Device initialized with return code -22 [ 562.042784][T24868] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 562.158824][ T4257] smsusb: probe of 3-1:0.0 failed with error -22 [ 562.200144][ T4257] usb 3-1: USB disconnect, device number 52 [ 562.246904][T13509] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 562.527517][T13509] usb 2-1: Using ep0 maxpacket: 8 [ 562.626532][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9565'. [ 562.814445][T24913] loop3: detected capacity change from 0 to 1024 [ 562.821987][T13509] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 562.835841][T13509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 562.855969][T13509] usb 2-1: Product: syz [ 562.864735][T13509] usb 2-1: Manufacturer: syz [ 562.881172][T13509] usb 2-1: SerialNumber: syz [ 562.900889][T24913] hfsplus: invalid length 32517 has been corrected to 255 [ 562.923744][T13509] usb 2-1: config 0 descriptor?? [ 562.931842][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.989641][T13509] gspca_main: sq905-2.14.0 probing 2770:9120 [ 563.016790][T24913] hfsplus: invalid length 32517 has been corrected to 255 [ 563.107755][T23728] hfsplus: b-tree write err: -5, ino 4 [ 563.657450][T13509] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 563.677349][T13509] sq905: probe of 2-1:0.0 failed with error -71 [ 563.716992][T13509] usb 2-1: USB disconnect, device number 51 [ 563.834832][T24952] loop3: detected capacity change from 0 to 64 [ 563.858155][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9589'. [ 563.892701][T24925] (syz.5.9574,24925,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 563.922995][T24925] (syz.5.9574,24925,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 563.956543][T24925] JBD2: Ignoring recovery information on journal [ 564.048041][T24925] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 564.179142][T20741] ocfs2: Unmounting device (7,5) on (node local) [ 564.226212][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9593'. [ 564.479236][T24972] loop3: p1 p3 p4 [ 564.489176][T24972] loop3: p4 size 589824 extends beyond EOD, truncated [ 564.698685][T24981] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 564.740528][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 564.755534][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 564.759945][ T4433] udevd[4433]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 564.851933][ T27] INFO: task syz-executor:4185 blocked for more than 143 seconds. [ 564.915173][ T27] Not tainted syzkaller #0 [ 564.926356][T24994] set_capacity_and_notify: 2 callbacks suppressed [ 564.926372][T24994] loop3: detected capacity change from 0 to 512 [ 564.957089][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.976236][ T27] task:syz-executor state:D stack:21104 pid: 4185 ppid: 1 flags:0x00004004 [ 564.996133][ T27] Call Trace: [ 565.006280][ T27] [ 565.010399][ T27] __schedule+0x11ef/0x43c0 [ 565.015255][ T27] ? verify_lock_unused+0x140/0x140 [ 565.034288][ T27] ? mark_lock+0x94/0x320 [ 565.042103][ T27] ? release_firmware_map_entry+0x190/0x190 [ 565.056265][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 565.065433][ T27] ? lock_chain_count+0x20/0x20 [ 565.078354][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 565.083642][ T27] schedule+0x11b/0x1e0 [ 565.095445][ T27] io_schedule+0x7c/0xd0 [ 565.102491][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 565.115185][ T27] ? wait_on_page_bit+0x50/0x50 [ 565.123338][ T27] ? rcu_lock_release+0x20/0x20 [ 565.138137][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 565.144046][ T27] ? invalidate_inode_page+0x360/0x360 [ 565.158147][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 565.166393][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 565.176967][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 565.182416][ T27] evict+0x4dc/0x8d0 [ 565.186526][ T27] ? proc_nr_inodes+0x320/0x320 [ 565.192196][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 565.198020][ T27] evict_inodes+0x60c/0x6a0 [ 565.202693][ T27] ? __dentry_kill+0x530/0x650 [ 565.208477][ T27] ? clear_inode+0x150/0x150 [ 565.213255][ T27] generic_shutdown_super+0x93/0x300 [ 565.219588][ T27] kill_block_super+0x7c/0xe0 [ 565.224481][ T27] deactivate_locked_super+0x93/0xf0 [ 565.230738][ T27] cleanup_mnt+0x42d/0x4e0 [ 565.235341][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 