last executing test programs: 2m26.747077989s ago: executing program 2 (id=29): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300, 0x0, 0xc08e}, 0x0) 2m26.493741636s ago: executing program 2 (id=33): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="52ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m26.29288059s ago: executing program 2 (id=36): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2f, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) 2m26.082333266s ago: executing program 2 (id=37): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000940)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1255'}}]}, 0x25, 0x353, &(0x7f0000000100)="$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") syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) 2m25.231849587s ago: executing program 2 (id=46): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x7, @mcast1, 0x7f}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xae6a, 0x4) 2m24.551350084s ago: executing program 2 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a01010b0000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 2m24.29884209s ago: executing program 32 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a01010b0000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 2m10.840977639s ago: executing program 1 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff2, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m10.715418002s ago: executing program 1 (id=190): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60e7, &(0x7f0000000940)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 2m9.511673262s ago: executing program 1 (id=199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x4000000) 2m9.341753187s ago: executing program 1 (id=201): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x62a, &(0x7f0000000440)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) creat(&(0x7f0000000200)='./file0/file1\x00', 0x288) 2m8.890836898s ago: executing program 1 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) 2m8.291189043s ago: executing program 1 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40408d4) capset(0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d0009050200000000000009050c"], 0x0) 2m8.190792246s ago: executing program 33 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40408d4) capset(0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d0009050200000000000009050c"], 0x0) 5.55490329s ago: executing program 6 (id=1621): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') read$snddsp(r0, &(0x7f0000000180)=""/26, 0x1a) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) 5.393523344s ago: executing program 6 (id=1624): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x0, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) 5.382343245s ago: executing program 3 (id=1625): r0 = syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="12011e0300000020532b2300400001020301090279000301fb4004080b0201010320010904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x36, {0x36, 0x10, "9ae2d078788b6f26a33ec451922b865c1f2b404deadd9433ce8f01c7307d71cad03db52dc6a8665bf02e0363a7fe29e0bd678af7"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 5.251380688s ago: executing program 6 (id=1627): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.119686781s ago: executing program 6 (id=1637): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) 3.015775894s ago: executing program 0 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x43c5967a7b1cfbb8}) 2.860497448s ago: executing program 0 (id=1641): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x86) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, 0x0) 2.78015548s ago: executing program 3 (id=1642): syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904ff"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) 2.624414684s ago: executing program 6 (id=1645): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.59082511s ago: executing program 5 (id=1657): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 1.342436306s ago: executing program 5 (id=1659): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0xf0000, 0xc, 0x9, 0xfff, 0x5c95238c, 0xa, 0x1000, 0x802, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x7, 0x402, 0x199, 0x0, 0x4, 0xb, 0x402, 0x0, 0x3, 0xef, 0x0, 0x2a4, 0x8000003, 0xdffffffd]}) 1.163000831s ago: executing program 0 (id=1660): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 982.022705ms ago: executing program 3 (id=1662): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000019340)={&(0x7f0000019380)=[r1, r2, r1], 0x3, 0x800}) 852.108488ms ago: executing program 3 (id=1664): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="61636c2c757365725f78617474723d7265616461726f756e64122012bade200e9f61686561642c00"/55], 0x1, 0x188, &(0x7f00000003c0)="$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") sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) 723.588541ms ago: executing program 5 (id=1666): r0 = memfd_secret(0x0) ftruncate(r0, 0x9) ftruncate(r0, 0x51a9497) 645.287474ms ago: executing program 4 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) 541.207776ms ago: executing program 3 (id=1668): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 538.244476ms ago: executing program 5 (id=1669): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) 504.021327ms ago: executing program 4 (id=1670): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x2}, 0x10) connect$unix(r0, &(0x7f0000008700)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 420.231499ms ago: executing program 3 (id=1671): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 370.9621ms ago: executing program 4 (id=1672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaaaaaaaaaa000010000e"], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x8840) 322.883452ms ago: executing program 0 (id=1673): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 252.996953ms ago: executing program 0 (id=1674): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$eJzs28tO1FAcx/FfO52W4v22cWXiQjdOdZhE2ckD+ALuCFRCLGrUjcRE2fgePoY738QXgESfoOaU1qGkpy0dZ8rl+0mgh0N/55wm/NtTkhGAC+t69t2Ro2HWStP0yz1JL19I8orfV/IXtUYA85E6h0Vv41d3L9WnAJwNg9/V/YG1wH8UDZe7AHCWHawNsn3AT0f69efzxn7+NWy5fzhYc6VB/sORvC8t1W07/uX3nOx415P2j+QDlQdwvloG+n6Yf6ByPmy7/nz+5WP55aageWUy9tzs8PB+OX9J0mVJVyRdlXQtf9e6Ielmxfybx+a/03L9wCzMX9+o1FNXtk51flQTCernN9XzajuJHzct1GKY559UjNuGn+fHHecv8isd80GeH228TTatZz3vODpQz53Wf1hV300a699q+u/DWerfs9Q/gGYfPu2+Xk+S+P3JG279OebJ1nFkGuehUWwkTY+5TTenvv2P2c2bX+/X3twIT8cy7I2eb0wA5i76uPMuCrX7aHtnfSveit+MJ6vPJivjydPVKNuXR7PszgGcZtOHfrvzvXkvCAAAAAAAAAAAAAAAnNgtSbf7XgQAAACAhVjEx4n6vkYAAAAAAAAAAAAAAAAAAADgvPgbAAD//6hDOM8=") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 226.841994ms ago: executing program 4 (id=1675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) 216.826404ms ago: executing program 5 (id=1676): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x29, 0x1013, 0x1}, 0x28) 184.956245ms ago: executing program 6 (id=1677): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000180), 0x1, 0x516, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) 87.613668ms ago: executing program 4 (id=1678): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 61.118908ms ago: executing program 5 (id=1679): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 15.250669ms ago: executing program 4 (id=1680): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, &(0x7f0000000000), &(0x7f0000000240)=0x4) 0s ago: executing program 0 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x24000840) kernel console output (not intermixed with test programs): ge from 0 to 4096 [ 139.912523][ T6647] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 140.010640][ T6647] ntfs: volume version 3.1. [ 140.033274][ T6667] loop0: detected capacity change from 0 to 512 [ 140.093762][ T6662] loop5: detected capacity change from 0 to 4096 [ 140.130427][ T6662] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 140.159317][ T6647] ntfs: (device loop4): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 140.176863][ T6662] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 140.205940][ T6667] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 140.241372][ T6667] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 140.282649][ T6662] ntfs3: loop5: Failed to load $MFT. [ 140.323015][ T6667] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.739: iget: bad i_size value: 12154757448730 [ 140.421148][ T6667] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.739: couldn't read orphan inode 13 (err -117) [ 140.464530][ T6667] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 140.534357][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 140.559794][ T6662] exFAT-fs (loop5): invalid fs_name [ 140.580783][ T6683] device erspan0 entered promiscuous mode [ 140.597992][ T6662] exFAT-fs (loop5): failed to read boot sector [ 140.611284][ T6662] exFAT-fs (loop5): failed to recognize exfat type [ 140.630655][ T6667] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 140.644023][ T6683] device erspan0 left promiscuous mode [ 140.973593][ T6694] loop4: detected capacity change from 0 to 512 [ 141.103034][ T6701] loop6: detected capacity change from 0 to 256 [ 141.130267][ T6694] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.173836][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'. [ 141.500158][ T6684] loop3: detected capacity change from 0 to 32768 [ 141.655368][ T6684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.745 (6684) [ 141.745893][ T6684] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.804705][ T6684] BTRFS info (device loop3): setting nodatasum [ 141.810956][ T6684] BTRFS info (device loop3): disabling tree log [ 141.911423][ T6684] BTRFS info (device loop3): max_inline at 0 [ 141.917482][ T6684] BTRFS info (device loop3): turning on sync discard [ 142.017467][ T6684] BTRFS info (device loop3): using free space tree [ 142.052284][ T6684] BTRFS info (device loop3): has skinny extents [ 142.187179][ T6757] loop0: detected capacity change from 0 to 512 [ 142.273848][ T6757] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.766: attempt to clear invalid blocks 2 len 1 [ 142.310807][ T6757] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 142.351285][ T6684] BTRFS info (device loop3): enabling ssd optimizations [ 142.428387][ T6757] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.766: invalid indirect mapped block 1819239214 (level 0) [ 142.485927][ T6757] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.766: invalid indirect mapped block 1819239214 (level 1) [ 142.561971][ T6757] EXT4-fs (loop0): 1 truncate cleaned up [ 142.629377][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 142.789527][ T4447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4447) [ 142.944555][ T6739] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 142.944555][ T6739] [ 143.057876][ T6739] jfs_rename: dtInsert returned -EIO [ 143.783342][ T6813] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.825627][ T6813] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 143.941198][ T6554] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 144.104805][ T6827] set_capacity_and_notify: 4 callbacks suppressed [ 144.104823][ T6827] loop6: detected capacity change from 0 to 256 [ 144.119013][ T6825] netlink: 'syz.3.782': attribute type 66 has an invalid length. [ 144.164575][ T6827] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.191203][ T6554] usb 6-1: Using ep0 maxpacket: 8 [ 144.201207][ T6827] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 144.273922][ T6827] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 144.321372][ T6554] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.341371][ T6554] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.364073][ T6554] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.388882][ T6554] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.610442][ T6554] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.648847][ T6554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.678123][ T6554] usb 6-1: Product: syz [ 144.708461][ T6554] usb 6-1: Manufacturer: syz [ 144.723797][ T6554] usb 6-1: SerialNumber: syz [ 144.795049][ T6554] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 144.830543][ T6859] netlink: 224 bytes leftover after parsing attributes in process `syz.0.800'. [ 144.860346][ T6859] tipc: Started in network mode [ 144.878272][ T6859] tipc: Node identity 7f000001, cluster identity 4711 [ 144.892134][ T6859] tipc: Enabling of bearer rejected, failed to enable media [ 145.036860][ T23] usb 6-1: USB disconnect, device number 6 [ 145.140512][ T6871] loop4: detected capacity change from 0 to 512 [ 145.201037][ T6873] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.235590][ T6871] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 145.325874][ T6847] loop6: detected capacity change from 0 to 32768 [ 145.330802][ T6871] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 145.377906][ T6871] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.805: resize_inode disabled but reserved GDT blocks non-zero [ 145.435979][ T6847] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.792 (6847) [ 145.575951][ T6847] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 145.617384][ T6847] BTRFS info (device loop6): enabling ssd optimizations [ 145.652323][ T6847] BTRFS info (device loop6): not using ssd optimizations [ 145.696654][ T6847] BTRFS info (device loop6): turning off barriers [ 145.731099][ T6847] BTRFS info (device loop6): using free space tree [ 145.762253][ T6847] BTRFS info (device loop6): has skinny extents [ 145.800772][ T6896] loop4: detected capacity change from 0 to 2048 [ 145.877435][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 145.929331][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 145.965585][ T6923] loop0: detected capacity change from 0 to 1024 [ 146.008858][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.060321][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.075012][ T6923] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 146.131199][ T6923] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #32: comm syz.0.818: iget: special inode unallocated [ 146.133712][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.166003][ T6923] EXT4-fs (loop0): no journal found [ 146.181487][ T6923] EXT4-fs (loop0): can't get journal size [ 146.262842][ T6923] EXT4-fs (loop0): filesystem is read-only [ 146.268768][ T6923] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 146.337158][ T6896] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 146.345990][ T6896] UDF-fs: Scanning with blocksize 512 failed [ 146.383613][ T6946] loop3: detected capacity change from 0 to 128 [ 146.401416][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.457488][ T6896] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 146.527721][ T6946] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.545906][ T6949] loop5: detected capacity change from 0 to 2048 [ 146.578143][ T6896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.613534][ T6946] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.668503][ T6949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.808048][ T4447] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop6 scanned by udevd (4447) [ 147.042680][ T4237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.421550][ T6243] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.655036][ T6985] loop0: detected capacity change from 0 to 512 [ 147.670711][ T6243] usb 5-1: Using ep0 maxpacket: 8 [ 147.739029][ T6987] loop5: detected capacity change from 0 to 256 [ 147.796686][ T6985] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 147.809976][ T6243] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 147.827043][ T6985] FAT-fs (loop0): Filesystem has been set read-only [ 147.850009][ T6243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.891797][ T6243] usb 5-1: config 0 descriptor?? [ 147.935770][ T6243] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 147.956032][ T6243] usb 5-1: Detected SIO [ 148.014007][ T6243] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.208235][ T6243] usb 5-1: USB disconnect, device number 5 [ 148.247575][ T6243] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.289234][ T6243] ftdi_sio 5-1:0.0: device disconnected [ 148.339660][ T6968] loop3: detected capacity change from 0 to 32768 [ 148.461347][ T6968] jfs_lookup: iget failed on inum 4 [ 148.504307][ T6999] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.566641][ T6998] SQUASHFS error: lzo decompression failed, data probably corrupt [ 148.597806][ T6998] SQUASHFS error: Failed to read block 0x91: -5 [ 148.615641][ T6998] SQUASHFS error: Unable to read metadata cache entry [8f] [ 148.646769][ T6998] SQUASHFS error: Unable to read inode 0x11f [ 148.694045][ T6965] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 148.733381][ T6965] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 148.804891][ T6965] F2FS-fs (loop6): invalid crc value [ 148.857013][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 148.908240][ T6965] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 149.081329][ T6548] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 149.090406][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 149.170690][ T6965] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 149.203828][ T6965] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 149.425091][ T4946] attempt to access beyond end of device [ 149.425091][ T4946] loop6: rw=2049, want=45104, limit=40427 [ 149.441326][ T6548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36129, setting to 64 [ 149.473841][ T7026] device wlan0 entered promiscuous mode [ 149.495349][ T7026] batman_adv: batadv0: Adding interface: wlan0 [ 149.504172][ T7026] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.569309][ T7026] batman_adv: batadv0: Interface activated: wlan0 [ 149.661336][ T6548] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 149.670440][ T6548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.711379][ T6548] usb 1-1: Product: syz [ 149.738340][ T6548] usb 1-1: Manufacturer: syz [ 149.755704][ T6548] usb 1-1: SerialNumber: syz [ 149.782236][ T6548] usb 1-1: config 0 descriptor?? [ 149.801460][ T6998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.823473][ T6548] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 149.871541][ T6548] usb 1-1: No valid video chain found. [ 150.046838][ T6548] usb 1-1: USB disconnect, device number 7 [ 150.224529][ T7041] netlink: 91 bytes leftover after parsing attributes in process `syz.4.860'. [ 150.282541][ T7022] set_capacity_and_notify: 3 callbacks suppressed [ 150.282560][ T7022] loop5: detected capacity change from 0 to 32768 [ 150.697168][ T6242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.877591][ T6548] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 150.941252][ T6242] usb 4-1: Using ep0 maxpacket: 32 [ 151.061288][ T6242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 151.075794][ T6242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 151.180526][ T7068] loop0: detected capacity change from 0 to 32768 [ 151.228165][ T7070] loop5: detected capacity change from 0 to 256 [ 151.241326][ T6548] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 151.255568][ T6242] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.286341][ T6242] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.301107][ T6548] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 151.316816][ T6242] usb 4-1: Product: syz [ 151.323282][ T6548] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.332558][ T6242] usb 4-1: Manufacturer: syz [ 151.337199][ T6242] usb 4-1: SerialNumber: syz [ 151.393572][ T6548] usb 7-1: config 0 descriptor?? [ 151.410605][ T6242] usb 4-1: config 0 descriptor?? [ 151.462265][ T6242] hub 4-1:0.0: bad descriptor, ignoring hub [ 151.478502][ T6242] hub: probe of 4-1:0.0 failed with error -5 [ 151.530348][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 151.811354][ T6242] usb 4-1: USB disconnect, device number 6 [ 151.859245][ T7086] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.881'. [ 151.876305][ T7086] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 151.879462][ T6548] kye 0003:0458:0138.0009: unknown main item tag 0x3 [ 151.908627][ T6548] kye 0003:0458:0138.0009: unexpected long global item [ 151.916530][ T6548] kye 0003:0458:0138.0009: parse failed [ 151.936329][ T6548] kye: probe of 0003:0458:0138.0009 failed with error -22 [ 152.067836][ T7095] loop5: detected capacity change from 0 to 256 [ 152.089837][ T7096] loop0: detected capacity change from 0 to 256 [ 152.095122][ T6548] usb 7-1: USB disconnect, device number 5 [ 152.252758][ T7098] netlink: 47 bytes leftover after parsing attributes in process `syz.3.888'. [ 152.268867][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.888'. [ 152.556474][ T4459] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.701374][ T6548] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.802251][ T7109] loop5: detected capacity change from 0 to 32768 [ 152.841440][ T4459] usb 1-1: Using ep0 maxpacket: 16 [ 152.941334][ T6548] usb 4-1: Using ep0 maxpacket: 8 [ 152.981450][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.010667][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.028573][ T7129] netem: change failed [ 153.043001][ T4459] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 153.061419][ T6548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.092197][ T6548] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.102667][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.125716][ T6548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.157057][ T4459] usb 1-1: config 0 descriptor?? [ 153.174510][ T6548] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.201255][ T7133] loop4: detected capacity change from 0 to 256 [ 153.371354][ T6548] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.390812][ T6548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.435213][ T6548] usb 4-1: Product: syz [ 153.439448][ T6548] usb 4-1: Manufacturer: syz [ 153.470342][ T7143] loop5: detected capacity change from 0 to 4096 [ 153.477059][ T6548] usb 4-1: SerialNumber: syz [ 153.544809][ T6548] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 153.598842][ T7143] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 153.687688][ T4459] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 153.776414][ T4413] usb 4-1: USB disconnect, device number 7 [ 153.785893][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 153.891624][ T4459] corsair 0003:1B1C:1B02.000A: Failed to get K90 initial state (error -71). [ 153.931234][ T4459] usb 1-1: USB disconnect, device number 8 [ 154.067525][ T7157] fido_id[7157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.206891][ T7156] loop5: detected capacity change from 0 to 512 [ 154.328446][ T7156] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.914: inode has both inline data and extents flags [ 154.357648][ T7156] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.914: couldn't read orphan inode 15 (err -117) [ 154.381289][ T7156] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.565751][ T7179] loop0: detected capacity change from 0 to 128 [ 155.711121][ T6242] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.767174][ T7187] loop5: detected capacity change from 0 to 32768 [ 155.882856][ T7187] XFS (loop5): Mounting V5 Filesystem [ 156.081305][ T6242] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.091594][ T7187] XFS (loop5): Ending clean mount [ 156.103930][ T6242] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.123384][ T6242] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.199430][ T7187] XFS (loop5): Quotacheck needed: Please wait. [ 156.352028][ T6242] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.385871][ T6242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.431268][ T6242] usb 7-1: Product: syz [ 156.443393][ T6242] usb 7-1: Manufacturer: syz [ 156.456159][ T6242] usb 7-1: SerialNumber: syz [ 156.483573][ T7187] XFS (loop5): Quotacheck: Done. [ 156.515154][ T6242] cdc_mbim 7-1:1.0: skipping garbage [ 156.520567][ T6242] usb 7-1: selecting invalid altsetting 1 [ 156.722458][ T6242] cdc_mbim 7-1:1.0: bind() failure [ 156.752729][ T4437] XFS (loop5): Unmounting Filesystem [ 156.768107][ T6242] usb 7-1: USB disconnect, device number 6 [ 156.807071][ T7269] loop4: detected capacity change from 0 to 512 [ 156.968527][ T7274] loop3: detected capacity change from 0 to 8 [ 157.153191][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 157.195788][ T7274] SQUASHFS error: Unable to read directory block [2c0:35] [ 157.269472][ T7269] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.961: corrupted inode contents [ 157.392806][ T7269] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.961: mark_inode_dirty error [ 157.405492][ T7281] futex_wake_op: syz.6.966 tries to shift op by 32; fix this program [ 157.471682][ T7269] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.961: corrupted inode contents [ 157.584794][ T7282] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.961: corrupted inode contents [ 157.655297][ T7282] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.961: mark_inode_dirty error [ 157.716316][ T7282] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.961: corrupted inode contents [ 157.888385][ T7300] loop0: detected capacity change from 0 to 256 [ 157.967912][ T7300] FAT-fs (loop0): Directory bread(block 64) failed [ 157.996085][ T7300] FAT-fs (loop0): Directory bread(block 65) failed [ 158.030446][ T7300] FAT-fs (loop0): Directory bread(block 66) failed [ 158.056005][ T7300] FAT-fs (loop0): Directory bread(block 67) failed [ 158.097915][ T7304] loop6: detected capacity change from 0 to 16 [ 158.114803][ T7300] FAT-fs (loop0): Directory bread(block 68) failed [ 158.135396][ T7300] FAT-fs (loop0): Directory bread(block 69) failed [ 158.157844][ T7300] FAT-fs (loop0): Directory bread(block 70) failed [ 158.196249][ T7304] erofs: (device loop6): mounted with root inode @ nid 36. [ 158.211198][ T7300] FAT-fs (loop0): Directory bread(block 71) failed [ 158.232028][ T7304] attempt to access beyond end of device [ 158.232028][ T7304] loop6: rw=0, want=34225530880, limit=16 [ 158.256683][ T7300] FAT-fs (loop0): Directory bread(block 72) failed [ 158.322221][ T7300] FAT-fs (loop0): Directory bread(block 73) failed [ 158.735856][ T7320] loop3: detected capacity change from 0 to 1024 [ 158.837865][ T7287] loop5: detected capacity change from 0 to 40427 [ 158.915585][ T7287] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 158.943650][ T7287] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.035443][ T7287] F2FS-fs (loop5): invalid crc value [ 159.086756][ T7287] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 159.175246][ T7342] loop6: detected capacity change from 0 to 256 [ 159.257923][ T7334] loop3: detected capacity change from 0 to 4096 [ 159.300957][ T7334] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 159.401207][ T7287] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.431893][ T7287] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.439917][ T7334] ntfs3: loop3: ino=5, "/" directory corrupted [ 159.484883][ T7334] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 159.564863][ T7351] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 159.656264][ T7287] F2FS-fs (loop5): Unrecognized mount option "noload" or missing value [ 159.822875][ T7359] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 159.849257][ T4402] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 160.141234][ T4402] usb 7-1: Using ep0 maxpacket: 32 [ 160.164488][ T6242] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.291322][ T4402] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 160.307854][ T4402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.334719][ T4402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.354962][ T4402] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 160.383811][ T4402] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 160.403367][ T4402] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.424444][ T6242] usb 4-1: Using ep0 maxpacket: 8 [ 160.432477][ T4402] usb 7-1: config 0 descriptor?? [ 160.476425][ T6242] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 160.573735][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.597621][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.612775][ T7370] loop5: detected capacity change from 0 to 32768 [ 160.691546][ T7370] XFS (loop5): Mounting V5 Filesystem [ 160.701920][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.737956][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.776660][ T7370] XFS (loop5): Ending clean mount [ 160.843319][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.862927][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.885576][ T4437] XFS (loop5): Unmounting Filesystem [ 160.954704][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 160.968617][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 160.987307][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.991164][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.016821][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.027251][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.034130][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.057436][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.067621][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.079782][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.089789][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.099208][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.106988][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.114374][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.121783][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.128917][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.132222][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.137436][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.154131][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.161332][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.162090][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.177700][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.185057][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.192490][ T4402] uclogic 0003:5543:0005.000B: unknown main item tag 0x0 [ 161.200686][ T4402] uclogic 0003:5543:0005.000B: No inputs registered, leaving [ 161.229803][ T4402] uclogic 0003:5543:0005.000B: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.6-1/input0 [ 161.241314][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.261158][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.280988][ T7385] nbd: must specify a size in bytes for the device [ 161.281589][ T4402] usb 7-1: USB disconnect, device number 7 [ 161.351461][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.375030][ T7388] loop0: detected capacity change from 0 to 64 [ 161.397889][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.455448][ T7386] fido_id[7386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 161.511837][ T6242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.534185][ T6242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.701503][ T6242] usb 4-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 161.736007][ T6242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.764673][ T6242] usb 4-1: Product: syz [ 161.769006][ T6242] usb 4-1: Manufacturer: syz [ 161.794945][ T6242] usb 4-1: SerialNumber: syz [ 162.043977][ T7410] loop0: detected capacity change from 0 to 1024 [ 162.071423][ T4459] Bluetooth: hci2: command 0x0405 tx timeout [ 162.186885][ T6242] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 162.270191][ T6242] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 162.308510][ T6242] usb 4-1: selecting invalid altsetting 1 [ 162.329945][ T7426] binder: 7425:7426 ioctl c0306201 0 returned -14 [ 162.342475][ T6242] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 162.348975][ T6242] usb 4-1: unable to init card! (ret=-5) [ 162.401545][ T6242] snd-usb-caiaq: probe of 4-1:1.0 failed with error -5 [ 162.444076][ T6242] usb 4-1: USB disconnect, device number 8 [ 162.687161][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.761275][ T6243] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 162.910849][ T7454] loop3: detected capacity change from 0 to 512 [ 163.001502][ T7460] loop6: detected capacity change from 0 to 64 [ 163.027233][ T7454] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 163.027233][ T7454] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 163.027233][ T7454] [ 163.080141][ T7454] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.141341][ T6243] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.188075][ T6243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.197024][ T6243] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 163.198442][ T7454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 163.206676][ T6243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.231632][ T6243] usb 5-1: config 0 descriptor?? [ 163.261196][ T7472] loop5: detected capacity change from 0 to 128 [ 163.268324][ T7454] Quota error (device loop3): write_blk: dquota write failed [ 163.280137][ T7454] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 163.292222][ T7454] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1041: Failed to acquire dquot type 0 [ 163.304120][ T7472] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.367192][ T7472] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.380653][ T7454] EXT4-fs (loop3): 1 truncate cleaned up [ 163.428229][ T7454] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,noacl,noinit_itable,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 163.483163][ T7472] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 163.569593][ T7477] loop0: detected capacity change from 0 to 4096 [ 163.619561][ T7454] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 163.671477][ T7477] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 163.707463][ T7482] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma? [ 163.736235][ T6243] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 163.816607][ T7477] ntfs3: loop0: MFT: r=b, expect seq=0 instead of b! [ 164.028300][ T4402] usb 5-1: USB disconnect, device number 6 [ 164.105059][ T7494] loop5: detected capacity change from 0 to 1024 [ 164.247591][ T7494] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 164.408514][ T4459] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 164.813787][ T4459] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.851887][ T4459] usb 7-1: config 179 has no interface number 0 [ 164.871146][ T4459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 164.920286][ T4459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 18366, setting to 64 [ 164.962485][ T4459] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.014240][ T4459] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 165.044067][ T4459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.058972][ T7506] loop0: detected capacity change from 0 to 40427 [ 165.101505][ T7500] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.126050][ T7506] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 165.145365][ T7540] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.154351][ T7506] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.193615][ T7506] F2FS-fs (loop0): invalid crc value [ 165.235709][ T7546] loop3: detected capacity change from 0 to 512 [ 165.253129][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'. [ 165.262309][ T7506] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 165.339051][ T7546] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 165.383331][ T7546] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.403404][ T7546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 165.445703][ T7546] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 165.492005][ T7506] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 165.503958][ T7546] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 165.513725][ T7546] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,grpid,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 165.547938][ T7546] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1083: dx entry: limit 65535 != root limit 120 [ 165.560923][ T7506] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 165.571269][ T7546] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1083: Corrupt directory, running e2fsck is recommended [ 165.626154][ T7546] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.1083: path /246/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 165.668463][ T4459] usb 7-1: USB disconnect, device number 8 [ 165.700117][ T7551] loop4: detected capacity change from 0 to 8192 [ 165.807085][ T7551] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 165.820314][ T7551] REISERFS (device loop4): using ordered data mode [ 165.837578][ T7551] reiserfs: using flush barriers [ 165.847156][ T7551] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.870657][ T7551] REISERFS (device loop4): checking transaction log (loop4) [ 165.921266][ T7551] REISERFS (device loop4): Using r5 hash to sort names [ 165.934406][ T7551] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 166.059553][ T7556] Alternate GPT is invalid, using primary GPT. [ 166.105164][ T7556] loop3: p1 p2 p3 [ 166.381800][ T7536] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 166.388839][ T7536] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 166.427687][ T7536] F2FS-fs (loop5): invalid crc value [ 166.491810][ T7536] F2FS-fs (loop5): Found nat_bits in checkpoint [ 166.666639][ T7536] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 166.674971][ T7536] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.908786][ T7569] set_capacity_and_notify: 2 callbacks suppressed [ 166.908803][ T7569] loop0: detected capacity change from 0 to 4096 [ 166.924497][ T4437] attempt to access beyond end of device [ 166.924497][ T4437] loop5: rw=2049, want=45104, limit=40427 [ 166.986871][ T7569] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 167.219978][ T7569] ntfs3: Cannot load iocharset ck=0/ýT00°0000000000000000006 [ 167.631556][ T4459] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.672782][ T6243] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 167.841295][ T7603] loop4: detected capacity change from 0 to 4096 [ 167.859668][ T7611] loop5: detected capacity change from 0 to 128 [ 167.878241][ T7613] comedi: No check for data length of config insn id 3 is implemented [ 167.893709][ T7603] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 167.897555][ T7611] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 167.911115][ T7613] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 167.935245][ T7611] ; already mounted read-only [ 167.939996][ T7611] hpfs: filesystem error: improperly stopped [ 167.959768][ T7611] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.970844][ T7611] hpfs: You really don't want any checks? You are crazy... [ 167.992111][ T7613] comedi: Assuming n=15 is correct [ 168.016406][ T7611] hpfs: hpfs_map_sector(): read error [ 168.041532][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.044016][ T6243] usb 4-1: config 100 has an invalid interface number: 124 but max is 0 [ 168.076618][ T7611] hpfs: code page support is disabled [ 168.091319][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.101471][ T7611] hpfs: hpfs_map_4sectors(): unaligned read [ 168.109773][ T6243] usb 4-1: config 100 has no interface number 0 [ 168.126581][ T4459] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 168.136646][ T6243] usb 4-1: config 100 interface 124 has no altsetting 0 [ 168.162527][ T7611] hpfs: hpfs_map_4sectors(): unaligned read [ 168.166840][ T7616] loop6: detected capacity change from 0 to 64 [ 168.168698][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.192312][ T7611] hpfs: filesystem error: unable to find root dir [ 168.217339][ T4459] usb 1-1: config 0 descriptor?? [ 168.331227][ T6243] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 168.349388][ T6243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.404827][ T6243] usb 4-1: Product: syz [ 168.409067][ T6243] usb 4-1: Manufacturer: syz [ 168.442841][ T6243] usb 4-1: SerialNumber: syz [ 168.451866][ T4412] kernel write not supported for file /stat (pid: 4412 comm: kworker/0:15) [ 168.548030][ T7625] loop5: detected capacity change from 0 to 2048 [ 168.615097][ T4447] loop5: p3 < > [ 168.649488][ T7625] loop5: p3 < > [ 168.729677][ T4459] hid-generic 0003:5443:0042.000D: hidraw0: USB HID v10.00 Device [HID 5443:0042] on usb-dummy_hcd.0-1/input0 [ 168.823044][ T6243] idmouse 4-1:100.124: Unable to find bulk-in endpoint. [ 168.847434][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 168.888734][ T6243] usb 4-1: USB disconnect, device number 9 [ 168.914571][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 168.987190][ T4459] usb 1-1: USB disconnect, device number 9 [ 169.046204][ T7641] fido_id[7641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 169.141531][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.154966][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.246089][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.253916][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.284460][ T7652] loop5: detected capacity change from 0 to 512 [ 169.329334][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.337529][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.346624][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.398061][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.405653][ T7652] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.428729][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.435945][ T7647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.456706][ T7652] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 169.467877][ T7652] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1128: Corrupt directory, running e2fsck is recommended [ 169.503269][ T7652] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 169.527410][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.534705][ T7647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.546915][ T7661] loop4: detected capacity change from 0 to 128 [ 169.572910][ T7661] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 169.589859][ T7652] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1128: corrupted in-inode xattr [ 169.649958][ T7652] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1128: couldn't read orphan inode 15 (err -117) [ 169.681107][ T7661] hpfs: filesystem error: improperly stopped [ 169.687527][ T7661] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 169.701304][ T7652] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback. [ 169.721451][ T7661] hpfs: You really don't want any checks? You are crazy... [ 169.734658][ T7661] hpfs: Code page index out of array [ 169.740000][ T7661] hpfs: code page support is disabled [ 169.752425][ T7661] hpfs: hpfs_map_4sectors(): unaligned read [ 169.758429][ T7661] hpfs: hpfs_map_4sectors(): unaligned read [ 169.810034][ T7652] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.832195][ T7661] hpfs: filesystem error: unable to find root dir [ 169.861084][ T7652] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 169.909422][ T7652] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1128: Corrupt directory, running e2fsck is recommended [ 169.940771][ T7661] hpfs: hpfs_map_4sectors(): unaligned read [ 169.976027][ T7671] loop0: detected capacity change from 0 to 1024 [ 169.987479][ T7652] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.1128: path /182/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 170.063417][ T7652] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz.5.1128: path /182/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 170.278389][ T7677] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 170.349995][ T7677] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1137'. [ 170.676218][ T7695] loop4: detected capacity change from 0 to 1024 [ 170.765930][ T7699] loop0: detected capacity change from 0 to 512 [ 170.885923][ T7699] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1149: invalid indirect mapped block 4294967295 (level 0) [ 170.923153][ T7701] tipc: Enabling of bearer rejected, failed to enable media [ 170.965464][ T7675] (syz.3.1138,7675,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.045220][ T7699] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1149: invalid indirect mapped block 4294967295 (level 1) [ 171.091322][ T7699] EXT4-fs (loop0): 1 orphan inode deleted [ 171.097117][ T7699] EXT4-fs (loop0): 1 truncate cleaned up [ 171.142214][ T7675] (syz.3.1138,7675,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.156929][ T7699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.252419][ T7675] JBD2: Ignoring recovery information on journal [ 171.479933][ T7675] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.574385][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 171.597854][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 171.614025][ T7687] XFS (loop6): Mounting V5 Filesystem [ 171.620330][ T7723] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 171.654326][ T7687] XFS (loop6): Ending clean mount [ 171.762141][ T4946] XFS (loop6): Unmounting Filesystem [ 171.866663][ T7732] CUSE: unknown device info "" [ 171.883621][ T7732] CUSE: zero length info key specified [ 171.990092][ T7715] XFS (loop5): Mounting V5 Filesystem [ 172.211120][ T7715] XFS (loop5): Ending clean mount [ 172.224317][ T7715] XFS (loop5): Quotacheck needed: Please wait. [ 172.384696][ T7715] XFS (loop5): Quotacheck: Done. [ 172.544014][ T4437] XFS (loop5): Unmounting Filesystem [ 172.579234][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 172.771112][ T4459] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.992151][ T7769] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.043633][ T4459] usb 5-1: Using ep0 maxpacket: 16 [ 173.113041][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.138100][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.157065][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.176692][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.205461][ T7771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.222865][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.256628][ T4459] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.281741][ T4459] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.290851][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.314103][ T4459] usb 5-1: config 0 descriptor?? [ 173.444583][ T7757] set_capacity_and_notify: 3 callbacks suppressed [ 173.444599][ T7757] loop0: detected capacity change from 0 to 32768 [ 173.659657][ T7757] XFS (loop0): Mounting