last executing test programs: 6m35.685172066s ago: executing program 1 (id=84): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000400)=""/210) 6m35.345574317s ago: executing program 1 (id=87): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000540)) 6m35.101085484s ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',directio,noxattr,posixacl,posixacl,uname=trans=fd,']) 6m34.743522726s ago: executing program 1 (id=93): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@bsdgroups}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m34.166575084s ago: executing program 1 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x11}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "56f493"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) 6m33.597003183s ago: executing program 1 (id=102): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000540)=""/194, 0xc2, 0x200000000000, 0x0) 6m32.74982067s ago: executing program 32 (id=102): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000540)=""/194, 0xc2, 0x200000000000, 0x0) 3m21.592365533s ago: executing program 4 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 3m21.509934865s ago: executing program 4 (id=1698): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000020000000800000040"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 3m21.308193371s ago: executing program 4 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}}, 0x0) 3m21.04628582s ago: executing program 4 (id=1703): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m20.592922675s ago: executing program 4 (id=1706): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020600) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) 3m19.927894286s ago: executing program 4 (id=1711): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12040}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3m19.402603293s ago: executing program 33 (id=1711): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12040}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.620280902s ago: executing program 3 (id=3320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4.480679627s ago: executing program 0 (id=3321): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a00010000000100000000001c14f9"], 0x24}}, 0x44) 4.437954258s ago: executing program 3 (id=3323): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a) 4.197764626s ago: executing program 0 (id=3324): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @private1}, 0x20) getsockname$llc(r0, 0x0, &(0x7f00000000c0)) 4.192411016s ago: executing program 3 (id=3325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4008840) 3.940448974s ago: executing program 0 (id=3327): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x2, 0x0, 0x2, 0xffffffffffffffff, 0x8, 0xa7b}) 3.808952048s ago: executing program 3 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251bd9000008009a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44) 3.536074837s ago: executing program 3 (id=3329): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5579, &(0x7f0000005680)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.868601188s ago: executing program 5 (id=3334): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4) listen(r0, 0x1) 2.641231496s ago: executing program 5 (id=3335): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x400}) 2.353598365s ago: executing program 0 (id=3336): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x65, r1}) 2.286846527s ago: executing program 5 (id=3337): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b40)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="c028e8d681cadbf41abb4bd3a355efd01f2fa46a1685090c002a734dd638b7f63b5ff96ff38579074a4281ac91309583dcb8f2eabe834e523afac2c11b429cb8f18fc0b041c0c58c9cf2c99de66cc73761dea813d32ffbd2ccb07c1dd17dde5076b719a561affd2edd86dab31580e480d5565519c240b338eef84a15dd16903bb7806c99dc1c9bb71cd2517a31187189a431282383827020b72dbc103fc07e0cab2bd1178ad7c1742160bbf86875fde202fc3dd3322286c66f1730337d700f4d2f37b3e1d8b0f39ec3700ed481e6cd939afaeca9bea9a8", @ANYRES8, @ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT], 0x41, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') 2.056785764s ago: executing program 0 (id=3338): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) 1.780041843s ago: executing program 0 (id=3339): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902"], 0x0) write(r0, 0x0, 0x0) 1.653220207s ago: executing program 3 (id=3340): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") creat(&(0x7f0000000040)='./file0\x00', 0x24) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.042045247s ago: executing program 5 (id=3341): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 621.90642ms ago: executing program 2 (id=3344): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 476.263305ms ago: executing program 5 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) syz_clone(0x2914c200, 0x0, 0x0, 0x0, 0x0, 0x0) 429.936806ms ago: executing program 2 (id=3346): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="d161", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000500)={0x0, 0x0, 0x0, r1}) 254.222372ms ago: executing program 2 (id=3347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r1, 0xd8261a1f011cba13, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x2200c000) 122.091536ms ago: executing program 2 (id=3348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000f00000005000d"], 0x34}}, 0x0) 87.516997ms ago: executing program 5 (id=3349): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 58.279978ms ago: executing program 2 (id=3350): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ec0)={0x1, {{0xa, 0x3, 0x0, @mcast1}}}, 0x90) 0s ago: executing program 2 (id=3351): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x9, 0x4, 0x1000, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r0, 0x0, 0x7}, 0x38) kernel console output (not intermixed with test programs): detected capacity change from 0 to 32768 [ 386.061634][T12386] JBD2: Ignoring recovery information on journal [ 386.226589][T12386] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 386.275913][ T5791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (5791) [ 386.307456][T12390] non-latin1 character 0x466c found in JFS file name [ 386.351438][T12390] mount with iocharset=utf8 to access [ 386.369566][ T5821] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 386.618873][ T5821] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 386.646979][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.659694][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 386.690825][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.699046][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.738852][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 386.802509][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.833749][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.864790][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 386.919736][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.941045][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.979831][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.028422][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.055594][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.075543][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.124610][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.154180][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.174924][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.238845][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.247687][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.277086][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.300194][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 387.329506][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.341413][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.350825][ T5821] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.382198][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.426843][ T5821] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 387.469546][ T5821] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 387.503294][ T5821] usb 4-1: Product: syz [ 387.508142][ T5821] usb 4-1: Manufacturer: syz [ 387.532128][ T5821] usb 4-1: SerialNumber: syz [ 387.568719][ T5821] usb 4-1: config 0 descriptor?? [ 387.588277][ T5821] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 387.811435][ T5822] usb 4-1: USB disconnect, device number 21 [ 387.840190][ T5822] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 388.211651][T12464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2415'. [ 388.223859][T12450] loop5: detected capacity change from 0 to 40427 [ 388.249647][T12450] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 388.272405][T12450] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 388.283659][T12450] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 388.306054][T12450] F2FS-fs (loop5): Found nat_bits in checkpoint [ 388.530223][T12450] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 388.580058][T12450] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 388.878865][T12456] loop2: detected capacity change from 0 to 32768 [ 388.970427][T12456] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.199499][T12456] XFS (loop2): Ending clean mount [ 389.374359][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 389.374379][ T28] audit: type=1800 audit(2000000204.870:3045): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2410" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 389.498836][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 389.853476][T12503] delete_channel: no stack [ 390.087471][T12481] loop0: detected capacity change from 0 to 32768 [ 390.157962][T12481] (syz.0.2419,12481,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 390.229470][T12481] (syz.0.2419,12481,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 390.253918][T12512] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 390.355017][T12481] JBD2: Ignoring recovery information on journal [ 390.492608][T12521] loop3: detected capacity change from 0 to 4096 [ 390.576802][T12481] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 390.918653][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 391.266630][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 391.379750][ T5768] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 391.589673][ T5768] usb 3-1: Using ep0 maxpacket: 32 [ 391.632428][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.662266][ T5768] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 391.688788][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.712484][ T5768] usb 3-1: config 0 descriptor?? [ 391.754856][T12528] loop5: detected capacity change from 0 to 32768 [ 391.814279][T12528] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 391.885045][T12536] loop3: detected capacity change from 0 to 32768 [ 391.918308][T12536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2436 (12536) [ 391.965682][T12528] XFS (loop5): Ending clean mount [ 391.977603][ T5823] XFS (loop5): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 392.023945][ T5823] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 392.043923][T12536] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.075311][T12536] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 392.081796][ T5823] XFS (loop5): Unmount and run xfs_repair [ 392.097487][T12536] BTRFS info (device loop3): using free space tree [ 392.119630][ T5823] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 392.127102][ T5823] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 392.141098][ T5823] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 392.152636][ T5768] hid (null): bogus close delimiter [ 392.153074][ T5823] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 392.167179][ T5823] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 392.176293][ T5823] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 392.186698][ T5768] hid (null): unknown global tag 0xe [ 392.193460][ T5823] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.202494][ T5823] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.207372][ T5768] uclogic 0003:28BD:0071.002D: interface is invalid, ignoring [ 392.211478][ T5823] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.211871][T12528] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 392.212406][T12528] XFS (loop5): Failed to initialize disk quotas. [ 392.360092][ T5768] usb 3-1: USB disconnect, device number 30 [ 392.402795][T12536] BTRFS info (device loop3): enabling ssd optimizations [ 392.440305][T12536] BTRFS info (device loop3): auto enabling async discard [ 392.595045][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.637730][T10437] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 393.068673][T12548] loop0: detected capacity change from 0 to 32768 [ 393.165201][T12548] (syz.0.2437,12548,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 393.212321][T12548] (syz.0.2437,12548,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 393.278954][T12548] JBD2: Ignoring recovery information on journal [ 393.324875][T12573] loop5: detected capacity change from 0 to 2048 [ 393.346784][T12573] EXT4-fs: Ignoring removed i_version option [ 393.400193][T12548] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 393.432840][T12573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.698553][T12583] netlink: 'syz.2.2444': attribute type 2 has an invalid length. [ 393.745271][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.903434][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 393.914972][T12586] loop3: detected capacity change from 0 to 1024 [ 393.954731][T12586] EXT4-fs: inline encryption not supported [ 394.059258][T12586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 394.072518][T12586] ext4 filesystem being mounted at /632/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.234178][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 394.338221][T12593] loop2: detected capacity change from 0 to 512 [ 394.467606][T12593] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2449: invalid indirect mapped block 10 (level 1) [ 394.517328][T12593] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2449: invalid indirect mapped block 8 (level 1) [ 394.585424][T12593] EXT4-fs (loop2): 1 truncate cleaned up [ 394.616623][T12593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.767100][T12588] loop5: detected capacity change from 0 to 32768 [ 394.770094][ T5823] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 394.834995][T12588] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 394.865318][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.971802][ T5823] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 394.989493][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.011094][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 