565.242404][ T27] task_work_run+0x125/0x1a0 [ 565.249718][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 565.255322][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 565.262413][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 565.268777][ T27] do_syscall_64+0x58/0xa0 [ 565.273411][ T27] ? clear_bhb_loop+0x30/0x80 [ 565.279091][ T27] ? clear_bhb_loop+0x30/0x80 [ 565.283958][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.290816][ T27] RIP: 0033:0x7fefba7fe117 [ 565.295427][ T27] RSP: 002b:00007fff480f1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 565.304800][ T27] RAX: 0000000000000000 RBX: 00007fefba86671f RCX: 00007fefba7fe117 [ 565.313872][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff480f1e70 [ 565.323348][ T27] RBP: 00007fff480f1e70 R08: 00007fff480f2e70 R09: 00000000ffffffff [ 565.332270][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff480f2f00 [ 565.341355][ T27] R13: 00007fefba86671f R14: 0000000000064180 R15: 00007fff480f2f40 [ 565.351519][ T27] [ 565.354940][ T27] [ 565.354940][ T27] Showing all locks held in the system: [ 565.374538][ T27] 1 lock held by khungtaskd/27: [ 565.379650][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 565.389457][ T27] 2 locks held by kworker/u4:3/362: [ 565.394855][ T27] 2 locks held by udevd/3561: [ 565.399965][ T27] 2 locks held by getty/3944: [ 565.404679][ T27] #0: ffff88814d288098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 565.415732][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 565.428477][ T27] 1 lock held by syz-executor/4185: [ 565.433725][ T27] #0: ffff88801f26c0e0 (&type->s_umount_key#111){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 565.444989][ T27] 1 lock held by udevd/4433: [ 565.450106][ T27] 2 locks held by kworker/1:17/13507: [ 565.451207][T24994] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 565.455790][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 565.479883][ T27] #1: ffffc900039a7d00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 565.491864][ T27] 3 locks held by kworker/u4:2/22339: [ 565.497536][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 565.509137][ T27] #1: ffffc9000329fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 565.520839][T24994] ext4 filesystem being mounted at /1925/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.526116][ T27] #2: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 565.543352][ T27] 2 locks held by syz.1.9603/24991: [ 565.549273][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 565.558658][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 565.569915][ T27] [ 565.572291][ T27] ============================================= [ 565.572291][ T27] [ 565.582341][ T27] NMI backtrace for cpu 0 [ 565.586704][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 565.593942][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.604279][ T27] Call Trace: [ 565.607597][ T27] [ 565.610669][ T27] dump_stack_lvl+0x188/0x250 [ 565.615379][ T27] ? show_regs_print_info+0x20/0x20 [ 565.620610][ T27] ? load_image+0x400/0x400 [ 565.621947][T24994] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9604'. [ 565.625143][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 565.625180][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 565.644264][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 565.650447][ T27] ? _printk+0xda/0x130 [ 565.654715][ T27] ? load_image+0x400/0x400 [ 565.659224][ T27] ? load_image+0x400/0x400 [ 565.663734][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 565.669815][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 565.675796][ T27] watchdog+0xe0f/0xe50 [ 565.679995][ T27] kthread+0x436/0x520 [ 565.684068][ T27] ? hungtask_pm_notify+0x40/0x40 [ 565.689108][ T27] ? kthread_blkcg+0xd0/0xd0 [ 565.693730][ T27] ret_from_fork+0x1f/0x30 [ 565.698187][ T27] [ 565.701645][ T27] Sending NMI from CPU 0 to CPUs 1: [ 565.707003][ C1] NMI backtrace for cpu 1 [ 565.707015][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 565.707029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.707038][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80 [ 565.707060][ C1] Code: 28 4d 39 ca 77 22 89 ff 89 f6 4a c7 44 02 08 05 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 90 <48> 8b 04 24 65 48 8b 0d 34 4c 89 7e 65 8b 15 35 4c 89 