V5 Filesystem [ 173.806148][ T7757] XFS (loop0): Ending clean mount [ 173.814405][ T4459] microsoft 0003:045E:07DA.000E: unbalanced delimiter at end of report description [ 173.847950][ T4459] microsoft 0003:045E:07DA.000E: parse failed [ 173.860624][ T4459] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 173.942075][ T4187] XFS (loop0): Unmounting Filesystem [ 174.048683][ T4410] usb 5-1: USB disconnect, device number 7 [ 174.228476][ T7785] loop5: detected capacity change from 0 to 32768 [ 174.400411][ T7785] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 174.557700][ T7832] loop3: detected capacity change from 0 to 4096 [ 174.578978][ T4437] XFS (loop5): Unmounting Filesystem [ 174.685510][ T7832] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 174.807732][ T7832] ntfs3: loop3: failed to convert "0080" to macturkish [ 174.869802][ T7832] ntfs3: loop3: failed to convert name for inode 1e. [ 174.894046][ T7838] program syz.4.1198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.178699][ T7840] loop3: detected capacity change from 0 to 512 [ 175.421257][ T4459] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 175.437297][ T7830] loop6: detected capacity change from 0 to 32768 [ 175.570960][ T7830] XFS (loop6): Mounting V5 Filesystem [ 175.711208][ T4459] usb 5-1: Using ep0 maxpacket: 32 [ 175.817102][ T7845] loop5: detected capacity change from 0 to 32768 [ 175.841405][ T4459] usb 5-1: config 10 has an invalid interface number: 251 but max is 0 [ 175.857216][ T4459] usb 5-1: config 10 has no interface number 0 [ 175.871408][ T4459] usb 5-1: config 10 interface 251 has no altsetting 0 [ 175.883483][ T7830] XFS (loop6): Ending clean mount [ 175.916118][ T7830] XFS (loop6): Quotacheck needed: Please wait. [ 175.959485][ T7845] ialloc: diAlloc returned -5! [ 176.042546][ T275] ERROR: (device loop5): diUpdatePMap: the iag is outside the map [ 176.042546][ T275] [ 176.061750][ T7830] XFS (loop6): Quotacheck: Done. [ 176.074732][ T275] ERROR: (device loop5): remounting filesystem as read-only [ 176.082840][ T4459] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 176.102764][ T4459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.125932][ T4459] usb 5-1: Product: syz [ 176.130276][ T4459] usb 5-1: Manufacturer: syz [ 176.148213][ T4459] usb 5-1: SerialNumber: syz [ 176.246557][ T4946] XFS (loop6): Unmounting Filesystem [ 176.386995][ T7855] loop3: detected capacity change from 0 to 32768 [ 176.470905][ T7855] XFS (loop3): Mounting V5 Filesystem [ 176.513022][ T4459] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 176.539744][ T7855] XFS (loop3): Ending clean mount [ 176.551572][ T4459] gspca_sunplus: reg_r err -71 [ 176.556452][ T4459] sunplus: probe of 5-1:10.251 failed with error -71 [ 176.560624][ T7861] loop0: detected capacity change from 0 to 40427 [ 176.582709][ T4459] usb 5-1: USB disconnect, device number 8 [ 176.604562][ T7855] XFS (loop3): Quotacheck needed: Please wait. [ 176.728503][ T7855] XFS (loop3): Quotacheck: Done. [ 176.740218][ T7861] F2FS-fs (loop0): invalid crc value [ 176.793272][ T7861] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.915168][ T4200] XFS (loop3): Unmounting Filesystem [ 177.020010][ T7861] F2FS-fs (loop0): recover fsync data on readonly fs [ 177.118497][ T7861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.314046][ T4459] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 177.771535][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.801049][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 177.813043][ T4459] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 177.834858][ T7893] loop5: detected capacity change from 0 to 64 [ 177.859771][ T26] audit: type=1326 audit(30878671.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.3.1215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d99987019 code=0x0 [ 177.892073][ T4459] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 177.911085][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.937447][ T4459] usb 5-1: config 0 descriptor?? [ 177.969039][ T7893] MINIX-fs: mounting file system with errors, running fsck is recommended [ 177.982452][ T7877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.026910][ T7899] fuse: Bad value for 'fd' [ 178.047239][ T7893] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 178.078837][ T7901] loop6: detected capacity change from 0 to 256 [ 178.119413][ T7893] Trying to free block not in datazone [ 178.314083][ T7907] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 178.340034][ T7912] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1614071250 out of range (1000000..45000000) [ 178.422066][ T4459] hid (null): unknown global tag 0xa3 [ 178.461619][ T7915] loop6: detected capacity change from 0 to 256 [ 178.470958][ T4459] asus 0003:0B05:17E0.000F: unexpected long global item [ 178.488542][ T4459] asus 0003:0B05:17E0.000F: Asus hid parse failed: -22 [ 178.528085][ T7915] FAT-fs (loop6): Directory bread(block 64) failed [ 178.547258][ T4459] asus: probe of 0003:0B05:17E0.000F failed with error -22 [ 178.561178][ T7915] FAT-fs (loop6): Directory bread(block 65) failed [ 178.569632][ T7915] FAT-fs (loop6): Directory bread(block 66) failed [ 178.597314][ T7915] FAT-fs (loop6): Directory bread(block 67) failed [ 178.604366][ T6548] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 178.622163][ T7915] FAT-fs (loop6): Directory bread(block 68) failed [ 178.637352][ T7915] FAT-fs (loop6): Directory bread(block 69) failed [ 178.659543][ T6554] usb 5-1: USB disconnect, device number 9 [ 178.665870][ T7915] FAT-fs (loop6): Directory bread(block 70) failed [ 178.691430][ T7915] FAT-fs (loop6): Directory bread(block 71) failed [ 178.700138][ T7915] FAT-fs (loop6): Directory bread(block 72) failed [ 178.706941][ T7915] FAT-fs (loop6): Directory bread(block 73) failed [ 178.773159][ T7923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1228'. [ 178.807610][ T7923] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1228'. [ 178.821563][ T7925] loop3: detected capacity change from 0 to 16 [ 178.828024][ T7923] netlink: 'syz.0.1228': attribute type 5 has an invalid length. [ 178.848001][ T7923] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1228'. [ 178.861212][ T6548] usb 6-1: Using ep0 maxpacket: 16 [ 178.906326][ T7925] erofs: (device loop3): mounted with root inode @ nid 36. [ 178.972011][ T7925] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 178.981947][ T6548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.011771][ T6548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.048072][ T7925] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 179.076253][ T6548] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 179.095905][ T6548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.111326][ T7925] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 179.140897][ T6548] usb 6-1: config 0 descriptor?? [ 179.659671][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.681154][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.698301][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.711229][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.728412][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.747911][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.775996][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.796289][ T7959] loop4: detected capacity change from 0 to 64 [ 179.804134][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.824399][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.844641][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.858715][ T7936] loop6: detected capacity change from 0 to 32768 [ 179.867644][ T6548] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 179.900502][ T6548] wacom 0003:056A:0084.0010: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.5-1/input0 [ 179.929056][ T7959] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 179.995798][ T7936] (syz.6.1233,7936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.022081][ T7936] (syz.6.1233,7936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.053857][ T6548] usb 6-1: USB disconnect, device number 7 [ 180.083853][ T7936] JBD2: Ignoring recovery information on journal [ 180.201592][ T7971] fido_id[7971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 180.226164][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 180.297521][ T7936] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 180.379937][ T7977] loop4: detected capacity change from 0 to 512 [ 180.498666][ T26] audit: type=1326 audit(30878673.755:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.3.1253" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d99987019 code=0x0 [ 180.529767][ T4946] ocfs2: Unmounting device (7,6) on (node local) [ 180.706069][ T7977] EXT4-fs (loop4): Test dummy encryption mode enabled [ 180.743414][ T7995] netlink: 'syz.3.1257': attribute type 11 has an invalid length. [ 180.756187][ T7977] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1251: inode has both inline data and extents flags [ 180.785850][ T7977] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1251: couldn't read orphan inode 15 (err -117) [ 180.843701][ T7997] loop3: detected capacity change from 0 to 2048 [ 180.847490][ T7977] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 180.909568][ T7997] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 180.939774][ T8000] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.957716][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 181.677599][ T4459] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 181.731581][ T8026] netlink: 'syz.0.1271': attribute type 2 has an invalid length. [ 181.749523][ T8026] netlink: 'syz.0.1271': attribute type 8 has an invalid length. [ 181.771228][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1271'. [ 182.131536][ T4459] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.240061][ T4459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 182.250155][ T4412] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.483723][ T8058] loop0: detected capacity change from 0 to 1024 [ 182.531519][ T4459] usb 5-1: string descriptor 0 read error: -22 [ 182.537920][ T4459] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 182.548355][ T4459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.593878][ T8020] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.617931][ T4459] usb 5-1: MIDIStreaming interface descriptor not found [ 182.711932][ T8058] hfsplus: keylen 65060 too large [ 182.741741][ T8058] hfsplus: xattr search failed [ 182.845339][ T4412] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 182.861571][ T4412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.869932][ T4412] usb 4-1: Product: syz [ 182.870160][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.875507][ T4412] usb 4-1: Manufacturer: syz [ 182.901145][ T6553] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 182.907286][ T4412] usb 4-1: SerialNumber: syz [ 182.925400][ T26] audit: type=1326 audit(30878676.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.0.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff52c11b019 code=0x0 [ 182.957588][ T4412] usb 4-1: config 0 descriptor?? [ 182.970355][ T4459] usb 5-1: USB disconnect, device number 10 [ 183.066960][ T8062] loop5: detected capacity change from 0 to 32768 [ 183.145923][ T8062] XFS (loop5): Mounting V5 Filesystem [ 183.216943][ T8062] XFS (loop5): Ending clean mount [ 183.248159][ T4413] usb 4-1: USB disconnect, device number 10 [ 183.295540][ T4437] XFS (loop5): Unmounting Filesystem [ 183.301271][ T6553] usb 7-1: unable to get BOS descriptor or descriptor too short [ 183.381177][ T6553] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.397843][ T6553] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.407392][ T6553] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 183.425092][ T6553] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 183.440220][ T6553] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 183.460719][ T6553] usb 7-1: config 1 interface 1 has no altsetting 0 [ 183.701373][ T6553] usb 7-1: string descriptor 0 read error: -22 [ 183.711572][ T6553] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 183.730898][ T6553] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.765464][ T4459] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 183.968499][ T8091] loop5: detected capacity change from 0 to 2048 [ 184.002555][ T6553] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 184.017261][ T6553] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 184.042125][ T8091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.059249][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 184.076141][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 184.121368][ T6553] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 184.138948][ T6553] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 184.167474][ T4459] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 184.187956][ T4459] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 184.189325][ T6553] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 184.231462][ T6553] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 184.234790][ T4459] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.264821][ T4459] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 184.288098][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.320138][ T4459] usb 5-1: config 0 descriptor?? [ 184.341755][ T6553] usb 7-1: USB disconnect, device number 9 [ 184.604902][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.718113][ T8095] loop3: detected capacity change from 0 to 32768 [ 184.765749][ T8110] loop5: detected capacity change from 0 to 512 [ 184.829471][ T8095] XFS (loop3): Mounting V5 Filesystem [ 184.850123][ T4459] lg-g15 0003:046D:C22D.0011: ignoring exceeding usage max [ 184.872964][ T4459] lg-g15 0003:046D:C22D.0011: hidraw0: USB HID v0.0c Device [HID 046d:c22d] on usb-dummy_hcd.4-1/input0 [ 184.894685][ T8110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 184.915121][ T8110] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1306: invalid indirect mapped block 28777 (level 2) [ 184.952034][ T8110] EXT4-fs (loop5): 1 truncate cleaned up [ 184.978486][ T8110] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 185.033469][ T8095] XFS (loop3): Ending clean mount [ 185.060989][ T8110] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 185.074457][ T8110] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 185.095694][ T8095] XFS (loop3): Quotacheck needed: Please wait. [ 185.111271][ T6553] usb 5-1: USB disconnect, device number 11 [ 185.233710][ T8127] loop0: detected capacity change from 0 to 256 [ 185.249436][ T8095] XFS (loop3): Quotacheck: Done. [ 185.265068][ T8127] exfat: Deprecated parameter 'utf8' [ 185.274963][ T8127] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 185.316356][ T8127] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 185.495586][ T4200] XFS (loop3): Unmounting Filesystem [ 185.971210][ T8157] loop0: detected capacity change from 0 to 128 [ 186.009061][ T8159] loop4: detected capacity change from 0 to 256 [ 186.051292][ T8157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 186.096646][ T8157] System zones: 1-3, 19-19, 35-36 [ 186.161105][ T6553] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 186.184990][ T8157] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 186.253905][ T8157] EXT4-fs warning (device loop0): ext4_group_extend:1852: can't read last block, resize aborted [ 186.369388][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 186.401294][ T6553] usb 7-1: Using ep0 maxpacket: 16 [ 186.534983][ T8181] loop3: detected capacity