last executing test programs: 1m26.520953139s ago: executing program 4 (id=185): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000020ac05230300000000000109022400010000b00909040000fe0300010009210600fc0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="200a39000000280c83efb930f0187ff0478fa22a61a54607b71ea9e4e4c5781585ba2828cb92e4c9c42123ec25"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m23.98883669s ago: executing program 4 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m23.838261824s ago: executing program 4 (id=211): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 1m23.409755065s ago: executing program 4 (id=217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m22.881591298s ago: executing program 4 (id=219): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'dt2801\x00', [0x4f24, 0x8, 0xd, 0xa, 0xe, 0x3, 0xa, 0x2007, 0x20a, 0x1, 0x5, 0x4, 0xff6b, 0x0, 0x6, 0xb4c, 0xffffffff, 0x2, 0x8, 0x4, 0x89, 0xe2, 0x400, 0x20001e58, 0x5, 0xe6b, 0x83, 0xc, 0x65a, 0x43, 0xfffffff7]}) ioctl$COMEDI_POLL(r0, 0x640f) 1m21.727301285s ago: executing program 4 (id=230): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) getpeername$netlink(r0, 0x0, &(0x7f0000000400)) 1m21.446570982s ago: executing program 32 (id=230): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) getpeername$netlink(r0, 0x0, &(0x7f0000000400)) 5.266820432s ago: executing program 1 (id=1094): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[], 0xff, 0x5e9e, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+n09k/7w77zvzzDvvzO53yXcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLT+EzN/MlQURfmn9teaori4/PeqYmf54fy2C71CAAAA4Gy9V/v7by9Jn9i5jJ0atvmXa//tewsLCwvFF9898f6fLSykC9YVxcjKoqhdFv3rL36+0LhN8HwxPjTc8PFwl5sf6XL5aJfLx7pcvqLL5Su7XD7e5fJFB2CRVfWfx9Su7IbaP9fUD2lxWTFWu+yGNns9P7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68rQeKeFvDDbe1tiiKkz99dk9cw1A4xjcUTTdW0/jYvXNfse7dnz675ztzb1/dbnY9DItWWhQbN5TrfKEoTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuW/W9d5cpnrjPd7PKzzRx3WuTZ87qnri6KYL5bcptXzxXCxuuVW0/Eer58R5XWUD+WHitHTOk/WL+M8Kfd56/rm86T1nIzHf304JqNLrKHx4XjnKysWHfczPU/Ke90P52p53Q+VNzo+3vij1aZztdzm2RuXPgfaPnZtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1W7rxI2dz4HJuUNHJ2effub2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1v0/vkA6Q1cVwOgc3hNeaeA7e3LJt4ym58M1z9zwY75PnQXnfP3tTuaCLh4slzvFymxc2nv3zIH3db3gejDY8D9q+prZ5Howu43lQbnNy4/K+Zo42/Gm3hl69Fq5pOAcu5NfD8jYfvWXp18K1YV0v3nq6Xw9HFp0D8W4Nhede+Zn0/d74XeG4LD4vrikvuGhFcXx25tgdT+2emzs2XYRxXlza8Fi1ni+rG+5Tseh8GT7t82Xn3/zypmvafH5NOFbjt3V+rMpttkx0fqxqr+7tj2fTZzcVYZxj5/t4tvtqVh7PlCU6HM9ymxduP/vvBVMuaXj9G+v2+jcyNlp//RtJR2Os6fVv8UMzUltZUZy8fXmvf2Phz/l+/busT17/ymP16B2dz4FymxcnT/ccGO34+nd9mENhPbeExDDekPvfr10+Xz9NGx7LrufN6OhYOG9G4y02nzebF+1TXlt52xunzuy82Xh982PV9H1LBc+b8lj9+VTn86bc5o3ps3/tWBX/2fDasaLbOTA2sqJc71g6Ceqvdwur4jlwR7GnOFIcLPamfcpHubytiU3LOwdWhD/n+7Xjqj45B8pj9cqmzudAuc0PN5/b7502hs+kbRq+d2r9+cJSmf+a0VPX13rYznXmL9f5yS2dfzZUbvP2ltPNGZ2P023hMxe1OU6tz5+lzum9xfk5TleFdR7c2vlnU+U2l21b5vm0syiKN6ffrP28K/x89++P//v3mn7u2+5nym9Ov/ng5MM/Pp31AwBw5t6v/T2/ov69ZsN/sV7Of/8HAAAABkLM/cNhJvI/AAAAVEbM/SNhJvI/AAAAVEbM/aNhJpnk/8fv2v7qe88V6d0AF4J4eTwMD91T3y52vOfDx+sWTik///Fvj7361eeWd9vDRVH88sEPt93+8XviuuqOxnV+tPnzi1x13bJu/7FHTm3X+P4JJ7fXrz/en+WeBrGr/Prkptr1rnt6ujbfeLCozYfnX3y+fv31j+P2JzbXt//L8KYlO/cNNe2/MaznhjDXhfeUeWjnqeNQzrjfq2uv/edLP3fq9uJ+Qxs+WLubr/xB/Xrje0S9fGl9+3i/l1r/P33tu6+W2z91Y/v1Pzfcfv0nwvW+FeYvdtS3bzzmX21Y/x+F9cfbi/vd8a0ftF3/a1fWt38tnBffCLN1/ff96Ufea/d4xdvZeXd9v3j7U/+9pbZfvL54/a3rH39uuul4tF7/G+/Wr2fHEz8badw+fj7eTvTY3c3n91B4fJt65EVRfPePi6bjXHysvt8/tqw/Xt/Ru9uv/7aWdR4duq62/6n7s6bpfn39rze1vb9xPTv/bk3T/Xn5/nD83p38YXm9Jx4O52O4/H9/VL++1vcyfe3+5tebuP031tSft/H6JlvW/3LL+uevK49d9/U/8G59/a/du7Jp/Ts/Fc6nB+qz2/r3/9UlTft/8zv1x+PYkxOHj8weP7C34ag2Po9Xjq9afdHFH/jgJeG1tPXjXUfmHp85tm5q3VRRrBvAtwzs9fq/FeZ/1cf8ub+Fuh//rH7evfTp+tetm39e//jl8PnHwuMZvz5+/S/Gms7X1sd9/t76PNv13xrWsVxXfu0/r1vWhie+8Prxf/jDt1u/L4j35+jl47X798r6K2qXDb1Rv7z19aqb/7i8+Xn9k9Gp2vx+OK4L4Z2ZN1xRv73W64/vTfLSZ+rP3/idXNy/aHk/kTUjzffjbNf/k/B9zA+uan79i+fH959reTfnNcVQuYT58PpQzNcvj1vF4/3SySva3l58H55i/urTWeaSZp+enTx44PDxpybnZmbnJmeffmbXoSPHD8/tqr136a4vddv/1PN7de35vXdm25ai9mw/Uh89dqHXf/SRPXvvnLpp78y+3cf3zT1ydObY/j2zs3tm9s7etHvfvpknu+1/YO+O6U3bN9+5aWL/gb077tq+ffP2iQOHj5TLqC+qi21TX544fGxXbZfZHVu2T2/dumVq4tCRvTM77pyamjjebf/a16aJcu8nJo7NHNw9d+DQzMTsgWdmdkxv37ZtU9d3fzx0dN/susljxw9PHp+dOTZZvy/r5mqfLr/2ddufPMweCa93LYbCd+efv21ben/c0re/suRV1Tdp/va0eCe8F1T8+tbt45j7x8JMMsn/AAAAkIOY+8Mb/5+6QP4HAACAyoi5f2WYifwPAAAAlRFz/3iYSSb5P6P+/6rGD/T/6/T/9f8L/X/9/x7T/9f/70T/X/9/kNev/6//T3f91v+PuX9VUWSZ/wEAACAHMfevDjOR/wEAAKAyYu6/KMxE/gcAAIDKiLn/4jCTPPL/WOs/K9z/b6L/X6f/363/H7fV/y/0//X/z5D+v/5/J/r/+v+DvP4+7P+v0v+n3/Rb/z/m/g+EmeSR/wEAACALMfd/MMxE/gcAAIDKiLn/kjAT+R8AAAAqI+b+NWEmmeT/jH7/fxP9/zr9f7//v9D/1/8/95oOsf6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z//8JMMsn/AAAAkIOY+z8UZiL/AwAAQGXE3H9pmIn8DwAAAJURc/9lYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/8jCTTPI/AAAA5CDm/ivCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfdfHWaSSf4HAACAHMTcf02YifwPAAAAlRFz/4fDTOR/AAAAqIyY+9eGmWSS//X/9f/1//X/9f/1/3tpsPr/w0teov9fp//fTP9f/1//X/+fzvqt/x9z/0fCTDLJ/wAAAJCDmPuvDTOR/wEAAKAyYu6/LsxE/gcAAIDKiLl/XZhJJvlf/1//X/9f/1//X/+/lwar/780/f86/f9m+v/6//r/+v901m/9/5j714eZZJL/AQAAIAcx928IM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1/9fXv9/RbcrotL6rf8fc/+NYSaZ5H8AAADIQcz9N4WZyP8AAABQGTH33xxmIv8DAABAZcTcvzHMJJP8r/+v/6//r/+v/6//30v6/4v6/2/9T6H/H+n/6/8P8vr1//3+f7rrt/5/zP23hJlkkv8BAAAgBzH33xpmIv8DAABAZcTcf1uYifwPAAAAlRFz/0SYSSb5X/9f/1//X/9f/1//v5eq2v9Pr6N+/7/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//v7/7/eJvzTf9f/3+QVLX/fxa//1//v4H+v/7/IK9f/1//n+76rf8fc/90mEkm+R8AAAByEHP/pjAT+R8AAAAqI+b+zWEm8j8AAABURsz9W8JMMsn/+v/6//r//d3/9/v/9f/1/zvT/9f/L/T/z9iF7s8P+vr1//X/aTbc5nP91v+PuX9rmEkm+R8AAAByEHP/tjAT+R8AAAAGS+v/ubRBzP13hpnI/wAAAFAZMfffFWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu99DGMXc/7Ewk0zyv/5/1fv/Cyv1//X/9f87r1//v7f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8RZpJJ/gcAAIAcxNx/T5iJ/A8AAACVEXP/vWEm8j8AAABURsz9O8NMMsn/+v9V7//7/f/6//r/3dav/99b+v/6/53o/w9m/z9826L/f376/+NL7d/Y/y/PIf1/+lG/9f9j7r8vzCST/A8AAAA5iLn/42Em8j8AAABURsz9nwgzkf8BAACgMmLu/2SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/H8z+f6T/7/f/6//TTb/1/2Puvz/MJJP8DwAAADmIuf9TYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/gTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/ythJpnkfwAAAMhBzP0PhpnI/wAAAFAZMfd/OsxE/gcAAIDKiLn/V8NMMsn/+v/np/8/nK5f/1//X/9f/1///1zS/9f/L/T/z9iF7s8P+vr1//X/6a7f+v8x9/9amEkm+R8AAAByEHP/r4eZyP8AAABQGTH3/0aYifwPAAAAlRFz/0NhJpnkf/1/v/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/zTCTTPI/AAAA5CDm/ofDTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P/ZMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/SJhJJvkfAAAAchBz/+fCTOR/AAAAqIyY+38rzET+BwAAgMqIuf+3w0wyyf/6//r/+v/6//r/+v+9pP+/uP9fvoZdyP7/iuVsqP+/LPr/+v/6//r/dNZv/f+Y+z8fZpJJ/gcAAIAcxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/2iYSSb5X/9f/1//X/9f/1//v5f0//3+/070//X/B3n9+v/6/3TXb/3/mPu/EGaSSf4HAACAHMTc/3thJvI/AAAAVEbM/bvCTOR/AAAAqIyY+x8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP27w0wyyf8AAACQg5j7vxhmIv8DAABAZcTcvyfMRP4HAACAyoi5f2+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu7fF2Yi/wMAAEBlxNy/P8xE/gcAAIDKiLn/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyDMJJP8DwAAADmIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/GGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7D4WZZJL/AQAAIAcx9x8OM5H/AQAAoDJi7j8SZiL/AwAAQGXE3H80zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/7EwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/rkwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3H88zCST/A8AAAA5iLn/iTAT+R8AAAAqI+b+J8NM5H8AAAD4P/buM9eus4rj8AnGgIQQY2EEDIEx8Ikp0HsLvfcSeu+919B7771DIPQqBcFda124iff2Pfbxefe7nufLErZlXrBA+cv6aU8jd/+945Ym+1//r//X/5/2/zfc6+THj9T/n3R++n/9v/7/XPT/+v+d/n9vx+7nt/5+/b/+n3Wj9f+5++8TtzTZ/wAAANBB7v77xi32PwAAAEwjd//94hb7HwAAAKaRu//+cUuT/a//1//r/33/X/+v/z8k/b/+f4n+X/+/5ffr//X/rBut/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBq5+x8Ut9j/AAAAMI3c/Q+OW5rsf/2//l//r//X/+v/D0n/r/9fov/X/2/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/w+OWJvtf/6//1//r//X/+v9D0v/r/5fo//X/W36//l//z7rR+v/c/Y+IW5rsfwAAAOggd/8j4xb7HwAAAKaRu/9RcYv9DwAAANPI3f/ouKXJ/tf/6//1//p//b/+/5D0//r/Jfp//f+W36//1/+z7uD9/z2u/++93P4/d//1cUuT/Q8AAAAd5O5/TNxi/wMAAMA0cvc/Nm6x/wEAAGAaufsfF7c02f/6f/3/af9/y3X6f/2//v/0x/X/V4f+X/+/RP8/av9/ef9N6P/1//p/1hy8/1/p/c/+69z9j49bmux/AAAA6CB3/xPiFvsfAAAAppG7/4lxi/0PAAAA08jd/6S4pcn+1//r/33//8bKz/X/+n/9/9Wn/9f/L9H/j9r/+/7/lfb/d7+M95/2///553D9P3Marf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/5f/+/7//p//f8h6f/1/0v0//r/Lb/f9//1/6wbrf/P3f/0uKXJ/gcAAIAOcvc/I26x/wEAAGAaufufGbfY/wAAADCN3P3Pilua7H/9v/5f/6//v6L+/4L+X/+/TP+v/1+i/9f/b/n9+n/9P+tG6/9z9z87bmmy/wEAAKCD3P3PiVvsfwAAAJhG7v7nxi32PwAAAEwjd//z4pYm+1//r//X/+v/ff9f/39I+v/p+v/r9P+n9P/6f/2//p9lo/X/ufufH7c02f8AAADQQe7+F8Qt9j8AAABMI3f/C+MW+x8AAACmkbv/hrilyf7X/+v/9f/6f/2//v+Q9P/T9f++//8/9P/6f/2//p9lo/X/uftfFLesDb+LKz8PAAAADCN3/4vjliZ//w8AAAAd5O5/Sdxi/wMAAMA0cve/NG5psv/1//p//b/+X/+v/z8k/b/+f4n+/7b7/ztd4t9P/z/W+/X/+n/Wjdb/5+5/WdzSZP8DAABAB7n7Xx632P8AAAAwjdz9r4hb7H8AAACYRu7+V8YtTfb/pfr/m+988vPn7P9vr//X/+v/9f9J/6//3+n/9f8r9P++/7/l9+v/9f+sG63/z93/qrilyf4HAACADnL3vzpusf8BAABgGrn7XxO32P8AAAAwjdz9r41bmux/3//X/+v/9f/6f/3/Ien/9f9L9P/6/y2/X/+v/2fdaP1/7v7XxS1N9j8AAAB0kLv/9XGL/Q8AAADTyN3/hrjF/gcAAIBp5O5/Y9zSZP/r//X/R+//b6f/T/r/+HPV/+v/z0H/r//f6f/3dux+fuvv1//r/1k3Wv+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/6f/3/0ft/3/8v+v/4c9X/6//PQf+v/9/p//d27H5+6+/X/+v/WTda/5+7/21xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+5/V9zSZP8DAABAB7n73x232P8AAAAwjdz974lb7H8AAACYRu7+98YtTfa//n/r/f89b4oX6P/1//p//f+Q9P/6/yX6f/3/lt+v/9f/s260/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy/3v0/xdv9cvm6f99/1//r//X/49N/6//X6L/1/9v+f36f/0/60br/3P3fyhuabL/AQAAoIPc/R+OW+x/AAAAmEbu/o/ELfY/AAAATCN3/0fjlib7v0f/f2sN+v/8j3Vt+/9b7qr/1/8X/b/+f6f/1/+v0P/r/7f8fv2//p91o/X/uftvjFua7H8AAADoIHf/x+IW+x8AAACmkbv/43GL/Q8AAADTyN3/ibjhbnc53pOuKf3/tP2/7//r//X/+v8h6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/GLf7+HwAAAKaRu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3NJk/+v/9f/6f/3/dP1//O9J/z8G/b/+f4n+X/+/5ffr//X/rBut/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBq5+z8ft9j/AAAAMI3c/V+IW5rsf/2//l//f9X6/4tnf3/9v+//6//1//r/Zfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2/7//r//X/h6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Grc02f8AAADQQe7+r8Ut9j8AAABMI3f/1+MW+x8AAACmkbv/G3FLk/0/c/+/9Mv0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDRy9387brH/AQAAYBq5+78TtzTZ/zP3/0v0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDRy938/brH/AQAAYBq5+38QtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/w9nfR/+v/9f/L9P/6/93+v+9Hbuf3/r79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/9+7/7+w8/3//3uP/l//f1v0//r/Jfp//f+W36//1/+zbrT+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAaeTu/3XcYv8DAADANHL3/yZuabL/9f/6f/3/UN//1//r//X/56T/1//v9P97O3Y/v/X36//1/6wbrf/P3X9T3NJk/wMAAEAHuft/G7fY/wAAADCN3P2/i1vsfwAAAJhG7v6b45Ym+1//r/+fsv+/o/5f/6//H4X+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/fdzSZP8DAABAB7n7/xC32P8AAAAwjdz9f4xb7H8AAACYRu7+P8UtTfa//l//P2X/7/v/+v+t9f8XTv8PWP9/Pvp//f9O/7+3Y/fzW3+//l//z7rR+v/c/X+OW5rsfwAAAOggd/9f4hb7HwAAAKaRu/+vcYv9DwAAANPI3f+3uKXJ/u/S/5/NSPT/J/T/+v+d/n+M/r/R9//P/nlfKf2//n+n/9/bsfv5rb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/3fp/8/S/5/Q/+v/d/p//f+B+f6//n+J/l//v+X36//1/6wbrf/P3f/vAAAA//+KYySt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000001"], 0x0) 4.016039162s ago: executing program 1 (id=1104): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d044fc20000000000010902240001000030030904ffff0803000300092109000101222c0009058103ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x20, 0xd, 0x2d, {0x2d, 0x23, "e75bcf47a88a34d2dd23ee248c36105a7e746fb14005902f6b7103bd4f114e2a603c9c403aafbecefa13e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.780572268s ago: executing program 3 (id=1107): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[], 0x1, 0x5577, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) fchown(r0, 0x0, 0x0) 2.402575631s ago: executing program 3 (id=1115): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002700)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffc, 0x101}, 0x0, 0x0, 0x80, 0x100, 0x5, 0x0, 0x6c, 0xf}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0xfd0}, {0x0}, 0x0, 0x0, 0x0, 0x2}}], 0xa0}, 0x0) 2.256390995s ago: executing program 2 (id=1116): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000040)={0x0, 0x3}) 1.987925152s ago: executing program 2 (id=1118): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.930055163s ago: executing program 0 (id=1120): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x1f, 0xc, 0x0, 0x7, "5a1c966bcd4b7448"}) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) 1.711025188s ago: executing program 1 (id=1123): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 1.676808319s ago: executing program 5 (id=1124): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) close(r0) 1.65203292s ago: executing program 1 (id=1125): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.570527062s ago: executing program 3 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 1.563416282s ago: executing program 1 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x38}}, 0x0) 1.484052394s ago: executing program 0 (id=1128): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff807000000feffff7f", 0x18) 1.483566334s ago: executing program 3 (id=1129): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0x3, 0x232, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x100) fallocate(r0, 0x1, 0x3ffd, 0x8000) 1.442467885s ago: executing program 5 (id=1130): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r0, &(0x7f00000002c0)=""/140, 0x8c) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 1.427775395s ago: executing program 1 (id=1131): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902"], 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b101, 0x0) 1.392703786s ago: executing program 0 (id=1132): r0 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600"], 0x66) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.374021517s ago: executing program 5 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.265877249s ago: executing program 3 (id=1134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) fsync(r0) 1.25178217s ago: executing program 5 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 1.20127352s ago: executing program 0 (id=1136): r0 = socket(0x1e, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 1.139168332s ago: executing program 5 (id=1137): openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x28200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40045109, 0x0) 1.138995722s ago: executing program 5 (id=1138): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir', 0x86}) 1.058696474s ago: executing program 2 (id=1139): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x1}, 0x90) 1.030029845s ago: executing program 0 (id=1140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x46b, &(0x7f0000001340)="$eJzs3MtvVNUfAPDvvdMC5fFrf4gPHmoVjY2PlhZUFi7UaOJCExM3uKxtIchADa2JECLVGFwaEvfGpYl/gSvdGHVl4lb3hoQYNqKrMXfmXubBzFDKtFOYzye57Tn3nuk53zn3zJx7D5cABtZ49iOJ2BkRv0fEaC3bXGC89uv6tQtz/1y7MJdEpfLOX0m13N/XLswVRYvX7cgzE2lE+lkS+9vUu3Tu/KnZcnnhbJ6fWj79wdTSufPPnTw9e2LhxMKZmaNHjxyefvGFmed7Euf/s7bu+3jxwN433r381tyxy+/9/G1SxN8Sxx0bqf4c71bkyUqlZ9VtBrsa0slQHxvCbSlFRNZdw9XxPxqlqHfeaLz+aV8bB6yrSq7D4ZUKcA9Lot8tAPqj+KLPrn+LbeNmH/139ZXaBVAW9/V8qx0ZijRqF0bDLde3vTQeEcdW/v0q26LX9yEAANr4Ppv/PNtu/pfGAw3l/pevDY3laym7I+K+iNgTEfdHVMs+GBEP3Wb9rYskN89/0itrCmyVsvnfS/naVvP8Ly2KjJXy3K5qZjg5frK8cCh/TyZieGuWn+5Sxw+v/fZFp2ON879sy+ov5oJ5O64MbW1+zfzs8uydxNzo6icR+4baxZ/cWAlIImJvROxbYx0nn/7mQKdjrfFXkm5/6eXmbA/WmSpfRzxV6/+VaIm/kHRfn5zaFuWFQ1PFWXGzX3699Han+m/d/+sr6//tbc//G/GPJY3rtUu3X8elPz7veE0zuabzv75jS/77o9nl5bPTEVuSN2uNbtw/U39tkS/KZ/FPHGw//ndH/Z3YHxEHKhfj4Yh4JCIezfvusYh4PCIOdgpwJeKnV594v9PhzdD/8y39P9ZcpKX/64kt0bqnfaJ06sfvmv9iPbm6z78j1dREvmc1n3+radfazmYAAAC4+6QRsTOSdPJGOk0nJ2v/hn9PbE/Li0vLzxxf/PDMfO0ZgbEYTos7XbX7wbX7odP5ZX2Rn2nJH87vG39ZGqnmJ+cWy/P9Dh4G3I4O4z/zZ6nfrQPWnee1YHB1G//32HOqQAvf/zC4jH8YXG3G/0g/2gFsvHbf/xfrycroRjYG2FAt49+yHwwQ1/8wuIx/GFyN47/r8/fAvWRpJG79kHwfEkOxKZpxNyS2FV25sbVHugli71UiWedRsLPfATYmiv/7s3vhPn8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Mh/AQAA//9aJenP") chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 783.327571ms ago: executing program 2 (id=1141): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="a9", 0x1}], 0x1) 548.604136ms ago: executing program 2 (id=1142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce17", 0x5) 130.450777ms ago: executing program 0 (id=1143): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d9, &(0x7f0000000580)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 13.71648ms ago: executing program 3 (id=1144): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) kexec_load(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=1145): set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) kernel console output (not intermixed with test programs): (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 92.197695][ T4923] BTRFS info (device loop2): turning on async discard [ 92.238291][ T4923] BTRFS info (device loop2): metadata ratio 4294967252 [ 92.289443][ T4923] BTRFS info (device loop2): setting nodatasum [ 92.321675][ T4923] BTRFS info (device loop2): enabling auto defrag [ 92.361828][ T4923] BTRFS info (device loop2): setting datasum [ 92.392650][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 92.409028][ T4923] BTRFS info (device loop2): using free space tree [ 92.461807][ T4923] BTRFS info (device loop2): has skinny extents [ 92.464745][ T154] team0 (unregistering): Port device team_slave_1 removed [ 92.585702][ T4895] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=38d380e8, run fsck to fix. [ 92.639258][ T154] team0 (unregistering): Port device team_slave_0 removed [ 92.780093][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.798091][ T4923] BTRFS info (device loop2): enabling ssd optimizations [ 92.826837][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.896419][ T4923] BTRFS info (device loop2): checking UUID tree [ 93.194942][ T154] bond0 (unregistering): Released all slaves [ 93.224118][ T4971] set_capacity_and_notify: 3 callbacks suppressed [ 93.224133][ T4971] loop1: detected capacity change from 0 to 4096 [ 93.415013][ T4974] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.895807][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 93.941715][ T4806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.983277][ T4968] loop0: detected capacity change from 0 to 32768 [ 94.003669][ T4968] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.285 (4968) [ 94.034867][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.062333][ T4806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.098962][ T4806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.108928][ T4806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.141449][ T4968] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 94.150310][ T4968] BTRFS info (device loop0): enabling ssd optimizations [ 94.234998][ T4968] BTRFS info (device loop0): not using ssd optimizations [ 94.270606][ T4968] BTRFS info (device loop0): turning off barriers [ 94.277092][ T4968] BTRFS info (device loop0): using free space tree [ 94.370695][ T4968] BTRFS info (device loop0): has skinny extents [ 94.401020][ T23] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.411656][ T23] usb 4-1: config 0 has no interface number 0 [ 94.417911][ T23] usb 4-1: config 0 interface 41 has no altsetting 0 [ 94.434259][ T4806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.448079][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.497955][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.565665][ T4806] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.580814][ T23] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.595237][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.602867][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.621251][ T23] usb 4-1: Product: syz [ 94.625626][ T23] usb 4-1: Manufacturer: syz [ 94.630255][ T23] usb 4-1: SerialNumber: syz [ 94.644245][ T23] usb 4-1: config 0 descriptor?? [ 94.651320][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.690033][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.697237][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.856363][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.913470][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.964374][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.991233][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.998369][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.027037][ T4369] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (4369) [ 95.039487][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.056460][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.124395][ T23] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 95.138192][ T23] CoreChips: probe of 4-1:0.41 failed with error -71 [ 95.148989][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.167832][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.180030][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.190421][ T23] usb 4-1: USB disconnect, device number 3 [ 95.364271][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.380030][ T5051] netlink: 'syz.0.297': attribute type 11 has an invalid length. [ 95.383475][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.431389][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.461756][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.489709][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.533476][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.541348][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 95.940907][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.969425][ T7] usb 2-1: config 0 has no interface number 0 [ 95.990156][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 96.005880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.021078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.030936][ T5045] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.076414][ T4806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.150882][ T7] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 96.160222][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.198592][ T7] usb 2-1: Product: syz [ 96.213761][ T7] usb 2-1: Manufacturer: syz [ 96.218420][ T7] usb 2-1: SerialNumber: syz [ 96.261465][ T7] usb 2-1: config 0 descriptor?? [ 96.270799][ T5045] usb 4-1: Using ep0 maxpacket: 32 [ 96.278893][ T5052] loop2: detected capacity change from 0 to 40427 [ 96.303195][ T7] usb 2-1: selecting invalid altsetting 1 [ 96.322940][ T5052] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 96.329915][ T5052] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.345764][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 96.370699][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 96.390088][ T5052] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 96.436950][ T5052] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 96.470911][ T5045] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1536, setting to 1024 [ 96.501044][ T5052] F2FS-fs (loop2): invalid crc value [ 96.520688][ T5045] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 96.560483][ T5045] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 96.592498][ T5052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.601251][ T7] DVB: Unable to find symbol stv0299_attach() [ 96.666155][ T5054] loop0: detected capacity change from 0 to 32768 [ 96.684550][ T7] DVB: Unable to find symbol tda8083_attach() [ 96.694483][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 96.725117][ T7] usb 2-1: USB disconnect, device number 5 [ 96.764184][ T5045] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.795218][ T5045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.815481][ T5045] usb 4-1: Product: syz [ 96.819693][ T5045] usb 4-1: Manufacturer: syz [ 96.824785][ T5045] usb 4-1: SerialNumber: syz [ 96.875684][ T5054] XFS (loop0): Mounting V5 Filesystem [ 96.916977][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.940358][ T5052] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.951993][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.961579][ T5052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.021217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.029978][ T5052] attempt to access beyond end of device [ 97.029978][ T5052] loop2: rw=0, want=45072, limit=40427 [ 97.076863][ T5054] XFS (loop0): Ending clean mount [ 97.082523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.144642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.151898][ T5045] cdc_ncm 4-1:1.0: bind() failure [ 97.158170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.167833][ T5045] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 97.187243][ T4806] device veth0_vlan entered promiscuous mode [ 97.200064][ T4806] device veth1_vlan entered promiscuous mode [ 97.218987][ T5045] cdc_ncm 4-1:1.1: bind() failure [ 97.265194][ T5045] usb 4-1: USB disconnect, device number 4 [ 97.330512][ T4186] XFS (loop0): Unmounting Filesystem [ 97.363008][ T144] attempt to access beyond end of device [ 97.363008][ T144] loop2: rw=2049, want=40968, limit=40427 [ 97.381228][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.404858][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.462511][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.518781][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.543139][ T4806] device veth0_macvtap entered promiscuous mode [ 97.581130][ T4806] device veth1_macvtap entered promiscuous mode [ 97.656362][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.686236][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.709675][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.724685][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.746122][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.781360][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.797454][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.808439][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.828793][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.838420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.896855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.941401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.013359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.048588][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.091091][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.140596][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.196429][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.250635][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.288661][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.343748][ T4806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.385462][ T4806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.424021][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.477835][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.531778][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.559320][ T4806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.599052][ T4806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.648396][ T4806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.683154][ T4806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.869811][ T4805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.893998][ T4805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.944407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.996671][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.017583][ T5147] loop1: detected capacity change from 0 to 512 [ 99.024378][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.054122][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.124499][ T5147] EXT4-fs (loop1): Ignoring removed orlov option [ 99.165364][ T5147] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 99.230632][ T5147] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.318: corrupted in-inode xattr [ 99.254668][ T5147] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.318: couldn't read orphan inode 15 (err -117) [ 99.271702][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 99.687247][ T5173] loop3: detected capacity change from 0 to 8 [ 99.736710][ T5168] loop1: detected capacity change from 0 to 2048 [ 99.759879][ T5133] loop0: detected capacity change from 0 to 32768 [ 99.785578][ T5175] loop2: detected capacity change from 0 to 512 [ 99.793510][ T5173] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 99.852108][ T5133] XFS: attr2 mount option is deprecated. [ 99.858038][ T5133] XFS: attr2 mount option is deprecated. [ 99.869140][ T5168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.903307][ T5175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.027019][ T5175] EXT4-fs (loop2): 1 truncate cleaned up [ 100.058572][ T5156] loop5: detected capacity change from 0 to 32768 [ 100.077976][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 100.121106][ T5133] XFS (loop0): Mounting V5 Filesystem [ 100.265473][ T5156] JBD2: Ignoring recovery information on journal [ 100.392180][ T5133] XFS (loop0): Ending clean mount [ 100.403407][ T5133] XFS (loop0): Quotacheck needed: Please wait. [ 100.540463][ T5156] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 100.632810][ T5133] XFS (loop0): Quotacheck: Done. [ 100.808780][ T4186] XFS (loop0): Unmounting Filesystem [ 100.972140][ T5219] netlink: 'syz.1.335': attribute type 11 has an invalid length. [ 101.029487][ T4806] ocfs2: Unmounting device (7,5) on (node local) [ 101.099120][ T5216] loop3: detected capacity change from 0 to 4096 [ 101.273907][ T5216] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 101.422188][ T5235] loop1: detected capacity change from 0 to 512 [ 101.467895][ T5235] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.668699][ T5235] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.341: ea_inode file size=0 entry size=6 [ 101.683789][ T5235] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.341: iget: bad extra_isize 90 (inode size 256) [ 101.780830][ T5235] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.341: error while reading EA inode 11 err=-117 [ 101.879520][ T5235] EXT4-fs (loop1): 1 orphan inode deleted [ 101.896125][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpquota,errors=continue,nolazytime,bsdgroups,,errors=continue. Quota mode: writeback. [ 102.139999][ T5263] loop2: detected capacity change from 0 to 2048 [ 102.186959][ T5263] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.258920][ T5270] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.440704][ T5045] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.503257][ T5249] loop0: detected capacity change from 0 to 32768 [ 102.520700][ T4989] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.570253][ T5249] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.333 (5249) [ 102.603225][ T5252] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.667982][ T5252] lbmIODone: I/O error in JFS log [ 102.690770][ T5045] usb 6-1: Using ep0 maxpacket: 32 [ 102.697036][ T5249] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.706491][ T5252] *** Log Format Error ! *** [ 102.707179][ T5252] lmLogInit: exit(-22) [ 102.730663][ T5252] lmLogOpen: exit(-22) [ 102.760665][ T4989] usb 2-1: Using ep0 maxpacket: 32 [ 102.778583][ T5249] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.853464][ T5249] BTRFS info (device loop0): use zstd compression, level 3 [ 102.880814][ T4989] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 102.894858][ T4989] usb 2-1: config 0 has no interface number 0 [ 102.902896][ T5249] BTRFS info (device loop0): using free space tree [ 102.931687][ T5249] BTRFS info (device loop0): has skinny extents [ 102.970958][ T5045] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 102.990235][ T5045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.049570][ T5045] usb 6-1: Product: syz [ 103.060876][ T4989] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.099414][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.109675][ T5045] usb 6-1: Manufacturer: syz [ 103.147269][ T5045] usb 6-1: SerialNumber: syz [ 103.162089][ T4989] usb 2-1: Product: syz [ 103.169556][ T5249] BTRFS info (device loop0): enabling ssd optimizations [ 103.215947][ T5045] usb 6-1: config 0 descriptor?? [ 103.237561][ T4989] usb 2-1: Manufacturer: syz [ 103.247638][ T4989] usb 2-1: SerialNumber: syz [ 103.282548][ T5045] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 103.311032][ T4989] usb 2-1: config 0 descriptor?? [ 103.325721][ T5045] dvb-usb: bulk message failed: -22 (4/0) [ 103.350750][ T5045] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.382082][ T4989] smsc95xx v2.0.0 [ 103.406601][ T5045] dvb-usb: bulk message failed: -22 (5/0) [ 103.450749][ T5045] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.505757][ T5045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.537350][ T5045] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 103.575718][ T5045] usb 6-1: media controller created [ 103.654813][ T5045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.687461][ T5319] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.356: EA inode hash validation failed [ 103.719250][ T5319] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.356: corrupted inode contents [ 103.749926][ T5319] EXT4-fs (loop2): Remounting filesystem read-only [ 103.758171][ T5319] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.356: mark_inode_dirty error [ 103.775340][ T5319] EXT4-fs (loop2): Remounting filesystem read-only [ 103.790406][ T5045] usb 6-1: selecting invalid altsetting 3 [ 103.800340][ T5319] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.356: corrupted inode contents [ 103.824977][ T5045] ttusb2: set interface to alts=3 failed [ 103.858304][ T5319] EXT4-fs (loop2): Remounting filesystem read-only [ 103.887995][ T5319] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.356: mark_inode_dirty error [ 103.900844][ T5045] DVB: Unable to find symbol tda10086_attach() [ 103.907137][ T5045] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 103.934517][ T5319] EXT4-fs (loop2): Remounting filesystem read-only [ 103.949873][ T5319] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #15: comm syz.2.356: mark inode dirty (error -117) [ 103.965692][ T5045] dvb-usb: bulk message failed: -22 (4/0) [ 103.965877][ T5319] EXT4-fs (loop2): Remounting filesystem read-only [ 103.974474][ T5045] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.988701][ T5045] dvb-usb: bulk message failed: -22 (5/0) [ 103.994873][ T5319] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 104.005074][ T5045] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 104.028293][ T5319] EXT4-fs (loop2): 1 orphan inode deleted [ 104.037839][ T5045] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 104.047177][ T4989] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 104.063918][ T5319] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,acl,resgid=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000001cf3,. Quota mode: none. [ 104.095036][ T4989] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.134506][ T5045] usb 6-1: USB disconnect, device number 2 [ 104.149485][ T5329] set_capacity_and_notify: 2 callbacks suppressed [ 104.149498][ T5329] loop5: detected capacity change from 0 to 128 [ 104.160948][ T4989] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 104.185991][ T4989] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 104.201546][ T5045] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 104.215407][ T4989] usb 2-1: USB disconnect, device number 6 [ 104.362994][ T5329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 104.430949][ T5329] System zones: 1-3, 19-19, 35-36 [ 104.437153][ T5329] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 104.500130][ T5329] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.541922][ T5335] loop3: detected capacity change from 0 to 8 [ 104.814664][ T5344] loop5: detected capacity change from 0 to 2048 [ 104.964593][ T5352] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.198914][ T5363] loop5: detected capacity change from 0 to 1024 [ 105.238591][ T5363] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 105.238591][ T5363] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 105.238591][ T5363] [ 105.278999][ T5363] EXT4-fs (loop5): Ignoring removed bh option [ 105.330389][ T5363] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,noacl,lazytime,minixdf,stripe=0x0000000000000005,bh,init_itable,,errors=continue. Quota mode: none. [ 105.415709][ T5333] loop0: detected capacity change from 0 to 32768 [ 105.515350][ T5333] XFS (loop0): Mounting V5 Filesystem [ 105.644592][ T5333] XFS (loop0): Ending clean mount [ 105.721717][ T5395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.858210][ T4186] XFS (loop0): Unmounting Filesystem [ 105.991023][ T5402] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 106.048957][ T5402] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 106.059201][ T5402] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.085725][ T5402] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 106.105834][ T5402] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 106.124016][ T5406] loop1: detected capacity change from 0 to 512 [ 106.127447][ T5402] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 106.167959][ T5402] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 106.185503][ T5406] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 106.185503][ T5406] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 106.185503][ T5406] [ 106.191010][ T5402] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.241141][ T5402] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.247804][ T5402] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 106.255648][ T5406] EXT4-fs (loop1): Ignoring removed orlov option [ 106.263282][ T5402] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 106.310841][ T5402] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 106.330682][ T5402] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 106.359034][ T5406] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,orlov,,errors=continue. Quota mode: writeback. [ 106.558509][ T5384] loop3: detected capacity change from 0 to 32768 [ 106.582953][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 106.936395][ T5431] netlink: 96 bytes leftover after parsing attributes in process `syz.5.396'. [ 106.960730][ T5045] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.100557][ T5436] loop1: detected capacity change from 0 to 2048 [ 107.149415][ T5436] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 107.206315][ T5434] loop2: detected capacity change from 0 to 4096 [ 107.216414][ T5436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.330881][ T5045] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.357452][ T5434] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 107.370690][ T5045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.400723][ T5045] usb 1-1: config 0 descriptor?? [ 107.452046][ T5045] cp210x 1-1:0.0: cp210x converter detected [ 107.493687][ T5441] loop1: detected capacity change from 0 to 2048 [ 107.540170][ T5441] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 107.602041][ T5441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.660640][ T5441] UDF-fs: unknown compression code (0) [ 107.923576][ T5045] usb 1-1: cp210x converter now attached to ttyUSB0 [ 108.098863][ T5045] usb 1-1: USB disconnect, device number 5 [ 108.131611][ T5045] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.204582][ T5045] cp210x 1-1:0.0: device disconnected [ 108.468664][ T5438] jfs: Unrecognized mount option "xœìÐÏ‹qÇñ÷wæ;Z¤Xd A)t±$ðu‹p"É „¢K'A§#¡¼¥D·BWËîuYØ¿@W‹à^vÿ‰½x[Øã.ßÝ]vÙÿày]ÄÏ<Ïçæõ‹½´âÜ«vëû¯Óñê©•w¥‡£QÑä!èn_|æÇEø†f¬aч:0:|i4=«Önšÿ‹"˜q÷&w€Øêž×ô5äöÓ`rÏŸ³¸šyï¾7dYà¤q3è»d¦ï°A©ÐòØ›¿åLò®‚î0³µé¼ŸÏÊOŸ¼ôþå" or missing value [ 108.745170][ T5469] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 108.839064][ T5469] ntfs3: loop1: Failed to load $Extend. [ 109.133365][ T5485] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.160351][ T5483] set_capacity_and_notify: 3 callbacks suppressed [ 109.160366][ T5483] loop2: detected capacity change from 0 to 4096 [ 109.175986][ T5485] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.250723][ T5483] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 109.305128][ T5485] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on [ 109.362565][ T5502] loop3: detected capacity change from 0 to 512 [ 109.504084][ T5502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.526764][ T5502] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.689078][ T5502] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 109.890767][ T4229] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 110.288322][ T5537] loop1: detected capacity change from 0 to 16 [ 110.301086][ T4229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.320178][ T4229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.330928][ T5045] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.367060][ T5537] erofs: (device loop1): mounted with root inode @ nid 36. [ 110.397322][ T5537] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 110.410875][ T4229] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 110.438995][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.465510][ T4229] usb 6-1: SerialNumber: syz [ 110.508302][ T5543] loop0: detected capacity change from 0 to 128 [ 110.523605][ T4229] usb 6-1: 0:2 : does not exist [ 110.602590][ T5545] loop1: detected capacity change from 0 to 64 [ 110.625374][ T5547] loop3: detected capacity change from 0 to 128 [ 110.658809][ T4186] sysv_free_block: flc_count > flc_size [ 110.674126][ T5547] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 110.689392][ T4186] sysv_free_block: flc_count > flc_size [ 110.691551][ T5045] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 110.739613][ T5045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.743489][ T4186] sysv_free_block: flc_count > flc_size [ 110.749878][ T5547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.785488][ T4186] sysv_free_block: flc_count > flc_size [ 110.790799][ T5045] usb 3-1: config 0 descriptor?? [ 110.837501][ T4186] sysv_free_block: flc_count > flc_size [ 110.860354][ T4186] sysv_free_block: flc_count > flc_size [ 110.889250][ T4186] sysv_free_block: flc_count > flc_size [ 110.909900][ T4186] sysv_free_block: flc_count > flc_size [ 110.922201][ T4186] sysv_free_block: flc_count > flc_size [ 110.945935][ T4229] usb 6-1: USB disconnect, device number 3 [ 110.948271][ T4186] sysv_free_block: flc_count > flc_size [ 110.958940][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 111.258970][ T5560] capability: warning: `syz.0.442' uses 32-bit capabilities (legacy support in use) [ 111.283903][ T5045] wacom 0003:056A:0300.0007: unknown main item tag 0x0 [ 111.311462][ T5045] wacom 0003:056A:0300.0007: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 111.373238][ T5045] wacom 0003:056A:0300.0007: hidraw0: USB HID vf2.00 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 111.416170][ T5045] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.0007/input/input6 [ 111.505541][ T5567] loop3: detected capacity change from 0 to 1024 [ 111.534730][ T5045] usb 3-1: USB disconnect, device number 2 [ 111.600136][ T5567] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 111.616047][ T5572] loop1: detected capacity change from 0 to 2048 [ 111.709541][ T5572] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 111.751199][ T5572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.805874][ T5574] fido_id[5574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 111.850872][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.037206][ T5582] loop1: detected capacity change from 0 to 512 [ 112.081898][ T5584] netlink: 256 bytes leftover after parsing attributes in process `syz.3.454'. [ 112.109876][ T5584] netlink: 64 bytes leftover after parsing attributes in process `syz.3.454'. [ 112.119204][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 112.140048][ T5582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.190803][ T5582] EXT4-fs (loop1): 1 truncate cleaned up [ 112.225678][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 112.248725][ T23] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.270030][ T23] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.360645][ T23] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.370426][ T5596] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 112.402855][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.409657][ T23] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 112.430668][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.457443][ T23] usb 1-1: config 0 descriptor?? [ 112.537258][ T5576] loop5: detected capacity change from 0 to 32768 [ 112.669702][ T5604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 112.741307][ T5045] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.771651][ T5043] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.954145][ T23] acrux 0003:1A34:F705.0008: item fetching failed at offset 1/40 [ 112.962777][ T23] acrux 0003:1A34:F705.0008: parse failed [ 112.968550][ T23] acrux: probe of 0003:1A34:F705.0008 failed with error -22 [ 113.112122][ T5045] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.131020][ T5043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.144578][ T5043] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.166057][ T5045] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 113.179399][ T13] usb 1-1: USB disconnect, device number 6 [ 113.186516][ T5043] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 113.204216][ T5045] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 113.213764][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.222115][ T5045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.233026][ T5043] usb 3-1: config 0 descriptor?? [ 113.285230][ T5043] gspca_main: spca561-2.14.0 probing abcd:cdee [ 113.360469][ T5622] netlink: 'syz.1.471': attribute type 5 has an invalid length. [ 113.712953][ T5616] find_entry called with index = 0 [ 113.719025][ T5616] read_mapping_page failed! [ 113.755686][ T5616] ERROR: (device loop5): txCommit: [ 113.755686][ T5616] [ 113.968100][ T5626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.473 (5626) [ 113.971191][ T5043] spca561: probe of 3-1:0.0 failed with error -22 [ 113.996692][ T5043] usb 3-1: USB disconnect, device number 3 [ 114.029458][ T5637] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.475: Invalid block bitmap block 0 in block_group 0 [ 114.115743][ T5626] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 114.160868][ T5045] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 114.170162][ T5045] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9 [ 114.179904][ T5626] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.196679][ T5637] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 114.217593][ T5637] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.475: attempt to clear invalid blocks 983261 len 1 [ 114.231266][ T5626] BTRFS info (device loop1): use zstd compression, level 3 [ 114.238501][ T5626] BTRFS info (device loop1): using free space tree [ 114.262813][ T5045] input: failed to attach handler kbd to device input9, error: -5 [ 114.280934][ T5637] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.475: invalid indirect mapped block 2683928664 (level 0) [ 114.297843][ T5626] BTRFS info (device loop1): has skinny extents [ 114.320826][ T5045] usb 4-1: USB disconnect, device number 5 [ 114.336450][ T5637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.475: Invalid inode table block 0 in block_group 0 [ 114.384226][ T5637] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 114.436705][ T5637] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 114.536483][ T5637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.475: Invalid inode table block 0 in block_group 0 [ 114.598125][ T5637] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 114.700425][ T5637] EXT4-fs error (device loop0): ext4_truncate:4286: inode #13: comm syz.0.475: mark_inode_dirty error [ 114.748059][ T5670] netlink: 'syz.2.479': attribute type 3 has an invalid length. [ 114.813734][ T5637] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 114.863816][ T5626] BTRFS info (device loop1): enabling ssd optimizations [ 114.871814][ T5637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.475: Invalid inode table block 0 in block_group 0 [ 114.963050][ T5683] sp0: Synchronizing with TNC [ 114.967119][ T5637] EXT4-fs (loop0): 1 truncate cleaned up [ 115.009248][ T5688] netlink: 'syz.2.481': attribute type 21 has an invalid length. [ 115.018517][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 115.050920][ T5688] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 115.192407][ T5637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.475: Invalid inode table block 0 in block_group 0 [ 115.240605][ T5637] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 115.692398][ T5724] set_capacity_and_notify: 3 callbacks suppressed [ 115.692415][ T5724] loop3: detected capacity change from 0 to 128 [ 115.747119][ T5727] loop0: detected capacity