395.021381][T12588] XFS (loop5): Ending clean mount [ 395.039512][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 395.047764][ T5823] usb 4-1: Product: syz [ 395.084236][ T5823] usb 4-1: Manufacturer: syz [ 395.107873][ T5823] usb 4-1: SerialNumber: syz [ 395.140725][ T5823] usb 4-1: config 0 descriptor?? [ 395.153484][ T5823] usb 4-1: selecting invalid altsetting 0 [ 395.351844][T10437] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 395.490921][ T5823] usb 4-1: USB disconnect, device number 22 [ 396.179036][T12611] loop2: detected capacity change from 0 to 32768 [ 396.278269][T12632] tipc: Started in network mode [ 396.283423][T12632] tipc: Node identity ae30562edac3, cluster identity 4711 [ 396.291256][T12632] tipc: Enabled bearer , priority 10 [ 396.297619][T12611] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.421275][T12611] XFS (loop2): Ending clean mount [ 396.646930][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.889701][T12647] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 397.373108][T12660] loop3: detected capacity change from 0 to 16 [ 397.400208][T12660] erofs: (device loop3): mounted with root inode @ nid 36. [ 397.419732][ T5768] tipc: Node number set to 1962104366 [ 397.903582][T12652] loop5: detected capacity change from 0 to 32768 [ 397.985271][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2479'. [ 397.990718][T12652] JBD2: Ignoring recovery information on journal [ 398.041645][T12652] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 398.080776][T12652] JBD2: bad block at offset 32 [ 398.128413][T12652] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 398.296439][T12686] loop2: detected capacity change from 0 to 256 [ 398.350761][T12686] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.363095][T12683] loop3: detected capacity change from 0 to 4096 [ 398.377797][T10437] ocfs2: Unmounting device (7,5) on (node local) [ 398.433085][T12686] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.454067][T12683] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 398.506534][T12683] ntfs3: loop3: Failed to load $Extend (-22). [ 398.533485][T12683] ntfs3: loop3: Failed to initialize $Extend. [ 398.787580][T12692] loop0: detected capacity change from 0 to 1024 [ 398.834626][T12692] EXT4-fs: Ignoring removed nobh option [ 398.860292][T12692] EXT4-fs: Ignoring removed orlov option [ 398.889693][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2486'. [ 398.918116][T12692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 398.931404][T12694] loop3: detected capacity change from 0 to 128 [ 398.940707][T12692] ext4 filesystem being mounted at /662/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.009598][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 399.163975][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 399.174381][ T5780] sysv_free_block: flc_count > flc_size [ 399.184878][ T5780] sysv_free_block: flc_count > flc_size [ 399.197380][ T5780] sysv_free_block: flc_count > flc_size [ 399.197490][ T8] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 399.209569][ T5780] sysv_free_block: flc_count > flc_size [ 399.219751][ T8] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 399.235681][ T8] usb 3-1: config 220 has no interface number 2 [ 399.249545][ T8] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 399.255306][ T5780] sysv_free_block: flc_count > flc_size [ 399.272609][ T8] usb 3-1: config 220 interface 0 has no altsetting 0 [ 399.280903][ T8] usb 3-1: config 220 interface 76 has no altsetting 0 [ 399.298837][ T5780] sysv_free_block: flc_count > flc_size [ 399.302687][ T8] usb 3-1: config 220 interface 1 has no altsetting 0 [ 399.319879][ T5780] sysv_free_block: flc_count > flc_size [ 399.325509][ T5780] sysv_free_block: flc_count > flc_size [ 399.333649][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 399.347128][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.362104][ T5780] sysv_free_block: flc_count > flc_size [ 399.368771][ T8] usb 3-1: Product: syz [ 399.371604][ T5780] sysv_free_block: flc_count > flc_size [ 399.378839][ T8] usb 3-1: Manufacturer: syz [ 399.391341][ T5780] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 399.396964][ T8] usb 3-1: SerialNumber: syz [ 399.531595][T12708] loop3: detected capacity change from 0 to 1024 [ 399.662281][ T8] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 399.668842][ T8] usb 3-1: No valid video chain found. [ 399.682095][ T8] usb 3-1: selecting invalid altsetting 0 [ 399.711640][ T8] usb 3-1: selecting invalid altsetting 0 [ 399.717473][ T8] usbtest: probe of 3-1:220.1 failed with error -22 [ 399.750829][ T8] usb 3-1: USB disconnect, device number 31 [ 400.079029][T12718] loop5: detected capacity change from 0 to 64 [ 400.298986][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'. [ 400.323708][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'. [ 401.001757][T12743] loop2: detected capacity change from 0 to 4096 [ 401.365036][T12734] loop3: detected capacity change from 0 to 32768 [ 401.482729][T12734] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 401.704936][T12734] XFS (loop3): Ending clean mount [ 401.756845][T12747] loop5: detected capacity change from 0 to 32768 [ 401.799726][T12747] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 401.842040][T12747] JBD2: Ignoring recovery information on journal [ 401.855415][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 402.000434][T12747] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 402.409213][T10437] ocfs2: Unmounting device (7,5) on (node local) [ 402.960248][T12792] netlink: 'syz.5.2524': attribute type 280 has an invalid length. [ 403.137646][T12798] trusted_key: encrypted_key: insufficient parameters specified [ 403.239693][ T5821] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 403.377478][T12788] loop3: detected capacity change from 0 to 32768 [ 403.397594][T12788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2527 (12788) [ 403.421571][T12788] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.436382][T12788] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 403.451968][T12788] BTRFS info (device loop3): using free space tree [ 403.474896][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 403.499935][ T5821] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.508128][ T5821] usb 1-1: config 0 has no interface number 0 [ 403.551933][ T5821] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.580430][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.590715][ T5821] usb 1-1: Product: syz [ 403.594952][ T5821] usb 1-1: Manufacturer: syz [ 403.599797][ T5821] usb 1-1: SerialNumber: syz [ 403.607192][ T5821] usb 1-1: config 0 descriptor?? [ 403.616364][ T5821] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.678624][T12788] BTRFS info (device loop3): enabling ssd optimizations [ 403.685860][T12788] BTRFS info (device loop3): auto enabling async discard [ 403.930618][T12829] netlink: 'syz.5.2537': attribute type 8 has an invalid length. [ 404.051410][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.217708][ T5821] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 404.280033][ T5821] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 404.509672][T12840] loop2: detected capacity change from 0 to 256 [ 404.523296][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.524349][ T5826] usb 1-1: USB disconnect, device number 17 [ 404.611440][ T5826] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.661629][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2545'. [ 404.678851][ T5826] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 404.716703][T12840] FAT-fs (loop2): Directory bread(block 64) failed [ 404.734133][ T5826] quatech2 1-1:0.51: device disconnected [ 404.759754][T12840] FAT-fs (loop2): Directory bread(block 65) failed [ 404.766487][T12840] FAT-fs (loop2): Directory bread(block 66) failed [ 404.820601][T12840] FAT-fs (loop2): Directory bread(block 67) failed [ 404.846274][T12840] FAT-fs (loop2): Directory bread(block 68) failed [ 404.878230][T12840] FAT-fs (loop2): Directory bread(block 69) failed [ 404.897192][T12840] FAT-fs (loop2): Directory bread(block 70) failed [ 404.933345][T12840] FAT-fs (loop2): Directory bread(block 71) failed [ 404.953762][T12840] FAT-fs (loop2): Directory bread(block 72) failed [ 404.988501][T12840] FAT-fs (loop2): Directory bread(block 73) failed [ 405.212981][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2548'. [ 405.458955][T12856] loop3: detected capacity change from 0 to 64 [ 405.495677][T12856] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 405.525729][T12860] netlink: 'syz.2.2551': attribute type 3 has an invalid length. [ 405.575743][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 406.154467][T12874] mkiss: ax0: crc mode is auto. [ 406.185791][T12854] loop0: detected capacity change from 0 to 32768 [ 406.246036][T12854] JBD2: Ignoring recovery information on journal [ 406.367136][T12854] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 406.426435][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 406.633569][T12888] loop2: detected capacity change from 0 to 256 [ 406.761997][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 406.844792][T12895] loop3: detected capacity change from 0 to 256 [ 407.191354][T12902] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2573'. [ 407.412336][T12909] loop5: detected capacity change from 0 to 512 [ 407.455415][T12909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 407.552919][T12909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.610355][T12909] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.680926][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 407.690264][T12909] EXT4-fs error (device loop5): ext4_resize_begin:62: comm syz.5.2575: resize_inode disabled but reserved GDT blocks non-zero [ 407.714287][T12922] loop0: detected capacity change from 0 to 2048 [ 407.806290][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.900595][ T8] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 407.917570][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 407.969606][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.018089][ T8] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 408.097073][T12929] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.236592][T12931] loop5: detected capacity change from 0 to 1024 [ 408.386525][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 408.416276][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 408.449880][T12935] nbd: socks must be embedded in a SOCK_ITEM attr [ 408.579573][ T28] audit: type=1326 audit(2000000224.080:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 408.657629][ T28] audit: type=1326 audit(2000000224.080:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 408.681899][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.729591][ T28] audit: type=1326 audit(2000000224.080:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 408.815538][ T28] audit: type=1326 audit(2000000224.080:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 408.889163][ T28] audit: type=1326 audit(2000000224.090:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12941 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9ba95d68e code=0x7ffc0000 [ 408.913416][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.981533][ T28] audit: type=1326 audit(2000000224.140:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 409.018838][ T28] audit: type=1326 audit(2000000224.140:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 409.062822][ T8] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 409.085392][ T28] audit: type=1326 audit(2000000224.150:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 409.110646][ T28] audit: type=1326 audit(2000000224.190:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 409.129777][ T8] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 409.155243][ T8] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 409.185651][ T28] audit: type=1326 audit(2000000224.200:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.3.2588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa9ba99ce59 code=0x7ffc0000 [ 409.347845][T12961] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 409.393047][ T5822] usb 3-1: USB disconnect, device number 32 [ 409.428694][T12962] [U]  [ 409.501357][T12965] loop5: detected capacity change from 0 to 512 [ 409.533407][T12965] EXT4-fs (loop5): 1 truncate cleaned up [ 409.557870][T12965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.585312][T12969] loop0: detected capacity change from 0 to 512 [ 409.607002][T12969] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.2600: corrupted in-inode xattr: invalid ea_ino [ 409.650939][T12969] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2600: couldn't read orphan inode 15 (err -117) [ 409.696186][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.701675][T12969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.852042][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.047794][T12978] loop5: detected capacity change from 0 to 256 [ 410.083751][T12976] loop0: detected capacity change from 0 to 512 [ 410.125121][T12978] FAT-fs (loop5): Directory bread(block 64) failed [ 410.149221][T12978] FAT-fs (loop5): Directory bread(block 65) failed [ 410.173624][T12976] EXT4-fs (loop0): orphan cleanup on readonly fs [ 410.184230][T12978] FAT-fs (loop5): Directory bread(block 66) failed [ 410.214461][T12976] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 410.241817][T12978] FAT-fs (loop5): Directory bread(block 67) failed [ 410.248576][T12978] FAT-fs (loop5): Directory bread(block 68) failed [ 410.255746][T12976] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 410.287868][T12978] FAT-fs (loop5): Directory bread(block 69) failed [ 410.295555][T12985] tipc: Invalid UDP bearer configuration [ 410.295612][T12985] tipc: Enabling of bearer rejected, failed to enable media [ 410.329968][T12978] FAT-fs (loop5): Directory bread(block 70) failed [ 410.336592][T12978] FAT-fs (loop5): Directory bread(block 71) failed [ 410.357845][T12976] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2603: attempt to clear invalid blocks 2 len 1 [ 410.390146][T12978] FAT-fs (loop5): Directory bread(block 72) failed [ 410.422382][T12976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2603: invalid indirect mapped block 1819239214 (level 0) [ 410.430688][T12978] FAT-fs (loop5): Directory bread(block 73) failed [ 410.470394][T12976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2603: invalid indirect mapped block 1819239214 (level 1) [ 410.503500][T12976] EXT4-fs (loop0): 1 truncate cleaned up [ 410.561417][T12976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.606578][ T5826] IPVS: starting estimator thread 0... [ 410.729557][T12992] IPVS: using max 21 ests per chain, 50400 per kthread [ 410.780756][T12976] EXT4-fs: Ignoring removed oldalloc option [ 