change from 0 to 16 [ 186.561495][ T6553] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.617421][ T8181] erofs: (device loop3): mounted with root inode @ nid 36. [ 186.641362][ T6553] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 186.649514][ T6553] usb 7-1: config 0 has no interface number 0 [ 186.701116][ T6553] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 186.736746][ T6553] usb 7-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 186.774742][ T6553] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0xF has an invalid bInterval 151, changing to 11 [ 186.803840][ T6553] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0xF has invalid wMaxPacketSize 0 [ 186.833970][ T8196] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 186.834783][ T6553] usb 7-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0xF, skipping [ 186.888339][ T6553] usb 7-1: config 0 interface 67 has no altsetting 0 [ 187.011832][ T8198] loop5: detected capacity change from 0 to 2048 [ 187.091271][ T6553] usb 7-1: New USB device found, idVendor=067c, idProduct=1001, bcdDevice=e9.13 [ 187.100382][ T6553] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.116619][ T6553] usb 7-1: Product: syz [ 187.128566][ T6553] usb 7-1: Manufacturer: syz [ 187.134116][ T6553] usb 7-1: SerialNumber: syz [ 187.180849][ T6553] usb 7-1: config 0 descriptor?? [ 187.441352][ T4412] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.461878][ T6242] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.531615][ T6553] pegasus 7-1:0.67: Missing or invalid endpoints [ 187.543698][ T6553] usb 7-1: USB disconnect, device number 10 [ 187.661145][ T6548] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.701214][ T4412] usb 1-1: Using ep0 maxpacket: 16 [ 187.831900][ T6242] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.842546][ T4412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.843595][ T6242] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.861046][ T4412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.861321][ T6242] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 187.881542][ T4412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.887977][ T6242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.900541][ T4412] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.911458][ T6548] usb 6-1: Using ep0 maxpacket: 32 [ 187.912714][ T4412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.925826][ T6242] usb 5-1: config 0 descriptor?? [ 187.935766][ T4412] usb 1-1: config 0 descriptor?? [ 188.031374][ T6548] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 188.033853][ T8223] loop6: detected capacity change from 0 to 512 [ 188.055529][ T6548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.072230][ T8223] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 188.072230][ T8223] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 188.072230][ T8223] [ 188.093190][ T6548] usb 6-1: config 0 descriptor?? [ 188.098364][ T8223] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.133189][ T6548] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 188.155016][ T8223] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 188.170377][ T8223] Quota error (device loop6): write_blk: dquota write failed [ 188.180701][ T8223] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 188.194627][ T8223] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1353: Failed to acquire dquot type 0 [ 188.207002][ T8223] EXT4-fs (loop6): 1 truncate cleaned up [ 188.214560][ T8223] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,noacl,noinit_itable,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 188.241452][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.272196][ T8223] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 188.391650][ T4410] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.434595][ T6242] wacom 0003:056A:003F.0013: unknown main item tag 0x7 [ 188.449718][ T4412] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input12 [ 188.451884][ T6242] wacom 0003:056A:003F.0013: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 188.515417][ T4412] microsoft 0003:045E:07DA.0012: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 188.681399][ T4413] usb 5-1: USB disconnect, device number 12 [ 188.702339][ T4402] usb 1-1: USB disconnect, device number 10 [ 188.792191][ T6548] usb 6-1: USB disconnect, device number 8 [ 188.837542][ T8239] fido_id[8239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 188.861459][ T4410] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.973906][ T8229] batman_adv: batadv0: Interface deactivated: wlan0 [ 188.991508][ T4410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.011226][ T4410] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.201427][ T4410] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 189.221456][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.229512][ T4410] usb 4-1: Product: syz [ 189.240647][ T4410] usb 4-1: Manufacturer: syz [ 189.246105][ T4410] usb 4-1: SerialNumber: syz [ 189.304099][ T4410] usb 4-1: selecting invalid altsetting 1 [ 189.320790][ T4410] usb 4-1: unit 6 not found! [ 189.359099][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 189.402369][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 189.626829][ T8267] loop0: detected capacity change from 0 to 16 [ 189.693084][ T8267] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.701110][ T4402] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 189.739626][ T8266] loop4: detected capacity change from 0 to 4096 [ 189.763618][ T8274] loop6: detected capacity change from 0 to 64 [ 189.835112][ T8266] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 189.928315][ T8266] ntfs3: loop4: Failed to load $Extend. [ 189.974993][ T4410] usb 4-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 189.984709][ T4402] usb 6-1: Using ep0 maxpacket: 32 [ 190.046026][ T4410] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 190.111415][ T4402] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.119590][ T4402] usb 6-1: config 0 has no interface number 0 [ 190.133627][ T4410] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 190.184463][ T4410] usb 4-1: USB disconnect, device number 11 [ 190.321404][ T4402] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.335704][ T4402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.376839][ T4402] usb 6-1: Product: syz [ 190.381893][ T4402] usb 6-1: Manufacturer: syz [ 190.386577][ T4402] usb 6-1: SerialNumber: syz [ 190.402061][ T4402] usb 6-1: config 0 descriptor?? [ 190.431084][ T6548] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.461472][ T4402] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 190.472136][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.509305][ T8300] bond0: (slave wlan0): Opening slave failed [ 190.673281][ T4402] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.691188][ T6548] usb 5-1: Using ep0 maxpacket: 8 [ 190.703360][ T4402] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.971362][ T6548] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 190.987148][ T6548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.014822][ T6548] usb 5-1: Product: syz [ 191.029391][ T6548] usb 5-1: Manufacturer: syz [ 191.052940][ T6548] usb 5-1: SerialNumber: syz [ 191.068911][ T6548] usb 5-1: config 0 descriptor?? [ 191.111555][ T6242] Bluetooth: hci1: command 0x0406 tx timeout [ 191.118277][ T6242] Bluetooth: hci4: command 0x0406 tx timeout [ 191.121167][ T4410] Bluetooth: hci3: command 0x0406 tx timeout [ 191.155296][ T8329] loop6: detected capacity change from 0 to 1024 [ 191.218315][ T8334] loop3: detected capacity change from 0 to 1024 [ 191.230253][ T8329] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 191.263748][ T6242] usb 6-1: USB disconnect, device number 9 [ 191.291084][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 191.303593][ T6242] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.351664][ T6548] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 191.391658][ T6242] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.433443][ T6242] quatech2 6-1:0.51: device disconnected [ 191.791542][ T6548] usb write operation failed. (-71) [ 191.833110][ T6548] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.873266][ T6548] dvbdev: DVB: registering new adapter (Terratec H7) [ 191.880631][ T6548] usb 5-1: media controller created [ 191.886834][ T8358] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.971355][ T6548] usb read operation failed. (-71) [ 191.991166][ T6548] usb write operation failed. (-71) [ 192.035599][ T6548] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 192.100182][ T6548] usb 5-1: USB disconnect, device number 13 [ 192.227833][ T8370] tmpfs: Bad value for 'mpol' [ 192.811322][ T8362] loop0: detected capacity change from 0 to 32768 [ 192.898549][ T8388] loop6: detected capacity change from 0 to 8192 [ 192.949237][ T8362] (syz.0.1394,8362,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.967505][ T8367] loop5: detected capacity change from 0 to 32768 [ 193.001251][ T8362] (syz.0.1394,8362,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.015124][ T8355] loop3: detected capacity change from 0 to 32768 [ 193.039597][ T8388] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 193.061443][ T8388] REISERFS (device loop6): using ordered data mode [ 193.074084][ T8388] reiserfs: using flush barriers [ 193.109685][ T8362] JBD2: Ignoring recovery information on journal [ 193.176535][ T8388] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.309245][ T8388] REISERFS (device loop6): checking transaction log (loop6) [ 193.323872][ T8362] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 193.336284][ T8355] XFS (loop3): Mounting V5 Filesystem [ 193.567127][ T8355] XFS (loop3): Ending clean mount [ 193.677239][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 193.713710][ T8388] REISERFS (device loop6): Using tea hash to sort names [ 193.751630][ T8388] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 193.918003][ T4200] XFS (loop3): Unmounting Filesystem [ 194.157767][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164130][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369656][ T8394] loop4: detected capacity change from 0 to 32768 [ 194.447425][ T8428] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 194.511370][ T8428] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 194.560435][ T8428] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 194.659078][ T8394] XFS (loop4): Mounting V5 Filesystem [ 194.742442][ T8394] XFS (loop4): Ending clean mount [ 194.804138][ T8413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1406 (8413) [ 194.825843][ T8424] set_capacity_and_notify: 2 callbacks suppressed [ 194.825859][ T8424] loop0: detected capacity change from 0 to 32768 [ 194.859834][ T8394] XFS (loop4): Quotacheck needed: Please wait. [ 194.969738][ T8413] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 194.994901][ T8413] BTRFS info (device loop5): using free space tree [ 195.011826][ T8413] BTRFS info (device loop5): has skinny extents [ 195.030985][ T8424] XFS (loop0): Mounting V5 Filesystem [ 195.158726][ T8424] XFS (loop0): Ending clean mount [ 195.195014][ T8394] XFS (loop4): Quotacheck: Done. [ 195.216752][ T8424] XFS (loop0): Quotacheck needed: Please wait. [ 195.365663][ T4189] XFS (loop4): Unmounting Filesystem [ 195.374711][ T8413] BTRFS info (device loop5): enabling ssd optimizations [ 195.422372][ T8472] loop6: detected capacity change from 0 to 4096 [ 195.433743][ T8424] XFS (loop0): Quotacheck: Done. [ 195.495587][ T8472] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 195.531072][ T6554] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.715884][ T4187] XFS (loop0): Unmounting Filesystem [ 195.748850][ T8472] ntfs3: loop6: failed to convert "c46c" to maccroatian [ 195.891355][ T6554] usb 4-1: config 32 has an invalid interface number: 3 but max is 0 [ 195.909787][ T6554] usb 4-1: config 32 has no interface number 0 [ 195.930012][ T6554] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 195.955716][ T6554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.041703][ T6554] usb-storage 4-1:32.3: USB Mass Storage device detected [ 196.114739][ T6554] usb-storage 4-1:32.3: Quirks match for vid 057b pid 0000: 1 [ 196.311837][ T6554] usb 4-1: USB disconnect, device number 12 [ 196.584526][ T8495] loop5: detected capacity change from 0 to 256 [ 196.662161][ T8495] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 196.679343][ T8497] loop6: detected capacity change from 0 to 512 [ 196.843916][ T8497] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1421: invalid indirect mapped block 4294967295 (level 0) [ 196.844367][ T8497] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1421: invalid indirect mapped block 4294967295 (level 1) [ 196.845395][ T8497] EXT4-fs (loop6): 1 orphan inode deleted [ 196.845416][ T8497] EXT4-fs (loop6): 1 truncate cleaned up [ 196.845435][ T8497] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.013340][ T8514] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1427'. [ 197.014363][ T8514] device gretap0 entered promiscuous mode [ 197.066679][ T8516] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1427'. [ 197.066785][ T8516] 0ªî{X¹¦: renamed from gretap0 [ 197.100745][ T8516] device 30ªî{X¹¦ left promiscuous mode [ 197.182993][ T8516] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 197.210173][ T8518] loop5: detected capacity change from 0 to 8 [ 197.363597][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 197.409809][ T8518] SQUASHFS error: Corrupted symlink [ 197.420873][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 197.610965][ T8532] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 197.786170][ T8538] loop4: detected capacity change from 0 to 512 [ 197.963461][ T8538] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,barrier=0x0000000000000004,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 198.040194][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 198.297592][ T8549] loop0: detected capacity change from 0 to 8192 [ 198.365895][ T8530] loop5: detected capacity change from 0 to 32768 [ 198.447400][ T8549] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 198.479791][ T8549] REISERFS (device loop0): using ordered data mode [ 198.501206][ T8549] reiserfs: using flush barriers [ 198.520428][ T8549] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.539573][ T8549] REISERFS (device loop0): checking transaction log (loop0) [ 198.549877][ T8549] REISERFS (device loop0): Using r5 hash to sort names [ 198.561789][ T8549] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 198.580137][ T8564] loop4: detected capacity change from 0 to 512 [ 198.587043][ T8561] loop6: detected capacity change from 0 to 1024 [ 198.639716][ T8562] hfsplus: bad catalog entry type [ 198.656201][ T8564] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 198.692615][ T8561] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 198.699750][ T8561] hfsplus: xattr searching failed [ 198.714014][ T4644] hfsplus: b-tree write err: -5, ino 25 [ 198.740389][ T4644] hfsplus: b-tree write err: -5, ino 4 [ 198.752391][ T4644] hfsplus: b-tree write err: -5, ino 2 [ 198.806736][ T8564] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 199.042933][ T144] hfsplus: b-tree write err: -5, ino 25 [ 199.081304][ T144] hfsplus: b-tree write err: -5, ino 4 [ 199.097243][ T144] hfsplus: b-tree write err: -5, ino 2 [ 199.103256][ T144] hfsplus: b-tree write err: -5, ino 23 [ 199.511909][ T8592] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.526250][ T8592] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 199.536940][ T8592] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1462: Corrupt directory, running e2fsck is recommended [ 199.553365][ T8592] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 199.571102][ T6242] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.573277][ T8592] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1462: corrupted in-inode xattr [ 199.697131][ T8592] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1462: couldn't read orphan inode 15 (err -117) [ 199.741649][ T8592] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback. [ 199.811195][ T6242] usb 1-1: Using ep0 maxpacket: 32 [ 199.890662][ T8595] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 199.913074][ T8592] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.935345][ T8595] REISERFS (device loop4): using ordered data mode [ 199.942589][ T6242] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 199.966259][ T6242] usb 1-1: config 0 has no interface number 0 [ 199.983168][ T8595] reiserfs: using flush barriers [ 199.995328][ T6242] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 200.015973][ T8592] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 200.033626][ T8595] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.049992][ T6242] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid maxpacket 28005, setting to 1024 [ 200.066186][ T8592] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1462: Corrupt directory, running e2fsck is recommended [ 200.095105][ T6242] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 200.107024][ T8595] REISERFS (device loop4): checking transaction log (loop4) [ 200.115881][ T8592] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.1462: path /221/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 200.135685][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.142811][ T8595] REISERFS (device loop4): Using r5 hash to sort names [ 200.154380][ T8583] set_capacity_and_notify: 3 callbacks suppressed [ 200.154405][ T8583] loop5: detected capacity change from 0 to 32768 [ 200.177979][ T8595] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 200.210305][ T8592] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 8: comm syz.6.1462: path /221/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 200.240434][ T8597] loop3: detected capacity change from 0 to 32768 [ 200.322386][ T6242] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 200.331728][ T6242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.339794][ T6242] usb 1-1: Product: syz [ 200.344549][ T6242] usb 1-1: Manufacturer: syz [ 200.349333][ T6242] usb 1-1: SerialNumber: syz [ 200.367913][ T6242] usb 1-1: config 0 descriptor?? [ 200.394998][ T8585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.410729][ T8585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.445791][ T8597] JBD2: Ignoring recovery information on journal [ 200.541259][ T8597] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 200.576202][ T8583] XFS (loop5): Mounting V5 Filesystem [ 200.610091][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 200.712784][ T6242] usb-storage 1-1:0.20: USB Mass Storage device detected [ 200.739600][ T6242] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 200.800375][ T6242] scsi host1: usb-storage 1-1:0.20 [ 200.808899][ T8583] XFS (loop5): Ending clean mount [ 200.814318][ T8621] loop4: detected capacity change from 0 to 64 [ 200.823418][ T6242] usb 1-1: USB disconnect, device number 11 [ 200.883815][ T8583] XFS (loop5): Quotacheck needed: Please wait. [ 201.050146][ T8583] XFS (loop5): Quotacheck: Done. [ 201.063095][ T8629] loop6: detected capacity change from 0 to 512 [ 201.088739][ T4644] attempt to access beyond end of device [ 201.088739][ T4644] loop4: rw=1, want=268435470, limit=64 [ 201.134041][ T8629] EXT4-fs (loop6): 1 truncate cleaned up [ 201.163511][ T8634] netlink: 'syz.3.1476': attribute type 4 has an invalid length. [ 201.170224][ T4644] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 201.171471][ T8634] netlink: 'syz.3.1476': attribute type 8 has an invalid length. [ 201.191366][ T8629] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 201.201563][ T8634] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1476'. [ 201.242217][ T4437] XFS (loop5): Unmounting Filesystem [ 201.351109][ T6242] Bluetooth: hci0: command 0x0406 tx timeout [ 201.494834][ T8645] openvswitch: netlink: Missing valid actions attribute. [ 201.508109][ T8642] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1481'. [ 201.535202][ T8646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1482'. [ 201.550255][ T8645] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.575519][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 201.723445][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.778702][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.797986][ T8656] loop3: detected capacity change from 0 to 2048 [ 201.832262][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.855354][ T8654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.877025][ T8656] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.957055][ T8659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.574222][ T8682] loop4: detected capacity change from 0 to 164 [ 202.587998][ T8680] loop3: detected capacity change from 0 to 1024 [ 202.750030][ T8653] loop0: detected capacity change from 0 to 32768 [ 202.876972][ T8680] hfsplus: hfsplus: Invalid key length: 30819 [ 202.923634][ T8653] (syz.0.1485,8653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.015472][ T8684] loop5: detected capacity change from 0 to 32768 [ 203.030596][ T8653] (syz.0.1485,8653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.079535][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.099865][ T8653] JBD2: Ignoring recovery information on journal [ 203.120247][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.161167][ T8684] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 203.169442][ T8684] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 203.189674][ T8684] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 203.189674][ T8684] inode = 1 19 [ 203.189674][ T8684] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 203.208374][ T8684] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 203.216159][ T8684] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 203.225182][ T8684] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 203.231898][ T8684] gfs2: fsid=syz:syz.s: File system withdrawn [ 203.238021][ T8684] CPU: 1 PID: 8684 Comm: syz.5.1499 Not tainted syzkaller #0 [ 203.245431][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.255537][ T8684] Call Trace: [ 203.258853][ T8684] [ 203.261829][ T8684] dump_stack_lvl+0x188/0x250 [ 203.266666][ T8684] ? show_regs_print_info+0x20/0x20 [ 203.271965][ T8684] ? load_image+0x410/0x410 [ 203.276978][ T8684] gfs2_withdraw+0xb9a/0x14e0 [ 203.281719][ T8684] ? gfs2_lm+0x240/0x240 [ 203.286011][ T8684] ? _raw_spin_unlock+0x24/0x40 [ 203.290905][ T8684] ? gfs2_glock_nq+0xcaa/0x1510 [ 203.295801][ T8684] ? gfs2_consist_inode_i+0xc0/0xe0 [ 203.301066][ T8684] gfs2_jdesc_check+0x137/0x290 [ 203.305961][ T8684] check_journal_clean+0x186/0x360 [ 203.311129][ T8684] ? gfs2_trans_remove_revoke+0x360/0x360 [ 203.316908][ T8684] ? check_journal_clean+0x142/0x360 [ 203.322228][ T8684] ? __rwlock_init+0x140/0x140 [ 203.327085][ T8684] ? do_raw_spin_unlock+0x11d/0x230 [ 203.332326][ T8684] ? _raw_spin_unlock+0x24/0x40 [ 203.333862][ T8653] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 203.337346][ T8684] ? gfs2_jdesc_find+0xa7/0xc0 [ 203.337410][ T8684] init_journal+0x182e/0x22d0 [ 203.337482][ T8684] ? end_bio_io_page+0x100/0x100 [ 203.360786][ T8684] ? vsnprintf+0x1b22/0x1c20 [ 203.365470][ T8684] ? snprintf+0xe5/0x140 [ 203.369756][ T8684] ? init_journal+0x749/0x22d0 [ 203.374561][ T8684] ? vscnprintf+0x80/0x80 [ 203.378931][ T8684] ? gfs2_glock_nq_num+0x170/0x1b0 [ 203.384104][ T8684] init_inodes+0xdb/0x320 [ 203.388477][ T8684] gfs2_fill_super+0x1671/0x1ea0 [ 203.393470][ T8684] ? gfs2_reconfigure+0xd80/0xd80 [ 203.398975][ T8684] ? gfs2_glock_nq_num+0x7e/0x1b0 [ 203.404100][ T8684] ? sb_set_blocksize+0xa5/0xe0 [ 203.409015][ T8684] get_tree_bdev+0x3e6/0x610 [ 203.413670][ T8684] ? gfs2_reconfigure+0xd80/0xd80 [ 203.418747][ T8684] gfs2_get_tree+0x4d/0x1e0 [ 203.423304][ T8684] vfs_get_tree+0x88/0x270 [ 203.427759][ T8684] do_new_mount+0x247/0xa40 [ 203.432307][ T8684] __se_sys_mount+0x2e3/0x3d0 [ 203.437085][ T8684] ? __x64_sys_mount+0xc0/0xc0 [ 203.441894][ T8684] ? lockdep_hardirqs_on+0x94/0x140 [ 203.447126][ T8684] ? __x64_sys_mount+0x1c/0xc0 [ 203.451930][ T8684] do_syscall_64+0x4c/0xa0 [ 203.456389][ T8684] ? clear_bhb_loop+0x30/0x80 [ 203.461128][ T8684] ? clear_bhb_loop+0x30/0x80 [ 203.465850][ T8684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.471887][ T8684] RIP: 0033:0x7fa5629a228a [ 203.476346][ T8684] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.496010][ T8684] RSP: 002b:00007fa560bf8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.504487][ T8684] RAX: ffffffffffffffda RBX: 00007fa560bf8ee0 RCX: 00007fa5629a228a [ 203.512492][ T8684] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fa560bf8ea0 [ 203.520590][ T8684] RBP: 0000200000000400 R08: 00007fa560bf8ee0 R09: 0000000000210401 [ 203.528692][ T8684] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 203.536705][ T8684] R13: 00007fa560bf8ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 203.544740][ T8684] [ 203.548755][ T8684] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 203.710871][ T8676] loop6: detected capacity change from 0 to 32768 [ 203.740817][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.748723][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.797786][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.851371][ T8676] XFS (loop6): Mounting V5 Filesystem [ 203.910863][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.919341][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.926971][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.939963][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.947148][ T8687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.956745][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.963933][ T8687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.999953][ T8687] device wlan0 left promiscuous mode [ 204.008175][ T8687] device bridge1 left promiscuous mode [ 204.081215][ T6548] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 204.107101][ T8703] device dummy0 entered promiscuous mode [ 204.130207][ T8676] XFS (loop6): Ending clean mount [ 204.152771][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 204.335655][ T4946] XFS (loop6): Unmounting Filesystem [ 204.445807][ T6548] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 204.471125][ T6548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.508136][ T6548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.529381][ T6548] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 204.555504][ T6548] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 204.577900][ T6548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.642030][ T6548] usb 4-1: config 0 descriptor?? [ 204.733543][ T8720] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 204.801474][ T8716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.839932][ T8720] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 204.856139][ T8729] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1513'. [ 205.043689][ T8738] syz.6.1517 uses obsolete (PF_INET,SOCK_PACKET) [ 205.123462][ T6548] hid (null): unknown global tag 0xe [ 205.154217][ T6548] hid (null): unknown global tag 0xc [ 205.204917][ T6548] hid-generic 0003:05AC:0323.0014: ignoring exceeding usage max [ 205.242809][ T6548] hid-generic 0003:05AC:0323.0014: unknown global tag 0xe [ 205.288524][ T6548] hid-generic 0003:05AC:0323.0014: item 0 0 1 14 parsing failed [ 205.315192][ T6548] hid-generic: probe of 0003:05AC:0323.0014 failed with error -22 [ 205.345891][ T6548] usb 4-1: USB disconnect, device number 13 [ 205.957499][ T8758] set_capacity_and_notify: 3 callbacks suppressed [ 205.957517][ T8758] loop3: detected capacity change from 0 to 128 [ 206.072580][ T8758] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 206.096161][ T8750] loop6: detected capacity change from 0 to 32768 [ 206.121188][ T8758] hpfs: filesystem error: improperly stopped [ 206.141984][ T8758] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 206.164804][ T8752] loop0: detected capacity change from 0 to 32768 [ 206.170205][ T8758] hpfs: You really don't want any checks? You are crazy... [ 206.182412][ T8749] loop5: detected capacity change from 0 to 32768 [ 206.199354][ T8758] hpfs: hpfs_map_sector(): read error [ 206.215904][ T8758] hpfs: code page support is disabled [ 206.221477][ T8758] hpfs: hpfs_map_4sectors(): unaligned read [ 206.227737][ T8758] hpfs: hpfs_map_4sectors(): unaligned read [ 206.233874][ T8758] hpfs: filesystem error: unable to find root dir [ 206.274406][ T8750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1524 (8750) [ 206.332029][ T8749] JBD2: Ignoring recovery information on journal [ 206.349095][ T8750] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 206.365829][ T8752] XFS (loop0): Mounting V5 Filesystem [ 206.385509][ T8756] loop4: detected capacity change from 0 to 32768 [ 206.402400][ T8750] BTRFS info (device loop6): using free space tree [ 206.409055][ T8750] BTRFS info (device loop6): has skinny extents [ 206.457642][ T8756] [ 206.457642][ T8756] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.457642][ T8756] [ 206.500312][ T8749] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 206.560052][ T8775] loop3: detected capacity change from 0 to 4096 [ 206.572836][ T8775] ntfs3: Unknown parameter 't' [ 206.777822][ T4644] ERROR: (device loop4): diWrite: ixpxd invalid [ 206.777822][ T4644] [ 206.797018][ T8792] loop3: detected capacity change from 0 to 512 [ 206.837448][ T8749] syz.5.1525 (8749) used greatest stack depth: 18304 bytes left [ 206.857023][ T8752] XFS (loop0): Ending clean mount [ 206.868228][ T4644] ERROR: (device loop4): txCommit: [ 206.868228][ T4644] [ 206.875992][ T8750] BTRFS info (device loop6): enabling ssd optimizations [ 206.916845][ T8792] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 206.939306][ T4644] jfs_write_inode: jfs_commit_inode failed! [ 206.963144][ T4437] ocfs2: Unmounting device (7,5) on (node local) [ 206.975917][ T4189] [ 206.975917][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.975917][ T4189] [ 207.077120][ T8792] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 207.104481][ T4189] [ 207.104481][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.104481][ T4189] [ 207.148035][ T4187] XFS (loop0): Unmounting Filesystem [ 207.453179][ T4230] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 207.814144][ T8807] loop4: detected capacity change from 0 to 4096 [ 207.847223][ T4230] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.881333][ T4230] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 207.924720][ T4230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.959959][ T4230] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 207.969762][ T8813] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.005079][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.032134][ T4230] usb 6-1: config 0 descriptor?? [ 208.157708][ T8821] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.386704][ T8830] loop6: detected capacity change from 0 to 512 [ 208.536320][ T8830] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.553221][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x3 [ 