change from 0 to 256 [ 115.841396][ T5727] exfat: Deprecated parameter 'utf8' [ 115.841458][ T5727] exfat: Deprecated parameter 'namecase' [ 115.841485][ T5727] exfat: Deprecated parameter 'namecase' [ 115.875037][ T5708] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 115.886399][ T5727] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 116.013838][ T5732] loop2: detected capacity change from 0 to 4096 [ 116.067192][ T5732] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.067271][ T5732] NILFS (loop2): mounting unchecked fs [ 116.067421][ T5732] NILFS (loop2): recovery required for readonly filesystem [ 116.067437][ T5732] NILFS (loop2): write access will be enabled during recovery [ 116.181189][ T5732] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 116.241348][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop2 [ 116.241972][ T5708] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 116.242000][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.242018][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.242040][ T5708] usb 2-1: config 1 has no interface number 0 [ 116.242078][ T5708] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.366804][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop2 [ 116.421522][ T5708] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.421555][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.421578][ T5708] usb 2-1: Product: syz [ 116.421594][ T5708] usb 2-1: Manufacturer: syz [ 116.421610][ T5708] usb 2-1: SerialNumber: syz [ 116.513863][ T5708] cdc_wdm 2-1:1.128: skipping garbage [ 116.513885][ T5708] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 116.513909][ T5708] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 116.721296][ T7] usb 2-1: USB disconnect, device number 7 [ 116.935904][ T5769] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.185865][ T5789] loop0: detected capacity change from 0 to 128 [ 117.301634][ T5789] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 117.374782][ T5789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.439886][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 117.457752][ T5804] loop1: detected capacity change from 0 to 512 [ 117.486278][ T5800] loop3: detected capacity change from 0 to 2048 [ 117.586890][ T5800] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.651437][ T5818] loop2: detected capacity change from 0 to 128 [ 117.673478][ T5819] netlink: 104 bytes leftover after parsing attributes in process `syz.0.520'. [ 117.683122][ T5804] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,abort,,errors=continue. Quota mode: writeback. [ 117.709462][ T5804] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.719994][ T5821] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.721533][ T5800] attempt to access beyond end of device [ 117.721533][ T5800] loop3: rw=524288, want=33554432, limit=2048 [ 117.893742][ T5818] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 117.983865][ T5831] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.519: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 118.000991][ T5818] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.093881][ T5831] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 118.104584][ T5818] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz.2.522: No space for directory leaf checksum. Please run e2fsck -D. [ 118.141720][ T5818] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #11: comm syz.2.522: checksumming directory block 0 [ 118.155060][ T5800] attempt to access beyond end of device [ 118.155060][ T5800] loop3: rw=0, want=33554432, limit=2048 [ 118.232738][ T5800] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 118.304832][ T5842] device bridge0 entered promiscuous mode [ 118.377838][ T5847] loop1: detected capacity change from 0 to 64 [ 118.438451][ T5847] hfs: unable to locate alternate MDB [ 118.511776][ T5847] hfs: continuing without an alternate MDB [ 118.740271][ T5868] loop2: detected capacity change from 0 to 512 [ 118.822613][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 118.834677][ T5868] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.2.538: corrupted xattr block 95 [ 118.872288][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 118.881272][ T5868] EXT4-fs (loop2): Remounting filesystem read-only [ 118.888012][ T5868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.538: bg 0: block 7: invalid block bitmap [ 118.901245][ T5871] netlink: 'syz.3.539': attribute type 14 has an invalid length. [ 118.909002][ T5871] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 118.931494][ T5868] EXT4-fs (loop2): Remounting filesystem read-only [ 118.938067][ T5868] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 118.953966][ T5868] EXT4-fs (loop2): Remounting filesystem read-only [ 118.960835][ T5868] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #11: comm syz.2.538: corrupted xattr block 95 [ 118.976549][ T5878] loop5: detected capacity change from 0 to 64 [ 119.054189][ T5868] EXT4-fs (loop2): Remounting filesystem read-only [ 119.104060][ T5868] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 119.135789][ T5868] EXT4-fs (loop2): 1 orphan inode deleted [ 119.144168][ T5868] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,errors=remount-ro,init_itable,block_validity,noquota,lazytime,. Quota mode: none. [ 119.237271][ T5868] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 119.456150][ T5902] sp0: Synchronizing with TNC [ 119.770687][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 120.320849][ T23] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 120.330022][ T23] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 120.368694][ T5951] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 120.417601][ T23] usb 4-1: Product: syz [ 120.427814][ T23] usb 4-1: Manufacturer: syz [ 120.440653][ T23] usb 4-1: SerialNumber: syz [ 120.543677][ T23] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 120.760967][ T23] vp7045: USB control message 'out' went wrong. [ 120.778138][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 120.834870][ T23] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 120.884996][ T23] usb 4-1: USB disconnect, device number 6 [ 121.153113][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 121.364610][ T5943] set_capacity_and_notify: 1 callbacks suppressed [ 121.364625][ T5943] loop0: detected capacity change from 0 to 32768 [ 121.705049][ T6004] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 121.705049][ T6004] program syz.1.581 not setting count and/or reply_len properly [ 121.821867][ T5943] XFS (loop0): Mounting V5 Filesystem [ 121.904059][ T5981] loop5: detected capacity change from 0 to 32768 [ 121.977742][ T5943] XFS (loop0): Ending clean mount [ 122.037035][ T5981] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 122.061148][ T5981] (syz.5.575,5981,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 122.190007][ T4806] ocfs2: Unmounting device (7,5) on (node local) [ 122.196634][ T4186] XFS (loop0): Unmounting Filesystem [ 122.416198][ T6020] loop3: detected capacity change from 0 to 4096 [ 122.542299][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 122.685290][ T6030] loop2: detected capacity change from 0 to 512 [ 122.800702][ T6030] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.979533][ T6030] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,data_err=abort,user_xattr,max_batch_time=0x0000000000000200,dioread_nolock,,errors=continue. Quota mode: writeback. [ 123.011477][ T6042] netlink: 72 bytes leftover after parsing attributes in process `syz.5.597'. [ 123.038398][ T6030] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.105172][ T6036] loop3: detected capacity change from 0 to 4096 [ 123.252577][ T6052] loop1: detected capacity change from 0 to 512 [ 123.285161][ T6036] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 123.340512][ T6036] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 123.367274][ T6052] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 123.401131][ T6036] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 123.427671][ T6036] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.518294][ T6036] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.536803][ T6053] loop0: detected capacity change from 0 to 8192 [ 123.588737][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.605'. [ 123.616172][ T6036] ntfs: volume version 3.1. [ 123.643276][ T6036] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 123.643620][ T6053] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.688489][ T6036] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 123.709344][ T6036] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 123.720488][ T6036] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 123.733527][ T6036] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 123.754560][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.799787][ T6053] FAT-fs (loop0): Filesystem has been set read-only [ 123.840337][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.910822][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.966392][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.022675][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.060205][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.137318][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.190391][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.235677][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.298904][ T6053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.700806][ T5708] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.725348][ T6099] loop0: detected capacity change from 0 to 16 [ 124.783484][ T6099] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 124.799669][ T4369] udevd[4369]: incorrect cramfs checksum on /dev/loop0 [ 124.810466][ T6103] loop5: detected capacity change from 0 to 8 [ 124.917032][ T4369] udevd[4369]: incorrect cramfs checksum on /dev/loop0 [ 124.966612][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 125.100951][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.139489][ T5708] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 125.169229][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.235417][ T6113] mmap: syz.3.631 (6113) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.237311][ T5708] usb 2-1: config 0 descriptor?? [ 125.459733][ T6095] loop2: detected capacity change from 0 to 32768 [ 125.562707][ T6129] device dummy0 entered promiscuous mode [ 125.592847][ T6095] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.622 (6095) [ 125.639946][ T6095] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 125.654370][ T6095] BTRFS info (device loop2): using free space tree [ 125.695563][ T6095] BTRFS info (device loop2): has skinny extents [ 125.750781][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.772566][ T5708] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x7 [ 125.779998][ T5708] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x4 [ 125.911219][ T5708] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 125.985501][ T6095] BTRFS info (device loop2): enabling ssd optimizations [ 126.030670][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 126.109918][ T5708] usb 2-1: USB disconnect, device number 8 [ 126.177357][ T1111] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 126.217978][ T1111] usb 4-1: config 252 has no interface number 0 [ 126.428884][ T1111] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 126.438361][ T6133] (syz.0.640,6133,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.448448][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.483301][ T6133] (syz.0.640,6133,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.497320][ T1111] usb 4-1: Product: syz [ 126.514390][ T1111] usb 4-1: Manufacturer: syz [ 126.527027][ T1111] usb 4-1: SerialNumber: syz [ 126.592108][ T6133] JBD2: Ignoring recovery information on journal [ 126.618823][ T6167] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 126.639261][ T1111] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 126.782438][ T6133] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.834646][ T1111] usb 4-1: USB disconnect, device number 7 [ 126.841500][ T154] usb 4-1: Failed to submit usb control message: -71 [ 126.848601][ T154] usb 4-1: unable to send the bmi data to the device: -71 [ 126.950674][ T154] usb 4-1: unable to get target info from device [ 126.960089][ T154] usb 4-1: could not get target info (-71) [ 127.000975][ T154] usb 4-1: could not probe fw (-71) [ 127.171841][ T6184] set_capacity_and_notify: 2 callbacks suppressed [ 127.171855][ T6184] loop1: detected capacity change from 0 to 736 [ 127.303224][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 127.370619][ T4232] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 127.466223][ T6188] loop3: detected capacity change from 0 to 64 [ 127.496268][ T6174] loop5: detected capacity change from 0 to 40427 [ 127.563754][ T6174] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 127.581100][ T6174] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 127.654252][ T6174] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.750895][ T4232] usb 3-1: too many endpoints for config 0 interface 0 altsetting 127: 254, using maximum allowed: 30 [ 127.787040][ T4232] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 127.854773][ T4232] usb 3-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 127.871690][ T6174] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 127.906365][ T6174] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 127.909817][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.947500][ T4232] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 127.969342][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.005153][ T6202] device dummy0 entered promiscuous mode [ 128.011824][ T4232] usb 3-1: config 0 descriptor?? [ 128.019151][ T6174] attempt to access beyond end of device [ 128.019151][ T6174] loop5: rw=2049, want=53256, limit=40427 [ 128.061398][ T6182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.192027][ T4806] attempt to access beyond end of device [ 128.192027][ T4806] loop5: rw=2049, want=40992, limit=40427 [ 128.512371][ T4232] cypress 0003:04B4:ED81.000A: ignoring exceeding usage max [ 128.551601][ T4232] cypress 0003:04B4:ED81.000A: hidraw0: USB HID v0.0c Device [HID 04b4:ed81] on usb-dummy_hcd.2-1/input0 [ 128.703525][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 128.766458][ T4232] usb 3-1: USB disconnect, device number 4 [ 128.782698][ T6240] device batadv0 entered promiscuous mode [ 128.811522][ T6240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.841981][ T6240] device batadv0 left promiscuous mode [ 128.856964][ T6236] fido_id[6236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.084360][ T6254] loop1: detected capacity change from 0 to 256 [ 129.229216][ T6264] netlink: 'syz.0.680': attribute type 3 has an invalid length. [ 129.255770][ T6257] loop5: detected capacity change from 0 to 8192 [ 129.359181][ T6257] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 129.386677][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'. [ 129.441847][ T6257] REISERFS (device loop5): using ordered data mode [ 129.448497][ T6257] reiserfs: using flush barriers [ 129.460268][ T6257] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.638048][ T6257] REISERFS (device loop5): checking transaction log (loop5) [ 129.679018][ T6278] loop2: detected capacity change from 0 to 4096 [ 129.837838][ T6290] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.032637][ T6257] REISERFS (device loop5): Using tea hash to sort names [ 130.085826][ T6257] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 130.248171][ T6307] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 130.248171][ T6307] verification time 256 usec [ 130.248171][ T6307] stack depth 0 [ 130.248171][ T6307] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 130.248171][ T6307] " or missing value [ 130.393550][ T6313] loop3: detected capacity change from 0 to 256 [ 130.571523][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.651254][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 130.805850][ T6333] loop1: detected capacity change from 0 to 64 [ 130.840605][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 130.961592][ T1111] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.969908][ T1111] usb 3-1: config 0 has no interface number 0 [ 131.167180][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.713'. [ 