410.794105][T12976] EXT4-fs: can't change dax mount option while remounting [ 410.891371][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.152900][T13002] loop3: detected capacity change from 0 to 4096 [ 411.281672][T13002] ntfs: volume version 3.1. [ 411.677898][T13015] loop0: detected capacity change from 0 to 128 [ 411.742770][T13015] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.772846][T13015] ext4 filesystem being mounted at /693/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.940777][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.255165][T13024] loop3: detected capacity change from 0 to 8192 [ 412.281454][T13024] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.320030][T13028] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 412.738422][T12998] loop2: detected capacity change from 0 to 65536 [ 412.824829][T12998] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 412.852798][T13022] loop5: detected capacity change from 0 to 32768 [ 412.914338][T12998] XFS (loop2): Ending clean mount [ 412.931057][T13022] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 413.056526][T13022] XFS (loop5): Ending clean mount [ 413.086453][ T5781] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 413.105098][T13022] XFS (loop5): Quotacheck needed: Please wait. [ 413.198518][T13022] XFS (loop5): Quotacheck: Done. [ 413.559025][T13068] loop0: detected capacity change from 0 to 64 [ 414.423647][T10437] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.487861][ T5768] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 414.695808][ T5768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.728938][ T5768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.762011][ T5768] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 414.779909][ T5768] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 414.787980][ T5768] usb 1-1: Manufacturer: syz [ 414.820345][ T5768] usb 1-1: config 0 descriptor?? [ 414.874783][T13086] loop3: detected capacity change from 0 to 32768 [ 414.908936][T13086] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 414.968077][T13094] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.021965][T13086] XFS (loop3): Ending clean mount [ 415.177156][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 415.220668][ T5821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.236005][ T5821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.269654][ T5821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.277735][ T5768] cougar 0003:060B:700A.002E: unknown main item tag 0x1 [ 415.297827][ T5821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 415.305320][ T5768] cougar 0003:060B:700A.002E: item fetching failed at offset 2/5 [ 415.317519][ T5821] rtc rtc0: __rtc_set_alarm: err=-22 [ 415.326525][ T5768] cougar 0003:060B:700A.002E: parse failed [ 415.335109][ T5768] cougar: probe of 0003:060B:700A.002E failed with error -22 [ 415.465438][ T5768] usb 1-1: USB disconnect, device number 18 [ 415.751455][ T5826] IPVS: starting estimator thread 0... [ 415.859761][T13116] IPVS: using max 16 ests per chain, 38400 per kthread [ 415.877055][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 416.016603][T13124] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 416.030541][T13124] ALSA: mixer_oss: invalid index 137438 [ 416.672760][T13127] loop0: detected capacity change from 0 to 32768 [ 416.713710][T13127] [ 416.713710][T13127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.713710][T13127] [ 416.753802][T13127] JFS: metapage_get_blocks failed [ 416.764536][T13127] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 416.764536][T13127] [ 416.783165][T13127] ERROR: (device loop0): diWrite: ixpxd invalid [ 416.783165][T13127] [ 416.796536][T13127] ERROR: (device loop0): txCommit: [ 416.796536][T13127] [ 416.890870][ T5778] [ 416.890870][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.890870][ T5778] [ 416.924097][ T5778] [ 416.924097][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.924097][ T5778] [ 417.172674][T13140] loop2: detected capacity change from 0 to 256 [ 417.253965][T13140] exfat: Deprecated parameter 'namecase' [ 417.307650][T13140] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 417.323550][T13128] loop3: detected capacity change from 0 to 65536 [ 417.414942][T13128] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 417.618684][T13128] XFS (loop3): Ending clean mount [ 417.938261][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 418.484915][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 418.608378][T13178] loop2: detected capacity change from 0 to 4096 [ 418.713795][T13186] loop0: detected capacity change from 0 to 512 [ 418.792155][T13189] loop3: detected capacity change from 0 to 64 [ 418.836323][T13190] loop5: detected capacity change from 0 to 16 [ 418.902878][T13190] erofs: (device loop5): mounted with root inode @ nid 36. [ 418.919198][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 418.919212][ T28] audit: type=1800 audit(2000000234.420:3078): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2686" name="file2" dev="loop0" ino=1048780 res=0 errno=0 [ 418.977725][T13186] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 419.054837][T13186] FAT-fs (loop0): Filesystem has been set read-only [ 419.119587][T13186] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 419.128350][T13186] syz.0.2686: attempt to access beyond end of device [ 419.128350][T13186] loop0: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 419.493348][T13203] loop0: detected capacity change from 0 to 512 [ 419.574947][T13203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.653772][T13203] ext4 filesystem being mounted at /717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.670006][ T5822] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 419.884397][ T5822] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.901684][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.914438][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.944225][ T5822] usb 4-1: config 0 descriptor?? [ 419.969334][ T5822] cp210x 4-1:0.0: cp210x converter detected [ 420.109636][ T5826] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 420.311905][ T5826] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 420.333359][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 420.364891][ T5826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 420.398829][ T5826] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 420.408521][ T5822] usb 4-1: cp210x converter now attached to ttyUSB0 [ 420.409060][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.424166][T13215] loop2: detected capacity change from 0 to 40427 [ 420.451131][T13215] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 420.460732][T13215] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 420.473908][ T5826] usb 6-1: config 0 descriptor?? [ 420.481254][T13217] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 420.495095][T13215] F2FS-fs (loop2): invalid crc value [ 420.602102][ T5822] usb 4-1: USB disconnect, device number 23 [ 420.629879][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 420.706358][ T5822] cp210x 4-1:0.0: device disconnected [ 420.881777][T13215] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 420.892354][T13215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 420.963498][ T5781] syz-executor: attempt to access beyond end of device [ 420.963498][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 420.997628][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 421.007197][ T5826] cypress 0003:04B4:0001.002F: unexpected long global item [ 421.031375][ T5826] cypress 0003:04B4:0001.002F: parse failed [ 421.037416][ T5826] cypress: probe of 0003:04B4:0001.002F failed with error -22 [ 421.129792][ T5823] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 421.249896][ T5822] usb 6-1: USB disconnect, device number 5 [ 421.326559][T13233] loop3: detected capacity change from 0 to 4096 [ 421.329871][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 421.350596][T13233] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 421.370674][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.404254][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.416209][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.436776][ T5823] usb 1-1: New USB device found, idVendor=045e, idProduct=0009, bcdDevice= 0.00 [ 421.499667][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.524325][ T5823] usb 1-1: config 0 descriptor?? [ 421.741228][T13233] ntfs3: Cannot use different iocharset when remounting! [ 421.792382][T13237] loop2: detected capacity change from 0 to 2048 [ 421.880618][T13238] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.974677][ T5823] hid (null): unknown global tag 0xe [ 422.004390][ T5823] hid-generic 0003:045E:0009.0030: unknown main item tag 0x2 [ 422.015388][ T5823] hid-generic 0003:045E:0009.0030: unknown main item tag 0x2 [ 422.027993][ T5823] hid-generic 0003:045E:0009.0030: unknown global tag 0xe [ 422.045260][ T5823] hid-generic 0003:045E:0009.0030: item 0 0 1 14 parsing failed [ 422.055937][ T5823] hid-generic: probe of 0003:045E:0009.0030 failed with error -22 [ 422.167088][T13237] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 422.206220][T13237] Remounting filesystem read-only [ 422.252869][ T5821] usb 1-1: USB disconnect, device number 19 [ 422.329306][ T5781] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 422.355342][ T5781] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 422.369525][ T5781] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 422.376872][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.390876][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.403577][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.414438][ T5781] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 422.428695][ T5781] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 422.448961][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.477869][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.487571][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.498334][ T5781] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 422.508634][ T5781] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 422.517643][ T5781] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 422.531807][ T5781] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 422.539165][ T5781] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 422.549193][ T5781] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 422.558838][ T5781] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 422.571874][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.587552][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.605536][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.617266][ T5781] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 422.628882][ T5781] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 422.638351][ T5781] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 422.650646][ T5781] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 422.657992][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.673188][ T5781] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 422.682012][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.697607][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.724208][ T5781] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 422.737043][ T5781] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 422.915361][T13240] loop3: detected capacity change from 0 to 32768 [ 423.012151][T13251] loop2: detected capacity change from 0 to 4096 [ 423.014053][T13240] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 423.085059][T13258] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.206740][ T28] audit: type=1800 audit(2000000238.710:3079): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2711" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 423.390098][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 423.760396][ T5823] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 423.765592][T13274] loop3: detected capacity change from 0 to 256 [ 423.796807][ T28] audit: type=1326 audit(2000000239.300:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.2.2724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 423.898102][T13274] FAT-fs (loop3): Directory bread(block 64) failed [ 423.906956][ T28] audit: type=1326 audit(2000000239.300:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.2.2724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 423.941009][T13274] FAT-fs (loop3): Directory bread(block 65) failed [ 423.947864][T13274] FAT-fs (loop3): Directory bread(block 66) failed [ 423.968233][T13274] FAT-fs (loop3): Directory bread(block 67) failed [ 423.970157][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.982660][T13274] FAT-fs (loop3): Directory bread(block 68) failed [ 424.000617][T13274] FAT-fs (loop3): Directory bread(block 69) failed [ 424.007997][T13274] FAT-fs (loop3): Directory bread(block 70) failed [ 424.018671][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 424.028042][T13274] FAT-fs (loop3): Directory bread(block 71) failed [ 424.039760][ T28] audit: type=1326 audit(2000000239.300:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.2.2724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 424.056083][T13274] FAT-fs (loop3): Directory bread(block 72) failed [ 424.089572][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.102766][T13274] FAT-fs (loop3): Directory bread(block 73) failed [ 424.109809][ T5823] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 424.119046][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.128638][ T28] audit: type=1326 audit(2000000239.300:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.2.2724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 424.161185][ T5823] usb 1-1: config 0 descriptor?? [ 424.170214][T13268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.229976][ T5821] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 424.445044][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 424.464970][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 424.500529][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.523281][ T5821] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 424.533282][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.550583][ T5821] usb 6-1: config 0 descriptor?? [ 424.561458][T13285] loop3: detected capacity change from 0 to 1024 [ 424.598308][T13285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.630249][T13285] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.644773][ T5823] hid-rmi 0003:1532:011D.0031: unknown main item tag 0x4 [ 424.664232][ T5823] hid-rmi 0003:1532:011D.0031: unknown main item tag 0x3 [ 424.683412][ T5823] hid-rmi 0003:1532:011D.0031: unexpected long global item [ 424.693551][ T5823] hid-rmi 0003:1532:011D.0031: parse failed [ 424.710190][ T5823] hid-rmi: probe of 0003:1532:011D.0031 failed with error -22 [ 424.774557][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 424.780633][ T5768] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 424.888865][ T5823] usb 1-1: USB disconnect, device number 20 [ 424.933615][T13291] loop3: detected capacity change from 0 to 2048 [ 424.956814][T13291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.012616][ T5768] usb 3-1: too many endpoints for config 0 interface 0 altsetting 127: 254, using maximum allowed: 30 [ 425.028717][ T5821] logitech 0003:046D:C626.0032: unknown main item tag 0xd [ 425.037890][ T5821] logitech 0003:046D:C626.0032: unknown main item tag 0x1 [ 425.050731][ T5768] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 425.063963][ T5821] logitech 0003:046D:C626.0032: unknown main item tag 0x1 [ 425.068777][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.081891][ T5821] logitech 0003:046D:C626.0032: unknown main item tag 0x0 [ 425.090538][ T5768] usb 3-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 425.124284][ T5821] logitech 0003:046D:C626.0032: hidraw0: USB HID v0.0d Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 425.148700][ T5768] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.162016][ T5768] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 425.183934][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.210956][ T5768] usb 3-1: config 0 descriptor?? [ 425.216915][T13286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 425.280791][ T5821] usb 6-1: USB disconnect, device number 6 [ 425.316863][T13294] fido_id[13294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 425.535369][T13300] loop3: detected capacity change from 0 to 512 [ 425.594011][T13300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.616139][T13300] ext4 filesystem being mounted at /699/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.658827][ T5768] cypress 0003:04B4:ED81.0033: ignoring exceeding usage max [ 425.684183][ T5768] cypress 0003:04B4:ED81.0033: hidraw0: USB HID v0.0c Device [HID 04b4:ed81] on usb-dummy_hcd.2-1/input0 [ 425.761219][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.862531][ T5826] usb 3-1: USB disconnect, device number 33 [ 427.101704][T13323] loop0: detected capacity change from 0 to 32768 [ 427.178746][T13323] JBD2: Ignoring recovery information on journal [ 427.256793][ C1] sd 0:0:1:0: [sda] tag#1599 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 427.267363][ C1] sd 0:0:1:0: [sda] tag#1599 CDB: Read(6) 08 00 f9 56 e4 47 [ 427.277756][T13323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 427.485292][T13327] loop3: detected capacity change from 0 to 32768 [ 427.506532][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 427.591023][T13327] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.784901][T13327] XFS (loop3): Ending clean mount [ 427.806369][T13327] XFS (loop3): Quotacheck needed: Please wait. [ 427.949330][T13327] XFS (loop3): Quotacheck: Done. [ 428.047500][T13363] loop2: detected capacity change from 0 to 4096 [ 428.096252][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 428.319473][T13363] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 428.360349][T13363] ntfs3: loop2: Failed to load $Extend (-22). [ 428.386947][T13363] ntfs3: loop2: Failed to initialize $Extend. [ 429.480460][T13397] loop0: detected capacity change from 0 to 4096 [ 429.509661][T13397] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 429.616989][T13375] loop5: detected capacity change from 0 to 40427 [ 429.687104][T13397] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 429.711254][T13375] F2FS-fs (loop5): Found nat_bits in checkpoint [ 429.967338][T13375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 430.063900][T13410] loop0: detected capacity change from 0 to 256 [ 430.131149][T13405] f2fs_ckpt-7:5: attempt to access beyond end of device [ 430.131149][T13405] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 430.184199][T13405] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 430.437609][T13404] loop2: detected capacity change from 0 to 32768 [ 430.469905][T13404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2776 (13404) [ 430.525525][T13404] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 430.566321][T13404] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 430.594649][T13404] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 430.637188][T13404] BTRFS info (device loop2): use zstd compression, level 3 [ 430.662533][T13404] BTRFS info (device loop2): force clearing of disk cache [ 430.696899][T13404] BTRFS info (device loop2): enabling disk space caching [ 430.730243][T13404] BTRFS info (device loop2): disk space caching is enabled [ 430.958218][T13404] BTRFS info (device loop2): enabling ssd optimizations [ 430.998815][T13404] BTRFS info (device loop2): auto enabling async discard [ 431.029050][T13404] BTRFS info (device loop2): rebuilding free space tree [ 431.127309][T13440] loop3: detected capacity change from 0 to 16 [ 431.140122][T13404] BTRFS info (device loop2): disabling free space tree [ 431.187148][T13404] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 431.239724][T13404] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 431.250429][T13440] erofs: (device loop3): mounted with root inode @ nid 36. [ 431.326958][T13440] syz.3.2785: attempt to access beyond end of device [ 431.326958][T13440] loop3: rw=524288, sector=0, nr_sectors = 1154 limit=16 [ 431.745301][ T5781] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 432.117300][T13460] loop0: detected capacity change from 0 to 16 [ 432.160583][T13460] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 432.904346][ T28] audit: type=1326 audit(2000000248.400:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 432.928662][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.965975][T13475] loop2: detected capacity change from 0 to 1024 [ 432.985535][ T28] audit: type=1326 audit(2000000248.400:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 433.061091][ T28] audit: type=1326 audit(2000000248.410:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 433.092867][T13456] loop5: detected capacity change from 0 to 32768 [ 433.137772][ T28] audit: type=1326 audit(2000000248.410:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 433.166543][ T28] audit: type=1326 audit(2000000248.410:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 433.194422][ T28] audit: type=1326 audit(2000000248.410:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c3439cbc2 code=0x7ffc0000 [ 433.220053][ T28] audit: type=1326 audit(2000000248.450:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c3435d68e code=0x7ffc0000 [ 433.292760][T13456] JBD2: Ignoring recovery information on journal [ 433.326232][ T28] audit: type=1326 audit(2000000248.470:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c3439cc87 code=0x7ffc0000 [ 433.367680][ T145] hfsplus: b-tree write err: -5, ino 25 [ 433.406328][ T28] audit: type=1326 audit(2000000248.470:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c3435d68e code=0x7ffc0000 [ 433.410523][ T145] hfsplus: b-tree write err: -5, ino 4 [ 433.497395][ T145] hfsplus: b-tree write err: -5, ino 2 [ 433.518233][ T28] audit: type=1326 audit(2000000248.470:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c3439caeb code=0x7ffc0000 [ 433.532688][T13456] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 433.761366][T13486] loop2: detected capacity change from 0 to 16 [ 433.813355][T13486] erofs: (device loop2): mounted with root inode @ nid 36. [ 433.841576][T10437] ocfs2: Unmounting device (7,5) on (node local) [ 434.543195][T13477] loop3: detected capacity change from 0 to 40427 [ 434.551463][T13477] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 434.559255][T13477] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 434.633555][T13477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 434.733377][T13501] loop5: detected capacity change from 0 to 128 [ 434.757146][T13501] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 434.787991][T13501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.951494][T13477] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 434.958617][T13477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 435.277748][T13491] loop0: detected capacity change from 0 to 40427 [ 435.413439][T13491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 435.620330][T13491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 435.710639][T13491] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 435.736705][T13491] CPU: 1 PID: 13491 Comm: syz.0.2815 Not tainted syzkaller #0 [ 435.744246][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.754366][T13491] Call Trace: [ 435.757770][T13491] [ 435.760815][T13491] dump_stack_lvl+0x18c/0x250 [ 435.765712][T13491] ? show_regs_print_info+0x20/0x20 [ 435.771018][T13491] ? __asan_memset+0x22/0x40 [ 435.775704][T13491] ? f2fs_get_next_page_offset+0x690/0x690 [ 435.781682][T13491] ? f2fs_lookup_read_extent_cache_block+0x25b/0x460 [ 435.788423][T13491] ? __lookup_extent_tree+0xba0/0xba0 [ 435.793876][T13491] f2fs_is_valid_blkaddr+0xe39/0x1580 [ 435.799328][T13491] f2fs_get_read_data_page+0x3bb/0x5d0 [ 435.804858][T13491] ? f2fs_reserve_block+0x240/0x240 [ 435.810135][T13491] f2fs_find_data_page+0x9f/0x390 [ 435.815229][T13491] f2fs_readdir+0x4c3/0x970 [ 435.819803][T13491] ? f2fs_fill_dentries+0xc00/0xc00 [ 435.825059][T13491] ? read_lock_is_recursive+0x20/0x20 [ 435.830522][T13491] ? lockdep_hardirqs_on+0x98/0x150 [ 435.835789][T13491] ? mutex_lock_nested+0x20/0x20 [ 435.840873][T13491] ? end_current_label_crit_section+0x149/0x170 [ 435.847210][T13491] ? down_read_killable+0x1d0/0x340 [ 435.852473][T13491] ? fsnotify_perm+0x271/0x5e0 [ 435.857299][T13491] iterate_dir+0x1c2/0x580 [ 435.861811][T13491] __se_sys_getdents64+0xf6/0x270 [ 435.866900][T13491] ? __x64_sys_getdents64+0x80/0x80 [ 435.872171][T13491] ? filldir+0x660/0x660 [ 435.876490][T13491] ? lockdep_hardirqs_on+0x98/0x150 [ 435.881762][T13491] do_syscall_64+0x55/0xb0 [ 435.886236][T13491] ? clear_bhb_loop+0x40/0x90 [ 435.891034][T13491] ? clear_bhb_loop+0x40/0x90 [ 435.895755][T13491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.901770][T13491] RIP: 0033:0x7f587119ce59 [ 435.906299][T13491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.926101][T13491] RSP: 002b:00007f5871fa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 435.934643][T13491] RAX: ffffffffffffffda RBX: 00007f5871415fa0 RCX: 00007f587119ce59 [ 435.942670][T13491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 435.950687][T13491] RBP: 00007f5871232d6f R08: 0000000000000000 R09: 0000000000000000 [ 435.958793][T13491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.966821][T13491] R13: 00007f5871416038 R14: 00007f5871415fa0 R15: 00007ffc221ff378 [ 435.974901][T13491] [ 436.164963][T13506] loop5: detected capacity change from 0 to 32768 [ 436.218538][T13506] (syz.5.2811,13506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 436.259616][T13506] (syz.5.2811,13506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 436.394613][T13506] JBD2: Ignoring recovery information on journal [ 436.503967][T13516] loop2: detected capacity change from 0 to 32768 [ 436.559639][T13516] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 436.574231][T13506] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 436.649849][T13506] (syz.5.2811,13506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 436.825550][ T5935] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 436.869745][T13506] (syz.5.2811,13506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 436.941458][T13506] (syz.5.2811,13506,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 436.969505][T13506] (syz.5.2811,13506,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 436.979311][T13506] (syz.5.2811,13506,1):ocfs2_quota_read:201 ERROR: status = -5 [ 437.010391][T13506] (syz.5.2811,13506,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 437.289041][T10437] ocfs2: Unmounting device (7,5) on (node local) [ 437.883845][T13551] loop2: detected capacity change from 0 to 2048 [ 437.931372][T13554] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.975148][T13555] loop5: detected capacity change from 0 to 256 [ 438.073837][T13555] FAT-fs (loop5): Directory bread(block 64) failed [ 438.109952][T13555] FAT-fs (loop5): Directory bread(block 65) failed [ 438.148136][T13555] FAT-fs (loop5): Directory bread(block 66) failed [ 438.189783][T13555] FAT-fs (loop5): Directory bread(block 67) failed [ 438.206189][T13555] FAT-fs (loop5): Directory bread(block 68) failed [ 438.237286][T13555] FAT-fs (loop5): Directory bread(block 69) failed [ 438.261110][T13555] FAT-fs (loop5): Directory bread(block 70) failed [ 438.283852][T13555] FAT-fs (loop5): Directory bread(block 71) failed [ 438.292772][T13555] FAT-fs (loop5): Directory bread(block 72) failed [ 438.305307][T13555] FAT-fs (loop5): Directory bread(block 73) failed [ 438.654133][T13565] loop2: detected capacity change from 0 to 4096 [ 438.706098][T13570] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.004377][T13579] loop2: detected capacity change from 0 to 256 [ 439.261831][T13586] sp0: Synchronizing with TNC [ 439.603524][T13599] program syz.5.2852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.782964][T13605] netlink: 'syz.5.2855': attribute type 3 has an invalid length. [ 440.288032][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.295853][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.429495][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2863'. [ 440.886489][T13645] loop0: detected capacity change from 0 to 64 [ 441.150075][ T5826] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.254274][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2871'. [ 441.287286][T13618] loop2: detected capacity change from 0 to 32768 [ 441.339604][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 441.366284][ T5826] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 441.368676][T13618] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 441.391380][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.406229][ T5826] usb 4-1: config 0 has no interface number 0 [ 441.414012][ T5826] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.440760][ T5826] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 441.468947][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.517774][ T5826] usb 4-1: Product: syz [ 441.528587][T13618] XFS (loop2): Ending clean mount [ 441.537149][ T5826] usb 4-1: Manufacturer: syz [ 441.554662][ T5826] usb 4-1: SerialNumber: syz [ 441.579082][ T5826] usb 4-1: config 0 descriptor?? [ 441.617348][ T5826] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 441.659207][ T5826] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 441.745067][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 441.822854][ T5826] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 441.841872][T13641] loop5: detected capacity change from 0 to 32768 [ 441.980067][T13641] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 442.036922][ T5826] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 442.186844][T13641] XFS (loop5): Ending clean mount [ 442.254725][ T5823] usb 4-1: USB disconnect, device number 24 [ 442.298162][ T5823] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 442.386795][T13684] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 442.506457][T10437] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 442.698426][T13691] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 443.030143][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2878'. [ 443.078836][T13702] loop2: detected capacity change from 0 to 256 [ 443.170205][T13702] FAT-fs (loop2): Directory bread(block 64) failed [ 443.200115][T13702] FAT-fs (loop2): Directory bread(block 65) failed [ 443.206837][T13702] FAT-fs (loop2): Directory bread(block 66) failed [ 443.249504][T13702] FAT-fs (loop2): Directory bread(block 67) failed [ 443.256223][T13702] FAT-fs (loop2): Directory bread(block 68) failed [ 443.311698][T13702] FAT-fs (loop2): Directory bread(block 69) failed [ 443.339602][T13702] FAT-fs (loop2): Directory bread(block 70) failed [ 443.346218][T13702] FAT-fs (loop2): Directory bread(block 71) failed [ 443.407055][T13702] FAT-fs (loop2): Directory bread(block 72) failed [ 443.433706][T13702] FAT-fs (loop2): Directory bread(block 73) failed [ 443.516684][T13713] veth0_to_bond: entered allmulticast mode [ 443.835572][T13724] CUSE: unknown device info "" [ 443.854755][T13724] CUSE: unknown device info "" [ 443.868970][T13724] CUSE: unknown device info "" [ 443.901410][T13724] CUSE: unknown device info "" [ 443.912219][T13724] CUSE: unknown device info "ÿ" [ 443.917308][T13724] CUSE: unknown device info "" [ 443.922879][T13724] CUSE: unknown device info "" [ 443.935753][T13724] CUSE: unknown device info "ÿ" [ 443.945868][T13724] CUSE: DEVNAME unspecified [ 443.967892][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 444.149627][ T5823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 444.214844][T13732] loop0: detected capacity change from 0 to 4096 [ 444.233239][T13732] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 444.328340][T13732] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 444.355789][ T5823] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 444.389523][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.417651][ T5823] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.417683][ T5823] usb 6-1: config 1 has no interface number 1 [ 444.417728][ T5823] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 444.424055][ T5823] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.424088][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.424109][ T5823] usb 6-1: Product: syz [ 444.424124][ T5823] usb 6-1: Manufacturer: syz [ 444.424140][ T5823] usb 6-1: SerialNumber: syz [ 444.692498][ T5823] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 444.707596][ T5823] usb 6-1: MIDIStreaming interface descriptor not found [ 444.784879][ T5823] usb 6-1: USB disconnect, device number 7 [ 444.864364][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.330714][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2905'. [ 445.345322][T13767] loop0: detected capacity change from 0 to 16 [ 445.373573][T13767] erofs: (device loop0): mounted with root inode @ nid 36. [ 445.549526][ T5823] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 445.762047][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 445.769696][ T5823] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.802033][ T5823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.820942][ T5823] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 445.839519][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.867778][ T5823] usb 3-1: Product: syz [ 445.879911][ T5823] usb 3-1: Manufacturer: syz [ 445.897049][ T5823] usb 3-1: SerialNumber: syz [ 445.915008][ T5823] usb 3-1: config 0 descriptor?? [ 446.101885][T13790] loop5: detected capacity change from 0 to 8 [ 446.119702][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 446.225798][ T5823] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 446.325473][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.340096][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.367275][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.389276][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 446.435289][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 446.469522][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.479607][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.487733][ T8] usb 4-1: Product: syz [ 446.509549][ T8] usb 4-1: Manufacturer: syz [ 446.536155][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 446.549590][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 446.580123][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 446.606589][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 446.614250][ T5823] imon:send_packet: packet tx failed (-71) [ 446.628471][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 446.649876][ T5823] imon 3-1:0.0: panel buttons/knobs setup failed [ 446.790869][ T5823] rc_core: IR keymap rc-imon-pad not found [ 446.817092][ T5823] Registered IR keymap rc-empty [ 446.839011][ T5823] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 446.872694][ T5823] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 446.901460][ T5823] imon:send_packet: packet tx failed (-71) [ 446.920040][ T5823] imon 3-1:0.0: remote input dev register failed [ 446.928751][ T5823] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 446.956220][ T5768] usb 4-1: USB disconnect, device number 25 [ 447.036445][T13810] loop5: detected capacity change from 0 to 128 [ 447.048603][ T5823] imon 3-1:0.0: unable to initialize intf0, err 0 [ 447.065837][ T5823] imon:imon_probe: failed to initialize context! [ 447.074710][ T5823] imon 3-1:0.0: unable to register, err -19 [ 447.086502][ T5823] usb 3-1: USB disconnect, device number 34 [ 447.100984][T13810] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.132334][T13810] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.264796][T13810] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 447.483265][T10437] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.875148][T13837] loop0: detected capacity change from 0 to 128 [ 447.970201][T13837] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 448.007072][T13837] hpfs: filesystem error: improperly stopped [ 448.023441][T13840] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 448.037427][T13837] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 448.055746][T13840] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2929'. [ 448.067068][T13837] hpfs: You really don't want any checks? You are crazy... [ 448.076021][T13842] loop3: detected capacity change from 0 to 1024 [ 448.091771][T13837] hpfs: hpfs_map_sector(): read error [ 448.100872][T13840] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2929'. [ 448.116303][T13842] EXT4-fs: Ignoring removed orlov option [ 448.128742][T13837] hpfs: code page support is disabled [ 448.154936][T13837] hpfs: hpfs_map_4sectors(): unaligned read [ 448.176397][T13837] hpfs: hpfs_map_4sectors(): unaligned read [ 448.196778][T13837] hpfs: filesystem error: unable to find root dir [ 448.212492][T13842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.280874][T13850] loop2: detected capacity change from 0 to 64 [ 448.314421][T13848] erspan0: entered promiscuous mode [ 448.321268][T13848] macsec2: entered promiscuous mode [ 448.326656][T13848] macsec2: entered allmulticast mode [ 448.332772][T13837] hpfs: hpfs_map_4sectors(): unaligned read [ 448.342874][T13848] erspan0: entered allmulticast mode [ 448.355577][T13837] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 448.368905][T13848] erspan0: left allmulticast mode [ 448.375106][T13848] erspan0: left promiscuous mode [ 448.407447][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.976696][T13864] loop3: detected capacity change from 0 to 1024 [ 449.024018][T13864] hfsplus: failed to load catalog file [ 449.094694][ T5794] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 449.159192][T13873] loop2: detected capacity change from 0 to 512 [ 449.231768][T13873] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 449.252593][T13873] EXT4-fs (loop2): 1 truncate cleaned up [ 449.275589][T13873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.445868][T13873] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 449.491273][T13873] EXT4-fs (loop2): can't enable nombcache during remount [ 449.549102][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.721925][T13871] loop5: detected capacity change from 0 to 32768 [ 449.758298][T13871] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 449.881354][T13871] XFS (loop5): Ending clean mount [ 449.894710][T13871] XFS (loop5): Quotacheck needed: Please wait. [ 449.967643][T13895] loop0: detected capacity change from 0 to 512 [ 449.995404][T13871] XFS (loop5): Quotacheck: Done. [ 450.134788][T10437] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.332093][T13899] loop0: detected capacity change from 0 to 64 [ 450.761966][T13907] loop2: detected capacity change from 0 to 2048 [ 450.796099][T13907] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 450.834102][T13907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.289300][T13920] FAT-fs (loop0): Directory bread(block 64) failed [ 451.336606][T13920] FAT-fs (loop0): Directory bread(block 65) failed [ 451.348707][T13920] FAT-fs (loop0): Directory bread(block 66) failed [ 451.370377][T13920] FAT-fs (loop0): Directory bread(block 67) failed [ 451.385566][T13920] FAT-fs (loop0): Directory bread(block 68) failed [ 451.407325][T13920] FAT-fs (loop0): Directory bread(block 69) failed [ 451.430222][T13920] FAT-fs (loop0): Directory bread(block 70) failed [ 451.450607][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 451.450624][ T28] audit: type=1326 audit(2000000266.960:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.485473][T13920] FAT-fs (loop0): Directory bread(block 71) failed [ 451.505967][T13920] FAT-fs (loop0): Directory bread(block 72) failed [ 451.530011][T13920] FAT-fs (loop0): Directory bread(block 73) failed [ 451.549249][ T28] audit: type=1326 audit(2000000266.960:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.635148][ T28] audit: type=1326 audit(2000000266.990:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.681741][ T28] audit: type=1326 audit(2000000267.010:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.711526][ T28] audit: type=1326 audit(2000000267.010:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.771393][T13903] JBD2: Ignoring recovery information on journal [ 451.812539][ T28] audit: type=1326 audit(2000000267.010:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.838149][ T28] audit: type=1326 audit(2000000267.010:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.870794][ T28] audit: type=1326 audit(2000000267.010:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.895909][ T28] audit: type=1326 audit(2000000267.010:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 451.930469][ T28] audit: type=1326 audit(2000000267.010:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.2.2961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3439ce59 code=0x7ffc0000 [ 452.041120][T13903] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 452.318917][T13934] set_capacity_and_notify: 2 callbacks suppressed [ 452.318934][T13934] loop5: detected capacity change from 0 to 4096 [ 452.373259][T13934] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 452.484083][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 452.831436][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2970'. [ 453.815619][T13982] loop2: detected capacity change from 0 to 16 [ 454.324826][T14000] loop0: detected capacity change from 0 to 1024 [ 454.391546][T14000] hfsplus: bad catalog entry type [ 454.494458][ T3444] hfsplus: b-tree write err: -5, ino 25 [ 454.517419][ T3444] hfsplus: b-tree write err: -5, ino 4 [ 454.530375][ T3444] hfsplus: b-tree write err: -5, ino 2 [ 454.724689][T14013] loop0: detected capacity change from 0 to 512 [ 454.791170][T14013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.804159][T14014] loop3: detected capacity change from 0 to 2048 [ 454.837385][T14013] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.880612][T14014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.924213][T14018] loop2: detected capacity change from 0 to 512 [ 454.971888][T14018] EXT4-fs: Ignoring removed nobh option [ 454.990142][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3002'. [ 455.014393][T14013] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 455.044881][T14018] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3001: invalid indirect mapped block 256 (level 2) [ 455.148331][T14018] EXT4-fs (loop2): Remounting filesystem read-only [ 455.165969][T14018] EXT4-fs (loop2): 2 truncates cleaned up [ 455.211634][T14018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.252144][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.432077][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.970097][ T5826] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 456.172426][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.199583][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.227120][ T5826] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 456.246706][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.256261][T14056] usb usb9: usbfs: process 14056 (syz.0.3018) did not claim interface 0 before use [ 456.280862][ T5826] usb 3-1: config 0 descriptor?? [ 456.718375][ T5826] wacom 0003:056A:0217.0034: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 456.938770][ T5823] usb 3-1: USB disconnect, device number 35 [ 457.088036][T14060] loop5: detected capacity change from 0 to 32768 [ 457.158518][T14060] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.275729][T14082] loop3: detected capacity change from 0 to 256 [ 457.332774][T14082] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 457.370725][T14060] XFS (loop5): Ending clean mount [ 457.408883][T14060] XFS (loop5): Quotacheck needed: Please wait. [ 457.517419][T14060] XFS (loop5): Quotacheck: Done. [ 457.714489][T10437] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 458.044420][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 458.253060][T14083] loop0: detected capacity change from 0 to 32768 [ 458.479840][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 458.542964][T14103] loop2: detected capacity change from 0 to 256 [ 458.688097][ T23] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 458.721727][ T23] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 458.753890][ T23] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 