208.561165][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.568916][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.577361][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.585434][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.593565][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.601595][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.609483][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.617575][ T4230] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 208.627167][ T4230] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 208.676547][ T8830] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 208.775633][ T21] usb 6-1: USB disconnect, device number 10 [ 208.940756][ T8847] fido_id[8847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 209.011131][ T8851] loop6: detected capacity change from 0 to 1024 [ 209.131138][ T6242] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.212941][ T8819] XFS (loop4): Mounting V5 Filesystem [ 209.350747][ T8819] XFS (loop4): Ending clean mount [ 209.367948][ T8819] XFS (loop4): Quotacheck needed: Please wait. [ 209.384325][ T6242] usb 1-1: Using ep0 maxpacket: 8 [ 209.501358][ T6242] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 209.519862][ T6242] usb 1-1: config 2 has no interface number 0 [ 209.554630][ T6242] usb 1-1: config 2 interface 31 has no altsetting 0 [ 209.616839][ T8819] XFS (loop4): Quotacheck: Done. [ 209.751458][ T6242] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 209.760564][ T6242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.784729][ T4189] XFS (loop4): Unmounting Filesystem [ 209.811223][ T6242] usb 1-1: Product: syz [ 209.821541][ T6242] usb 1-1: Manufacturer: syz [ 209.826240][ T6242] usb 1-1: SerialNumber: syz [ 210.123367][ T8880] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 210.212912][ T8868] F2FS-fs (loop6): invalid crc value [ 210.244378][ T8880] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,barrier=0x000000000000000d,delalloc,stripe=0x0000000000000b75,data_err=ignore,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 210.307964][ T8868] F2FS-fs (loop6): Found nat_bits in checkpoint [ 210.542593][ T8861] XFS (loop3): Mounting V5 Filesystem [ 210.604994][ T8868] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 210.649945][ T8861] XFS (loop3): Ending clean mount [ 210.681519][ T8881] attempt to access beyond end of device [ 210.681519][ T8881] loop6: rw=2049, want=45104, limit=40427 [ 210.697078][ T8896] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1565'. [ 210.716217][ T26] audit: type=1800 audit(30878703.975:6): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1556" name="file2" dev="loop3" ino=6151 res=0 errno=0 [ 210.731802][ T6242] ch9200: probe of 1-1:2.31 failed with error -22 [ 210.736513][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.767541][ T6242] usb 1-1: USB disconnect, device number 12 [ 210.797787][ T4200] XFS (loop3): Unmounting Filesystem [ 211.437911][ T8904] set_capacity_and_notify: 4 callbacks suppressed [ 211.437929][ T8904] loop5: detected capacity change from 0 to 1024 [ 211.597579][ T8904] hfsplus: hfsplus: Invalid key length: 30819 [ 211.665810][ T8906] loop3: detected capacity change from 0 to 4096 [ 211.785246][ T8906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.805830][ T8902] loop0: detected capacity change from 0 to 32768 [ 211.863976][ T8902] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1569 (8902) [ 211.975402][ T8913] loop4: detected capacity change from 0 to 4096 [ 211.997635][ T8902] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 212.029881][ T8902] BTRFS info (device loop0): enabling disk space caching [ 212.084968][ T8902] BTRFS info (device loop0): force clearing of disk cache [ 212.097268][ T8913] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 212.108119][ T8919] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.154039][ T8913] NILFS (loop4): mounting fs with errors [ 212.170824][ T8902] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.185375][ T8902] BTRFS info (device loop0): use zstd compression, level 3 [ 212.229497][ T8902] BTRFS info (device loop0): disk space caching is enabled [ 212.261114][ T4459] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 212.277919][ T8902] BTRFS info (device loop0): has skinny extents [ 212.551368][ T4459] usb 7-1: Using ep0 maxpacket: 32 [ 212.721304][ T4459] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 212.748404][ T4459] usb 7-1: config 0 has no interface number 0 [ 212.762548][ T4459] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 212.773680][ T4459] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid maxpacket 28005, setting to 1024 [ 212.785740][ T4459] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 212.800682][ T8902] BTRFS info (device loop0): enabling ssd optimizations [ 212.821660][ T8902] BTRFS info (device loop0): clearing free space tree [ 212.828764][ T8902] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.845041][ T8902] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.895021][ T26] audit: type=1800 audit(30878706.155:7): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1569" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 212.981379][ T4459] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 213.014555][ T4459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.044121][ T4459] usb 7-1: Product: syz [ 213.048357][ T4459] usb 7-1: Manufacturer: syz [ 213.062519][ T4447] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (4447) [ 213.081423][ T4459] usb 7-1: SerialNumber: syz [ 213.097651][ T4459] usb 7-1: config 0 descriptor?? [ 213.142061][ T8912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.149474][ T8912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.456380][ T4459] usb-storage 7-1:0.20: USB Mass Storage device detected [ 213.471305][ T6554] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.509751][ T4459] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 213.557223][ T8955] loop4: detected capacity change from 0 to 40427 [ 213.574573][ T4459] scsi host1: usb-storage 7-1:0.20 [ 213.595357][ T8983] loop5: detected capacity change from 0 to 256 [ 213.608511][ T8955] F2FS-fs (loop4): invalid crc value [ 213.616007][ T4459] usb 7-1: USB disconnect, device number 11 [ 213.630794][ T8955] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.711181][ T6554] usb 4-1: Using ep0 maxpacket: 8 [ 213.825270][ T8955] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.833775][ T6554] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 213.860277][ T6554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.964092][ T6554] pvrusb2: Hardware description: Terratec Grabster AV400 [ 213.985017][ T6554] pvrusb2: ********** [ 214.013392][ T6554] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 214.046152][ T6554] pvrusb2: Important functionality might not be entirely working. [ 214.101059][ T6554] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 214.152961][ T6554] pvrusb2: ********** [ 214.161608][ T4189] attempt to access beyond end of device [ 214.161608][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 214.189809][ T9000] loop6: detected capacity change from 0 to 2048 [ 214.209622][ T2425] pvrusb2: Invalid write control endpoint [ 214.232258][ T6554] usb 4-1: USB disconnect, device number 14 [ 214.267741][ T9002] netlink: 'syz.5.1601': attribute type 2 has an invalid length. [ 214.297691][ T9002] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1601'. [ 214.362422][ T9000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.385363][ T2425] pvrusb2: Invalid write control endpoint [ 214.404376][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 214.435257][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 214.456407][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 214.503393][ T2425] pvrusb2: Device being rendered inoperable [ 214.545176][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 214.564775][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 214.595406][ T2425] pvrusb2: Attached sub-driver cx25840 [ 214.610693][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 214.631472][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 215.071577][ T9013] loop3: detected capacity change from 0 to 4096 [ 215.079697][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 215.224053][ T9022] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.235341][ T9013] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 215.268903][ T9013] NILFS (loop3): mounting fs with errors [ 215.347095][ T9024] loop4: detected capacity change from 0 to 2048 [ 215.458261][ T9024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.478681][ T9005] loop0: detected capacity change from 0 to 32768 [ 215.599825][ T9005] XFS (loop0): Mounting V5 Filesystem [ 215.716087][ T9007] XFS (loop5): Mounting V5 Filesystem [ 215.848241][ T9050] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.898009][ T9005] XFS (loop0): Ending clean mount [ 215.961263][ T9005] XFS (loop0): Quotacheck needed: Please wait. [ 216.022487][ T9005] XFS (loop0): Quotacheck: Done. [ 216.042404][ T9007] XFS (loop5): Ending clean mount [ 216.070459][ T9007] XFS (loop5): Quotacheck needed: Please wait. [ 216.169078][ T9007] XFS (loop5): Quotacheck: Done. [ 216.181518][ T9059] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1619' resets device [ 216.217058][ T4187] XFS (loop0): Unmounting Filesystem [ 216.446039][ T4437] XFS (loop5): Unmounting Filesystem [ 216.641211][ T4459] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.731251][ T6554] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.875500][ T4415] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 216.911078][ T4459] usb 5-1: Using ep0 maxpacket: 32 [ 216.969103][ T9079] set_capacity_and_notify: 2 callbacks suppressed [ 216.969120][ T9079] loop0: detected capacity change from 0 to 1024 [ 216.971418][ T6554] usb 4-1: Using ep0 maxpacket: 32 [ 217.052114][ T4459] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.060641][ T4459] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.069696][ T4459] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.080452][ T4459] usb 5-1: config 1 has no interface number 0 [ 217.098256][ T4459] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.131416][ T4415] usb 7-1: Using ep0 maxpacket: 16 [ 217.144154][ T4459] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 217.158149][ T9079] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.162108][ T6554] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.170720][ T4459] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.193336][ T9079] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.1630: Freeing blocks not in datazone - block = 0, count = 16 [ 217.208835][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.223401][ T9079] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1630: bg 0: block 112: padding at end of block bitmap is not set [ 217.265414][ T9079] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 217.282276][ T4459] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 217.337270][ T6554] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.348665][ T6554] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.484495][ T4415] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 217.506450][ T4415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.521165][ T4415] usb 7-1: Product: syz [ 217.521573][ T6554] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 217.525413][ T4415] usb 7-1: Manufacturer: syz [ 217.525434][ T4415] usb 7-1: SerialNumber: syz [ 217.549547][ T4415] usb 7-1: config 0 descriptor?? [ 217.561779][ T9089] loop0: detected capacity change from 0 to 8192 [ 217.568702][ T6554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.587408][ T6554] usb 4-1: Product: syz [ 217.597551][ T6554] usb 4-1: Manufacturer: syz [ 217.604784][ T4415] gspca_main: spca508-2.14.0 probing 041e:4018 [ 217.608068][ T6554] usb 4-1: SerialNumber: syz [ 217.616318][ T9089] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 217.636050][ T9087] loop5: detected capacity change from 0 to 32768 [ 217.650231][ T9089] REISERFS (device loop0): using ordered data mode [ 217.656974][ T9089] reiserfs: using flush barriers [ 217.679590][ T9089] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.696821][ T9089] REISERFS (device loop0): checking transaction log (loop0) [ 217.751622][ T9087] XFS (loop5): Mounting V5 Filesystem [ 217.822541][ T9087] XFS (loop5): Ending clean mount [ 217.829744][ T9087] XFS (loop5): Quotacheck needed: Please wait. [ 217.836714][ T4415] gspca_spca508: reg_read err -32 [ 217.871765][ T4459] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 217.877188][ T9089] REISERFS (device loop0): Using tea hash to sort names [ 217.898337][ T9087] XFS (loop5): Quotacheck: Done. [ 217.930090][ T9089] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 217.962278][ T4437] XFS (loop5): Unmounting Filesystem [ 218.111339][ T4415] gspca_spca508: reg_read err -71 [ 218.136309][ T4415] gspca_spca508: reg_read err -71 [ 218.151406][ T4415] gspca_spca508: reg_read err -71 [ 218.176454][ T4415] gspca_spca508: reg write: error -71 [ 218.182172][ T4415] spca508: probe of 7-1:0.0 failed with error -71 [ 218.191737][ T4415] usb 7-1: USB disconnect, device number 12 [ 218.441913][ T6554] usb 4-1: USB disconnect, device number 15 [ 218.466142][ T9101] loop5: detected capacity change from 0 to 2048 [ 218.503956][ T4415] usb 5-1: USB disconnect, device number 14 [ 218.523173][ T4415] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 218.588985][ T9101] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 218.603262][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 218.728639][ T9113] loop6: detected capacity change from 0 to 512 [ 218.894167][ T9113] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 219.321262][ T6242] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 219.561259][ T4415] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 219.642104][ T9151] loop5: detected capacity change from 0 to 256 [ 219.683854][ T6242] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 219.707742][ T6242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.744666][ T6242] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.779424][ T9151] FAT-fs (loop5): Directory bread(block 64) failed [ 219.788687][ T9155] loop4: detected capacity change from 0 to 1024 [ 219.796518][ T9151] FAT-fs (loop5): Directory bread(block 65) failed [ 219.814768][ T6242] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 219.826927][ T9151] FAT-fs (loop5): Directory bread(block 66) failed [ 219.834956][ T4415] usb 7-1: Using ep0 maxpacket: 16 [ 219.841140][ T9151] FAT-fs (loop5): Directory bread(block 67) failed [ 219.858094][ T6242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.867799][ T9151] FAT-fs (loop5): Directory bread(block 68) failed [ 219.876819][ T9123] loop0: detected capacity change from 0 to 40427 [ 219.880160][ T6242] usb 4-1: config 0 descriptor?? [ 219.911344][ T9151] FAT-fs (loop5): Directory bread(block 69) failed [ 219.925134][ T9155] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 219.941734][ T9151] FAT-fs (loop5): Directory bread(block 70) failed [ 219.956756][ T9151] FAT-fs (loop5): Directory bread(block 71) failed [ 219.964147][ T9151] FAT-fs (loop5): Directory bread(block 72) failed [ 219.970818][ T9151] FAT-fs (loop5): Directory bread(block 73) failed [ 219.979236][ T6242] usb-storage 4-1:0.0: USB Mass Storage device detected [ 219.995577][ T9155] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1656: bg 0: block 112: padding at end of block bitmap is not set [ 220.012116][ T9123] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 