131.176350][ T7] Bluetooth: hci4: command 0x0411 tx timeout [ 131.182798][ T1111] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.196580][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.229815][ T1111] usb 3-1: Product: syz [ 131.239047][ T1111] usb 3-1: Manufacturer: syz [ 131.266894][ T1111] usb 3-1: SerialNumber: syz [ 131.276809][ T6348] netlink: 'syz.0.714': attribute type 46 has an invalid length. [ 131.299114][ T1111] usb 3-1: config 0 descriptor?? [ 131.352239][ T1111] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.390057][ T6352] loop5: detected capacity change from 0 to 512 [ 131.587809][ T1111] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.620977][ T1111] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.661661][ T6352] EXT4-fs (loop5): Test dummy encryption mode enabled [ 131.700251][ T6352] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.716: inode has both inline data and extents flags [ 131.724120][ T6342] loop1: detected capacity change from 0 to 32768 [ 131.731226][ T6352] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.716: couldn't read orphan inode 15 (err -117) [ 131.745606][ T6352] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 131.801239][ T6361] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 131.820795][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 131.844219][ T6361] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 131.877650][ T6342] XFS (loop1): Mounting V5 Filesystem [ 131.907533][ T6361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.966544][ T6342] XFS (loop1): Ending clean mount [ 131.989306][ T6352] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 132.004364][ T1111] usb 3-1: USB disconnect, device number 5 [ 132.030594][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 132.040235][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.068693][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.107308][ T1111] quatech2 3-1:0.51: device disconnected [ 132.148031][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 132.168951][ T4190] XFS (loop1): Unmounting Filesystem [ 132.322551][ T6385] set_capacity_and_notify: 1 callbacks suppressed [ 132.322567][ T6385] loop5: detected capacity change from 0 to 512 [ 132.369773][ T6387] loop0: detected capacity change from 0 to 1024 [ 132.402394][ T6385] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.413760][ T6385] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.447544][ T6385] EXT4-fs warning (device loop5): verify_group_input:165: Last group not full [ 132.613225][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.619631][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870709][ T6398] loop1: detected capacity change from 0 to 1024 [ 132.980358][ T6413] loop5: detected capacity change from 0 to 1024 [ 133.040939][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 133.134268][ T6398] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.248909][ T6398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.730: bg 0: block 112: padding at end of block bitmap is not set [ 133.580150][ T6417] loop3: detected capacity change from 0 to 8192 [ 133.960914][ T6426] device bridge0 entered promiscuous mode [ 133.966815][ T6426] device macvlan2 entered promiscuous mode [ 134.085841][ T6412] loop0: detected capacity change from 0 to 32768 [ 134.146891][ T6410] loop2: detected capacity change from 0 to 32768 [ 134.195520][ T6431] loop1: detected capacity change from 0 to 164 [ 134.256308][ T6412] overlayfs: upper fs needs to support d_type. [ 134.330955][ T6412] overlayfs: upper fs does not support tmpfile. [ 134.360978][ T6410] XFS (loop2): Mounting V5 Filesystem [ 134.441679][ T6412] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.532931][ T6410] XFS (loop2): Ending clean mount [ 134.594838][ T6412] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 134.594838][ T6412] [ 134.629913][ T6410] XFS (loop2): Quotacheck needed: Please wait. [ 134.677471][ T6412] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 134.690897][ T6412] overlayfs: failed to verify upper root origin [ 134.765842][ T6410] XFS (loop2): Quotacheck: Done. [ 134.789313][ T154] read_mapping_page failed! [ 134.797676][ T154] ERROR: (device loop0): txCommit: [ 134.797676][ T154] [ 134.807890][ T6447] loop1: detected capacity change from 0 to 64 [ 134.828003][ T154] jfs_write_inode: jfs_commit_inode failed! [ 134.876907][ T6447] hfs: bad catalog entry type 0 [ 134.984165][ T4193] XFS (loop2): Unmounting Filesystem [ 135.373456][ T6452] netlink: 520 bytes leftover after parsing attributes in process `syz.1.750'. [ 135.420950][ T6452] netlink: 264 bytes leftover after parsing attributes in process `syz.1.750'. [ 135.617836][ T6445] loop3: detected capacity change from 0 to 32768 [ 135.930647][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.190714][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 136.330834][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.359291][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.389800][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.650817][ T4231] usb 3-1: New USB device found, idVendor=e64c, idProduct=dfae, bcdDevice=5a.ec [ 136.662759][ T4231] usb 3-1: New USB device strings: Mfr=169, Product=153, SerialNumber=242 [ 136.700718][ T4231] usb 3-1: Product: syz [ 136.705431][ T4231] usb 3-1: Manufacturer: syz [ 136.710061][ T4231] usb 3-1: SerialNumber: syz [ 136.720754][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.731705][ T4231] usb 3-1: config 0 descriptor?? [ 136.888185][ T6483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.964487][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 137.051009][ T4231] usbhid 3-1:0.0: can't add hid device: -22 [ 137.057047][ T4231] usbhid: probe of 3-1:0.0 failed with error -22 [ 137.080756][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.080776][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.130640][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 137.264311][ T6482] (syz.3.763,6482,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.288963][ T6482] (syz.3.763,6482,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.309858][ T5331] usb 3-1: USB disconnect, device number 6 [ 137.320694][ T23] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 137.347653][ T23] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 137.360931][ T23] usb 1-1: Product: syz [ 137.365219][ T23] usb 1-1: Manufacturer: syz [ 137.382172][ T23] usb 1-1: SerialNumber: syz [ 137.397807][ T6482] JBD2: Ignoring recovery information on journal [ 137.404254][ T23] usb 1-1: config 0 descriptor?? [ 137.442409][ T23] imon_raw 1-1:0.0: IR endpoint missing [ 137.511069][ T7] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 137.548055][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.562029][ T6482] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.680844][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.694201][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 137.712466][ T7] usb 2-1: SerialNumber: syz [ 137.767506][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 137.875457][ T6498] set_capacity_and_notify: 4 callbacks suppressed [ 137.875473][ T6498] loop5: detected capacity change from 0 to 128 [ 137.898682][ T5331] usb 1-1: USB disconnect, device number 7 [ 137.963233][ T6498] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 138.023970][ T7] usb 2-1: 0:2 : does not exist [ 138.059303][ T7] usb 2-1: USB disconnect, device number 9 [ 138.107327][ T6404] Process accounting resumed [ 138.117574][ T6404] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 138.129989][ T6404] FAT-fs (loop5): Filesystem has been set read-only [ 138.152483][ T4232] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 138.271074][ T4806] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 138.313141][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.023212][ T6520] loop1: detected capacity change from 0 to 4096 [ 139.124544][ T6520] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 139.154235][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.782'. [ 139.193297][ T6520] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 139.237074][ T6520] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 139.449181][ T6537] hugetlbfs: Bad value for 'size' [ 139.554999][ T6542] loop5: detected capacity change from 0 to 512 [ 139.725953][ T6542] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.789206][ T6555] loop1: detected capacity change from 0 to 512 [ 139.799036][ T6542] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.899827][ T6559] netlink: 'syz.2.794': attribute type 3 has an invalid length. [ 140.020089][ T6555] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 140.039184][ T6555] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.218342][ T6574] loop2: detected capacity change from 0 to 4096 [ 140.324971][ T6574] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 140.377261][ T6574] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 140.494807][ T6584] loop0: detected capacity change from 0 to 8 [ 140.549292][ T4193] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 140.587239][ T4193] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 140.639433][ T6584] SQUASHFS error: Failed to read block 0x2d7: -5 [ 140.661423][ T6584] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 141.140178][ T6608] loop2: detected capacity change from 0 to 512 [ 141.172387][ T6604] loop0: detected capacity change from 0 to 4096 [ 141.229478][ T6610] loop3: detected capacity change from 0 to 4096 [ 141.284771][ T6604] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.297288][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.818: inode has both inline data and extents flags [ 141.342277][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 141.360099][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.818: couldn't read orphan inode 15 (err -117) [ 141.388123][ T6604] ntfs3: loop0: Failed to load $Extend. [ 141.458607][ T6610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.494187][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 141.983584][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'. [ 141.998163][ T6632] loop0: detected capacity change from 0 to 256 [ 142.005545][ T6629] genirq: Flags mismatch irq 32. 00000000 (comedi_parport) vs. 00000000 (virtio1-output.0) [ 142.128714][ T6632] exfat: Deprecated parameter 'namecase' [ 142.223471][ T6632] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2524ff13, utbl_chksum : 0xe619d30d) [ 142.280728][ T6642] erofs: (device loop3): mounted with root inode @ nid 36. [ 142.689355][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 142.790828][ T5697] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.870101][ T6672] EXT4-fs warning (device loop2): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 143.060765][ T5697] usb 2-1: Using ep0 maxpacket: 32 [ 143.182127][ T5697] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.197178][ T5697] usb 2-1: config 0 has no interface number 0 [ 143.267047][ T6666] set_capacity_and_notify: 2 callbacks suppressed [ 143.267062][ T6666] loop0: detected capacity change from 0 to 32768 [ 143.400792][ T5697] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.415030][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.425182][ T5697] usb 2-1: Product: syz [ 143.429394][ T5697] usb 2-1: Manufacturer: syz [ 143.434457][ T5697] usb 2-1: SerialNumber: syz [ 143.446064][ T5697] usb 2-1: config 0 descriptor?? [ 143.491627][ T6666] XFS (loop0): Mounting V5 Filesystem [ 143.504615][ T5697] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.588343][ T6666] XFS (loop0): Ending clean mount [ 143.683521][ T6701] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 143.702983][ T6671] loop5: detected capacity change from 0 to 32768 [ 143.733128][ T5697] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.764085][ T4186] XFS (loop0): Unmounting Filesystem [ 143.777466][ T6671] (syz.5.847,6671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.805299][ T5697] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 143.823668][ T6671] (syz.5.847,6671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.912158][ T6671] JBD2: Ignoring recovery information on journal [ 144.051959][ T6671] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 144.232115][ T4989] usb 2-1: USB disconnect, device number 10 [ 144.250589][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.277109][ T4989] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.333073][ T4989] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.389780][ T4989] quatech2 2-1:0.51: device disconnected [ 144.446196][ T4806] ocfs2: Unmounting device (7,5) on (node local) [ 144.690751][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.848565][ T6727] device vlan2 entered promiscuous mode [ 144.866431][ T6727] device bridge0 entered promiscuous mode [ 144.950662][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 145.006855][ T6739] block nbd5: NBD_DISCONNECT [ 145.070935][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.077608][ T23] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 145.109042][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.157316][ T23] usb 3-1: config 0 descriptor?? [ 145.518679][ T6764] loop3: detected capacity change from 0 to 512 [ 145.600677][ T6764] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.886: inode #1: comm syz.3.886: iget: illegal inode # [ 145.625102][ T6764] EXT4-fs (loop3): Remounting filesystem read-only [ 145.635261][ T6764] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.886: error while reading EA inode 1 err=-117 [ 145.657789][ T6764] EXT4-fs (loop3): Remounting filesystem read-only [ 145.665627][ T6764] EXT4-fs (loop3): 1 orphan inode deleted [ 145.672045][ T6764] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000003,norecovery,noinit_itable,dax=inode,minixdf,usrjquota=,jqfmt=vfsold,resgid=0x000000000000ee00,errors=remount-ro,noblock_validity,jqfmt=vfsv1,. Quota mode: none. [ 145.706762][ T23] waltop 0003:172F:0038.000B: unknown main item tag 0x2 [ 145.720737][ T5697] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 145.750731][ T23] waltop 0003:172F:0038.000B: unknown main item tag 0x6 [ 145.757797][ T23] waltop 0003:172F:0038.000B: ignoring exceeding usage max [ 145.789246][ T6770] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 145.802492][ T23] waltop 0003:172F:0038.000B: hidraw0: USB HID v0.81 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 145.811003][ T6770] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 145.834719][ T6770] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 145.847591][ T6770] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 145.860679][ T6770] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 145.877522][ T6770] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 145.901481][ T6770] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 145.918238][ T4231] usb 3-1: USB disconnect, device number 7 [ 145.934604][ T6770] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 145.980703][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 146.088843][ T6771] fido_id[6771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.103501][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.130853][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.186093][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 146.218781][ T6778] loop3: detected capacity change from 0 to 512 [ 146.252786][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 146.328822][ T6778] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.891: Unrecognised inode hash code 255 [ 146.360701][ T6778] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.891: Corrupt directory, running e2fsck is recommended [ 146.386154][ T6778] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 146.461610][ T6778] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.891: corrupted in-inode xattr [ 146.480821][ T5697] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 146.500711][ T6778] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.891: couldn't read orphan inode 15 (err -117) [ 146.516407][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 146.563126][ T5697] usb 6-1: Product: syz [ 146.578082][ T6778] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 146.607250][ T5697] usb 6-1: Manufacturer: syz [ 146.615786][ T5697] usb 6-1: SerialNumber: syz [ 146.654658][ T5697] usb 6-1: config 0 descriptor?? [ 146.698388][ T5697] usb 6-1: no audio or video endpoints found [ 146.906170][ T5697] usb 6-1: USB disconnect, device number 4 [ 146.963057][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 147.040713][ T4989] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.193061][ T6787] loop0: detected capacity change from 0 to 32768 [ 147.241904][ T6787] ERROR: (device loop0): dbDiscardAG: -EIO [ 147.241904][ T6787] [ 147.277442][ T6787] ERROR: (device loop0): remounting filesystem as read-only [ 147.285039][ T5331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.333817][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.905'. [ 147.410910][ T4989] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.431823][ T4989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.491308][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 147.530875][ T4989] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.540787][ T5331] usb 4-1: Using ep0 maxpacket: 16 [ 147.556226][ T4989] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.586430][ T6815] loop1: detected capacity change from 0 to 128 [ 147.586833][ T4989] usb 3-1: Manufacturer: syz [ 147.623392][ T4989] usb 3-1: config 0 descriptor?? [ 147.636951][ T6816] nbd: must specify a size in bytes for the device [ 147.661089][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.700749][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.735097][ T6815] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 147.737240][ T5331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.806836][ T5331] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.824170][ T6822] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 147.848152][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.860673][ T4989] rc_core: IR keymap rc-hauppauge not found [ 147.866642][ T4989] Registered IR keymap rc-empty [ 147.901456][ T4989] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 147.914110][ T5331] usb 4-1: config 0 descriptor?? [ 147.937752][ T4989] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 147.979972][ T4190] sysv_free_block: flc_count > flc_size [ 148.014045][ T4190] sysv_free_block: flc_count > flc_size [ 148.027569][ T6825] loop0: detected capacity change from 0 to 4096 [ 148.043423][ T6825] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 148.052647][ T4190] sysv_free_block: flc_count > flc_size [ 148.052676][ T4190] sysv_free_block: flc_count > flc_size [ 148.052703][ T4190] sysv_free_block: flc_count > flc_size [ 148.052712][ T4190] sysv_free_block: flc_count > flc_size [ 148.052721][ T4190] sysv_free_block: flc_count > flc_size [ 148.052730][ T4190] sysv_free_block: flc_count > flc_size [ 148.052739][ T4190] sysv_free_block: flc_count > flc_size [ 148.052748][ T4190] sysv_free_block: flc_count > flc_size [ 148.053502][ T4190] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 148.250648][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.394251][ T5331] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 148.426987][ T5331] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 148.457491][ T5331] microsoft 0003:045E:07DA.000C: no inputs found [ 148.466309][ T5331] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 148.510814][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 148.540007][ T5331] usb 3-1: USB disconnect, device number 8 [ 148.621281][ T5045] usb 4-1: USB disconnect, device number 8 [ 148.630870][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.652223][ T6833] fido_id[6833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/report_descriptor': No such device [ 148.678636][ T23] usb 6-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 148.685583][ T6835] loop0: detected capacity change from 0 to 4096 [ 148.688777][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.717865][ T23] usb 6-1: config 0 descriptor?? [ 148.729294][ T6835] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 148.760734][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.033890][ T6840] loop2: detected capacity change from 0 to 512 [ 149.040834][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 149.105012][ T6840] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.918: attempt to clear invalid blocks 2 len 1 [ 149.121599][ T6840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 149.141997][ T6840] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.918: invalid indirect mapped block 1819239214 (level 0) [ 149.156773][ T6840] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.918: invalid indirect mapped block 1819239214 (level 1) [ 149.179168][ T6840] EXT4-fs (loop2): 1 truncate cleaned up [ 149.183839][ T7] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 149.202376][ T6840] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 149.216257][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.230694][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.247665][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.265910][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.278319][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.297432][ T23] chicony 0003:04F2:0418.000D: unknown main item tag 0x0 [ 149.320606][ T5045] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.337058][ T23] chicony 0003:04F2:0418.000D: hidraw0: USB HID v0.03 Device [HID 04f2:0418] on usb-dummy_hcd.5-1/input0 [ 149.370932][ T7] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 149.380035][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.395209][ T7] usb 2-1: Product: syz [ 149.399433][ T7] usb 2-1: Manufacturer: syz [ 149.415115][ T7] usb 2-1: SerialNumber: syz [ 149.432911][ T7] usb 2-1: config 0 descriptor?? [ 149.448689][ T5331] usb 6-1: USB disconnect, device number 5 [ 149.474977][ T7] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 149.483445][ T7] usb 2-1: setting power ON [ 149.489456][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 149.499980][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.517831][ T6848] fido_id[6848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 149.542483][ T7] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 149.555691][ T7] usb 2-1: media controller created [ 149.570421][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.583040][ T5045] usb 1-1: Using ep0 maxpacket: 32 [ 149.593342][ T7] usb 2-1: selecting invalid altsetting 6 [ 149.599624][ T7] usb 2-1: digital interface selection failed (-22) [ 149.606461][ T7] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 149.615199][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.661502][ T7] usb 2-1: setting power OFF [ 149.667305][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 149.678851][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 149.679626][ T6830] dvb-usb: bulk message failed: -22 (3/0) [ 149.688476][ T7] (NULL device *): no alternate interface [ 149.713025][ T5045] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 149.725988][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 149.740058][ T5045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.763787][ T5045] usb 1-1: config 0 descriptor?? [ 149.768956][ T7] usb 2-1: USB disconnect, device number 11 [ 149.870766][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 150.001065][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.026823][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.038881][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.053025][ T5697] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.079378][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.095704][ T5697] usb 4-1: config 0 descriptor?? [ 150.189508][ T6857] loop2: detected capacity change from 0 to 2048 [ 150.244767][ T5045] wacom 0003:056A:0003.000E: unknown main item tag 0x6 [ 150.268432][ T6857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.281300][ T5045] wacom 0003:056A:0003.000E: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 150.299057][ T5045] wacom 0003:056A:0003.000E: hidraw0: USB HID vf0.00 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 150.341069][ T5045] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000E/input/input13 [ 150.459027][ T5045] usb 1-1: USB disconnect, device number 8 [ 150.582801][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.613305][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.627160][ T6870] loop2: detected capacity change from 0 to 256 [ 150.649487][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.658609][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.693139][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.700998][ T6870] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.718309][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.726673][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.743834][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.751325][ T6870] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 150.760014][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 150.760136][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.817490][ T6870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 150.834857][ T5697] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 150.845116][ T5697] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0 [ 150.881425][ T5697] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 150.906629][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 150.906642][ T26] audit: type=1800 audit(1784898237.725:7): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.930" name="file1" dev="loop2" ino=1048636 res=0 errno=0 [ 150.958040][ T5697] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 151.012174][ T5697] microsoft 0003:045E:07DA.000F: no inputs found [ 151.039970][ T5697] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 151.083838][ T5697] usb 4-1: USB disconnect, device number 9 [ 151.306450][ T6879] fido_id[6879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.434678][ T6863] loop5: detected capacity change from 0 to 32768 [ 151.578290][ T6863] overlayfs: upper fs needs to support d_type. [ 151.646348][ T6863] overlayfs: upper fs does not support tmpfile. [ 151.716509][ T6863] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.801587][ T6863] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 151.801587][ T6863] [ 151.872295][ T6863] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 151.885901][ T6890] loop2: detected capacity change from 0 to 65536 [ 151.899814][ T6863] overlayfs: failed to verify upper root origin [ 151.993947][ T4235] read_mapping_page failed! [ 152.010619][ T4235] ERROR: (device loop5): txCommit: [ 152.010619][ T4235] [ 152.030244][ T6877] loop0: detected capacity change from 0 to 32768 [ 152.061400][ T4235] jfs_write_inode: jfs_commit_inode failed! [ 152.079893][ T5697] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x395/0x480, xfs_sb block 0x0 [ 152.098544][ T4369] udevd[4369]: incorrect xfs checksum on /dev/loop2 [ 152.131262][ T5697] XFS (loop2): Unmount and run xfs_repair [ 152.155151][ T5697] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 152.186533][ T5697] 00000000: 58 46 53 42 00 00 04 00 00 00 00 00 00 00 80 00 XFSB............ [ 152.198468][ T5697] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.228039][ T5697] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.248785][ T4369] udevd[4369]: incorrect xfs checksum on /dev/loop2 [ 152.277186][ T5697] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 ............... [ 152.295378][ T5697] 00000040: 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 22 .......!......." [ 152.308406][ T5697] 00000050: 00 00 00 04 00 00 40 00 00 00 00 02 00 00 00 00 ......@......... [ 152.319867][ T5697] 00000060: 00 00 04 98 b4 b5 02 00 02 00 00 02 00 00 00 00 ................ [ 152.332990][ T5697] 00000070: 00 00 00 00 00 00 00 00 0a 09 09 01 0e 00 00 14 ................ [ 152.340764][ T5045] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.353050][ T6890] XFS (loop2): SB validate failed with error -74. [ 152.418925][ T6877] XFS (loop0): Mounting V5 Filesystem [ 152.449372][ T6877] XFS (loop0): Ending clean mount [ 152.647945][ T4186] XFS (loop0): Unmounting Filesystem [ 152.670800][ T5697] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.714870][ T5045] usb 2-1: Using ep0 maxpacket: 32 [ 152.830967][ T5045] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.841261][ T5045] usb 2-1: config 0 has no interface number 0 [ 152.980710][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 153.000910][ T5045] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 153.032927][ T5045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.050591][ T5045] usb 2-1: Product: syz [ 153.065084][ T5045] usb 2-1: Manufacturer: syz [ 153.070302][ T5045] usb 2-1: SerialNumber: syz [ 153.097420][ T5045] usb 2-1: config 0 descriptor?? [ 153.130944][ T5697] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 153.140373][ T5697] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 153.152779][ T5045] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 153.160158][ T5697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 153.180832][ T5045] usb 2-1: selecting invalid altsetting 1 [ 153.189427][ T5045] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 153.217707][ T5697] usb 4-1: config 1 has no interface number 0 [ 153.237212][ T5697] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.249352][ T5697] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 153.274393][ T5045] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.283376][ T5697] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 153.298891][ T5045] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 153.318548][ T5045] usb 2-1: media controller created [ 153.344812][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.357522][ T6934] loop2: detected capacity change from 0 to 4096 [ 153.365973][ T6904] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 153.390380][ T5045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.429141][ T5697] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 153.491017][ T5045] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 153.498544][ T5045] zl10353_read_register: readreg error (reg=127, ret==-71) [ 153.540867][ T5045] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 153.598211][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 153.633978][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 153.653259][ T6943] netlink: 'syz.2.959': attribute type 18 has an invalid length. [ 153.664738][ T5045] usb 2-1: USB disconnect, device number 12 [ 153.992215][ T5697] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 154.165050][ T6967] loop2: detected capacity change from 0 to 1024 [ 154.287972][ T6967] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000010,delalloc,sysvgroups,delalloc,resuid=0x0000000000000000,nouid32,inode_readahead_blks=0x0000000000020000,noauto_da_alloc,norecovery,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 154.489895][ T6956] loop0: detected capacity change from 0 to 32768 [ 154.585909][ T5045] usb 4-1: USB disconnect, device number 10 [ 154.622016][ T5045] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 154.650748][ T5331] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 154.667746][ T6986] loop1: detected capacity change from 0 to 512 [ 154.727034][ T6986] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.738043][ T6988] deleting an unspecified loop device is not supported. [ 154.757103][ T6986] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.815958][ T6986] EXT4-fs (loop1): orphan cleanup on readonly fs [ 154.837855][ T6986] Quota error (device loop1): v2_read_file_info: Block with free entry too big (5 >= 5). [ 154.884206][ T6986] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.903954][ T6986] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 154.915965][ T6986] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 154.958823][ T6986] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.977: corrupted inode contents [ 154.980896][ T6986] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.977: mark_inode_dirty error [ 154.999360][ T6986] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.977: corrupted inode contents [ 155.011553][ T6986] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.977: mark_inode_dirty error [ 155.024347][ T6986] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.977: corrupted inode contents [ 155.049982][ T6986] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 155.059011][ T6986] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.977: corrupted inode contents [ 155.086125][ T6986] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.977: mark_inode_dirty error [ 155.107313][ T6986] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 155.131037][ T6986] EXT4-fs (loop1): 1 truncate cleaned up [ 155.136730][ T6986] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=inode,noblock_validity,abort,barrier=0x0000000000000000,jqfmt=vfsv0,resgid=0x0000000000000000,delalloc,inode_readahead_blks=0x0000000000000040,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 155.163173][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.190354][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 155.217479][ T5331] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 155.230629][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.276510][ T5331] usb 6-1: Product: syz [ 155.281617][ T5331] usb 6-1: Manufacturer: syz [ 155.286342][ T5331] usb 6-1: SerialNumber: syz [ 155.356900][ T5331] usb 6-1: config 0 descriptor?? [ 155.394999][ T7002] loop3: detected capacity change from 0 to 1024 [ 155.434326][ T6986] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 155.487882][ T6986] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 155.507744][ T7002] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 155.542708][ T6986] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 155.683164][ T7] usb 6-1: USB disconnect, device number 6 [ 155.854283][ T7010] loop0: detected capacity change from 0 to 4096 [ 155.899690][ T7010] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 156.198509][ T7031] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 156.213563][ T7031] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 156.220140][ T7031] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 156.229964][ T7031] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 156.293652][ T7031] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 156.328835][ T7031] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 156.366332][ T7031] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.515881][ T7048] loop1: detected capacity change from 0 to 256 [ 156.567656][ T7051] loop0: detected capacity change from 0 to 256 [ 156.758760][ T7061] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 156.990950][ T5697] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.093644][ T5331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.370909][ T5697] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.389388][ T5697] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 157.415876][ T5697] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 157.435270][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.452321][ T5697] usb 4-1: config 0 descriptor?? [ 157.470830][ T5331] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.487855][ T5331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.510019][ T5331] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 157.519437][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.538234][ T5331] usb 1-1: config 0 descriptor?? [ 157.630642][ T4231] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 157.657604][ T7103] loop2: detected capacity change from 0 to 32768 [ 157.724810][ T7103] JBD2: Ignoring recovery information on journal [ 157.754106][ T7103] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.817193][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 158.022137][ T5331] elecom 0003:056E:00FE.0010: unknown main item tag 0x7 [ 158.029160][ T5331] elecom 0003:056E:00FE.0010: item fetching failed at offset 8/9 [ 158.037652][ T5331] elecom: probe of 0003:056E:00FE.0010 failed with error -22 [ 158.041195][ T4231] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 158.062157][ T4231] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 158.073866][ T4231] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 158.170969][ T5697] Bluetooth: Can't get version to change to load ram patch err [ 158.178594][ T5697] Bluetooth: Loading sysconfig file failed [ 158.184956][ T5697] ath3k: probe of 4-1:0.0 failed with error -71 [ 158.193446][ T4231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.204005][ T5697] usb 4-1: USB disconnect, device number 11 [ 158.210109][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.220102][ T4231] usb 2-1: SerialNumber: syz [ 158.239835][ T5331] usb 1-1: USB disconnect, device number 9 [ 158.524434][ T4231] usb 2-1: USB disconnect, device number 13 [ 158.930686][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 159.122355][ T7133] loop2: detected capacity change from 0 to 512 [ 159.241903][ T7133] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1041: attempt to clear invalid blocks 2 len 1 [ 159.261704][ T7133] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 159.300910][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.330680][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.347339][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.361417][ T7133] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1041: invalid indirect mapped block 1819239214 (level 0) [ 159.371497][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 159.395215][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.414922][ T23] usb 6-1: config 0 descriptor?? [ 159.421672][ T7133] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1041: invalid indirect mapped block 1819239214 (level 1) [ 159.448449][ T7146] loop3: detected capacity change from 0 to 1024 [ 159.493081][ T7133] EXT4-fs (loop2): 1 truncate cleaned up [ 159.507980][ T7133] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 159.545444][ T7146] hfsplus: bad catalog entry type [ 159.632864][ T4251] hfsplus: b-tree write err: -5, ino 25 [ 159.682198][ T4251] hfsplus: b-tree write err: -5, ino 4 [ 159.687805][ T4251] hfsplus: b-tree write err: -5, ino 2 [ 159.847194][ T7154] loop1: detected capacity change from 0 to 4096 [ 159.876405][ T7154] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 159.943736][ T23] wacom 0003:056A:0010.0011: unknown main item tag 0x0 [ 159.957740][ T23] wacom 0003:056A:0010.0011: unknown main item tag 0x0 [ 159.985150][ T23] wacom 0003:056A:0010.0011: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 160.034969][ T23] wacom 0003:056A:0010.0011: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 160.048747][ T7154] ntfs3: loop1: Inode r=19 is not in use! [ 160.061271][ T7154] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 160.090270][ T23] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0011/input/input16 [ 160.128756][ T7166] loop2: detected capacity change from 0 to 256 [ 160.232796][ T23] usb 6-1: USB disconnect, device number 7 [ 160.484588][ T7169] fido_id[7169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 160.517508][ T7173] loop1: detected capacity change from 0 to 4096 [ 160.529675][ T7173] ntfs3: Unknown parameter '' [ 160.611692][ T7152] loop0: detected capacity change from 0 to 40427 [ 160.630932][ T7152] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 160.663353][ T7152] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.775410][ T7152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.885032][ T7152] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.908500][ T7152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.970732][ T4232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.997192][ T4186] attempt to access beyond end of device [ 160.997192][ T4186] loop0: rw=2049, want=45104, limit=40427 [ 161.221794][ T7194] loop1: detected capacity change from 0 to 512 [ 161.229643][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 161.362084][ T7203] loop3: detected capacity change from 0 to 2048 [ 161.371704][ T7194] EXT4-fs error (device loop1): ext4_quota_enable:6444: comm syz.1.1066: inode #196608: comm syz.1.1066: iget: illegal inode # [ 161.390756][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.397406][ T4232] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 161.421289][ T7203] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.430372][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.439515][ T7194] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.1066: Bad quota inode: 196608, type: 2 [ 161.454012][ T4232] usb 3-1: config 0 descriptor?? [ 161.497106][ T7194] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix. [ 161.519978][ T7206] loop0: detected capacity change from 0 to 128 [ 161.537425][ T7194] EXT4-fs (loop1): mount failed [ 161.544261][ T7203] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 161.554126][ T7207] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.595074][ T7203] Remounting filesystem read-only [ 161.683971][ T7206] FAT-fs (loop0): Directory bread(block 162) failed [ 161.702099][ T7206] FAT-fs (loop0): Directory bread(block 163) failed [ 161.723463][ T7206] FAT-fs (loop0): Directory bread(block 164) failed [ 161.744446][ T7206] FAT-fs (loop0): Directory bread(block 165) failed [ 161.760149][ T7206] FAT-fs (loop0): Directory bread(block 166) failed [ 161.767695][ T7206] FAT-fs (loop0): Directory bread(block 167) failed [ 161.784959][ T7206] FAT-fs (loop0): Directory bread(block 168) failed [ 161.840663][ T7206] FAT-fs (loop0): Directory bread(block 169) failed [ 161.847490][ T7206] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.942856][ T4232] logitech 0003:046D:C295.0012: unknown main item tag 0x6 [ 161.960365][ T4232] logitech 0003:046D:C295.0012: ignoring exceeding usage max [ 161.989964][ T7206] FAT-fs (loop0): Directory bread(block 162) failed [ 162.023348][ T4232] logitech 0003:046D:C295.0012: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 162.048716][ T7206] FAT-fs (loop0): Directory bread(block 163) failed [ 162.090854][ T4232] logitech 0003:046D:C295.0012: no inputs found [ 162.102651][ T7206] attempt to access beyond end of device [ 162.102651][ T7206] loop0: rw=3, want=232, limit=128 [ 162.144981][ T4232] usb 3-1: USB disconnect, device number 9 [ 162.177054][ T7206] attempt to access beyond end of device [ 162.177054][ T7206] loop0: rw=2051, want=234, limit=128 [ 162.326166][ T7223] fido_id[7223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 162.819368][ T7217] loop3: detected capacity change from 0 to 32768 [ 163.028073][ T7246] loop5: detected capacity change from 0 to 8192 [ 163.169960][ T7246] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 163.227318][ T7246] REISERFS (device loop5): using ordered data mode [ 163.237367][ T7246] reiserfs: using flush barriers [ 163.320592][ T7246] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.344410][ T7259] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 163.404733][ T7259] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.480932][ T7246] REISERFS (device loop5): checking transaction log (loop5) [ 163.530755][ T7259] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 163.545717][ T7259] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.904501][ T7246] REISERFS (device loop5): Using tea hash to sort names [ 163.946837][ T7246] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 163.953286][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 163.965178][ T5045] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.210603][ T5045] usb 1-1: Using ep0 maxpacket: 16 [ 164.335989][ T5045] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 164.351662][ T5045] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.389689][ T5045] usb 1-1: config 0 has no interface number 0 [ 164.396430][ T5045] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 164.406535][ T5045] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.416767][ T5045] usb 1-1: config 0 interface 98 has no altsetting 0 [ 164.427481][ T7265] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.581111][ T5045] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 164.600637][ T5045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.608686][ T5045] usb 1-1: Product: syz [ 164.630621][ T5045] usb 1-1: Manufacturer: syz [ 164.638153][ T7290] set_capacity_and_notify: 5 callbacks suppressed [ 164.638167][ T7290] loop2: detected capacity change from 0 to 4096 [ 164.654646][ T26] audit: type=1800 audit(1784898251.475:8): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1096" name=2E02 dev="loop3" ino=17058 res=0 errno=0 [ 164.680641][ T5045] usb 1-1: SerialNumber: syz [ 164.689352][ T5045] usb 1-1: config 0 descriptor?? [ 164.711022][ T7271] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.724553][ T7271] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.740193][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 164.845157][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 164.858898][ T5331] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 164.957839][ T7271] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.975487][ T7271] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.231582][ T5331] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 165.280455][ T5331] usb 2-1: config 0 has no interface number 0 [ 165.287125][ T5331] usb 2-1: config 0 interface 255 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.327464][ T7301] loop5: detected capacity change from 0 to 512 [ 165.333416][ T5331] usb 2-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 165.375368][ T5331] usb 2-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 165.410190][ T7294] loop3: detected capacity change from 0 to 40427 [ 165.418456][ T5331] usb 2-1: config 0 interface 255 has no altsetting 0 [ 165.430929][ T7301] EXT4-fs (loop5): inline encryption not supported [ 165.440832][ T5045] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 165.451179][ T5331] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 165.467825][ T7301] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 165.467825][ T7301] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 165.467825][ T7301] [ 165.487010][ T5045] asix: probe of 1-1:0.98 failed with error -71 [ 165.494291][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.505307][ T5045] usb 1-1: USB disconnect, device number 10 [ 165.513163][ T5331] usb 2-1: config 0 descriptor?? [ 165.531860][ T7287] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 165.550838][ T7301] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.561070][ T7294] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 165.569511][ T7294] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.592137][ T7294] F2FS-fs (loop3): invalid crc value [ 165.594668][ T7301] EXT4-fs (loop5): 1 truncate cleaned up [ 165.605696][ T7301] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,nouser_xattr,jqfmt=vfsold,errors=remount-ro,. Quota mode: none. [ 165.670047][ T7294] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 165.689551][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 165.712745][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 165.728285][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 165.801533][ T7294] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.808816][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 165.816220][ T7312] loop2: detected capacity change from 0 to 256 [ 165.831634][ T7294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.849992][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 165.882973][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 165.912307][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 165.937651][ T7312] FAT-fs (loop2): Directory bread(block 64) failed [ 165.949932][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 165.955584][ T7312] FAT-fs (loop2): Directory bread(block 65) failed [ 165.966657][ T7312] FAT-fs (loop2): Directory bread(block 66) failed [ 165.975775][ T7312] FAT-fs (loop2): Directory bread(block 67) failed [ 165.982960][ T7312] FAT-fs (loop2): Directory bread(block 68) failed [ 165.990316][ T7312] FAT-fs (loop2): Directory bread(block 69) failed [ 165.997408][ T7312] FAT-fs (loop2): Directory bread(block 70) failed [ 166.004313][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 166.020371][ T7312] FAT-fs (loop2): Directory bread(block 71) failed [ 166.028500][ T7312] FAT-fs (loop2): Directory bread(block 72) failed [ 166.040423][ T7312] FAT-fs (loop2): Directory bread(block 73) failed [ 166.068917][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 166.099645][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 166.121050][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 166.127797][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 