458.811777][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 458.829730][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 458.838840][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.902701][ T23] usb 6-1: config 0 descriptor?? [ 459.218699][T14117] loop3: detected capacity change from 0 to 2048 [ 459.249499][ T5768] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 459.267881][T14118] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.318868][T14117] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 459.351137][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x3 [ 459.365480][T14117] Remounting filesystem read-only [ 459.371056][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.388306][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.401485][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.418948][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.427857][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.435548][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.444105][ T23] wacom 0003:056A:032A.0035: unknown main item tag 0x0 [ 459.454028][ T5768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.466814][ T5768] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.492754][ T23] wacom 0003:056A:032A.0035: hidraw0: USB HID v0.01 Device [HID 056a:032a] on usb-dummy_hcd.5-1/input0 [ 459.505422][ T5768] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 459.515995][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.572138][ T5768] usb 3-1: config 0 descriptor?? [ 459.603372][ T5768] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 459.630345][ T5768] dvb-usb: bulk message failed: -22 (3/0) [ 459.644554][ T5822] usb 6-1: USB disconnect, device number 8 [ 459.664255][ T5768] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 459.696792][ T5768] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 459.716492][ T5768] usb 3-1: media controller created [ 459.732925][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.754005][T14119] fido_id[14119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 459.779147][ T5768] dvb-usb: bulk message failed: -22 (6/0) [ 459.798331][ T5768] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 459.823331][ T5768] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 459.840400][T14111] dvb-usb: bulk message failed: -22 (56/0) [ 459.873755][ T5768] dvb-usb: schedule remote query interval to 150 msecs. [ 459.882892][ T5768] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 459.921425][ T5768] usb 3-1: USB disconnect, device number 36 [ 460.033275][ T5768] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 460.367490][T14136] loop5: detected capacity change from 0 to 64 [ 460.650960][T14143] loop5: detected capacity change from 0 to 1024 [ 460.667537][T14140] loop0: detected capacity change from 0 to 4096 [ 461.016060][T14140] ntfs3: loop0: failed to convert "256c" to koi8-ru [ 461.313182][T14157] loop0: detected capacity change from 0 to 512 [ 461.408962][T14157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.454285][T14157] ext4 filesystem being mounted at /819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.594397][T14157] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 461.619982][T14157] EXT4-fs: Cannot change journaled quota options when quota turned on [ 461.721117][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.943092][T14153] loop5: detected capacity change from 0 to 32768 [ 461.985956][T14155] loop2: detected capacity change from 0 to 32768 [ 462.007065][T14153] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 462.023212][T14155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3063 (14155) [ 462.094201][T14155] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.137217][T14177] loop0: detected capacity change from 0 to 512 [ 462.142414][T14155] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 462.152764][T14155] BTRFS info (device loop2): using free space tree [ 462.185701][T14153] XFS (loop5): Ending clean mount [ 462.205497][T14177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 462.267735][T14177] EXT4-fs (loop0): 1 truncate cleaned up [ 462.277089][T14177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.322739][T14155] BTRFS info (device loop2): enabling ssd optimizations [ 462.365909][T14155] BTRFS info (device loop2): auto enabling async discard [ 462.410196][T10437] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 462.597125][T14155] BTRFS info (device loop2): device stats zeroed by syz.2.3063 (14155) [ 462.651396][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.801230][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 463.138784][T14165] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.353696][T14165] XFS (loop3): Ending clean mount [ 463.485043][ T5822] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 463.540943][ T5822] XFS (loop3): Unmount and run xfs_repair [ 463.576900][ T5822] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 463.602721][T14221] sock: sock_timestamping_bind_phc: sock not bind to device [ 463.609557][ T5822] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 463.653271][ T5822] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 463.679014][ T5822] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 463.750124][ T5822] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 463.789412][ T5822] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 463.836231][ T5822] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 463.864837][ T5822] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 463.893145][ T5822] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 463.912852][T14227] set_capacity_and_notify: 1 callbacks suppressed [ 463.912870][T14227] loop2: detected capacity change from 0 to 64 [ 463.921570][T14165] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 464.018398][T14165] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 464.092155][T14165] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 464.199936][T14231] UBIFS error (pid: 14231): cannot open "usrquota", error -22 [ 464.290927][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 464.425319][T14237] loop5: detected capacity change from 0 to 256 [ 464.507114][T14237] FAT-fs (loop5): Directory bread(block 64) failed [ 464.549175][T14237] FAT-fs (loop5): Directory bread(block 65) failed [ 464.553572][T14235] loop0: detected capacity change from 0 to 4096 [ 464.568818][T14237] FAT-fs (loop5): Directory bread(block 66) failed [ 464.619809][T14237] FAT-fs (loop5): Directory bread(block 67) failed [ 464.639873][T14237] FAT-fs (loop5): Directory bread(block 68) failed [ 464.646566][T14237] FAT-fs (loop5): Directory bread(block 69) failed [ 464.658945][T14235] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 464.668276][T14237] FAT-fs (loop5): Directory bread(block 70) failed [ 464.668314][T14237] FAT-fs (loop5): Directory bread(block 71) failed [ 464.668414][T14237] FAT-fs (loop5): Directory bread(block 72) failed [ 464.668443][T14237] FAT-fs (loop5): Directory bread(block 73) failed [ 464.788471][T14235] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 464.821643][T14235] ntfs3: loop0: Failed to load $Extend (-22). [ 464.853157][T14235] ntfs3: loop0: Failed to initialize $Extend. [ 465.383385][T14253] loop3: detected capacity change from 0 to 128 [ 465.472547][T14255] loop0: detected capacity change from 0 to 128 [ 465.490076][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 465.550380][T14255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.574422][T14255] ext4 filesystem being mounted at /831/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.679496][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 465.696965][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.726177][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.739945][T14255] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3094: No space for directory leaf checksum. Please run e2fsck -D. [ 465.765899][T14259] loop3: detected capacity change from 0 to 1024 [ 465.777940][ T8] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 465.797364][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.811652][T14255] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #2: comm syz.0.3094: Directory block failed checksum [ 465.829085][ T8] usb 3-1: config 0 descriptor?? [ 465.926476][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.985224][T14249] loop5: detected capacity change from 0 to 32768 [ 466.023593][T14249] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 466.035305][T14249] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 466.046719][T14249] BTRFS info (device loop5): setting nodatasum [ 466.092313][T14249] BTRFS info (device loop5): force zlib compression, level 3 [ 466.139587][T14249] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 466.148889][T14249] BTRFS info (device loop5): use lzo compression, level 0 [ 466.191746][T14249] BTRFS info (device loop5): turning on flush-on-commit [ 466.216950][T14249] BTRFS info (device loop5): enabling auto defrag [ 466.272529][T14249] BTRFS info (device loop5): max_inline at 4096 [ 466.278884][T14249] BTRFS info (device loop5): using free space tree [ 466.295966][T14263] loop3: detected capacity change from 0 to 1764 [ 466.304186][ T8] ntrig 0003:1B96:0008.0036: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 466.374268][T14263] smb3: Unknown parameter 'overriderockperm' [ 466.506175][ T8] usb 3-1: USB disconnect, device number 37 [ 466.521476][T14249] BTRFS info (device loop5): enabling ssd optimizations [ 466.660663][T14265] fido_id[14265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 466.983901][T14290] loop3: detected capacity change from 0 to 1024 [ 467.055670][T10437] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 467.128896][ T3467] hfsplus: b-tree write err: -5, ino 8 [ 467.531807][T14302] loop0: detected capacity change from 0 to 256 [ 467.565251][T14302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 468.051074][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3115'. [ 468.519869][T14328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.572836][T14323] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 468.652630][T14323] Remounting filesystem read-only [ 468.663599][T14323] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 469.231909][T14343] set_capacity_and_notify: 1 callbacks suppressed [ 469.231927][T14343] loop2: detected capacity change from 0 to 256 [ 469.286030][T14343] exfat: Deprecated parameter 'utf8' [ 469.336324][T14343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 469.482431][T14347] vlan3: entered promiscuous mode [ 469.487716][T14347] macvtap0: entered promiscuous mode [ 469.622438][T14353] loop0: detected capacity change from 0 to 128 [ 469.668921][T14353] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.752943][T14353] ext4 filesystem being mounted at /845/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 470.001976][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.529624][ T8] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 470.585893][T14349] loop3: detected capacity change from 0 to 40427 [ 470.606440][T14349] F2FS-fs (loop3): invalid crc value [ 470.616976][T14371] loop0: detected capacity change from 0 to 512 [ 470.649295][T14349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 470.671684][T14371] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.741814][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.770048][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.796038][ T8] usb 3-1: config 0 descriptor?? [ 470.803653][T14360] loop5: detected capacity change from 0 to 40427 [ 470.850469][ T8] cp210x 3-1:0.0: cp210x converter detected [ 470.871381][T14360] F2FS-fs (loop5): invalid crc value [ 470.880324][T14371] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 470.885040][T14349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 470.930543][T14360] F2FS-fs (loop5): Found nat_bits in checkpoint [ 471.039807][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 471.039825][ T28] audit: type=1800 audit(2000000286.540:3127): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3129" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 471.202407][T14360] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 471.232678][ T5780] syz-executor: attempt to access beyond end of device [ 471.232678][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 471.280626][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 471.309500][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 471.477699][ T5826] usb 3-1: USB disconnect, device number 38 [ 471.504828][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.524671][ T5826] cp210x 3-1:0.0: device disconnected [ 471.939477][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 472.082243][ T28] audit: type=1326 audit(2000000287.590:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.106456][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.124102][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 472.146003][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57465, setting to 1024 [ 472.169600][ T28] audit: type=1326 audit(2000000287.620:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.193892][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.215582][ T8] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 472.241992][ T8] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 472.269625][ T28] audit: type=1326 audit(2000000287.630:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.293826][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.304597][ T8] usb 1-1: Product: syz [ 472.331107][ T8] usb 1-1: config 0 descriptor?? [ 472.345262][ T28] audit: type=1326 audit(2000000287.630:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.380244][ T28] audit: type=1326 audit(2000000287.630:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.404653][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.419196][ T28] audit: type=1326 audit(2000000287.630:3133): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.443869][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.460018][ T28] audit: type=1326 audit(2000000287.630:3134): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.537008][ T28] audit: type=1326 audit(2000000287.630:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.561208][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.614208][ T28] audit: type=1326 audit(2000000287.630:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.5.3144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998e19ce59 code=0x7ffc0000 [ 472.638461][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.645763][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 472.804652][ T8] elan 0003:04F3:0755.0037: unknown main item tag 0x0 [ 472.832968][ T8] elan 0003:04F3:0755.0037: unknown main item tag 0x0 [ 472.863708][ T8] elan 0003:04F3:0755.0037: unknown main item tag 0x0 [ 472.872346][ T8] elan 0003:04F3:0755.0037: unknown main item tag 0x0 [ 472.884230][ T8] elan 0003:04F3:0755.0037: unknown main item tag 0x0 [ 472.899034][ T8] elan 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.0-1/input0 [ 472.978240][T14407] loop5: detected capacity change from 0 to 1024 [ 473.086439][ T8] usb 1-1: USB disconnect, device number 21 [ 473.168527][T14412] loop2: detected capacity change from 0 to 1024 [ 473.201394][T14408] fido_id[14408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 473.282237][ T3488] hfsplus: b-tree write err: -5, ino 25 [ 473.288087][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 473.315723][ T3488] hfsplus: b-tree write err: -5, ino 2 [ 473.737268][T14424] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 473.751538][T14424] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 473.758072][T14424] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 473.815043][T14424] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 473.830190][T14424] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 473.843358][T14424] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 474.321474][T14418] loop2: detected capacity change from 0 to 32768 [ 474.377496][T14418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3158 (14418) [ 474.411860][T14442] overlayfs: conflicting options: nfs_export=on,index=off [ 474.441153][T14418] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.463837][T14418] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 474.490537][T14418] BTRFS info (device loop2): setting nodatacow, compression disabled [ 474.509153][T14418] BTRFS info (device loop2): turning on flush-on-commit [ 474.549500][T14418] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 474.579444][T14418] BTRFS info (device loop2): use lzo compression, level 0 [ 474.599463][T14418] BTRFS info (device loop2): setting nodatasum [ 474.626825][T14418] BTRFS info (device loop2): use no compression [ 474.649658][T14418] BTRFS info (device loop2): trying to use backup root at mount time [ 474.658614][T14418] BTRFS info (device loop2): max_inline at 0 [ 474.701586][T14418] BTRFS info (device loop2): using free space tree [ 474.830773][ T34] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 474.910259][T14418] BTRFS warning (device loop2): couldn't read tree root [ 474.917295][T14418] BTRFS warning (device loop2): try to load backup roots slot 1 [ 474.987174][ T3488] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 475.039824][T14418] BTRFS warning (device loop2): couldn't read tree root [ 475.059201][T14418] BTRFS warning (device loop2): try to load backup roots slot 2 [ 475.077805][T14434] loop3: detected capacity change from 0 to 40427 [ 475.100927][ T3488] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 475.129619][T14418] BTRFS warning (device loop2): couldn't read tree root [ 475.136650][T14418] BTRFS warning (device loop2): try to load backup roots slot 3 [ 475.156584][T14434] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 475.178595][T14434] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 475.212636][T14469] loop0: detected capacity change from 0 to 256 [ 475.219073][T14434] F2FS-fs (loop3): invalid crc value [ 475.227960][T14469] exfat: Deprecated parameter 'utf8' [ 475.241601][T14469] exfat: Deprecated parameter 'utf8' [ 475.247123][T14469] exfat: Deprecated parameter 'utf8' [ 475.271565][T14418] BTRFS info (device loop2): enabling ssd optimizations [ 475.286055][T14434] F2FS-fs (loop3): Found nat_bits in checkpoint [ 475.303153][T14418] BTRFS info (device loop2): auto enabling async discard [ 475.353162][T14418] BTRFS info (device loop2): rebuilding free space tree [ 475.384039][T14469] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 475.473495][T14418] BTRFS info (device loop2): checking UUID tree [ 475.480097][T14434] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 475.589931][T14434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 475.721437][T14479] loop5: detected capacity change from 0 to 256 [ 475.745530][T14434] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 475.811461][T14434] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 475.830878][T14479] FAT-fs (loop5): Directory bread(block 64) failed [ 475.858105][T14479] FAT-fs (loop5): Directory bread(block 65) failed [ 475.871320][T14479] FAT-fs (loop5): Directory bread(block 66) failed [ 475.910594][T14479] FAT-fs (loop5): Directory bread(block 67) failed [ 475.939891][T14479] FAT-fs (loop5): Directory bread(block 68) failed [ 475.946506][T14479] FAT-fs (loop5): Directory bread(block 69) failed [ 475.986328][T14479] FAT-fs (loop5): Directory bread(block 70) failed [ 476.009820][T14479] FAT-fs (loop5): Directory bread(block 71) failed [ 476.041314][T14479] FAT-fs (loop5): Directory bread(block 72) failed [ 476.047952][T14479] FAT-fs (loop5): Directory bread(block 73) failed [ 476.109198][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.773243][T14486] loop5: detected capacity change from 0 to 4096 [ 476.904039][T14486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.118608][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.267751][T14482] loop0: detected capacity change from 0 to 40427 [ 477.280459][T14494] netlink: 'syz.3.3185': attribute type 8 has an invalid length. [ 477.299629][T14482] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 477.307122][T14482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 477.345624][T14482] F2FS-fs (loop0): heap/no_heap options were deprecated [ 477.366944][T14482] F2FS-fs (loop0): invalid crc value [ 477.389551][T14482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 477.636400][T14482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 477.666000][T14482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 477.750484][T14482] syz.0.3179: attempt to access beyond end of device [ 477.750484][T14482] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 477.816496][T14482] F2FS-fs (loop0): Remounting filesystem read-only [ 477.841644][T14488] loop2: detected capacity change from 0 to 32768 [ 477.868334][T14488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3183 (14488) [ 477.965610][T14488] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 478.005570][T14488] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 478.029770][T14488] BTRFS info (device loop2): setting nodatasum [ 478.057142][T14488] BTRFS info (device loop2): force zlib compression, level 3 [ 478.093733][T14488] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 478.136980][T14488] BTRFS info (device loop2): use lzo compression, level 0 [ 478.159776][T14488] BTRFS info (device loop2): turning on flush-on-commit [ 478.167384][T14488] BTRFS info (device loop2): enabling auto defrag [ 478.211853][T14488] BTRFS info (device loop2): max_inline at 4096 [ 478.233463][T14488] BTRFS info (device loop2): using free space tree [ 478.478734][T14488] BTRFS info (device loop2): enabling ssd optimizations [ 478.862113][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 479.415936][T14541] loop5: detected capacity change from 0 to 8 [ 479.551257][T14541] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 479.822523][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 479.849258][T14553] netlink: 'syz.2.3202': attribute type 5 has an invalid length. [ 480.118474][T14562] MPI: mpi too large (113288 bits) [ 480.874572][T14591] loop0: detected capacity change from 0 to 1024 [ 480.891636][T14591] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 480.925656][T14591] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.3220: lblock 2 mapped to illegal pblock 2 (length 1) [ 480.943049][T14591] __quota_error: 12 callbacks suppressed [ 480.943066][T14591] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 480.959098][T14591] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.3220: lblock 0 mapped to illegal pblock 48 (length 1) [ 480.976039][T14591] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 481.001154][T14591] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.3220: Failed to acquire dquot type 0 [ 481.022247][T14591] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 481.053706][T14591] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3220: mark_inode_dirty error [ 481.066779][T14591] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 481.079738][T14591] EXT4-fs (loop0): 1 orphan inode deleted [ 481.086949][T14591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.119985][ T12] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 481.148707][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 481.167837][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 481.205962][T14591] EXT4-fs: Ignoring removed bh option [ 481.224745][T14591] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 481.240066][T14591] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.3220: lblock 0 mapped to illegal pblock 48 (length 1) [ 481.259920][T14591] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 481.366802][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.479497][ T5768] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 481.572541][T14608] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3227'. [ 481.703531][ T5768] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.716556][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.742006][ T5768] usb 3-1: config 0 descriptor?? [ 481.762137][ T5768] cp210x 3-1:0.0: cp210x converter detected [ 482.057184][T14605] loop0: detected capacity change from 0 to 32768 [ 482.192207][ T5768] usb 3-1: cp210x converter now attached to ttyUSB0 [ 482.322108][T14611] loop3: detected capacity change from 0 to 32768 [ 482.389677][T14611] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 482.406445][ T5826] usb 3-1: USB disconnect, device number 39 [ 482.432994][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 482.471717][ T5826] cp210x 3-1:0.0: device disconnected [ 482.569856][T14611] XFS (loop3): Ending clean mount [ 482.693970][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 483.660028][ T23] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 483.859946][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 483.877289][ T23] usb 4-1: config 0 has no interfaces? [ 483.897787][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 483.911392][T14641] loop0: detected capacity change from 0 to 32768 [ 483.921250][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.947990][ T23] usb 4-1: Product: syz [ 483.959819][T14641] JBD2: Ignoring recovery information on journal [ 483.966333][ T23] usb 4-1: Manufacturer: syz [ 483.976465][ T23] usb 4-1: SerialNumber: syz [ 484.002504][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 484.018255][T14641] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 484.067107][T14663] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3250'. [ 484.240903][ T23] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 484.299116][T14665] loop2: detected capacity change from 0 to 4096 [ 484.355163][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 484.364926][T14668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.387928][T14667] loop5: detected capacity change from 0 to 2048 [ 484.468911][ T5768] usb 4-1: USB disconnect, device number 26 [ 484.498062][T14667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.573881][T14667] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 484.678640][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.994551][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 485.122063][T14685] loop2: detected capacity change from 0 to 64 [ 485.150386][ T5823] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 485.340470][T14687] loop5: detected capacity change from 0 to 4096 [ 485.367575][T14691] loop2: detected capacity change from 0 to 4096 [ 485.382199][ T5823] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.395374][T14687] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 485.410106][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.435022][T14694] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.451485][ T5823] usb 1-1: config 0 descriptor?? [ 485.491162][ T5823] cp210x 1-1:0.0: cp210x converter detected [ 485.584449][T14687] ntfs3: loop5: failed to convert "c46c" to iso8859-15 [ 486.080246][ T5823] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 486.095606][ T5823] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 486.113298][ T5823] usb 1-1: cp210x converter now attached to ttyUSB0 [ 486.134602][ T5823] usb 1-1: USB disconnect, device number 22 [ 486.162954][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 486.187070][ T5823] cp210x 1-1:0.0: device disconnected [ 486.274805][T14703] loop5: detected capacity change from 0 to 2048 [ 486.355874][T14703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.428451][ T28] audit: type=1800 audit(2000000301.930:3149): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3267" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 486.495532][T14697] loop2: detected capacity change from 0 to 32768 [ 486.529608][T14697] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 486.529608][T14697] [ 486.541266][T14697] ERROR: (device loop2): remounting filesystem as read-only [ 486.638588][T10437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.117181][T14723] binder: 14722:14723 ioctl 40046210 0 returned -14 [ 487.466322][T14731] loop0: detected capacity change from 0 to 4096 [ 487.531216][T14731] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 487.556922][T14731] ntfs3: loop0: Failed to load $Extend (-22). [ 487.566892][T14731] ntfs3: loop0: Failed to initialize $Extend. [ 487.724049][T14735] loop3: detected capacity change from 0 to 2048 [ 487.797921][T14735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.234073][T14749] vlan3: entered allmulticast mode [ 488.239315][T14749] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 488.392946][T14747] loop0: detected capacity change from 0 to 4096 [ 488.404985][T14747] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 488.459489][T14747] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 488.541987][T14747] ntfs3: loop0: ino=1e, "file1" failed to parse mft record [ 488.559481][T14747] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 488.773885][T14759] loop5: detected capacity change from 0 to 1024 [ 488.849680][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 488.894578][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 488.951284][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 489.008232][T14759] hfsplus: can't free extent [ 489.034449][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 489.075783][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 489.106455][T14759] hfsplus: invalid length 1541 has been corrected to 255 [ 489.246434][T14770] loop3: detected capacity change from 0 to 4096 [ 489.269780][T14770] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 489.386265][T14770] ntfs3: loop3: Failed to load $Extend (-22). [ 489.403290][T14770] ntfs3: loop3: Failed to initialize $Extend. [ 489.815911][T14784] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 490.471531][T14800] set_capacity_and_notify: 1 callbacks suppressed [ 490.471546][T14800] loop2: detected capacity change from 0 to 2048 [ 490.545730][T14800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.939687][T14788] loop3: detected capacity change from 0 to 40427 [ 490.958696][T14788] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 491.002451][T14788] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 491.171340][T14796] loop0: detected capacity change from 0 to 32768 [ 491.774815][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 491.819922][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 491.849891][T14825] netlink: 'syz.3.3325': attribute type 11 has an invalid length. [ 492.041195][T14827] loop2: detected capacity change from 0 to 4096 [ 492.083593][T14830] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.162208][T14827] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 492.179907][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 492.245948][T14810] loop5: detected capacity change from 0 to 32768 [ 492.418870][T14810] read_mapping_page failed! [ 492.440642][T14810] ERROR: (device loop5): txCommit: [ 492.440642][T14810] [ 492.516932][T14835] find_entry called with index = 0 [ 492.554536][T14835] read_mapping_page failed! [ 492.563537][T14835] ERROR: (device loop5): txCommit: [ 492.563537][T14835] [ 493.054892][T14829] loop0: detected capacity change from 0 to 32768 [ 493.120359][ T8] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 493.208087][T14829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 493.304462][T14834] loop3: detected capacity change from 0 to 40427 [ 493.322914][T14834] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 493.342315][ T8] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.343475][T14834] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 493.373112][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 493.384082][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 493.419142][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.429743][T14834] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 493.448446][ T8] usb 3-1: config 0 descriptor?? [ 493.492983][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 493.547001][T14834] F2FS-fs (loop3): Found nat_bits in checkpoint [ 493.802902][T14834] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 493.829489][T14834] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 493.922690][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 493.966736][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 493.982149][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 493.990170][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 493.997458][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 494.005997][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 494.013630][ T8] logitech 0003:046D:C287.0038: unknown main item tag 0x0 [ 494.044235][ T8] logitech 0003:046D:C287.0038: hidraw0: USB HID v0.0a Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 494.111011][ T8] logitech 0003:046D:C287.0038: no inputs found [ 494.140042][ T8] usb 3-1: USB disconnect, device number 40 [ 494.200722][T14862] random: crng reseeded on system resumption [ 494.285318][T14860] fido_id[14860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 494.530075][T14856] loop5: detected capacity change from 0 to 32768 [ 495.009520][ T23] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 495.221942][ T23] usb 1-1: config 0 has no interfaces? [ 495.227753][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 495.253889][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.280667][ T23] usb 1-1: config 0 descriptor?? [ 495.546495][ T23] usb 1-1: USB disconnect, device number 23 [ 495.587220][T14867] loop3: detected capacity change from 0 to 32768 [ 495.665454][T14867] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 495.845272][T14867] [ 495.847689][T14867] ====================================================== [ 495.854738][T14867] WARNING: possible circular locking dependency detected [ 495.861803][T14867] syzkaller #0 Not tainted [ 495.866252][T14867] ------------------------------------------------------ [ 495.873303][T14867] syz.3.3340/14867 is trying to acquire lock: [ 495.879396][T14867] ffff88805abbdf58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 495.892741][T14867] [ 495.892741][T14867] but task is already holding lock: [ 495.900152][T14867] ffff88805a99b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 495.909716][T14867] [ 495.909716][T14867] which lock already depends on the new lock. [ 495.909716][T14867] [ 495.920166][T14867] [ 495.920166][T14867] the existing dependency chain (in reverse order) is: [ 495.929243][T14867] [ 495.929243][T14867] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 495.937147][T14867] down_read+0x46/0x2e0 [ 495.941896][T14867] ocfs2_init_acl+0x30a/0x770 [ 495.947153][T14867] ocfs2_mknod+0x140f/0x2300 [ 495.952321][T14867] ocfs2_mkdir+0x196/0x430 [ 495.957396][T14867] vfs_mkdir+0x296/0x440 [ 495.962201][T14867] do_mkdirat+0x1dc/0x450 [ 495.967105][T14867] __x64_sys_mkdirat+0x89/0xa0 [ 495.972441][T14867] do_syscall_64+0x55/0xb0 [ 495.977432][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.983912][T14867] [ 495.983912][T14867] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 495.992491][T14867] down_read+0x46/0x2e0 [ 495.997237][T14867] ocfs2_start_trans+0x3a8/0x6f0 [ 496.002742][T14867] ocfs2_mknod+0xf1d/0x2300 [ 496.007812][T14867] ocfs2_create+0x196/0x430 [ 496.012886][T14867] path_openat+0x12a0/0x3230 [ 496.018039][T14867] do_filp_open+0x1f5/0x430 [ 496.023111][T14867] do_sys_openat2+0x134/0x1d0 [ 496.028356][T14867] __x64_sys_openat+0x139/0x160 [ 496.033781][T14867] do_syscall_64+0x55/0xb0 [ 496.038760][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.045221][T14867] [ 496.045221][T14867] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 496.052752][T14867] ocfs2_start_trans+0x2a9/0x6f0 [ 496.058261][T14867] ocfs2_mknod+0xf1d/0x2300 [ 496.063335][T14867] ocfs2_create+0x196/0x430 [ 496.068408][T14867] path_openat+0x12a0/0x3230 [ 496.073575][T14867] do_filp_open+0x1f5/0x430 [ 496.078654][T14867] do_sys_openat2+0x134/0x1d0 [ 496.083917][T14867] __x64_sys_openat+0x139/0x160 [ 496.089428][T14867] do_syscall_64+0x55/0xb0 [ 496.094503][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.100982][T14867] [ 496.100982][T14867] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 496.111571][T14867] down_write+0x97/0x200 [ 496.116389][T14867] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 496.123118][T14867] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 496.130019][T14867] ocfs2_mknod+0xebb/0x2300 [ 496.135093][T14867] ocfs2_create+0x196/0x430 [ 496.140162][T14867] path_openat+0x12a0/0x3230 [ 496.145313][T14867] do_filp_open+0x1f5/0x430 [ 496.150381][T14867] do_sys_openat2+0x134/0x1d0 [ 496.155719][T14867] __x64_sys_openat+0x139/0x160 [ 496.161140][T14867] do_syscall_64+0x55/0xb0 [ 496.166164][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.172720][T14867] [ 496.172720][T14867] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 496.183346][T14867] __lock_acquire+0x2df1/0x7d40 [ 496.188777][T14867] lock_acquire+0x19e/0x420 [ 496.193856][T14867] down_write+0x97/0x200 [ 496.198671][T14867] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 496.205134][T14867] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 496.212030][T14867] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 496.218236][T14867] ocfs2_xattr_set+0xc3f/0x13e0 [ 496.223665][T14867] __vfs_setxattr+0x431/0x470 [ 496.228914][T14867] __vfs_setxattr_noperm+0x12d/0x5e0 [ 496.234768][T14867] vfs_setxattr+0x16b/0x2f0 [ 496.239860][T14867] path_setxattr+0x3f3/0x5d0 [ 496.239893][T14867] __x64_sys_lsetxattr+0xb8/0xd0 [ 496.239918][T14867] do_syscall_64+0x55/0xb0 [ 496.239941][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.239969][T14867] [ 496.239969][T14867] other info that might help us debug this: [ 496.239969][T14867] [ 496.239975][T14867] Chain exists of: [ 496.239975][T14867] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 496.239975][T14867] [ 496.240020][T14867] Possible unsafe locking scenario: [ 496.240020][T14867] [ 496.240025][T14867] CPU0 CPU1 [ 496.240031][T14867] ---- ---- [ 496.240036][T14867] lock(&oi->ip_xattr_sem); [ 496.240049][T14867] lock(&journal->j_trans_barrier); [ 496.240064][T14867] lock(&oi->ip_xattr_sem); [ 496.240079][T14867] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 496.240099][T14867] [ 496.240099][T14867] *** DEADLOCK *** [ 496.240099][T14867] [ 496.240104][T14867] 3 locks held by syz.3.3340/14867: [ 496.240115][T14867] #0: ffff88807f888418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 496.240180][T14867] #1: ffff88805a99b498 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 496.367267][T14867] #2: ffff88805a99b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 496.367336][T14867] [ 496.367336][T14867] stack backtrace: [ 496.367344][T14867] CPU: 1 PID: 14867 Comm: syz.3.3340 Not tainted syzkaller #0 [ 496.367363][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 496.367374][T14867] Call Trace: [ 496.367383][T14867] [ 496.367390][T14867] dump_stack_lvl+0x18c/0x250 [ 496.367417][T14867] ? load_image+0x420/0x420 [ 496.367488][T14867] ? show_regs_print_info+0x20/0x20 [ 496.367524][T14867] ? print_circular_bug+0x12b/0x1a0 [ 496.367561][T14867] check_noncircular+0x2fc/0x400 [ 496.367606][T14867] ? print_deadlock_bug+0x5d0/0x5d0 [ 496.367638][T14867] ? lockdep_lock+0xf5/0x230 [ 496.367666][T14867] ? _find_first_zero_bit+0xd3/0x100 [ 496.367711][T14867] __lock_acquire+0x2df1/0x7d40 [ 496.367748][T14867] ? __lock_acquire+0x7d40/0x7d40 [ 496.367771][T14867] ? verify_lock_unused+0x140/0x140 [ 496.367800][T14867] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 496.367826][T14867] ? do_raw_spin_lock+0x11f/0x2c0 [ 496.367852][T14867] ? mutex_unlock+0x10/0x10 [ 496.367879][T14867] lock_acquire+0x19e/0x420 [ 496.367901][T14867] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 496.367926][T14867] ? ocfs2_get_system_file_inode+0x202/0x850 [ 496.367952][T14867] ? __might_sleep+0xe0/0xe0 [ 496.367996][T14867] ? read_lock_is_recursive+0x20/0x20 [ 496.368035][T14867] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 496.368072][T14867] ? verify_lock_unused+0x140/0x140 [ 496.368094][T14867] ? check_noncircular+0x18a/0x400 [ 496.368120][T14867] down_write+0x97/0x200 [ 496.368146][T14867] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 496.368168][T14867] ? down_read_killable+0x340/0x340 [ 496.368201][T14867] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 496.368228][T14867] ? mark_lock+0x94/0x320 [ 496.368253][T14867] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 496.368277][T14867] ? lock_chain_count+0x20/0x20 [ 496.368301][T14867] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 496.368330][T14867] ? lockdep_hardirqs_on+0x98/0x150 [ 496.368360][T14867] ? ocfs2_block_group_search+0x470/0x470 [ 496.368379][T14867] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 496.368410][T14867] ? _raw_spin_unlock+0x40/0x40 [ 496.368445][T14867] ? stack_trace_save+0xaa/0x100 [ 496.368464][T14867] ? stack_trace_snprint+0xf0/0xf0 [ 496.368483][T14867] ? __stack_depot_save+0x560/0x630 [ 496.368530][T14867] ? kasan_set_track+0x5f/0x70 [ 496.368554][T14867] ? kasan_set_track+0x4e/0x70 [ 496.368575][T14867] ? __kasan_kmalloc+0x8f/0xa0 [ 496.368603][T14867] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 496.368618][T14867] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 496.368640][T14867] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 496.368659][T14867] ? __vfs_setxattr+0x431/0x470 [ 496.368678][T14867] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 496.368697][T14867] ? vfs_setxattr+0x16b/0x2f0 [ 496.368715][T14867] ? path_setxattr+0x3f3/0x5d0 [ 496.368735][T14867] ? __x64_sys_lsetxattr+0xb8/0xd0 [ 496.368754][T14867] ? do_syscall_64+0x55/0xb0 [ 496.368770][T14867] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.368813][T14867] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 496.368833][T14867] ? ocfs2_init_steal_slots+0x160/0x160 [ 496.368848][T14867] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 496.368878][T14867] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 496.368901][T14867] ? ocfs2_xattr_set+0xc05/0x13e0 [ 496.368923][T14867] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 496.368944][T14867] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 496.368974][T14867] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 496.368995][T14867] ? down_write+0x16e/0x200 [ 496.369013][T14867] ? down_read_killable+0x340/0x340 [ 496.369034][T14867] ? up_write+0x1c3/0x410 [ 496.369055][T14867] ocfs2_xattr_set+0xc3f/0x13e0 [ 496.369087][T14867] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 496.369110][T14867] ? __lock_acquire+0x1347/0x7d40 [ 496.369129][T14867] ? verify_lock_unused+0x140/0x140 [ 496.369152][T14867] ? ____kasan_slab_free+0x126/0x1e0 [ 496.369178][T14867] ? evm_protected_xattr_common+0x170/0x190 [ 496.369200][T14867] ? ocfs2_xattr_security_get+0x40/0x40 [ 496.369223][T14867] __vfs_setxattr+0x431/0x470 [ 496.369247][T14867] __vfs_setxattr_noperm+0x12d/0x5e0 [ 496.369270][T14867] vfs_setxattr+0x16b/0x2f0 [ 496.369292][T14867] ? xattr_permission+0x470/0x470 [ 496.369311][T14867] ? __mnt_want_write+0x223/0x2a0 [ 496.369355][T14867] ? path_setxattr+0x3a1/0x5d0 [ 496.369384][T14867] path_setxattr+0x3f3/0x5d0 [ 496.369416][T14867] ? simple_xattrs_free+0x150/0x150 [ 496.369459][T14867] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 496.369486][T14867] ? lock_chain_count+0x20/0x20 [ 496.369513][T14867] __x64_sys_lsetxattr+0xb8/0xd0 [ 496.369543][T14867] do_syscall_64+0x55/0xb0 [ 496.369566][T14867] ? clear_bhb_loop+0x40/0x90 [ 496.369584][T14867] ? clear_bhb_loop+0x40/0x90 [ 496.369603][T14867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.369633][T14867] RIP: 0033:0x7fa9ba99ce59 [ 496.369652][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.369671][T14867] RSP: 002b:00007fa9bb7d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 496.369694][T14867] RAX: ffffffffffffffda RBX: 00007fa9bac15fa0 RCX: 00007fa9ba99ce59 [ 496.369709][T14867] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 496.369723][T14867] RBP: 00007fa9baa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 496.369735][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.369747][T14867] R13: 00007fa9bac16038 R14: 00007fa9bac15fa0 R15: 00007ffeaf4fd8d8 [ 496.369771][T14867] [ 496.466395][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 501.704175][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.711691][ T1290] ieee802154 phy1 wpan1: encryption failed: -22