7e 81 e2 00 [ 565.707072][ C1] RSP: 0018:ffffc90000dd0a88 EFLAGS: 00000293 [ 565.707087][ C1] RAX: ffffffff8814f908 RBX: 00000010c6f7a0b5 RCX: ffff88813fe70000 [ 565.707099][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5 [ 565.707109][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 565.707118][ C1] R10: dffffc0000000000 R11: fffff520001ba154 R12: 000000101b2b299e [ 565.707128][ C1] R13: 0019999999999998 R14: ffffc90016e1f2c0 R15: 0000001f237594ba [ 565.707138][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 565.707150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.707161][ C1] CR2: 00007f63c114e600 CR3: 000000005a6cb000 CR4: 00000000003506e0 [ 565.707176][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.707185][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.707194][ C1] Call Trace: [ 565.707206][ C1] [ 565.707211][ C1] pie_calculate_probability+0x262/0x7e0 [ 565.707235][ C1] fq_pie_timer+0x169/0x3a0 [ 565.707252][ C1] ? fq_pie_dump_stats+0x5a0/0x5a0 [ 565.707266][ C1] call_timer_fn+0x17b/0x540 [ 565.707282][ C1] ? fq_pie_dump_stats+0x5a0/0x5a0 [ 565.707297][ C1] ? __run_timers+0x7f0/0x7f0 [ 565.707315][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 565.707332][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 565.707347][ C1] ? fq_pie_dump_stats+0x5a0/0x5a0 [ 565.707361][ C1] __run_timers+0x53a/0x7f0 [ 565.707381][ C1] ? detach_timer+0x2b0/0x2b0 [ 565.707395][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 565.707420][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 565.707434][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 565.707450][ C1] run_timer_softirq+0x63/0xf0 [ 565.707466][ C1] handle_softirqs+0x339/0x830 [ 565.707482][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 565.707498][ C1] ? do_softirq+0x210/0x210 [ 565.707512][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 565.707528][ C1] __irq_exit_rcu+0x13b/0x230 [ 565.707541][ C1] ? irq_exit_rcu+0x20/0x20 [ 565.707559][ C1] irq_exit_rcu+0x5/0x20 [ 565.707571][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 565.707585][ C1] [ 565.707590][ C1] [ 565.707595][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 565.707609][ C1] RIP: 0010:default_idle+0xb/0x10 [ 565.707624][ C1] Code: b7 48 89 df e8 f6 ea f8 f7 eb ad e8 8f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 96 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 565.707635][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 565.707646][ C1] RAX: 47d91403311c8700 RBX: ffff88813fe70000 RCX: 47d91403311c8700 [ 565.707656][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 565.707665][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 565.707675][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11027fce000 [ 565.707685][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 565.707703][ C1] default_idle_call+0x81/0xc0 [ 565.707718][ C1] do_idle+0x21f/0x580 [ 565.707735][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 565.707749][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 565.707764][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 565.707781][ C1] ? schedule_idle+0x57/0x90 [ 565.707796][ C1] cpu_startup_entry+0x14/0x20 [ 565.707811][ C1] start_secondary+0x330/0x430 [ 565.707828][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 565.707848][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 565.707870][ C1] [ 565.710017][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 566.108022][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 566.115323][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.125384][ T27] Call Trace: [ 566.128703][ T27] [ 566.131632][ T27] dump_stack_lvl+0x188/0x250 [ 566.136314][ T27] ? show_regs_print_info+0x20/0x20 [ 566.141517][ T27] ? load_image+0x400/0x400 [ 566.146071][ T27] panic+0x2e5/0x810 [ 566.150215][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 566.155862][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 566.160416][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 566.166586][ T27] watchdog+0xe4e/0xe50 [ 566.170783][ T27] kthread+0x436/0x520 [ 566.174886][ T27] ? hungtask_pm_notify+0x40/0x40 [ 566.179937][ T27] ? kthread_blkcg+0xd0/0xd0 [ 566.184893][ T27] ret_from_fork+0x1f/0x30 [ 566.189326][ T27] [ 566.192750][ T27] Kernel Offset: disabled [ 566.198322][ T27] Rebooting in 86400 seconds..