166.160892][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 166.167574][ T7301] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1110: bad extra_isize 62 (inode size 256) [ 166.194208][ T5331] usb 2-1: USB disconnect, device number 14 [ 166.213692][ T7301] EXT4-fs (loop5): Remounting filesystem read-only [ 166.214024][ T7314] loop0: detected capacity change from 0 to 2048 [ 166.289733][ T7314] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.401440][ T7317] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.402064][ T7314] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 166.431709][ T7314] Remounting filesystem read-only [ 166.447250][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'. [ 167.065569][ T7349] loop3: detected capacity change from 0 to 128 [ 167.154846][ T7355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.317965][ T7361] loop3: detected capacity change from 0 to 512 [ 167.366108][ T7361] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.401149][ T5331] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.415817][ T7361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 167.457315][ T7361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.500471][ T7373] loop0: detected capacity change from 0 to 512 [ 167.510647][ T7361] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.1134: Allocating blocks 41-42 which overlap fs metadata [ 167.530035][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.537142][ T7361] Quota error (device loop3): write_blk: dquota write failed [ 167.549545][ T7361] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.559703][ T7361] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1134: Failed to acquire dquot type 0 [ 167.577351][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.584187][ T7361] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 167.599145][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.605950][ T7361] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1134: corrupted inode contents [ 167.606115][ T7373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.621671][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.634900][ T7361] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.1134: mark_inode_dirty error [ 167.670660][ T5331] usb 2-1: Using ep0 maxpacket: 32 [ 167.707140][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.725446][ T7373] EXT4-fs error (device loop0): __ext4_iget:4919: inode #16: block 8388380: comm syz.0.1140: invalid block [ 167.739104][ T7361] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1134: corrupted inode contents [ 167.763057][ T7373] EXT4-fs (loop0): Remounting filesystem read-only [ 167.769836][ T7373] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1140: couldn't read orphan inode 16 (err -117) [ 167.790798][ T5331] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.809367][ T5331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.830645][ T5331] usb 2-1: config 0 has no interface number 0 [ 167.836917][ T5331] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.861056][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 167.870736][ T5331] usb 2-1: config 0 interface 85 has no altsetting 0 [ 167.900891][ T7373] EXT4-fs (loop0): Remounting filesystem read-only [ 167.907578][ T7373] EXT4-fs (loop0): 1 orphan inode deleted [ 167.926250][ T7361] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.1134: mark_inode_dirty error [ 167.960774][ T7373] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 167.991003][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.001227][ T7361] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1134: corrupted inode contents [ 168.040922][ T5331] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 168.060104][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.077223][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.085563][ T7361] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 168.094603][ T7373] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.1140: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 168.097821][ T5331] usb 2-1: Product: syz [ 168.127851][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.138208][ T7361] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1134: corrupted inode contents [ 168.153959][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.156823][ T5331] usb 2-1: Manufacturer: syz [ 168.165906][ T7361] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.1134: mark_inode_dirty error [ 168.175773][ T5331] usb 2-1: SerialNumber: syz [ 168.183701][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.198922][ T5331] usb 2-1: config 0 descriptor?? [ 168.201265][ T7373] EXT4-fs (loop0): Remounting filesystem read-only [ 168.205674][ T7369] loop5: detected capacity change from 0 to 32768 [ 168.220697][ T7361] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 168.236408][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.247726][ T7361] EXT4-fs (loop3): 1 truncate cleaned up [ 168.272466][ T7361] EXT4-fs (loop3): pa ffff88802324e380: logic 1, phys. 41, len 23 [ 168.272541][ T5331] appletouch 2-1:0.85: Could not find int-in endpoint [ 168.280429][ T7361] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 168.307652][ T5331] appletouch: probe of 2-1:0.85 failed with error -5 [ 168.329937][ T7369] JBD2: Ignoring recovery information on journal [ 168.337120][ T5331] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 168.375201][ T7361] EXT4-fs (loop3): Remounting filesystem read-only [ 168.382453][ T7361] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 168.520322][ T7369] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 168.548820][ T7389] loop2: detected capacity change from 0 to 1764 [ 168.569376][ T5697] usb 2-1: USB disconnect, device number 15 [ 168.686599][ T7369] [ 168.688991][ T7369] ====================================================== [ 168.696025][ T7369] WARNING: possible circular locking dependency detected [ 168.703067][ T7369] syzkaller #0 Not tainted [ 168.707501][ T7369] ------------------------------------------------------ [ 168.714532][ T7369] syz.5.1138/7369 is trying to acquire lock: [ 168.720612][ T7369] ffff888076c4d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 168.731616][ T7369] [ 168.731616][ T7369] but task is already holding lock: [ 168.738990][ T7369] ffff88805f6e3f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920 [ 168.749193][ T7369] [ 168.749193][ T7369] which lock already depends on the new lock. [ 168.749193][ T7369] [ 168.759606][ T7369] [ 168.759606][ T7369] the existing dependency chain (in reverse order) is: [ 168.768646][ T7369] [ 168.768646][ T7369] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 168.777458][ T7369] down_read+0x44/0x2e0 [ 168.782173][ T7369] ocfs2_read_virt_blocks+0x240/0x8e0 [ 168.788097][ T7369] ocfs2_find_entry+0x39d/0x1f90 [ 168.793582][ T7369] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 168.799624][ T7369] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 168.805731][ T7369] ocfs2_get_system_file_inode+0x33f/0x7f0 [ 168.812082][ T7369] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 168.818789][ T7369] ocfs2_fill_super+0x4032/0x50c0 [ 168.824359][ T7369] mount_bdev+0x28a/0x3c0 [ 168.829232][ T7369] legacy_get_tree+0xe6/0x180 [ 168.834462][ T7369] vfs_get_tree+0x88/0x270 [ 168.839417][ T7369] do_new_mount+0x247/0xa40 [ 168.844457][ T7369] __se_sys_mount+0x2e3/0x3d0 [ 168.849677][ T7369] do_syscall_64+0x4c/0xa0 [ 168.854627][ T7369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.861067][ T7369] [ 168.861067][ T7369] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 168.869445][ T7369] __lock_acquire+0x2c66/0x7b50 [ 168.874841][ T7369] lock_acquire+0x19e/0x400 [ 168.879889][ T7369] __mutex_lock_common+0x1e5/0x2400 [ 168.885634][ T7369] mutex_lock_nested+0x17/0x20 [ 168.890979][ T7369] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 168.897336][ T7369] ocfs2_reserve_suballoc_bits+0x12e/0x44b0 [ 168.903795][ T7369] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 168.910679][ T7369] ocfs2_create_refcount_tree+0x26c/0x1240 [ 168.917030][ T7369] __ocfs2_reflink+0x4b6/0x16f0 [ 168.922434][ T7369] ocfs2_reflink+0x4e4/0x920 [ 168.927576][ T7369] ocfs2_vfs_reflink+0x333/0x450 [ 168.933083][ T7369] ocfs2_reflink_ioctl+0x39c/0x440 [ 168.938727][ T7369] ocfs2_ioctl+0x586/0x7a0 [ 168.943681][ T7369] __se_sys_ioctl+0xfa/0x170 [ 168.948855][ T7369] do_syscall_64+0x4c/0xa0 [ 168.953827][ T7369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.960290][ T7369] [ 168.960290][ T7369] other info that might help us debug this: [ 168.960290][ T7369] [ 168.970537][ T7369] Possible unsafe locking scenario: [ 168.970537][ T7369] [ 168.978013][ T7369] CPU0 CPU1 [ 168.983396][ T7369] ---- ---- [ 168.988788][ T7369] lock(&ocfs2_file_ip_alloc_sem_key); [ 168.994365][ T7369] lock(&osb->system_file_mutex); [ 169.002008][ T7369] lock(&ocfs2_file_ip_alloc_sem_key); [ 169.010098][ T7369] lock(&osb->system_file_mutex); [ 169.015233][ T7369] [ 169.015233][ T7369] *** DEADLOCK *** [ 169.015233][ T7369] [ 169.023485][ T7369] 5 locks held by syz.5.1138/7369: [ 169.028609][ T7369] #0: ffff88807bd74460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 169.037875][ T7369] #1: ffff88805f5edf48 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 169.048622][ T7369] #2: ffff88805f6e42c8 (&sb->s_type->i_mutex_key#41){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2f3/0x450 [ 169.059579][ T7369] #3: ffff88805f6e3ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920 [ 169.069283][ T7369] #4: ffff88805f6e3f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920 [ 169.079949][ T7369] [ 169.079949][ T7369] stack backtrace: [ 169.085862][ T7369] CPU: 0 PID: 7369 Comm: syz.5.1138 Not tainted syzkaller #0 [ 169.093254][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.103413][ T7369] Call Trace: [ 169.106707][ T7369] [ 169.109659][ T7369] dump_stack_lvl+0x188/0x250 [ 169.114365][ T7369] ? load_image+0x410/0x410 [ 169.118898][ T7369] ? show_regs_print_info+0x20/0x20 [ 169.124167][ T7369] ? print_circular_bug+0x12b/0x1a0 [ 169.129394][ T7369] check_noncircular+0x296/0x330 [ 169.134358][ T7369] ? add_chain_block+0x9b0/0x9b0 [ 169.139340][ T7369] ? lockdep_lock+0xf1/0x1f0 [ 169.143962][ T7369] ? check_path+0x40/0x40 [ 169.148314][ T7369] ? mark_lock+0x94/0x320 [ 169.152667][ T7369] ? _find_first_zero_bit+0xd1/0xf0 [ 169.157896][ T7369] __lock_acquire+0x2c66/0x7b50 [ 169.162804][ T7369] ? check_path+0x21/0x40 [ 169.167172][ T7369] ? check_noncircular+0x189/0x330 [ 169.172313][ T7369] ? verify_lock_unused+0x140/0x140 [ 169.177538][ T7369] ? mark_lock+0x94/0x320 [ 169.181902][ T7369] ? __lock_acquire+0x13dc/0x7b50 [ 169.186966][ T7369] lock_acquire+0x19e/0x400 [ 169.191504][ T7369] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 169.197520][ T7369] ? __might_sleep+0xf0/0xf0 [ 169.202143][ T7369] ? read_lock_is_recursive+0x10/0x10 [ 169.207555][ T7369] ? check_path+0x21/0x40 [ 169.211909][ T7369] ? check_noncircular+0x189/0x330 [ 169.217050][ T7369] __mutex_lock_common+0x1e5/0x2400 [ 169.222279][ T7369] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 169.228299][ T7369] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 169.234304][ T7369] ? ocfs2_get_system_file_inode+0x14c/0x7f0 [ 169.240308][ T7369] ? mutex_lock_io_nested+0x60/0x60 [ 169.245533][ T7369] ? __rwlock_init+0x140/0x140 [ 169.250365][ T7369] ? do_raw_spin_unlock+0x11d/0x230 [ 169.255632][ T7369] mutex_lock_nested+0x17/0x20 [ 169.260437][ T7369] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 169.266281][ T7369] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 169.272292][ T7369] ? check_path+0x40/0x40 [ 169.276649][ T7369] ? verify_lock_unused+0x140/0x140 [ 169.281890][ T7369] ocfs2_reserve_suballoc_bits+0x12e/0x44b0 [ 169.287840][ T7369] ? __lock_acquire+0x7b50/0x7b50 [ 169.292899][ T7369] ? mark_lock+0x94/0x320 [ 169.297259][ T7369] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.303272][ T7369] ? lock_chain_count+0x20/0x20 [ 169.308147][ T7369] ? __rwlock_init+0x140/0x140 [ 169.312939][ T7369] ? ocfs2_block_group_search+0x470/0x470 [ 169.318708][ T7369] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 169.324634][ T7369] ? lockdep_hardirqs_on+0x94/0x140 [ 169.329858][ T7369] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 169.335780][ T7369] ? _raw_spin_unlock+0x40/0x40 [ 169.340662][ T7369] ? stack_trace_save+0xa6/0xf0 [ 169.345561][ T7369] ? stack_trace_snprint+0xe0/0xe0 [ 169.350712][ T7369] ? stack_depot_save+0x41b/0x460 [ 169.355771][ T7369] ? __kasan_kmalloc+0xc6/0xe0 [ 169.360554][ T7369] ? __kasan_kmalloc+0xaf/0xe0 [ 169.365345][ T7369] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 169.371874][ T7369] ? ocfs2_create_refcount_tree+0x26c/0x1240 [ 169.377881][ T7369] ? __ocfs2_reflink+0x4b6/0x16f0 [ 169.382932][ T7369] ? ocfs2_reflink+0x4e4/0x920 [ 169.387734][ T7369] ? ocfs2_vfs_reflink+0x333/0x450 [ 169.392864][ T7369] ? ocfs2_reflink_ioctl+0x39c/0x440 [ 169.398176][ T7369] ? ocfs2_ioctl+0x586/0x7a0 [ 169.402800][ T7369] ? __se_sys_ioctl+0xfa/0x170 [ 169.407590][ T7369] ? do_syscall_64+0x4c/0xa0 [ 169.412216][ T7369] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.418333][ T7369] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 169.424708][ T7369] ? ocfs2_init_steal_slots+0x150/0x150 [ 169.430282][ T7369] ? __lock_acquire+0x7b50/0x7b50 [ 169.435333][ T7369] ? deref_stack_reg+0xd0/0x120 [ 169.440209][ T7369] ? unwind_next_frame+0x11ec/0x1cf0 [ 169.445521][ T7369] ocfs2_create_refcount_tree+0x26c/0x1240 [ 169.451344][ T7369] ? __kernel_text_address+0x9a/0x100 [ 169.456737][ T7369] ? ocfs2_duplicate_inline_data+0x560/0x560 [ 169.462861][ T7369] ? filemap_fdatawrite_wbc+0x178/0x240 [ 169.468442][ T7369] ? filemap_fdatawrite+0xdc/0x140 [ 169.473575][ T7369] ? __filemap_fdatawrite_range+0x150/0x150 [ 169.479497][ T7369] ? lockdep_lock+0x1f0/0x1f0 [ 169.484198][ T7369] __ocfs2_reflink+0x4b6/0x16f0 [ 169.489072][ T7369] ? fsnotify_create+0x150/0x150 [ 169.494044][ T7369] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 169.500230][ T7369] ? rwsem_write_trylock+0x135/0x1c0 [ 169.505540][ T7369] ? clear_nonspinnable+0x60/0x60 [ 169.510592][ T7369] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 169.516700][ T7369] ocfs2_reflink+0x4e4/0x920 [ 169.521316][ T7369] ? ocfs2_clear_ext_refcount+0x720/0x720 [ 169.527068][ T7369] ? memset+0x1e/0x40 [ 169.531152][ T7369] ? __dquot_initialize+0x21b/0xd00 [ 169.536391][ T7369] ? rwsem_write_trylock+0x135/0x1c0 [ 169.541726][ T7369] ? dquot_initialize+0x20/0x20 [ 169.546611][ T7369] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 169.551585][ T7369] ocfs2_vfs_reflink+0x333/0x450 [ 169.556546][ T7369] ocfs2_reflink_ioctl+0x39c/0x440 [ 169.561709][ T7369] ? ocfs2_add_refcount_flag+0xe10/0xe10 [ 169.567369][ T7369] ? __lock_acquire+0x7b50/0x7b50 [ 169.572416][ T7369] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 169.578079][ T7369] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.583650][ T7369] ? __might_fault+0xb3/0x110 [ 169.588349][ T7369] ? _copy_from_user+0x111/0x170 [ 169.593313][ T7369] ocfs2_ioctl+0x586/0x7a0 [ 169.597748][ T7369] ? ocfs2_fileattr_set+0x800/0x800 [ 169.602974][ T7369] ? bpf_lsm_file_ioctl+0x5/0x10 [ 169.607922][ T7369] ? security_file_ioctl+0x7c/0xa0 [ 169.613056][ T7369] ? ocfs2_fileattr_set+0x800/0x800 [ 169.618286][ T7369] __se_sys_ioctl+0xfa/0x170 [ 169.622900][ T7369] do_syscall_64+0x4c/0xa0 [ 169.627339][ T7369] ? clear_bhb_loop+0x30/0x80 [ 169.632038][ T7369] ? clear_bhb_loop+0x30/0x80 [ 169.636756][ T7369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.642684][ T7369] RIP: 0033:0x7efdea2f6e99 [ 169.647130][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.666754][ T7369] RSP: 002b:00007efde854f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.675201][ T7369] RAX: ffffffffffffffda RBX: 00007efdea57efa0 RCX: 00007efdea2f6e99 [ 169.683184][ T7369] RDX: 00002000000001c0 RSI: 0000000040186f04 RDI: 0000000000000004 [ 169.691173][ T7369] RBP: 00007efdea38ceaf R08: 0000000000000000 R09: 0000000000000000 [ 169.699158][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.707145][ T7369] R13: 00007efdea57f038 R14: 00007efdea57efa0 R15: 00007ffd703abf68 [ 169.715141][ T7369] [ 169.718221][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.825268][ T7406] tipc: Started in network mode [ 169.830256][ T7406] tipc: Node identity , cluster identity 4711 [ 169.863353][ T7407] sp0: Synchronizing with TNC [ 169.877205][ T4806] ocfs2: Unmounting device (7,5) on (node local)