220.020157][ T9123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 220.033761][ T9123] F2FS-fs (loop0): invalid crc value [ 220.044790][ T6242] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 220.080306][ T9123] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 220.182712][ T4415] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 220.192172][ T4415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.200211][ T4415] usb 7-1: Product: syz [ 220.204627][ T4415] usb 7-1: Manufacturer: syz [ 220.209454][ T4415] usb 7-1: SerialNumber: syz [ 220.216346][ T4415] usb 7-1: config 0 descriptor?? [ 220.219896][ T6242] usb 4-1: USB disconnect, device number 16 [ 220.368352][ T9123] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 220.409210][ T9123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.482583][ T9167] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 220.491969][ T9169] loop4: detected capacity change from 0 to 1024 [ 220.509934][ T9167] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.525005][ T9167] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 220.531603][ T9167] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 220.579607][ T9167] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 220.600318][ T9167] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 220.640450][ T9167] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 220.685446][ T9167] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 220.730763][ T9167] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 220.737664][ T4415] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 220.746851][ T9167] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.810882][ T4415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.824139][ T9167] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 220.861151][ T9167] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 220.868185][ T9167] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 220.881844][ T4415] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 220.913176][ T4415] usb 7-1: media controller created [ 220.936028][ T9167] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 220.986360][ T4415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.028286][ T9178] loop3: detected capacity change from 0 to 16 [ 221.100707][ T9178] erofs: Unexpected value for 'user_xattr' [ 221.145507][ T4415] zl10353_read_register: readreg error (reg=127, ret==0) [ 221.172579][ T4415] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 221.202029][ T4415] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 221.269121][ T4415] usb 7-1: USB disconnect, device number 13 [ 221.375822][ T4415] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 221.478507][ T9188] rock: directory entry would overflow storage [ 221.507200][ T9188] rock: sig=0x3b10, size=4, remaining=3 [ 221.587447][ T9193] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 221.773133][ T9205] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.899649][ T9193] [ 221.902107][ T9193] ====================================================== [ 221.909121][ T9193] WARNING: possible circular locking dependency detected [ 221.916257][ T9193] syzkaller #0 Not tainted [ 221.920693][ T9193] ------------------------------------------------------ [ 221.926034][ T9205] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.1677: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 221.927851][ T9193] syz.3.1671/9193 is trying to acquire lock: [ 221.927864][ T9193] ffff88805d5b4b28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 221.960356][ T9205] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.1677: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 221.961446][ T9193] [ 221.961446][ T9193] but task is already holding lock: [ 221.961454][ T9193] ffff88805f3b8c70 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 221.961514][ T9193] [ 221.961514][ T9193] which lock already depends on the new lock. [ 221.961514][ T9193] [ 221.961520][ T9193] [ 221.961520][ T9193] the existing dependency chain (in reverse order) is: [ 221.961527][ T9193] [ 221.961527][ T9193] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 221.961562][ T9193] down_read+0x44/0x2e0 [ 221.961586][ T9193] ext4_map_blocks+0x350/0x1a50 [ 221.961604][ T9193] ext4_getblk+0x176/0x670 [ 221.961622][ T9193] ext4_bread+0x26/0x180 [ 221.961639][ T9193] ext4_quota_read+0x1ac/0x390 [ 221.961659][ T9193] find_tree_dqentry+0x187/0xb30 [ 221.961676][ T9193] find_tree_dqentry+0x3e8/0xb30 [ 221.995831][ T9214] FAT-fs (loop5): Directory bread(block 64) failed [ 221.997343][ T9193] qtree_read_dquot+0x122/0x690 [ 222.008390][ T9214] FAT-fs (loop5): Directory bread(block 65) failed [ 222.016801][ T9193] v2_read_dquot+0xc0/0x110 [ 222.016831][ T9193] dquot_acquire+0x152/0x520 [ 222.016851][ T9193] ext4_acquire_dquot+0x2e3/0x4a0 [ 222.016875][ T9193] dqget+0x713/0xbb0 [ 222.016894][ T9193] __dquot_initialize+0x3a9/0xd00 [ 222.016913][ T9193] ext4_process_orphan+0x4c/0x2e0 [ 222.016931][ T9193] ext4_orphan_cleanup+0xad8/0x1320 [ 222.016949][ T9193] ext4_fill_super+0x8c65/0x93f0 [ 222.016967][ T9193] mount_bdev+0x28a/0x3c0 [ 222.041358][ T9214] FAT-fs (loop5): Directory bread(block 66) failed [ 222.044550][ T9193] legacy_get_tree+0xe6/0x180 [ 222.044581][ T9193] vfs_get_tree+0x88/0x270 [ 222.064357][ T9214] FAT-fs (loop5): Directory bread(block 67) failed [ 222.067307][ T9193] do_new_mount+0x247/0xa40 [ 222.067334][ T9193] __se_sys_mount+0x2e3/0x3d0 [ 222.083504][ T9214] FAT-fs (loop5): Directory bread(block 68) failed [ 222.084286][ T9193] do_syscall_64+0x4c/0xa0 [ 222.084311][ T9193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.099435][ T9214] FAT-fs (loop5): Directory bread(block 69) failed [ 222.104964][ T9193] [ 222.104964][ T9193] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 222.104998][ T9193] down_read+0x44/0x2e0 [ 222.105031][ T9193] v2_read_dquot+0x4a/0x110 [ 222.126396][ T9214] FAT-fs (loop5): Directory bread(block 70) failed [ 222.126631][ T9193] dquot_acquire+0x152/0x520 [ 222.134333][ T9214] FAT-fs (loop5): Directory bread(block 71) failed [ 222.138437][ T9193] ext4_acquire_dquot+0x2e3/0x4a0 [ 222.138465][ T9193] dqget+0x713/0xbb0 [ 222.145007][ T9214] FAT-fs (loop5): Directory bread(block 72) failed [ 222.149965][ T9193] __dquot_initialize+0x3a9/0xd00 [ 222.149994][ T9193] ext4_process_orphan+0x4c/0x2e0 [ 222.156620][ T9214] FAT-fs (loop5): Directory bread(block 73) failed [ 222.160226][ T9193] ext4_orphan_cleanup+0xad8/0x1320 [ 222.160251][ T9193] ext4_fill_super+0x8c65/0x93f0 [ 222.265908][ T9193] mount_bdev+0x28a/0x3c0 [ 222.270793][ T9193] legacy_get_tree+0xe6/0x180 [ 222.276027][ T9193] vfs_get_tree+0x88/0x270 [ 222.280990][ T9193] do_new_mount+0x247/0xa40 [ 222.286091][ T9193] __se_sys_mount+0x2e3/0x3d0 [ 222.291325][ T9193] do_syscall_64+0x4c/0xa0 [ 222.296292][ T9193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.302834][ T9193] [ 222.302834][ T9193] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 222.310544][ T9193] __lock_acquire+0x2c66/0x7b50 [ 222.316076][ T9193] lock_acquire+0x19e/0x400 [ 222.321282][ T9193] __mutex_lock_common+0x1e5/0x2400 [ 222.327037][ T9193] mutex_lock_nested+0x17/0x20 [ 222.332358][ T9193] dquot_commit+0x5a/0x410 [ 222.337326][ T9193] ext4_write_dquot+0x1f0/0x360 [ 222.342730][ T9193] mark_all_dquot_dirty+0xf9/0x400 [ 222.348391][ T9193] __dquot_alloc_space+0x5cb/0xe10 [ 222.354055][ T9193] ext4_mb_new_blocks+0xf80/0x47c0 [ 222.359729][ T9193] ext4_ext_map_blocks+0x17d1/0x63d0 [ 222.365567][ T9193] ext4_map_blocks+0x97f/0x1a50 [ 222.370973][ T9193] ext4_getblk+0x176/0x670 [ 222.375946][ T9193] ext4_bread+0x26/0x180 [ 222.380744][ T9193] ext4_append+0x2bb/0x560 [ 222.385706][ T9193] ext4_init_new_dir+0x2a7/0x910 [ 222.391190][ T9193] ext4_mkdir+0x4c3/0xc90 [ 222.396070][ T9193] vfs_mkdir+0x386/0x570 [ 222.400965][ T9193] ovl_mkdir_real+0x53/0x1a0 [ 222.406109][ T9193] ovl_workdir_create+0x2fb/0x640 [ 222.411707][ T9193] ovl_get_indexdir+0x186/0x460 [ 222.417108][ T9193] ovl_fill_super+0x3424/0x42a0 [ 222.422506][ T9193] mount_nodev+0x52/0xe0 [ 222.427354][ T9193] legacy_get_tree+0xe6/0x180 [ 222.432588][ T9193] vfs_get_tree+0x88/0x270 [ 222.437557][ T9193] do_new_mount+0x247/0xa40 [ 222.442615][ T9193] __se_sys_mount+0x2e3/0x3d0 [ 222.447846][ T9193] do_syscall_64+0x4c/0xa0 [ 222.452903][ T9193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.459359][ T9193] [ 222.459359][ T9193] other info that might help us debug this: [ 222.459359][ T9193] [ 222.469608][ T9193] Chain exists of: [ 222.469608][ T9193] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 222.469608][ T9193] [ 222.483319][ T9193] Possible unsafe locking scenario: [ 222.483319][ T9193] [ 222.490798][ T9193] CPU0 CPU1 [ 222.496193][ T9193] ---- ---- [ 222.501585][ T9193] lock(&ei->i_data_sem/2); [ 222.506213][ T9193] lock(&s->s_dquot.dqio_sem); [ 222.513652][ T9193] lock(&ei->i_data_sem/2); [ 222.520803][ T9193] lock(&dquot->dq_lock); [ 222.525249][ T9193] [ 222.525249][ T9193] *** DEADLOCK *** [ 222.525249][ T9193] [ 222.533409][ T9193] 5 locks held by syz.3.1671/9193: [ 222.538562][ T9193] #0: ffff8880227340e0 (&type->s_umount_key#50/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 222.548714][ T9193] #1: ffff888074fac460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 222.557912][ T9193] #2: ffff88805d6f21d8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: ovl_workdir_create+0x139/0x640 [ 222.565001][ T4459] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.568856][ T9193] #3: ffff88805f3b8c70 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 222.586370][ T9193] #4: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 222.595475][ T9193] [ 222.595475][ T9193] stack backtrace: [ 222.601393][ T9193] CPU: 1 PID: 9193 Comm: syz.3.1671 Not tainted syzkaller #0 [ 222.608798][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.619026][ T9193] Call Trace: [ 222.622340][ T9193] [ 222.625309][ T9193] dump_stack_lvl+0x188/0x250 [ 222.630026][ T9193] ? load_image+0x410/0x410 [ 222.634582][ T9193] ? show_regs_print_info+0x20/0x20 [ 222.639825][ T9193] ? print_circular_bug+0x12b/0x1a0 [ 222.645058][ T9193] check_noncircular+0x296/0x330 [ 222.650029][ T9193] ? add_chain_block+0x9b0/0x9b0 [ 222.655004][ T9193] ? lockdep_lock+0xf1/0x1f0 [ 222.659636][ T9193] ? mark_lock+0x94/0x320 [ 222.664009][ T9193] ? _find_first_zero_bit+0xd1/0xf0 [ 222.669247][ T9193] __lock_acquire+0x2c66/0x7b50 [ 222.674149][ T9193] ? check_path+0x21/0x40 [ 222.678521][ T9193] ? verify_lock_unused+0x140/0x140 [ 222.683786][ T9193] ? lockdep_lock+0xf1/0x1f0 [ 222.688423][ T9193] ? lockdep_unlock+0x143/0x2e0 [ 222.693320][ T9193] ? mark_lock+0x94/0x320 [ 222.697690][ T9193] lock_acquire+0x19e/0x400 [ 222.702233][ T9193] ? dquot_commit+0x5a/0x410 [ 222.707135][ T9193] ? __might_sleep+0xf0/0xf0 [ 222.711759][ T9193] ? read_lock_is_recursive+0x10/0x10 [ 222.717170][ T9193] ? verify_lock_unused+0x140/0x140 [ 222.722408][ T9193] __mutex_lock_common+0x1e5/0x2400 [ 222.727641][ T9193] ? dquot_commit+0x5a/0x410 [ 222.732270][ T9193] ? dquot_commit+0x5a/0x410 [ 222.736904][ T9193] ? __might_sleep+0xf0/0xf0 [ 222.741531][ T9193] ? mutex_lock_io_nested+0x60/0x60 [ 222.746772][ T9193] mutex_lock_nested+0x17/0x20 [ 222.751568][ T9193] dquot_commit+0x5a/0x410 [ 222.756052][ T9193] ext4_write_dquot+0x1f0/0x360 [ 222.760947][ T9193] mark_all_dquot_dirty+0xf9/0x400 [ 222.766099][ T9193] __dquot_alloc_space+0x5cb/0xe10 [ 222.771441][ T9193] ext4_mb_new_blocks+0xf80/0x47c0 [ 222.776604][ T9193] ? memset+0x1e/0x40 [ 222.780619][ T9193] ? ext4_mb_pa_callback+0xd0/0xd0 [ 222.785855][ T9193] ? ext4_inode_to_goal_block+0x313/0x450 [ 222.791611][ T9193] ext4_ext_map_blocks+0x17d1/0x63d0 [ 222.796950][ T9193] ? ext4_ext_release+0x10/0x10 [ 222.801867][ T9193] ? rwsem_write_trylock+0x135/0x1c0 [ 222.807192][ T9193] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 222.812780][ T9193] ext4_map_blocks+0x97f/0x1a50 [ 222.817678][ T9193] ? ext4_issue_zeroout+0x250/0x250 [ 222.822950][ T9193] ext4_getblk+0x176/0x670 [ 222.827414][ T9193] ? ext4_get_block_unwritten+0x30/0x30 [ 222.833008][ T9193] ext4_bread+0x26/0x180 [ 222.837283][ T9193] ext4_append+0x2bb/0x560 [ 222.841733][ T9193] ? __brelse+0x55/0x90 [ 222.845925][ T9193] ? ext4_init_new_dir+0x910/0x910 [ 222.851074][ T9193] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 222.856826][ T9193] ext4_init_new_dir+0x2a7/0x910 [ 222.861799][ T9193] ext4_mkdir+0x4c3/0xc90 [ 222.866162][ T9193] ? ext4_symlink+0xcd0/0xcd0 [ 222.870869][ T9193] ? inode_permission+0xef/0x480 [ 222.875839][ T9193] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 222.880899][ T9193] ? security_inode_mkdir+0xb3/0x100 [ 222.886227][ T9193] vfs_mkdir+0x386/0x570 [ 222.890511][ T9193] ovl_mkdir_real+0x53/0x1a0 [ 222.895145][ T9193] ovl_workdir_create+0x2fb/0x640 [ 222.900207][ T9193] ? ovl_mount_dir_noesc+0x240/0x240 [ 222.905536][ T9193] ? ovl_get_indexdir+0x15a/0x460 [ 222.910607][ T9193] ? do_raw_spin_unlock+0x11d/0x230 [ 222.915837][ T9193] ovl_get_indexdir+0x186/0x460 [ 222.920723][ T9193] ovl_fill_super+0x3424/0x42a0 [ 222.925630][ T9193] ? ovl_mount+0x30/0x30 [ 222.929911][ T9193] ? strlcpy+0x83/0xc0 [ 222.934027][ T9193] ? free_anon_bdev+0x20/0x20 [ 222.938738][ T9193] ? ovl_mount+0x30/0x30 [ 222.943018][ T9193] mount_nodev+0x52/0xe0 [ 222.947397][ T9193] legacy_get_tree+0xe6/0x180 [ 222.952112][ T9193] ? virtio_fs_zero_page_range+0x120/0x120 [ 222.957996][ T9193] vfs_get_tree+0x88/0x270 [ 222.962466][ T9193] do_new_mount+0x247/0xa40 [ 222.967009][ T9193] __se_sys_mount+0x2e3/0x3d0 [ 222.971823][ T9193] ? __x64_sys_mount+0xc0/0xc0 [ 222.976628][ T9193] ? lockdep_hardirqs_on+0x94/0x140 [ 222.981867][ T9193] ? __x64_sys_mount+0x1c/0xc0 [ 222.986683][ T9193] do_syscall_64+0x4c/0xa0 [ 222.991141][ T9193] ? clear_bhb_loop+0x30/0x80 [ 222.996248][ T9193] ? clear_bhb_loop+0x30/0x80 [ 223.000969][ T9193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.006896][ T9193] RIP: 0033:0x7f3d99987019 [ 223.011378][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.015332][ T4459] usb 5-1: Using ep0 maxpacket: 16 [ 223.031043][ T9193] RSP: 002b:00007f3d97bdf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.031071][ T9193] RAX: ffffffffffffffda RBX: 00007f3d99c0efa0 RCX: 00007f3d99987019 [ 223.031087][ T9193] RDX: 0000200000000b80 RSI: 0000200000000240 RDI: 0000000000000000 [ 223.031101][ T9193] RBP: 00007f3d99a1e00c R08: 0000200000000280 R09: 0000000000000000 [ 223.031116][ T9193] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 223.077500][ T9193] R13: 00007f3d99c0f038 R14: 00007f3d99c0efa0 R15: 00007fff2bad1c48 [ 223.085529][ T9193] [ 223.116872][ T9193] overlayfs: failed index dir cleanup (-512) [ 223.123196][ T9193] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 223.251316][ T9223] set_capacity_and_notify: 5 callbacks suppressed [ 223.251333][ T9223] loop5: detected capacity change from 0 to 1024 [ 223.268459][ T4459] usb 5-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 223.279819][ T4459] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.307503][ T9223] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.481227][ T4459] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.490383][ T4459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.500276][ T4459] usb 5-1: Product: syz [ 223.504525][ T4459] usb 5-1: Manufacturer: syz [ 223.509237][ T4459] usb 5-1: SerialNumber: syz [ 223.831376][ T4459] usb 5-1: 0:2 : does not exist [ 223.877149][ T4459] usb 5-1: USB disconnect, device number 15 [ 223.887698][ T4447] udevd[4447]: setting owner of /dev/bus/usb/005/015 to uid=0, gid=0 failed: No such file or directory [ 224.093616][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory