last executing test programs: 1.648170035s ago: executing program 2 (id=915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, r1, 0x65bb85a07f284181, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40000) 1.515624558s ago: executing program 2 (id=918): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000001c0)={0x6, 0xe, 0x200}) 1.44201446s ago: executing program 3 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010025bd5600fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804001800000008000d00fdffffff0a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 1.441931291s ago: executing program 2 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.305816734s ago: executing program 2 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 1.204165117s ago: executing program 3 (id=926): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) recvfrom(r0, &(0x7f0000000000)=""/78, 0x4e, 0x10001, 0x0, 0x0) 1.182770898s ago: executing program 2 (id=927): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000380)={[{@grpquota}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}]}, 0x29, 0x6239, &(0x7f0000004180)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxITib7PolfqF1MeG14a0EQqEv2K53bRb8htcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEVUBBaRKtIJsNec8z7Mzs7Mzu/Z6feacz0eKf96ZM3POnDkzu991vnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHXn62c/3ciyrPlf/sfmLHtB8+8bJzbnl73mRm8hAAAAcK1+lf/53C3pgkMruFHLMv/88u9+bWFhYSF73/Cfj35+YSFdMZFloxuyLL8uuvKj9zdalwkez8YbQy1fD/VZ/XCf60f6XD/a5/qxPtdv6HP9eJ/rl+yAJTYWv4/J72x7/tfNxS7Nbs1G8+u2d7nV440NQ0Pxdzm5Rn6bhdHj2Vx2MpvNptuWL5Zt5Mt/487mut6SxXUNtaxra/MI+dljx+I2NMI+3t62rsX7jH7yumzi5z977Njfnn/29m6z725ou79iO+/Z1tzOT4ZLim1tZBvSPonbOdSynVu7PCfDbdvZyG/X/Hvndj63wu0cXtzMddX5nI9nQ/nfv5fvp5HWX+ul/bQ1XPaLu7Isu7S42Z3LLFlXNpRtartkaPH5GS+OyOZ9NA+lF2cjqzpO71zBcdqcM9vbj9PO10R8/u8MtxtZZhtan6affGKs5Xn/5cLVHKdR81Ev91rpPAbX+rVSlmMwHhffyx/0E12Pwe3h8T929/LHYNdjp8sxmB53yzG4rd8xODQ2nG9zehIa+W0Wj8GdbcsP52tq5POZu3sfg1PnT52dmv/Yx++bO3X0xOyJ2dO7d+6c3r137/79+6eOz52cnS7+vMq9XX6bsqH0GtgW9l18DbyqY9nWQ3XhS2NL3n+v9nU43uN1uLlj2bV+HY50PrjG+rwglx7TxWvjPc2dPn55KFvmNZY/Pzuu/XWYHnfL63Ck5XXY9XtKl9fhyApeh81lzu5Y2c8sIy3/dduG5b8XXNsxuLnlGOz8eaTzGFzrn0fKcgyOh+PiBzuW/16wNWzvE5Or/XlkeMkxmB5ueO9pXpJ+3h/fn49ux+UdzStuGssuzM+eu//Ro+fPn9uZhbEuXtJyrHQer5taHlO25HgdWvXxemju5U/c0eXyzWFfjd/X/GN82eequcye+3s/V/l3t+77s+3SXVkYa2y992e37+bN/TmWZV/49ice/uZjX3j9svuzmTc/OXXtP4unXNry/ju6zPtvzP3PF+tLd/X48OhI8fodTntntO39uP2pGsnfuxr5up+bWtn78Wj4b73fj2/t8X68pWPZtX4/Hu18cPH9uNHvtx3XpvP5HA/Hycnp3u/HzWW27FrtMTnS8/34rjAbYf+/OiSFlItajp3ljtu0rpGR0fC4RuIa2o/T3W3Lj4Zs1lzXU7vCD4VpK1d2nN5zV7H8cMvtovU6Tic6ll3r4zT97mu547TR77dvV6fz+RwPx8Wtu3sfp81lnt5z7e+dG+NfW947x/odg6PDY81tHk0HYf5+ny1sjMfg/dmx7Ex2MpvJrx3Lj6dGvq7JB1b2XjkW/lvv98otPY7BezqWXetjMH0fW+7Ya4wsffBroPP5HA/HxZMP9D4Gm8u8Yd/a/ux6T7gkLdPys2vn79eW+53XHR276XodKyNhO7+9r/fvZpvLnNy/2pzZez/dGy65qct+6nz9LveamsnWZz9tCdv57P7l91Nze5rLfP7ACo+nQ1mWXfzIg/nve8O/r1y88P2vtf27S7d/07n4kQd/+sLj/7Sa7Qdg8D1fjE3F97qWf5layb//AwAAAAMh5v6hMBP5HwAAACoj5v74f4Un8j8AAABURsz9I2EmVcj/f9x/kS1veHbu+YtZauYvBPH6tBseKpaLHdfp8PXEwqLm5Q9+Zfa///HiyjZvKMuyXz70R12X3/JQ3K7CRNjOK29sv3yJr923onUfeeRiWm9rf/2L4f7j41npYdCtgjudZdk3bvlsvp6J91/O59MPHcnnw5eeeLy5zHMHiq/j7Z95SbH8X4Xy76HjR9tu/0zYDz8Oc/qt3fdHvN1XL7966773Lq4v3q6x7eb8YT/5geJ+4+fkfO7xYvm4n5fb/m9+5qmvNpd/9JXdt//iUPftfyrc71fC/J+XFcu3PgfNr+PtPhW2P64v3u7+L3+r6/Zf+XSx/Nk3FcsdCTOu/57w9fY3PTvXur8ebRxte1zZm4vl4vqnv/+n+fXx/uL9d27/+OHLbfuj8/h4+t+K+5nqWD5eHtcT/UPH+pv303p8xvU/9SdH2vZzv/VfefiZlzXvt3P993Ysd/YjO/L1L95f+yc2/fWnPtt1fXF7Dv392bbHc+hd4XUc1v/kB8LxGK7/3yvF/XV+usKRd7W//8Tlv7j5Ytvjid7y82L9V157Ip8bxjduuukFL7z50iua+y7LvrehuL9+6z/xN2fatv9LtxX7I14fO/qd619OXP+5j06ePjN/YW4m7dXHbsk/O+dtxfbE7b0lvLd2fn34zPkPzp6bmJ6YzrKJ6n6E3lX7cpg/Lcal3ksvLHkH3fFIeD7v+MtvbLr7Xz8TL//39xSXX35r8X3rVWG5z4XLN4fnb3XrX+rJO2/LX9+Np8MWLiz9vOBrsXX7f+1f0YLh8Xf+XBCP97Mv/WC+H5rX5d834uv6Grf/hzPF/Xw97NeF8MnM225bXF/r8vGzES6/u3i9X/P+C29z8Xn9u/B8v/3Hxf3H7YqP94fh55hvbWl/v4vHx9cvDnXef/4pHpfC+0l2qbg+LhX39+Xnbuu6efFzSLJLt+df/1m6n9tX9TCXM/+x+amTc6cvPDp1fnb+/NT8xz5++NSZC6fPH84/y/Pwh/rdfvH9aVP+/jQzu3dPlr9bnSnGdXajt//sI8dm9k3fPTN7/OiF4+cfOTt77sSx+fljszPzdx89fnz2o/1uPzdzcOeuA7v37Zo8MTdzcP+BA7sPTM6dPtPcjGKj+tg7/eHJ0+cO5zeZP7jnwM4HHtgzPXnqzMzswX3T05MX+t0+/9402bz1H06emz159PzcqdnJ+bmPzx7ceWDv3l19Pw3w1Nnj8xNT5y6cnrowP3tuqngsE+fzi5vf+/rdnmqa/4/i59lOjeKD+LJ33rs3fT5r01c+sexdFYt0fIDos+GzaL7zorP7V/J1zP2jYSZVyP8AAABALub+sTAT+R8AAAAqI+b+DWEm8j8AAABURsz942Gm/yWgJvm/cv3/LRf7rD82S/T/M/3/RP+/Zv3/d5et/1+8X+j/r41r7d/r/wf6//r/+v/6//r/rIGy9f9j7t+YZf79HwAAACoq5v5NYSbyPwAAAFRGzP03hZnI/wAAAFAZMfe/IMykJvm/fv3/gvP/6/+37i/9f/3/buvX/x9M+v+96f/3of8/ldWr/3+p5c9B7P9vbP1C/58yKlv/P+b+F4aZ1CT/AwAAQB3E3H9zmIn8DwAAAJURc/8tYSbyPwAAAFRGzP2bw0xqkv/1/6+p/586V/r/7duv/99O/z8cD/r/+v/rQP+/N/3/PvT/nf9/sPr/bfT/KaOy9f9j7n9RmElN8j8AAADUQcz9Lw4zkf8BAACgfEau7mYx978kzGRJ/r/KFQAAAAA3XMz9t2YdRfCa/Pu//r/z/+v/6//r/3df/8r7/8OZ/n956P/3pv/fh/6//r/+v/4/a6ps/f8892fj2UvDTGqS/wEAAKAOYu6/LcxE/gcAAIDKiLn//4WZyP8AAABQGTH3bwkzqUn+1/+vTP//F61Pnf6//n+v9ev/O/9/len/96b/34f+v/6//r/+P2uqbP3/mPtvDzOpSf4HAACAOoi5/44wE/kfAAAAKiPm/v8fZiL/AwAAQGXE3L81zKQm+V//v+T9/9gcdf5//X/9/1L2/8f1/0tH/783/f8+9P/1//X/9f9ZU2Xr/8fc/7Iwk5rkfwAAAKiDmPtfHmYi/wMAAEBlxNz/ijAT+R8AAAAqI+b+iTCTmuT/1fT/G5f0/5dznc//P7aC8/+30f/X/++1fv1/5/+vMv3/3vT/+9D/1//X/9f/Z02Vrf8fc/+dYSY1yf8AAABQBzH3bwszkf8BAACgMmLuvyvMRP4HAACAyoi5f3uYSU3yv/P/D0T/P9P/1//X/9f/1/9fGf3/3vT/+9D/1//X/9f/Z02Vrf8fc/8rw0xqkv8BAACgDmLuvzvMRP4HAACAyoi5/1VhJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6/93X7/+/2DS/+9N/78P/X/9f/1//X/WVNn6/zH3vzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP33hpnI/wAAAFAZMfdPhpnUJP/r/+v/6//r/+v/d1+//v9g0v/vTf+/D/1//X/9f/1/1lTZ+v8x998XZlKT/A8AAAB1EHP//WEm8j8AAABURsz9U2Em8j8AAABURsz902EmNcn/+v/6//r/+v+r6v+/YvF+9f8L+v/lov/fm/5/H/r/+v83vP8/qv9PpZSt/x9z/84wk5rkfwAAAKiDmPt3hZnI/wAAAFAZMffvDjOR/wEAAKAyYu7fE2ZSk/w/AP3/WO3W/9f/1/8vQ/+/hf5/Qf+/XPT/e1v7/n98iPr/+v/6/87/r//PUmXr/8fc/0CYSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf4fgP5/zvn/+/b/x1rXrf+v/99r/fr/+v9Vpv/fm/P/96H/r/8/wP3/5rGl/0/ZlK3/H3P/gTCTmuR/AAAAqIOY+18TZiL/AwAAQGXE3P9rYSbyPwAAAFRGzP2/HmZSk/yv/1+Z/n8b/X/9/17rH7T+/5j+v/7/Kuj/96b/34f+v/7/APf/nf+fMipb/z/m/oNhJjXJ/wAAAFAHMff/RpiJ/A8AAACVEXP/a8NM5H8AAACojJj7D4WZ1CT/6/+vU/8/Xqj/r/+v/+/8//r/15X+f2/6/33o/+v/6//r/7Omytb/j7n/dWEmNcn/AAAAUAcx9z8YZiL/AwAAQGXE3P/6MBP5HwAAACoj5v43hJnUJP/r/zv//43v/4+2bbv+/+Lt9P8L+v/6/6uh/9+b/n8f+v/6//r/+v+sqbL1/2Puf2OYSU3yPwAAANRBzP1vCjOR/wEAAKAyYu5/c5iJ/A8AAACVEXP/W8JMapL/9f/1/298/7/7+f+bx5r+v/5/pv+v/79K+v+96f/3of+v/6//r//Pmipb/z/m/t8MM6lJ/gcAAIA6iLn/oTAT+R8AAAAqI+b+t4aZyP8AAABQGTH3vy3MpCb5X/9f/7+s/X/n/9f/j/T/9f9XQ/+/twHr///q5nC5/n9B/7/c27/a/v9Ix9fXpf//o+X6/wsbOm+v/8/1ULb+f8z9bw8zqUn+BwAAgDqIuf8dYSbyPwAAAFRGzP3vDDOR/wEAAKAyYu7/rTCTmuR//f/mdiy2l/X/9f/zC/T/9f/1/weW/n9vA9b/d/7/Dvr/5d5+5//X/2epsvX/Y+5/V5hJTfI/AAAA1EHM/Q+Hmcj/AAAAUBkx9787zET+BwAAgMqIuf89YSY1yf/6/87/r/+v/6//3339+v+DSf+/N/3/PvT/9f/L1v//T/1/BlvZ+v8x9z8SZlKT/A8AAAB1EHP/e8NM5H8AAACojJj7fzvMRP4HAACAyoi5/31hJjXJ//r/g9L/n9D/X2X/fyxcpv+v/6//Xy/6/73p//eh/6//X7b+v/P/M+DK1v+Puf/9YSYrz//jK14SAAAAuCFi7v+dMJOa/Ps/AAAA1EHM/b8bZiL/AwAAQGXE3P97YSY1yf/6/4PS/3f+/8z5//X/Ox6P/r/+fzfr1/+P7zz6//r/+v+R/r/+v/4/ncrW/4+5//fDTGqS/wEAAKAOYu7/QJiJ/A8AAAADodv/k90p5v7DYSbyPwAAAFRGzP1Hwkxqkv/1//X/9f9L2v//i23/8oPvvuPITv1//X/9/1VZ1/P/N1/8zv+v/6//n+j/6//r/9OpbP3/mPuPhpksBr+3OcE/AAAADLaY+/8gzKQm//4PAAAAdRBz/7EwE/kfAAAAKiPm/pkwk5rkf/1//X/9/5L2/wf4/P9xfwxS/39ywwD1/+Obrv5/V+va/3/vYk9c/3+1/f+xrpd29v8b+v9t9P9Xvf3fybJM/1//nxuobP3/mPtnw0xqkv8BAACgDkLuHzpezMUr5H8AAACojJj7T4SZyP8AAABQGTH3fzDMpCb5X/9f/1//X//f+f+7r7+0/X/n/+9J/7+38vT/u3P+f/3/Qd5+/X/9f5YqW/8/5v65MJOa5H8AAACog5j7PxRmIv8DAABAZcTc/+EwE/kfAAAAKiPm/pNhJjXJ//r/+v/6//r/+v/d16//P5j0/3vT/+9D/1//X/9f/581Vbb+f8z9p8JMapL/gf9j7z6aLK3LPo6fnqcpZh42z+5ZuNAql74EFrLWF+CCDQutslyAijnNYI6Yc8AsBgygiAlzAhOKWVTMCQNm1BqLmeu6psPd9+lwus99/v/PZ+E1NNOcMzoF/qbnyw0AAPQgd/+lcYv9DwAAAM3I3X9Z3GL/AwAAQDNy9z80bulk/+v/9f/N9v/31f/v9Pr6f/1/y/T/4/T/c+j/9f/6f/0/CzW1/j93/8Pilk72PwAAAPQgd//D4xb7HwAAAJqRu//yuMX+BwAAgGbk7n9E3NLJ/t/S/6/N+uz/M+PV/7fU/3v+/46vr//X/7fsaPv/K+7+O5/+X/+v/w/6f/2//p+tptb/5+5/ZNzSyf4HAACAHuTuf1TcYv8DAABAM3L3Pzpusf8BAACgGbn7HxO3dLL/Pf/f8//1//p//f/w6+v/V5Pn/4/rqf+//NYLLr3z+nvcsJfX1//r//X/+n8Wa2r9f+7+x8Ytnex/AAAA6EHu/sfFLfY/AAAANCN3/+PjFvsfAAAAVtCJwY/m7n9C3NLJ/tf/6//1/9H/H9f/6//1/y3Q/4/rqf/fz+vr//X/+n/9P4s1tf4/d/8T45ZO9j8AAAD0IHf/k+IW+x8AAACma+g3Yo/I3X8ybrH/AQAAYCXsJkPP3X8qbulk/+v/D7///4/+fzX6f8//1//r/5ug/x+n/59D/6//1//r/1moqfX/ufuviFs62f8AAADQg9z9T45b7H8AAABoRu7+p8Qt9j8AAAA0I3f/U+OWTva//t/z//X/+v8F9v9nvqn/H6b/Pxr6/3H6/zn0/wft58/T/+v/9f9stMf+/66Rv20vpP/P3f+0uKWT/Q8AAAA9yN3/9LjF/gcAAIBm5O5/Rtxi/wMAAEAzcvc/M27pZP/r//X/+v+j7/9nW77/yvb/23/qnaH/H6b/Pxr6/3GT6f/X1gc/rP9f+f7f8//1//p/Npna8/9z9z8rbulk/wMAAEAPcvc/O24Z2f97/sV8AAAAYKly9z8nbvH1fwAAAFh5WZ3l7n9u3NLJ/tf/6//1/57/v8Dn/5/RQ/9/w4b3p/+fFv3/uMn0/zvQ/+v/V/n96//1/2w3tf4/d//z4pZO9j8AAAD0IHf/lXGL/Q8AAADNyN3//LjF/gcAAIBm5O5/QdzSyf4f7v/P/Xn9/+7o/ze/f/3/8M+PRfX/+VfU/4/2/xd5/n+fdurvL9nl5+v/g/5f/6//1/9v7v9PzPt8/T9Dptb/5+5/YdzSyf4HAACAHuTuf1HcYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/Pf9f/6//X73+3/P/z1rm8/9nR97/r+v/d6nL5//f+45d//X1/3Po//X/+v/x5/+P/FsA9P8MmVr/n7v/pXFLJ/sfAAAAepC7/2Vxi/0PAAAAq2Hj7x3Y+htKQ+7+l8ct9j8AAAA0I3f/K+KWdvb/6LM69f/6f/2//l//P/z60+r/Pf9/t1rr/+c+cHuzm+d9B/3/HPr/w+jn1xvr/6/a6fOn0P+fPOz+f4T+nyGb+v8bz318Wf1/7v5Xxi3t7H8AAADoXu7+V8Ut9j8AAAA0I3f/q+MW+x8AAACakbv/NXFLJ/v/0Pv/kXBR/6//1//r//X/+v9Fa63/33O/Pof+fw79v+f/e/6//p+F2tT/b7Cs/j93/2vjlk72PwAAAPQgd//r4hb7HwAAAJqRu/+quMX+BwAAgGbk7n993NLJ/vf8f/2//n+p/f+xmf5f/6//X6gD9ffH9P9F/6//1//r//X/LMDU+v/c/W+IWzrZ/wAAANCD3P1vjFvsfwAAAGhG7v43xS32PwAAADQjd/+b45ZO9r/+/3D7//z4Dv3//279fP1/d/2/5//r//X/C9bt8//Xhv5JtN0O/f/NDz51/80f0f/r//X/+n/9P7v0fyN/bhL9/+lz/+8yd/9b4pZO9j8AAAD0IHf/W+MW+x8AAACakbv/bXGL/Q8AAADNyN1/ddyyx/0/1jxMmf7f8//1//p//f/w6+v/V1O3/f8uef7/HPp//b/+X//PQk2i/9/wx7n73x63+Po/AAAANCN3/zviFvsfAAAAmpG7/51xi/0PAAAAzcjd/664pZP9r//X/+v/9f/6/+HX1/+vJv3/OP3/HKvU/199gP5/ffjDy+7nD2rZ71//r/9nu6n1/7n7r4lbOtn/AAAA0IPc/e+OW+x/AAAAaEbu/vfELfY/AAAANCN3/3vjlk72v/5f/6//1//r/4dfX/+/mvT/4/T/s9ns2pE3MNT/nz5/mv2/5/9P7v3r//X/bDe1/j93//vilk72PwAAAPQgd/+1cYv9DwAAAM3I3X9d3GL/AwAAQDNy978/bulk/+v/9f/6/732/3f/j6P/n+n/9f8Tpf8fp/+fY5We/6//39f7P36I71//r/9nu6n1/7n7PxC3dLL/AQAAoAe5+6+PW+x/AAAAaEbu/g/GLfY/AAAANCN3/w1xSyf7X/+v/9f/e/6//n/49fX/q+nw+v+Z/l//r/+fYxX6/8N8//p//T/bTa3/z93/obilk/0PAAAAPcjd/+G4xf4HAACAZuTu/0jcYv8DAABAM3L3fzRu6WT/6//1//p//b/+f/j19f+ryfP/x+n/59D/6//1//p/Fmq4/z+5tP4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/N/f/s5n+X/+v/z/rCPr/4zP9/8Lp/8fp/+fQ/7fZ/x+bNdT/n9jx8/X/TNHUnv+fu/+TcUsn+x8AAAB6kLv/U3GL/Q8AAADNyN3/6bjF/gcAAIBm5O7/TNzSyf7X/+v/Pf9f/6//H359z/9fTfr/cfr/OfT/bfb/nv+v/2dpptb/5+7/bNzSyf4HAACAHuTu/1zcYv8DAABAM3L3fz5usf8BAACgGbn7vxC3dLL/9f/6f/2//l//P/z6+v/VpP8fp/+fQ/+v/9f/6/9ZqKn1/7n7vxi3dLL/AQAAoAe5+2+KW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0txSyf7X/+v/9f/r2b/f1z/r//X/w+aSv9/4YX3u0X/r//X/+v/9f/6/95Nrf/P3f/luKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP9v7//Pm50tVM8a6v+jUdP/b6D/3/z+9f/DPz8G+/98857/r//X/y/EVPp/z//f3/vX/+v/V/n976n/v9f2z9f/06Kp9f+5+2+JWzrZ/wAAANCD3P1fj1vsfwAAAGhG7v5vxC32PwAAADQjd/+tcUsn+9/z//X/E+v/T3bX/+/z+f8z/b/+X/8/SP8/Tv8/h/5f/+/5/5c98H/0/yzO1Pr/3P3fjFs62f8AAADQg9z934pb7H8AAABoRu7+b8ct9j8AAAA0I3f/d+KWTva//l//P7H+v7/n/+v/9f/6/4XS/4/T/5etP7Sz+un/jw99cNn9/EEt+/030/97/j8LNLX+P3f/d+OWTvY/AAAA9CB3//fiFvsfAAAAmpG7//txi/0PAAAAzcjd/4O4pZP9r//X/7ff/1+i/9/y+vp//X/L9P/5T/Rh+v85+un/By27n1/196//1/+z3dT6/9z9t8Utnex/AAAA6EHu/h/GLfY/AAAANCN3/4/iFvsfAAAAmpG7/8dxSyf7X//fV/+/Nuux//f8f/2//r8n+v9x+v859P/6f/2//p+Fmlr/n7v/9rX1Lvc/AAAArKoH3Ocht+32+95+5j+Pz34St1w0O73LL2MDAAAAE3f37l9bn81+euaPfP0fAAAAWpS7/2dxSyf7X//fV//f5/P/9f/6f/1/T/T/4/T/c+j/9f/6f/0/CzW1/j93/8/jlg3Db33PP0oAAABgSnL3/yJu6eTr/wAAANCD3P2/jFu27X//OkAAAABYVbn7fxW3dPL1f/3/xPv/2SH1//H99P9n6f/1/0Ovr/9fTfr/cQfs/0+v6f/1/yP0//p//T9bTa3/z93/67ilk/0PAAAAjdr0Kwq5+38Tt9j/AAAA0Izc/b+NW+x/AAAAaEbu/t/FLZ3sf/3/kff/maof4vP/T9S3PP+/8/7/yuODr6//1/+3TP8/zvP/59D/t9L/n6//1/8zDVPr/3P33xG3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xJ//v6/+fxfP/9f/99H/7/D67fT//3/BqZsuftB11+j/Oeco+//8uaD/1//r/8+aUP/v+f/6fyZi8f3/+qYP7rX/z93/p7ilk/0PAAAAPcjdf2fcYv8DAABAM3L3/zlusf8BAACgGbn7/xK3dLL/9f879P/Z3+/uh6L/3/L+99P/53/XS+j/T+27/z8xm82W0v9nU9x7/+/5//r/7Tz/f5z+fw79v/5f/6//Z6EW3/9v/uBe+//c/X+NWzrZ/wAAANCD3P1/i1ty/6/t+ZfuAQAAgInJ3f/3uMXX/wEAAKAZufv/Ebd0sv/1/57/P5X+P3n+/7nPa+v5/xdXnNpn/3/P+pb+/3Dp/8fp/+fQ/+v/9f/6fxZqav1/7v5/xi2d7H8AAADoQe7+u+IW+x8AAACakbv/X3GL/Q8AAADNyN3/77ilk/2v/2+1/88iXv+v/59K/+/5/57/fzT0/+P0/3O02P8f2/0Pf9n9/EEt+/3r//X/bDe1/j93/38DAAD//2TvY9A=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.068010791s ago: executing program 3 (id=930): unshare(0x26020480) r0 = socket(0x28, 0x5, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 979.479883ms ago: executing program 3 (id=932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000f00)={0x0, @in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}}, 0x9, 0x2, 0x1, 0x7fff, 0x4a, 0x8001, 0x4}, &(0x7f0000000fc0)=0x9c) 901.015526ms ago: executing program 3 (id=935): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee01) ioctl$KDGKBDIACR(r0, 0x4b4e, 0x0) 803.869818ms ago: executing program 3 (id=938): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x40000000) 745.58785ms ago: executing program 0 (id=940): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffff31, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f00000009c0), &(0x7f00000006c0)=@udp, 0x1}, 0x20) 654.293942ms ago: executing program 0 (id=942): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r1}) 643.458733ms ago: executing program 1 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8818) 623.535353ms ago: executing program 4 (id=944): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {@creator={'creator', 0x3d, "062d407f"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}]}, 0x5, 0x357, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 516.059996ms ago: executing program 0 (id=945): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0x8000, 0x9, 0x4, 0xb}}) 515.867696ms ago: executing program 1 (id=946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 505.292097ms ago: executing program 0 (id=947): syz_clone3(&(0x7f0000000300)={0x100, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 433.034228ms ago: executing program 4 (id=948): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) 348.132441ms ago: executing program 0 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000000f000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 348.014681ms ago: executing program 1 (id=950): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) kexec_load(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 295.088172ms ago: executing program 4 (id=951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 279.962972ms ago: executing program 0 (id=952): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0x40d, 0xe2}, {&(0x7f0000000100)=[{0x5, 0x700}, {0x6, 0xe5}], 0x2, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {&(0x7f0000000040)=[0x7], 0x1, 0x8, 0xe, 0xffff}}) 232.103725ms ago: executing program 1 (id=953): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000, 0x4100}) 225.667524ms ago: executing program 1 (id=954): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a", 0xb9}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3d5", 0x1cc}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea4", 0x36}], 0x3}, 0x8001) 221.362914ms ago: executing program 4 (id=955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)={0x28, r1, 0x1, 0x74bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800) 109.149468ms ago: executing program 1 (id=956): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x400327c) lstat(&(0x7f0000010100)='./file2\x00', &(0x7f0000010140)) 108.487988ms ago: executing program 4 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840) 161.431µs ago: executing program 2 (id=958): r0 = timerfd_create(0x1, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000), 0x0) 0s ago: executing program 4 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000002b80)=""/4092, 0xffc}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000001580)=""/174, 0xae}], 0x3}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): eady [ 55.040141][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.049137][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.059119][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.069917][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.078659][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.138514][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.171103][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.180515][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.181542][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.191573][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.199649][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.218786][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.229380][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.240042][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.249885][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.260747][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.275242][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.293284][ T4193] device veth0_macvtap entered promiscuous mode [ 55.304935][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.314353][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.323347][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.332176][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.353707][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.365500][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.377093][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.389771][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.399958][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.410675][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.423177][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.432727][ T4193] device veth1_macvtap entered promiscuous mode [ 55.451998][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.459916][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.469162][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.479721][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.489420][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.498386][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.508972][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.536812][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.548817][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.557619][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.572936][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.584510][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.594681][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.605416][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.615457][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.627346][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.637207][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.647635][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.658632][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.685662][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.687916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.697366][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.702662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.710901][ T4173] Bluetooth: hci4: command 0x040f tx timeout [ 55.722428][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.733750][ T4173] Bluetooth: hci3: command 0x040f tx timeout [ 55.734830][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.742000][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 55.755072][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.755719][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 55.766780][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.777061][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 55.783056][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.798713][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.808608][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.819112][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.830114][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.845489][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.855709][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.867094][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.878870][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.887824][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.897848][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.907120][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.933703][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.941526][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.961344][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.019023][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.041446][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.075931][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.088996][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.102865][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.110683][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.146789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.155249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.163832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.203307][ T4262] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 56.227921][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.239496][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.311801][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.323711][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.351051][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.365972][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.390780][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.400574][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.431162][ T4266] loop2: detected capacity change from 0 to 2048 [ 56.432388][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.443136][ T4270] loop1: detected capacity change from 0 to 256 [ 56.469021][ T4266] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=301129, location=301129 [ 56.554465][ T4270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 56.595545][ T4266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.597140][ T4272] loop4: detected capacity change from 0 to 512 [ 56.670210][ T4276] loop0: detected capacity change from 0 to 1024 [ 56.696964][ T4272] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.725180][ T4272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.772247][ T4279] loop3: detected capacity change from 0 to 128 [ 56.819222][ T4279] ======================================================= [ 56.819222][ T4279] WARNING: The mand mount option has been deprecated and [ 56.819222][ T4279] and is ignored by this kernel. Remove the mand [ 56.819222][ T4279] option from the mount to silence this warning. [ 56.819222][ T4279] ======================================================= [ 56.827946][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 56.862847][ T4272] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.8: invalid indirect mapped block 9 (level 0) [ 56.887900][ T4272] EXT4-fs (loop4): 1 truncate cleaned up [ 56.914300][ T4279] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 56.917214][ T4272] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 56.929265][ T4279] hpfs: filesystem error: improperly stopped [ 56.948206][ T4279] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 56.956340][ T4279] hpfs: You really don't want any checks? You are crazy... [ 56.963992][ T4279] hpfs: hpfs_map_sector(): read error [ 56.969548][ T4279] hpfs: code page support is disabled [ 57.006240][ T4279] hpfs: hpfs_map_4sectors(): unaligned read [ 57.018668][ T4279] hpfs: hpfs_map_4sectors(): unaligned read [ 57.034921][ T4279] hpfs: filesystem error: unable to find root dir [ 57.219340][ T4300] loop2: detected capacity change from 0 to 1024 [ 57.310135][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.616876][ T4325] process 'syz.4.31' launched '/dev/fd/3' with NULL argv: empty string added [ 57.729472][ T4331] loop2: detected capacity change from 0 to 2048 [ 57.794325][ T4195] Bluetooth: hci1: command 0x0419 tx timeout [ 57.812569][ T4329] loop1: detected capacity change from 0 to 4096 [ 57.822909][ T4195] Bluetooth: hci2: command 0x0419 tx timeout [ 57.840733][ T4195] Bluetooth: hci3: command 0x0419 tx timeout [ 57.860301][ T4195] Bluetooth: hci4: command 0x0419 tx timeout [ 57.910379][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 57.931776][ T4337] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.183087][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 58.196806][ T4345] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 58.210811][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 58.279690][ T4348] loop4: detected capacity change from 0 to 512 [ 58.662969][ T4368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.48'. [ 58.904575][ T4386] netlink: 'syz.4.57': attribute type 8 has an invalid length. [ 58.947407][ T4386] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.57'. [ 59.106059][ T4400] loop0: detected capacity change from 0 to 256 [ 59.172232][ T4399] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 59.192953][ T4400] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 59.630216][ T4414] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 59.677211][ T4414] Quota error (device loop0): write_blk: dquota write failed [ 59.681722][ T4173] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.702062][ T4414] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 59.760184][ T4414] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.72: Failed to acquire dquot type 0 [ 59.818181][ T4414] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.72: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.847004][ T4412] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (4412) [ 59.887128][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.896592][ T4414] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.72: Invalid inode bitmap blk 0 in block_group 0 [ 59.913817][ T4414] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 59.923008][ T154] Quota error (device loop0): remove_tree: Getting block too big (0 >= 8) [ 59.932088][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 59.932503][ T4412] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 59.944598][ T4414] EXT4-fs (loop0): 1 orphan inode deleted [ 59.944625][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 59.955076][ T4173] usb 5-1: Using ep0 maxpacket: 8 [ 60.003147][ T4414] syz.0.72 (4414) used greatest stack depth: 20336 bytes left [ 60.009849][ T4412] BTRFS info (device loop1): using free space tree [ 60.017745][ T4412] BTRFS info (device loop1): has skinny extents [ 60.090515][ T4412] BTRFS info (device loop1): enabling ssd optimizations [ 60.121843][ T4173] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 60.135540][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 60.252052][ T4227] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 60.270399][ T4227] usb 4-1: config 0 has no interface number 0 [ 60.311961][ T4173] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 60.331934][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.345310][ T4173] usb 5-1: Product: syz [ 60.349511][ T4173] usb 5-1: Manufacturer: syz [ 60.361732][ T4173] usb 5-1: SerialNumber: syz [ 60.378893][ T4173] usb 5-1: config 0 descriptor?? [ 60.431927][ T4227] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 60.444543][ T4173] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 60.467858][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.487529][ T4173] usb 5-1: setting power ON [ 60.497949][ T4173] dvb-usb: bulk message failed: -22 (2/0) [ 60.504649][ T4227] usb 4-1: Product: syz [ 60.519072][ T4227] usb 4-1: Manufacturer: syz [ 60.527507][ T4227] usb 4-1: SerialNumber: syz [ 60.535346][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.553222][ T4227] usb 4-1: config 0 descriptor?? [ 60.579165][ T4173] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 60.593950][ T4227] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 60.602980][ T4173] usb 5-1: media controller created [ 60.640763][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.653560][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 60.659522][ T4408] cxusb: i2c wr: len=80 is too big! [ 60.659522][ T4408] [ 60.698377][ T4173] usb 5-1: selecting invalid altsetting 6 [ 60.706167][ T4173] usb 5-1: digital interface selection failed (-22) [ 60.716803][ T4173] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 60.725346][ T4441] JBD2: Ignoring recovery information on journal [ 60.826908][ T4227] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 60.846469][ T4441] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 60.848578][ T4227] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 60.865377][ T4173] usb 5-1: setting power OFF [ 60.870231][ T4173] dvb-usb: bulk message failed: -22 (2/0) [ 60.917001][ T4173] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 60.991848][ T4173] (NULL device *): no alternate interface [ 61.116495][ T4173] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 61.143386][ T4173] usb 5-1: USB disconnect, device number 2 [ 61.224550][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 61.246820][ T4227] usb 4-1: USB disconnect, device number 2 [ 61.261656][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 61.292450][ T4227] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 61.318105][ T4227] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 61.348568][ T4227] quatech2 4-1:0.51: device disconnected [ 61.417463][ T4461] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 61.453270][ T4453] Process accounting resumed [ 61.458935][ T4453] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 61.492791][ T4453] FAT-fs (loop2): Filesystem has been set read-only [ 61.552626][ T4185] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 61.693368][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.730778][ T4477] set_capacity_and_notify: 6 callbacks suppressed [ 61.730793][ T4477] loop2: detected capacity change from 0 to 4096 [ 61.794717][ T4483] netlink: 128 bytes leftover after parsing attributes in process `syz.3.90'. [ 61.812253][ T4477] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 61.827111][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 61.855422][ T4485] loop1: detected capacity change from 0 to 512 [ 61.913479][ T4477] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 61.931703][ T4173] usb 5-1: Using ep0 maxpacket: 32 [ 62.051866][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.118361][ T4173] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 62.137421][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.91: corrupted inode contents [ 62.160553][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.168708][ T4485] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.91: mark_inode_dirty error [ 62.182290][ T4173] usb 5-1: config 0 descriptor?? [ 62.195338][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.91: corrupted inode contents [ 62.238133][ T4485] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.91: mark_inode_dirty error [ 62.328251][ T4485] Quota error (device loop1): write_blk: dquota write failed [ 62.344858][ T4505] loop3: detected capacity change from 0 to 4096 [ 62.351413][ T4485] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.369237][ T4485] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.91: Failed to acquire dquot type 0 [ 62.428162][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.91: corrupted inode contents [ 62.444346][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 62.477681][ T4485] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.91: mark_inode_dirty error [ 62.512356][ T4517] loop2: detected capacity change from 0 to 256 [ 62.527260][ T4505] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 62.556948][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.91: corrupted inode contents [ 62.658638][ T4517] FAT-fs (loop2): Directory bread(block 64) failed [ 62.681720][ T4517] FAT-fs (loop2): Directory bread(block 65) failed [ 62.700182][ T4517] FAT-fs (loop2): Directory bread(block 66) failed [ 62.710021][ T4485] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.91: mark_inode_dirty error [ 62.721288][ T4517] FAT-fs (loop2): Directory bread(block 67) failed [ 62.736301][ T4517] FAT-fs (loop2): Directory bread(block 68) failed [ 62.766796][ T4517] FAT-fs (loop2): Directory bread(block 69) failed [ 62.775772][ T4517] FAT-fs (loop2): Directory bread(block 70) failed [ 62.786859][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.91: corrupted inode contents [ 62.798833][ T4524] loop0: detected capacity change from 0 to 4096 [ 62.809795][ T4517] FAT-fs (loop2): Directory bread(block 71) failed [ 62.811855][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.832632][ T4517] FAT-fs (loop2): Directory bread(block 72) failed [ 62.839774][ T4524] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 62.858647][ T4517] FAT-fs (loop2): Directory bread(block 73) failed [ 62.860865][ T4485] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 62.906202][ T4524] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 62.906231][ T4173] usb 5-1: string descriptor 0 read error: -71 [ 62.951736][ T4173] uclogic 0003:5543:0081.0001: failed retrieving string descriptor #200: -71 [ 62.960574][ T4173] uclogic 0003:5543:0081.0001: failed retrieving pen parameters: -71 [ 62.969093][ T4485] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.91: corrupted inode contents [ 62.988539][ T4485] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.91: mark_inode_dirty error [ 63.016189][ T4173] uclogic 0003:5543:0081.0001: failed probing pen v2 parameters: -71 [ 63.024669][ T4173] uclogic 0003:5543:0081.0001: failed probing parameters: -71 [ 63.033025][ T4485] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 63.042390][ T4173] uclogic: probe of 0003:5543:0081.0001 failed with error -71 [ 63.091235][ T4485] EXT4-fs (loop1): 1 truncate cleaned up [ 63.106877][ T4173] usb 5-1: USB disconnect, device number 3 [ 63.122903][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.159148][ T4485] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.288000][ T4485] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 14037762 out of range 0-7 [ 63.290795][ T4534] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 63.304552][ T4485] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 63.327560][ T4485] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.91: Failed to acquire dquot type 1 [ 63.567052][ T4544] loop0: detected capacity change from 0 to 64 [ 63.796242][ T4453] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.840389][ T4556] device vlan2 entered promiscuous mode [ 63.870209][ T4556] device bridge0 entered promiscuous mode [ 63.887606][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 63.911230][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 64.101854][ T4453] usb 5-1: Using ep0 maxpacket: 16 [ 64.125671][ T4560] loop3: detected capacity change from 0 to 4096 [ 64.166070][ T4560] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.170032][ T4554] loop2: detected capacity change from 0 to 32768 [ 64.196581][ T4560] NILFS (loop3): mounting unchecked fs [ 64.226018][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop3 [ 64.242057][ T4453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.273021][ T4453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.275661][ T4560] NILFS (loop3): recovery complete [ 64.283330][ T4452] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.311898][ T4453] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.326315][ T4561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.341259][ T4453] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.369504][ T4453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.401257][ T4453] usb 5-1: config 0 descriptor?? [ 64.448670][ T4552] loop1: detected capacity change from 0 to 40427 [ 64.490021][ T4552] F2FS-fs (loop1): invalid crc value [ 64.625015][ T4552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.708809][ T4570] loop3: detected capacity change from 0 to 4096 [ 64.726130][ T4552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.729945][ T4570] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 64.768027][ T4570] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 64.839066][ T26] audit: type=1800 audit(1777496525.159:2): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 64.885277][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 64.910084][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 64.918202][ T4452] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 64.936130][ T4184] attempt to access beyond end of device [ 64.936130][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 64.938253][ T4452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.956373][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 64.963959][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 64.976403][ T4452] usb 1-1: Product: syz [ 64.991677][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 64.999081][ T4452] usb 1-1: Manufacturer: syz [ 65.006049][ T4452] usb 1-1: SerialNumber: syz [ 65.011866][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.019101][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.038771][ T4452] usb 1-1: config 0 descriptor?? [ 65.044193][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.051561][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.059140][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.067143][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.094045][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.127245][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.134982][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.142495][ T4453] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 65.153844][ T4453] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 65.187533][ T4453] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 65.209229][ T4453] usb 5-1: USB disconnect, device number 4 [ 65.425590][ T4589] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 65.441044][ T4173] usb 1-1: USB disconnect, device number 2 [ 65.441674][ T4589] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.133'. [ 65.655674][ T4591] fido_id[4591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 65.767928][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.771094][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.885909][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.924622][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.939730][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.950687][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.977201][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.995270][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.009150][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.023812][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.040475][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.070558][ T4603] device macsec1 entered promiscuous mode [ 66.084279][ T4616] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 66.128186][ T4616] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 66.137990][ T4616] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 66.156181][ T4616] ntfs3: loop1: Failed to load $Bitmap. [ 66.191924][ T4616] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 66.216241][ T4616] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 66.251926][ T4622] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 66.298514][ T4622] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.343397][ T4624] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.349133][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 66.375167][ T4622] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.149: bad orphan inode 15 [ 66.398047][ T4616] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 66.402569][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 66.416517][ T4629] netlink: 'syz.0.151': attribute type 13 has an invalid length. [ 66.486243][ T4622] ext4_test_bit(bit=14, block=18) = 1 [ 66.504801][ T4622] is_bad_inode(inode)=0 [ 66.509078][ T4622] NEXT_ORPHAN(inode)=1023 [ 66.528467][ T4622] max_ino=32 [ 66.536976][ T4622] i_nlink=0 [ 66.557370][ T4622] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2923: inode #15: comm syz.3.149: corrupted xattr block 19 [ 66.636474][ T4622] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 66.636601][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.665999][ T4639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.157'. [ 66.798763][ T4647] set_capacity_and_notify: 4 callbacks suppressed [ 66.798778][ T4647] loop0: detected capacity change from 0 to 512 [ 66.858162][ T4647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.902806][ T4647] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.161: bad orphan inode 131083 [ 66.905988][ T4647] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 67.089030][ T4663] xt_policy: neither incoming nor outgoing policy selected [ 67.283874][ T4672] loop2: detected capacity change from 0 to 1764 [ 67.348120][ T4676] mmap: syz.1.174 (4676) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 67.356955][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 67.518788][ T4683] loop0: detected capacity change from 0 to 256 [ 67.589070][ T4683] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 67.667530][ T4695] loop1: detected capacity change from 0 to 256 [ 67.810194][ T4698] loop2: detected capacity change from 0 to 4096 [ 67.916045][ T4698] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 67.977987][ T4698] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 67.983947][ T4716] loop0: detected capacity change from 0 to 64 [ 68.016149][ T4717] loop3: detected capacity change from 0 to 1024 [ 68.045743][ T4698] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 68.087674][ T4698] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 68.186680][ T4698] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 68.215942][ T4717] hfsplus: bad catalog file entry [ 68.245309][ T4698] ntfs: volume version 3.1. [ 68.312081][ T4698] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 68.406714][ T4698] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 68.436051][ T4495] hfsplus: bad catalog file entry [ 68.494525][ T4698] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 68.554169][ T4698] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 68.814648][ T4711] loop4: detected capacity change from 0 to 32768 [ 68.913577][ T4711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.192 (4711) [ 68.936909][ T4713] loop1: detected capacity change from 0 to 32768 [ 68.972437][ T4711] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 68.987561][ T4711] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 69.007417][ T4711] BTRFS info (device loop4): use zstd compression, level 3 [ 69.012707][ T4743] loop3: detected capacity change from 0 to 764 [ 69.022950][ T4711] BTRFS info (device loop4): enabling auto defrag [ 69.070564][ T4711] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 69.095792][ T4711] BTRFS info (device loop4): use lzo compression, level 0 [ 69.122215][ T4711] BTRFS info (device loop4): max_inline at 4096 [ 69.132627][ T4711] BTRFS info (device loop4): using free space tree [ 69.149193][ T4743] rock: directory entry would overflow storage [ 69.150185][ T4711] BTRFS info (device loop4): has skinny extents [ 69.166650][ T4743] rock: sig=0x5850, size=36, remaining=22 [ 69.208321][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 69.235767][ T4750] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 69.371240][ T4750] ntfs3: loop2: failed to convert "c46c" to iso8859-13 [ 69.599103][ T4711] BTRFS info (device loop4): enabling ssd optimizations [ 69.839215][ T4788] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.322006][ T4794] NILFS (loop3): invalid segment: Checksum error in segment payload [ 70.366613][ T4794] NILFS (loop3): trying rollback from an earlier position [ 70.463964][ T4794] NILFS (loop3): recovery complete [ 70.501843][ T4814] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.667269][ T4809] ntfs: volume version 3.1. [ 70.960997][ T4782] XFS (loop2): Mounting V5 Filesystem [ 70.985514][ T4820] EXT4-fs (loop1): Ignoring removed bh option [ 71.013767][ T4836] IPVS: ip_vs_edit_dest(): server weight less than zero [ 71.130400][ T4782] XFS (loop2): Ending clean mount [ 71.134248][ T4820] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 71.216706][ T4185] XFS (loop2): Unmounting Filesystem [ 71.226644][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.242295][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.385424][ T3045] hfsplus: b-tree write err: -5, ino 25 [ 71.405181][ T3045] hfsplus: b-tree write err: -5, ino 4 [ 71.435127][ T3045] hfsplus: b-tree write err: -5, ino 2 [ 71.624600][ T4860] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 71.699099][ T4449] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 71.708078][ T4449] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 71.745269][ T4449] hid-generic 0004:0004:FFFF0001.0003: unknown main item tag 0x0 [ 71.756477][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.774235][ T4449] hid-generic 0004:0004:FFFF0001.0003: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 71.796245][ T4864] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.904928][ T4878] set_capacity_and_notify: 12 callbacks suppressed [ 71.904942][ T4878] loop3: detected capacity change from 0 to 64 [ 71.986283][ T4879] loop1: detected capacity change from 0 to 512 [ 72.062902][ T4879] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.121208][ T4879] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.218245][ T4879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.252: bg 0: block 248: padding at end of block bitmap is not set [ 72.243258][ T4879] __quota_error: 7 callbacks suppressed [ 72.243273][ T4879] Quota error (device loop1): write_blk: dquota write failed [ 72.257835][ T4879] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 72.268391][ T4879] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.252: Failed to acquire dquot type 1 [ 72.290657][ T4879] EXT4-fs (loop1): 1 truncate cleaned up [ 72.331674][ T4879] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 72.445612][ T4908] loop4: detected capacity change from 0 to 256 [ 72.532732][ T4908] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 72.599223][ T4911] loop0: detected capacity change from 0 to 8192 [ 72.640860][ T4889] loop2: detected capacity change from 0 to 32768 [ 72.692501][ T4917] fido_id[4917]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.692702][ T4911] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.878138][ T4923] loop4: detected capacity change from 0 to 2048 [ 72.945987][ T4923] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.961957][ T4923] NILFS (loop4): mounting unchecked fs [ 73.017443][ T4923] NILFS (loop4): recovery complete [ 73.052155][ T4930] loop1: detected capacity change from 0 to 512 [ 73.059953][ T4931] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.208848][ T4938] loop0: detected capacity change from 0 to 1024 [ 73.248469][ T4916] loop3: detected capacity change from 0 to 32768 [ 73.267845][ T4944] loop4: detected capacity change from 0 to 128 [ 73.304535][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,sysvgroups,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 73.339615][ T4938] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.359514][ T4944] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 73.387296][ T4946] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 73.409214][ T4916] XFS (loop3): Mounting V5 Filesystem [ 73.461661][ T4944] hpfs: filesystem error: improperly stopped [ 73.467897][ T4944] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 73.477032][ T4944] hpfs: You really don't want any checks? You are crazy... [ 73.484821][ T4944] hpfs: hpfs_map_sector(): read error [ 73.490199][ T4944] hpfs: code page support is disabled [ 73.495945][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 73.504375][ T4944] hpfs: hpfs_map_4sectors(): unaligned read [ 73.510519][ T4944] hpfs: filesystem error: unable to find root dir [ 73.518309][ T4946] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.542159][ T4938] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.282: directory missing '..' [ 73.573947][ T4916] XFS (loop3): Ending clean mount [ 73.574020][ T4946] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 73.591315][ T4946] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 73.612209][ T4946] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 73.645712][ T4916] XFS (loop3): Quotacheck needed: Please wait. [ 73.680454][ T4946] ntfs: volume version 3.1. [ 73.696981][ T4946] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 73.768608][ T4916] XFS (loop3): Quotacheck: Done. [ 73.783341][ T4946] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 73.816763][ T4959] 9pnet: p9_fd_create_unix (4959): problem connecting socket: éq‰Y’3aK: -111 [ 73.871338][ T4946] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 73.959898][ T4193] XFS (loop3): Unmounting Filesystem [ 74.214555][ T4967] device bridge_slave_1 left promiscuous mode [ 74.263413][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.366012][ T4967] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 74.571703][ T4804] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.824990][ T4804] usb 5-1: Using ep0 maxpacket: 16 [ 74.841716][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.941882][ T4804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 74.961098][ T4804] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 74.972326][ T4804] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 74.982715][ T4804] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 75.013328][ T4804] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 75.026324][ T4804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 75.049668][ T4804] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 75.059380][ T4986] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.072209][ T4986] REISERFS (device loop0): using ordered data mode [ 75.078828][ T4986] reiserfs: using flush barriers [ 75.098802][ T4804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.111816][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 75.134933][ T4986] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.152850][ T4804] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 75.226666][ T4986] REISERFS (device loop0): checking transaction log (loop0) [ 75.256964][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.299960][ T4232] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 75.359406][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.405341][ T4804] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 75.408699][ T4232] usb 3-1: config 0 descriptor?? [ 75.435771][ T4804] usb 5-1: USB disconnect, device number 5 [ 75.467661][ T4986] REISERFS (device loop0): Using tea hash to sort names [ 75.497065][ T4986] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 75.512321][ T4986] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 75.617782][ T4986] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 75.722419][ T5002] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 75.751660][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 69: comm syz.3.306: lblock 8 mapped to illegal pblock 69 (length 1) [ 75.767868][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 75.799687][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 68: comm syz.3.306: lblock 7 mapped to illegal pblock 68 (length 1) [ 75.852302][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 75.858995][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 67: comm syz.3.306: lblock 6 mapped to illegal pblock 67 (length 1) [ 75.887062][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 75.906361][ T4232] hid-retrode 0003:0403:97C1.0004: unknown global tag 0xd [ 75.922088][ T4232] hid-retrode 0003:0403:97C1.0004: item 0 1 1 13 parsing failed [ 75.942060][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.306: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.947902][ T4232] hid-retrode: probe of 0003:0403:97C1.0004 failed with error -22 [ 75.966221][ T5014] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.062215][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 76.078049][ T5002] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.306: Failed to acquire dquot type 0 [ 76.111550][ T4449] usb 3-1: USB disconnect, device number 2 [ 76.153227][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 76.160044][ T5002] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 76.178793][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 76.198972][ T5002] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.306: mark_inode_dirty error [ 76.216656][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'. [ 76.243097][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 76.262562][ T5002] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 76.273351][ T5002] EXT4-fs (loop3): 1 orphan inode deleted [ 76.279094][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 76.311894][ T4243] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.345247][ T23] cfg80211: failed to load regulatory.db [ 76.346370][ T4243] EXT4-fs (loop3): Remounting filesystem read-only [ 76.369369][ T5028] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.316: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.389407][ T4243] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 76.412567][ T5002] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 76.462107][ T4243] EXT4-fs (loop3): Remounting filesystem read-only [ 76.470412][ T5028] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.316: lblock 0 mapped to illegal pblock 48 (length 1) [ 76.495270][ T5002] EXT4-fs (loop3): Remounting filesystem read-only [ 76.529483][ T5028] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.316: Failed to acquire dquot type 0 [ 76.603950][ T5028] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 76.631553][ T4193] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 76.675692][ T5028] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.316: mark_inode_dirty error [ 76.765381][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 76.779990][ T5028] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 76.797735][ T4193] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 76.811101][ T5028] EXT4-fs (loop0): 1 orphan inode deleted [ 76.819415][ T4193] EXT4-fs (loop3): Remounting filesystem read-only [ 76.828592][ T699] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.850070][ T5028] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 76.889098][ T699] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 76.954938][ T5043] set_capacity_and_notify: 8 callbacks suppressed [ 76.954952][ T5043] loop2: detected capacity change from 0 to 4096 [ 77.039979][ T699] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.102476][ T699] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 77.152526][ T5048] loop3: detected capacity change from 0 to 64 [ 77.157377][ T4186] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.193748][ T4186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 77.237150][ T4186] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 77.271513][ T4185] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 77.297811][ T4185] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 77.433589][ T5052] loop0: detected capacity change from 0 to 16 [ 77.491985][ T5052] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.522427][ T5052] attempt to access beyond end of device [ 77.522427][ T5052] loop0: rw=524288, want=34359738368, limit=16 [ 77.570884][ T5035] loop4: detected capacity change from 0 to 32768 [ 77.641587][ T5052] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 77.663532][ T5052] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 77.673007][ T5052] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 77.683115][ T5052] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 77.692442][ T5052] attempt to access beyond end of device [ 77.692442][ T5052] loop0: rw=524288, want=56, limit=16 [ 77.705853][ T5052] attempt to access beyond end of device [ 77.705853][ T5052] loop0: rw=0, want=34359738368, limit=16 [ 77.717955][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 77.717965][ T26] audit: type=1800 audit(1777496538.049:3): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.327" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 77.744089][ T5055] attempt to access beyond end of device [ 77.744089][ T5055] loop0: rw=0, want=34359738368, limit=16 [ 77.797569][ T26] audit: type=1800 audit(1777496538.119:4): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.327" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 77.811320][ T5035] XFS (loop4): Mounting V5 Filesystem [ 78.007073][ T5035] XFS (loop4): Ending clean mount [ 78.009764][ T5035] XFS (loop4): Quotacheck needed: Please wait. [ 78.099627][ T5035] XFS (loop4): Quotacheck: Done. [ 78.183662][ T4197] XFS (loop4): Unmounting Filesystem [ 78.561216][ T5050] loop2: detected capacity change from 0 to 32768 [ 78.674507][ T5050] XFS (loop2): Mounting V5 Filesystem [ 78.751136][ T5050] XFS (loop2): Ending clean mount [ 78.879860][ T4185] XFS (loop2): Unmounting Filesystem [ 78.924530][ T5119] loop4: detected capacity change from 0 to 2048 [ 78.932708][ T4232] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.077240][ T5119] loop4: p1 p2 p3 [ 79.077240][ T5119] p1: [ 79.137760][ T5119] loop4: p2 size 458752 extends beyond EOD, truncated [ 79.140602][ T5112] loop3: detected capacity change from 0 to 32768 [ 79.196882][ T5119] loop4: p3 start 65280 is beyond EOD, truncated [ 79.247083][ T5112] XFS (loop3): Mounting V5 Filesystem [ 79.305543][ T5117] loop1: detected capacity change from 0 to 32768 [ 79.328952][ T5130] netlink: 'syz.2.354': attribute type 29 has an invalid length. [ 79.341224][ T5130] netlink: 'syz.2.354': attribute type 29 has an invalid length. [ 79.349767][ T4232] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.358198][ T4232] usb 1-1: config 0 has no interface number 0 [ 79.363608][ T5130] netlink: 'syz.2.354': attribute type 29 has an invalid length. [ 79.364770][ T4232] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 79.381393][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.381435][ T5112] XFS (loop3): Ending clean mount [ 79.418816][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 79.438789][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.441099][ T4232] usb 1-1: config 0 descriptor?? [ 79.506501][ T4232] usb 1-1: selecting invalid altsetting 1 [ 79.513262][ T4232] dvb_ttusb_budget: ttusb_init_controller: error [ 79.523729][ T4232] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 79.564544][ T4232] DVB: Unable to find symbol cx22700_attach() [ 79.592746][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.619346][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 79.711658][ T4232] DVB: Unable to find symbol tda10046_attach() [ 79.720182][ T4232] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 79.756948][ T4193] XFS (loop3): Unmounting Filesystem [ 79.828066][ T4232] usb 1-1: USB disconnect, device number 3 [ 79.923312][ T5150] loop2: detected capacity change from 0 to 1024 [ 80.054066][ T5150] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 80.061252][ T5150] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 80.122004][ T5150] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 80.367166][ T5167] netlink: 'syz.3.360': attribute type 2 has an invalid length. [ 80.395907][ T5167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.360'. [ 80.679095][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 80.811682][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.966898][ T5197] loop0: detected capacity change from 0 to 256 [ 81.002870][ T5198] sp0: Synchronizing with TNC [ 81.038171][ T5197] exFAT-fs (loop0): bogus sectors bits per cluster : 141 [ 81.038171][ T5197] [ 81.051807][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 81.063699][ T5197] exFAT-fs (loop0): failed to read boot sector [ 81.080170][ T5197] exFAT-fs (loop0): failed to recognize exfat type [ 81.182025][ T4232] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 81.245651][ T5197] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 81.372022][ T4232] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.381121][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.407885][ T4232] usb 3-1: Product: syz [ 81.426520][ T4232] usb 3-1: Manufacturer: syz [ 81.431171][ T4232] usb 3-1: SerialNumber: syz [ 81.483740][ T5208] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 81.500524][ T4232] r8152-cfgselector 3-1: config 0 descriptor?? [ 81.525486][ T5208] REISERFS (device loop4): using ordered data mode [ 81.595088][ T5208] reiserfs: using flush barriers [ 81.631787][ T5208] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.683862][ T5208] REISERFS (device loop4): checking transaction log (loop4) [ 81.693559][ T5208] REISERFS (device loop4): Using r5 hash to sort names [ 81.701052][ T5208] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 81.766203][ T5189] XFS (loop3): Mounting V5 Filesystem [ 81.832221][ T4232] r8152-cfgselector 3-1: Unknown version 0x0000 [ 81.897539][ T5210] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 81.926750][ T5189] XFS (loop3): Ending clean mount [ 81.936921][ T5210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 81.959248][ T5189] XFS (loop3): Quotacheck needed: Please wait. [ 81.973428][ T4232] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 82.008977][ T5189] XFS (loop3): Quotacheck: Done. [ 82.051898][ T5210] F2FS-fs (loop1): invalid crc value [ 82.135564][ T5210] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.165642][ T4193] XFS (loop3): Unmounting Filesystem [ 82.177664][ T4805] usb 3-1: USB disconnect, device number 3 [ 82.253795][ T5240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.354230][ T5210] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 82.361292][ T5210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.492088][ T4184] attempt to access beyond end of device [ 82.492088][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 82.588501][ T5234] set_capacity_and_notify: 5 callbacks suppressed [ 82.588515][ T5234] loop0: detected capacity change from 0 to 32768 [ 82.745966][ T5252] loop4: detected capacity change from 0 to 1024 [ 82.753524][ T5234] (syz.0.399,5234,0):ocfs2_verify_volume:2377 ERROR: bad system_dir_blkno: 0 [ 82.778699][ T5234] (syz.0.399,5234,0):ocfs2_verify_volume:2392 ERROR: status = -22 [ 82.814149][ T5234] (syz.0.399,5234,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 82.855496][ T5260] loop2: detected capacity change from 0 to 256 [ 82.868194][ T5234] (syz.0.399,5234,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 82.890530][ T5262] loop3: detected capacity change from 0 to 16 [ 82.912838][ T5260] exfat: Deprecated parameter 'utf8' [ 82.918186][ T5260] exfat: Deprecated parameter 'namecase' [ 83.020982][ T5260] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 83.264377][ T5283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.421'. [ 83.266606][ T5286] loop4: detected capacity change from 0 to 256 [ 83.327835][ T5282] loop1: detected capacity change from 0 to 4096 [ 83.343585][ T5286] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 83.373370][ T5282] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 83.389632][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 83.447916][ T5282] binder: Bad value for 'stats' [ 83.455942][ T5293] netlink: 'syz.2.425': attribute type 3 has an invalid length. [ 83.462076][ T4804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.711876][ T4804] usb 1-1: Using ep0 maxpacket: 32 [ 83.831900][ T4804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.869826][ T4804] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.917400][ T4804] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.954816][ T4804] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.015336][ T4804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.036475][ T4804] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 84.036504][ T4804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.063186][ T4804] usb 1-1: config 0 descriptor?? [ 84.245865][ T5298] loop2: detected capacity change from 0 to 32768 [ 84.327025][ T5298] XFS (loop2): Mounting V5 Filesystem [ 84.385317][ T5298] XFS (loop2): Ending clean mount [ 84.442191][ T4185] XFS (loop2): Unmounting Filesystem [ 84.537595][ T5339] loop3: detected capacity change from 0 to 164 [ 84.537811][ T4804] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 84.556564][ T4804] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 84.564735][ T4804] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 84.575693][ T4804] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 84.631973][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.681958][ T4804] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-38) [ 84.701278][ T5343] loop3: detected capacity change from 0 to 128 [ 84.711431][ T4804] corsair-psu: probe of 0003:1B1C:1C09.0005 failed with error -38 [ 84.743747][ T5343] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 84.768743][ T4804] usb 1-1: USB disconnect, device number 4 [ 84.868534][ T4193] sysv_free_block: flc_count > flc_size [ 84.875838][ T4193] sysv_free_block: flc_count > flc_size [ 84.881394][ T4193] sysv_free_block: flc_count > flc_size [ 84.911854][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 84.917184][ T4193] sysv_free_block: flc_count > flc_size [ 84.948841][ T4193] sysv_free_block: flc_count > flc_size [ 84.971725][ T4193] sysv_free_block: flc_count > flc_size [ 84.977315][ T4193] sysv_free_block: flc_count > flc_size [ 84.999831][ T5348] fido_id[5348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 85.008455][ T4193] sysv_free_block: flc_count > flc_size [ 85.042436][ T4193] sysv_free_block: flc_count > flc_size [ 85.048156][ T4193] sysv_free_block: flc_count > flc_size [ 85.062159][ T4232] usb 5-1: config 10 has an invalid interface number: 251 but max is 0 [ 85.070272][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.070456][ T4232] usb 5-1: config 10 has no interface number 0 [ 85.131025][ T4232] usb 5-1: config 10 interface 251 has no altsetting 0 [ 85.142569][ T5356] loop1: detected capacity change from 0 to 1024 [ 85.200345][ T5356] EXT4-fs (loop1): inline encryption not supported [ 85.281242][ T5356] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,auto_da_alloc=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 85.337904][ T4232] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 85.392921][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.400980][ T4232] usb 5-1: Product: syz [ 85.446543][ T4232] usb 5-1: Manufacturer: syz [ 85.451208][ T4232] usb 5-1: SerialNumber: syz [ 85.572133][ T5377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 85.874257][ T4232] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 85.891947][ T4232] gspca_sunplus: reg_r err -71 [ 85.896842][ T4232] sunplus: probe of 5-1:10.251 failed with error -71 [ 85.940591][ T4232] usb 5-1: USB disconnect, device number 6 [ 85.977306][ T5373] XFS (loop2): Mounting V5 Filesystem [ 86.046811][ T5373] XFS (loop2): Ending clean mount [ 86.060725][ T5373] XFS (loop2): Quotacheck needed: Please wait. [ 86.132770][ T5373] XFS (loop2): Quotacheck: Done. [ 86.166180][ T5393] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 86.232186][ T4185] XFS (loop2): Unmounting Filesystem [ 86.248321][ T5393] ntfs3: loop1: failed to convert "0080" to cp1250 [ 86.302170][ T5393] ntfs3: loop1: failed to convert name for inode 1e. [ 87.051718][ T4449] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.101517][ T5434] EXT4-fs (loop1): Ignoring removed orlov option [ 87.111796][ T5440] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 87.153687][ T5434] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,bsddf,norecovery,,errors=continue. Quota mode: none. [ 87.171699][ T4804] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.336772][ T4449] usb 5-1: Using ep0 maxpacket: 8 [ 87.380189][ T5446] device wireguard0 entered promiscuous mode [ 87.407197][ T5446] team0: Device wireguard0 is of different type [ 87.552500][ T5454] exfat: Deprecated parameter 'utf8' [ 87.557850][ T5454] exfat: Deprecated parameter 'utf8' [ 87.589124][ T5454] exfat: Deprecated parameter 'utf8' [ 87.623178][ T5454] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 87.631944][ T4804] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 87.656561][ T4449] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 87.666665][ T4804] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 32 [ 87.668472][ T4449] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 87.701866][ T4804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 87.718018][ T4449] usb 5-1: Product: syz [ 87.728138][ T4449] usb 5-1: Manufacturer: syz [ 87.738252][ T4449] usb 5-1: SerialNumber: syz [ 87.748446][ T4449] usb 5-1: config 0 descriptor?? [ 87.794019][ T4449] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 87.871879][ T4804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.889116][ T4804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.907931][ T4804] usb 3-1: Product: syz [ 87.915612][ T4804] usb 3-1: Manufacturer: syz [ 87.930040][ T4804] usb 3-1: SerialNumber: syz [ 87.947505][ T5467] set_capacity_and_notify: 8 callbacks suppressed [ 87.947517][ T5467] loop1: detected capacity change from 0 to 512 [ 87.960743][ T5431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.978728][ T5431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.011576][ T5455] loop3: detected capacity change from 0 to 40427 [ 88.070119][ T5455] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 88.081911][ T5455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 88.090915][ T5467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 88.129533][ T5467] System zones: 1-12 [ 88.134476][ T5455] F2FS-fs (loop3): invalid crc value [ 88.171458][ T5467] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.497: corrupted in-inode xattr [ 88.189766][ T5467] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.497: couldn't read orphan inode 15 (err -117) [ 88.194200][ T5455] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.257946][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 88.304619][ T5455] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 88.304644][ T5455] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.324003][ T4804] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 88.327552][ T4804] usb 3-1: USB disconnect, device number 4 [ 88.374000][ T4193] attempt to access beyond end of device [ 88.374000][ T4193] loop3: rw=2049, want=45104, limit=40427 [ 88.441961][ T4449] gspca_zc3xx: reg_w_i err -71 [ 88.442013][ T4449] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 88.445722][ T4449] usb 5-1: USB disconnect, device number 7 [ 88.448395][ T4174] udevd[4174]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory [ 88.448498][ T4174] udevd[4174]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 88.737096][ T5494] loop1: detected capacity change from 0 to 4096 [ 88.793254][ T5501] loop2: detected capacity change from 0 to 64 [ 88.819852][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 88.870499][ T5494] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 89.294335][ T5526] loop4: detected capacity change from 0 to 4096 [ 89.404193][ T5530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.520'. [ 89.456629][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 89.472078][ T4197] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 89.529080][ T5534] loop0: detected capacity change from 0 to 256 [ 89.607952][ T5534] exfat: Deprecated parameter 'utf8' [ 89.633992][ T5534] exfat: Deprecated parameter 'namecase' [ 89.703482][ T5534] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 89.825304][ T5547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 89.840929][ T5520] loop1: detected capacity change from 0 to 32768 [ 89.986798][ T5520] XFS (loop1): Mounting V5 Filesystem [ 90.095249][ T5562] loop0: detected capacity change from 0 to 4096 [ 90.100537][ T5520] XFS (loop1): Ending clean mount [ 90.137258][ T5520] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 90.167801][ T5520] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 90.179776][ T5520] XFS (loop1): Unmount and run xfs_repair [ 90.187812][ T5520] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 90.195411][ T5520] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 90.206082][ T5520] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 90.206127][ T5520] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 90.206140][ T5520] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 90.206153][ T5520] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 90.206166][ T5520] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 90.206178][ T5520] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 90.343458][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 90.343513][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.348286][ T5520] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 90.348574][ T5520] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 90.348879][ T5520] XFS (loop1): Failed to initialize disk quotas. [ 90.527775][ T4184] XFS (loop1): Unmounting Filesystem [ 90.687278][ T5592] loop2: detected capacity change from 0 to 1024 [ 90.749399][ T5590] loop0: detected capacity change from 0 to 4096 [ 90.761771][ T5592] EXT4-fs (loop2): Ignoring removed orlov option [ 90.802508][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,bsddf,norecovery,,errors=continue. Quota mode: none. [ 90.937315][ T5590] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 91.004422][ T5605] exfat: Deprecated parameter 'utf8' [ 91.010020][ T5605] exfat: Deprecated parameter 'namecase' [ 91.039306][ T5590] ntfs3: loop0: failed to convert "0080" to cp1250 [ 91.080619][ T5590] ntfs3: loop0: failed to convert name for inode 1e. [ 91.095009][ T5605] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 91.515147][ T5626] exfat: Deprecated parameter 'utf8' [ 91.530655][ T5626] exfat: Deprecated parameter 'utf8' [ 91.536101][ T4805] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.558528][ T5626] exfat: Deprecated parameter 'utf8' [ 91.584470][ T5628] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 91.592006][ T5626] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 91.791753][ T4805] usb 3-1: Using ep0 maxpacket: 32 [ 91.815964][ T5630] IPVS: Scheduler module ip_vs_ not found [ 91.912024][ T4805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.964523][ T4805] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.006595][ T4805] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.019510][ T4805] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.033310][ T4805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.039929][ T4805] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 92.049085][ T4805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.061023][ T5614] XFS (loop0): Mounting V5 Filesystem [ 92.072031][ T4805] usb 3-1: config 0 descriptor?? [ 92.130172][ T5656] device wireguard0 entered promiscuous mode [ 92.160623][ T5656] team0: Device wireguard0 is of different type [ 92.206757][ T5614] XFS (loop0): Ending clean mount [ 92.227755][ T4232] XFS (loop0): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 92.246298][ T4232] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 92.260363][ T4232] XFS (loop0): Unmount and run xfs_repair [ 92.266691][ T4232] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 92.279203][ T4232] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 92.289631][ T4232] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 92.303293][ T4232] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 92.317317][ T4232] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 92.326633][ T4232] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 92.335884][ T4232] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.345113][ T4232] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.354279][ T4232] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.363511][ T5614] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 92.397090][ T5614] XFS (loop0): Failed to initialize disk quotas. [ 92.505433][ T4186] XFS (loop0): Unmounting Filesystem [ 92.556786][ T4805] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 92.569001][ T4805] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 92.620383][ T4805] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 92.712533][ T4805] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 92.769936][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 92.821791][ T4805] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-38) [ 92.855112][ T4805] corsair-psu: probe of 0003:1B1C:1C09.0006 failed with error -38 [ 92.878178][ T4805] usb 3-1: USB disconnect, device number 5 [ 92.972247][ T5664] exfat: Deprecated parameter 'utf8' [ 92.977605][ T5664] exfat: Deprecated parameter 'utf8' [ 93.003449][ T5664] exfat: Deprecated parameter 'utf8' [ 93.015776][ T5677] fido_id[5677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.055380][ T5664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 93.106577][ T5685] set_capacity_and_notify: 6 callbacks suppressed [ 93.106589][ T5685] loop3: detected capacity change from 0 to 512 [ 93.207877][ T5685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 93.207965][ T5685] System zones: 1-12 [ 93.221997][ T5685] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.585: corrupted in-inode xattr [ 93.294844][ T5685] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.585: couldn't read orphan inode 15 (err -117) [ 93.327714][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 93.587312][ T5706] netlink: 'syz.3.593': attribute type 3 has an invalid length. [ 93.878587][ T5717] loop0: detected capacity change from 0 to 4096 [ 93.912321][ T5717] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 93.915797][ T5717] binder: Bad value for 'stats' [ 94.171757][ T4453] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.429354][ T4453] usb 2-1: Using ep0 maxpacket: 32 [ 94.561975][ T4453] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.592314][ T4453] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.613542][ T5735] loop0: detected capacity change from 0 to 32768 [ 94.620139][ T4453] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.621075][ T5724] loop2: detected capacity change from 0 to 40427 [ 94.635508][ T4453] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.658820][ T4453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.667010][ T4453] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 94.670210][ T5737] loop3: detected capacity change from 0 to 32768 [ 94.678607][ T4453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.726819][ T4453] usb 2-1: config 0 descriptor?? [ 94.736127][ T5724] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 94.749407][ T5724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 94.761150][ T5737] (syz.3.609,5737,1):ocfs2_verify_volume:2377 ERROR: bad system_dir_blkno: 0 [ 94.788142][ T5737] (syz.3.609,5737,1):ocfs2_verify_volume:2392 ERROR: status = -22 [ 94.817234][ T5724] F2FS-fs (loop2): invalid crc value [ 94.871678][ T5737] (syz.3.609,5737,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 94.882752][ T5724] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 94.908888][ T5737] (syz.3.609,5737,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 94.936453][ T5742] loop4: detected capacity change from 0 to 4096 [ 95.039705][ T5742] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.078716][ T5742] NILFS (loop4): mounting unchecked fs [ 95.108582][ T4336] udevd[4336]: incorrect nilfs2 checksum on /dev/loop4 [ 95.130641][ T5724] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 95.142698][ T5724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.159769][ T5742] NILFS (loop4): recovery complete [ 95.178484][ T5755] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.206994][ T5754] loop0: detected capacity change from 0 to 1024 [ 95.234723][ T4453] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 95.281673][ T4453] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 95.290430][ T4453] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 95.334882][ T4453] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 95.391590][ T4185] attempt to access beyond end of device [ 95.391590][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 95.461993][ T4453] corsair-psu 0003:1B1C:1C09.0007: unable to initialize device (-38) [ 95.502588][ T4453] corsair-psu: probe of 0003:1B1C:1C09.0007 failed with error -38 [ 95.545507][ T4453] usb 2-1: USB disconnect, device number 2 [ 95.641527][ T5760] loop4: detected capacity change from 0 to 1024 [ 95.706524][ T5758] fido_id[5758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 95.753386][ T5764] loop0: detected capacity change from 0 to 16 [ 95.775523][ T5760] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 95.812389][ T5764] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 96.036569][ T5771] netlink: 'syz.4.622': attribute type 3 has an invalid length. [ 96.081884][ T5771] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.622'. [ 96.122849][ T5751] loop3: detected capacity change from 0 to 32768 [ 96.258809][ T5789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.640'. [ 96.283467][ T5751] XFS (loop3): Mounting V5 Filesystem [ 96.289603][ T5793] netlink: 'syz.4.630': attribute type 2 has an invalid length. [ 96.313136][ T5785] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 96.385236][ T5785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.452222][ T5751] XFS (loop3): Ending clean mount [ 96.496003][ T5751] XFS (loop3): Quotacheck needed: Please wait. [ 96.636349][ T5751] XFS (loop3): Quotacheck: Done. [ 96.693921][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 96.722706][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 96.737292][ T5811] netlink: 'syz.1.636': attribute type 13 has an invalid length. [ 96.741102][ T4193] XFS (loop3): Unmounting Filesystem [ 96.841712][ T5815] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 96.966609][ T5815] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.981710][ T5815] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.641: bad orphan inode 15 [ 97.029709][ T5815] ext4_test_bit(bit=14, block=18) = 1 [ 97.035207][ T5815] is_bad_inode(inode)=0 [ 97.039520][ T5815] NEXT_ORPHAN(inode)=1023 [ 97.055430][ T5815] max_ino=32 [ 97.058236][ T5827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.058718][ T5815] i_nlink=0 [ 97.091714][ T5815] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2923: inode #15: comm syz.4.641: corrupted xattr block 19 [ 97.091970][ T5824] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 97.120808][ T5815] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 97.146307][ T5827] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.646: bad orphan inode 131083 [ 97.203498][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.211247][ T5827] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 97.238486][ T4453] Process accounting resumed [ 97.244500][ T4453] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 97.252280][ T4453] FAT-fs (loop0): Filesystem has been set read-only [ 97.294486][ T4186] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 97.515581][ T5838] hfsplus: bad catalog file entry [ 97.525398][ T5840] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 97.587985][ T4495] hfsplus: bad catalog file entry [ 97.639132][ T5849] xt_policy: neither incoming nor outgoing policy selected [ 97.933911][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 98.135908][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 98.192127][ T4453] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.236523][ T5902] set_capacity_and_notify: 8 callbacks suppressed [ 98.236538][ T5902] loop1: detected capacity change from 0 to 16 [ 98.267430][ T5901] loop4: detected capacity change from 0 to 1764 [ 98.325243][ T5902] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.456961][ T4453] usb 3-1: Using ep0 maxpacket: 32 [ 98.548622][ T5910] loop3: detected capacity change from 0 to 4096 [ 98.576148][ T5912] loop0: detected capacity change from 0 to 4096 [ 98.617543][ T5910] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 98.642073][ T4453] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.656908][ T5912] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 98.679805][ T4453] usb 3-1: config 0 has no interface number 0 [ 98.731972][ T5912] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 98.795940][ T5910] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 98.826313][ T5912] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 98.861951][ T4225] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 98.882266][ T4453] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.895845][ T5912] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 98.922197][ T4453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.937284][ T4453] usb 3-1: Product: syz [ 98.947273][ T4453] usb 3-1: Manufacturer: syz [ 98.957125][ T5912] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 98.973653][ T4453] usb 3-1: SerialNumber: syz [ 98.980748][ T4453] usb 3-1: config 0 descriptor?? [ 98.994393][ T5912] ntfs: volume version 3.1. [ 99.002801][ T5912] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 99.017524][ T5912] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 99.032139][ T5912] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 99.044901][ T4453] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 99.053938][ T5912] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 99.100323][ T5912] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 99.256556][ T4453] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 99.295193][ T4453] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 99.304858][ T4225] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.331814][ T4225] usb 2-1: config 0 has no interface number 0 [ 99.348300][ T4225] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 99.383180][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.402901][ T5915] loop4: detected capacity change from 0 to 32768 [ 99.413803][ T4225] usb 2-1: config 0 descriptor?? [ 99.475356][ T4225] usb 2-1: selecting invalid altsetting 1 [ 99.481193][ T4225] dvb_ttusb_budget: ttusb_init_controller: error [ 99.515179][ T4225] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 99.534702][ T5924] loop3: detected capacity change from 0 to 8192 [ 99.680558][ T4225] DVB: Unable to find symbol cx22700_attach() [ 99.735646][ T4232] usb 3-1: USB disconnect, device number 6 [ 99.751673][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 99.766846][ T4232] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.786520][ T4225] DVB: Unable to find symbol tda10046_attach() [ 99.799219][ T4225] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 99.816039][ T4232] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.862612][ T4225] usb 2-1: USB disconnect, device number 3 [ 99.890276][ T4232] quatech2 3-1:0.51: device disconnected [ 100.014938][ T5923] loop0: detected capacity change from 0 to 32768 [ 100.059036][ T5935] xt_policy: neither incoming nor outgoing policy selected [ 100.090126][ T5939] loop4: detected capacity change from 0 to 64 [ 100.097983][ T5940] IPVS: ip_vs_edit_dest(): server weight less than zero [ 100.361026][ T5948] loop4: detected capacity change from 0 to 1024 [ 100.576375][ T5959] loop2: detected capacity change from 0 to 764 [ 100.667755][ T5959] rock: directory entry would overflow storage [ 100.682276][ T5959] rock: sig=0x5850, size=36, remaining=22 [ 100.874858][ T4804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 100.903085][ T4804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 100.910853][ T4804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 100.933352][ T4804] hid-generic 0004:0004:FFFF0001.0008: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 100.981343][ T5974] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 101.299181][ T5985] fido_id[5985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.394609][ T5950] XFS (loop0): Mounting V5 Filesystem [ 101.443466][ T5993] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.456936][ T5993] NILFS (loop2): mounting unchecked fs [ 101.505369][ T5950] XFS (loop0): Ending clean mount [ 101.532911][ T5995] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,sysvgroups,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 101.553495][ T5995] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.578149][ T5995] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.725: directory missing '..' [ 101.600713][ T5993] NILFS (loop2): recovery complete [ 101.609055][ T4186] XFS (loop0): Unmounting Filesystem [ 101.644560][ T6007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.733383][ T6009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.773931][ T6009] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.144183][ T6022] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.160075][ T6022] hpfs: filesystem error: improperly stopped [ 102.201697][ T6022] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.211673][ T6022] hpfs: You really don't want any checks? You are crazy... [ 102.271970][ T6022] hpfs: hpfs_map_sector(): read error [ 102.277373][ T6022] hpfs: code page support is disabled [ 102.331755][ T6022] hpfs: hpfs_map_4sectors(): unaligned read [ 102.361739][ T6022] hpfs: hpfs_map_4sectors(): unaligned read [ 102.367729][ T6022] hpfs: filesystem error: unable to find root dir [ 102.526543][ T6032] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 102.589759][ T6032] REISERFS (device loop4): using ordered data mode [ 102.641271][ T6032] reiserfs: using flush barriers [ 102.677163][ T6032] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.812234][ T6032] REISERFS (device loop4): checking transaction log (loop4) [ 103.047459][ T6051] ntfs: volume version 3.1. [ 103.098779][ T6032] REISERFS (device loop4): Using tea hash to sort names [ 103.152291][ T6032] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 103.197115][ T6032] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 103.275510][ T6055] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.321981][ T6055] NILFS (loop1): mounting unchecked fs [ 103.378641][ T4174] udevd[4174]: incorrect nilfs2 checksum on /dev/loop1 [ 103.397321][ T6055] NILFS (loop1): recovery complete [ 103.408655][ T6032] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 103.447508][ T6060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.546697][ T6050] set_capacity_and_notify: 12 callbacks suppressed [ 103.546711][ T6050] loop0: detected capacity change from 0 to 32768 [ 103.703263][ T6050] XFS (loop0): Mounting V5 Filesystem [ 103.760580][ T6057] loop3: detected capacity change from 0 to 32768 [ 103.788443][ T6050] XFS (loop0): Ending clean mount [ 103.798677][ T6050] XFS (loop0): Quotacheck needed: Please wait. [ 103.921952][ T6050] XFS (loop0): Quotacheck: Done. [ 104.025083][ T4186] XFS (loop0): Unmounting Filesystem [ 104.027390][ T6062] loop2: detected capacity change from 0 to 32768 [ 104.216652][ T6085] loop4: detected capacity change from 0 to 1024 [ 104.326616][ T6085] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 104.342973][ T6085] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 104.376321][ T6085] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 104.583103][ T6091] loop4: detected capacity change from 0 to 512 [ 104.655777][ T6091] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.689543][ T6091] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.712394][ T4453] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.741152][ T6091] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.762: bg 0: block 248: padding at end of block bitmap is not set [ 104.791355][ T6091] __quota_error: 22 callbacks suppressed [ 104.791370][ T6091] Quota error (device loop4): write_blk: dquota write failed [ 104.835864][ T6091] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 104.846570][ T6091] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.762: Failed to acquire dquot type 1 [ 104.871354][ T6098] loop2: detected capacity change from 0 to 4096 [ 104.879464][ T6091] EXT4-fs (loop4): 1 truncate cleaned up [ 104.907973][ T6091] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 104.909163][ T6098] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 104.977107][ T6098] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 105.001456][ T6098] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 105.016310][ T6098] ntfs3: loop2: Failed to load $Bitmap. [ 105.031817][ T4453] usb 1-1: Using ep0 maxpacket: 16 [ 105.033885][ T6098] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 105.070000][ T6098] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 105.174544][ T4453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.205538][ T4453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.226560][ T4453] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.260833][ T6098] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 105.266717][ T4453] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.300054][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.323619][ T4453] usb 1-1: config 0 descriptor?? [ 105.376546][ T6116] loop2: detected capacity change from 0 to 1024 [ 105.400844][ T6116] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 105.416953][ T6116] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 69: comm syz.2.769: lblock 8 mapped to illegal pblock 69 (length 1) [ 105.446501][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.453546][ T6116] Quota error (device loop2): write_blk: dquota write failed [ 105.461070][ T6116] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 68: comm syz.2.769: lblock 7 mapped to illegal pblock 68 (length 1) [ 105.475669][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.482783][ T6116] Quota error (device loop2): write_blk: dquota write failed [ 105.490417][ T6116] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 67: comm syz.2.769: lblock 6 mapped to illegal pblock 67 (length 1) [ 105.507489][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.514152][ T6116] Quota error (device loop2): write_blk: dquota write failed [ 105.521783][ T6116] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 105.532193][ T6116] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.769: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.547157][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.553801][ T6116] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 105.564338][ T6116] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.769: Failed to acquire dquot type 0 [ 105.575968][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.582801][ T6116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 105.594453][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.601024][ T6116] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.769: mark_inode_dirty error [ 105.614948][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.621560][ T6116] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 105.632540][ T6116] EXT4-fs (loop2): 1 orphan inode deleted [ 105.638346][ T6116] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 105.657564][ T699] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.718516][ T699] EXT4-fs (loop2): Remounting filesystem read-only [ 105.718593][ T6116] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 105.725105][ T699] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 105.725140][ T699] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 105.725420][ T699] EXT4-fs (loop2): Remounting filesystem read-only [ 105.769305][ T6110] loop1: detected capacity change from 0 to 32768 [ 105.776560][ T6116] EXT4-fs (loop2): Remounting filesystem read-only [ 105.814581][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.839037][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.852847][ T4185] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 105.871775][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.879999][ T6110] XFS (loop1): Mounting V5 Filesystem [ 105.884739][ T4185] EXT4-fs (loop2): Remounting filesystem read-only [ 105.901665][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.917165][ T4185] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 105.942148][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.949581][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.959885][ T4185] EXT4-fs (loop2): Remounting filesystem read-only [ 105.967142][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.974932][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.982411][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.989844][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 105.997109][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 106.004472][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 106.011753][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 106.014450][ T6110] XFS (loop1): Ending clean mount [ 106.019760][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 106.032972][ T4453] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 106.044736][ T4453] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input7 [ 106.060984][ T4453] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 106.090250][ T4453] usb 1-1: USB disconnect, device number 5 [ 106.191904][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 106.222961][ T4184] XFS (loop1): Unmounting Filesystem [ 106.237462][ T6140] fido_id[6140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 106.349922][ T6144] sp0: Synchronizing with TNC [ 106.543761][ T6146] netlink: 88 bytes leftover after parsing attributes in process `syz.2.783'. [ 106.575180][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.591976][ T23] usb 4-1: config 0 has no interface number 0 [ 106.601946][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 106.610547][ T6148] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 106.621353][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.639012][ T6148] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 106.658762][ T23] usb 4-1: config 0 descriptor?? [ 106.692643][ T6149] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 106.703528][ T23] usb 4-1: selecting invalid altsetting 1 [ 106.717176][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 106.717503][ T6137] loop4: detected capacity change from 0 to 40427 [ 106.730325][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 106.788006][ T6137] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 106.820298][ T23] DVB: Unable to find symbol cx22700_attach() [ 106.825771][ T6137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 106.856379][ T6137] F2FS-fs (loop4): invalid crc value [ 106.864346][ T23] DVB: Unable to find symbol tda10046_attach() [ 106.870522][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 106.914219][ T6137] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 106.926728][ T23] usb 4-1: USB disconnect, device number 3 [ 106.966912][ T6137] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 106.975953][ T6137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.042247][ T4197] attempt to access beyond end of device [ 107.042247][ T4197] loop4: rw=2049, want=45104, limit=40427 [ 107.073077][ T6164] loop2: detected capacity change from 0 to 1024 [ 107.145667][ T6164] EXT4-fs (loop2): inline encryption not supported [ 107.277282][ T6164] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,auto_da_alloc=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 107.674848][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.797937][ T6195] device wireguard0 entered promiscuous mode [ 107.814567][ T6195] team0: Device wireguard0 is of different type [ 107.841843][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.921760][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 108.041858][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.052443][ T23] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.064155][ T23] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.071842][ T4453] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.074415][ T23] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.094671][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.101303][ T23] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 108.101837][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 108.115351][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.125176][ T23] usb 5-1: config 0 descriptor?? [ 108.131835][ T4804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.262422][ T4232] usb 4-1: config 10 has an invalid interface number: 251 but max is 0 [ 108.270858][ T4232] usb 4-1: config 10 has no interface number 0 [ 108.277231][ T4232] usb 4-1: config 10 interface 251 has no altsetting 0 [ 108.321943][ T4453] usb 2-1: Using ep0 maxpacket: 16 [ 108.441926][ T4453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.453027][ T4232] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 108.462127][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.470143][ T4232] usb 4-1: Product: syz [ 108.474369][ T4453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.484410][ T4453] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.497926][ T4232] usb 4-1: Manufacturer: syz [ 108.502606][ T4232] usb 4-1: SerialNumber: syz [ 108.507623][ T4453] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.519186][ T4453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.529072][ T4453] usb 2-1: config 0 descriptor?? [ 108.574019][ T4804] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 108.586105][ T23] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 108.593584][ T4804] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 32 [ 108.603556][ T23] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 108.611066][ T23] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 108.618632][ T4804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 108.626544][ T23] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 108.701891][ T23] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-38) [ 108.710936][ T23] corsair-psu: probe of 0003:1B1C:1C09.000A failed with error -38 [ 108.781810][ T4804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.790959][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.799259][ T4804] usb 1-1: Product: syz [ 108.803649][ T4804] usb 1-1: Manufacturer: syz [ 108.808258][ T4804] usb 1-1: SerialNumber: syz [ 108.825305][ T4803] usb 5-1: USB disconnect, device number 8 [ 108.831977][ T6198] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 108.839027][ T6198] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 108.854662][ T4232] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 108.882291][ T4232] gspca_sunplus: reg_r err -71 [ 108.887104][ T4232] sunplus: probe of 4-1:10.251 failed with error -71 [ 108.898313][ T4232] usb 4-1: USB disconnect, device number 4 [ 109.013994][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.021446][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.028694][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.036074][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.043361][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.050589][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.058021][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.066562][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.073860][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.081067][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.088324][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.095579][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.102828][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.110861][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.118502][ T4453] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 109.127531][ T4453] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input8 [ 109.143299][ T4453] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 109.151928][ T4804] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 109.190287][ T4804] usb 1-1: USB disconnect, device number 6 [ 109.250392][ T4803] usb 2-1: USB disconnect, device number 4 [ 109.326180][ T6204] tipc: Started in network mode [ 109.331296][ T6204] tipc: Node identity , cluster identity 4711 [ 109.356555][ T6206] set_capacity_and_notify: 1 callbacks suppressed [ 109.356569][ T6206] loop3: detected capacity change from 0 to 1024 [ 109.409568][ T6210] loop4: detected capacity change from 0 to 64 [ 109.432839][ T6206] EXT4-fs (loop3): inline encryption not supported [ 109.465525][ T6210] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 109.495102][ T6206] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,auto_da_alloc=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 109.513728][ T6216] loop2: detected capacity change from 0 to 64 [ 109.687578][ T6216] attempt to access beyond end of device [ 109.687578][ T6216] loop2: rw=0, want=1026, limit=64 [ 109.741568][ T6216] Buffer I/O error on dev loop2, logical block 512, async page read [ 109.760046][ T6216] attempt to access beyond end of device [ 109.760046][ T6216] loop2: rw=0, want=113154, limit=64 [ 109.791840][ T6216] Buffer I/O error on dev loop2, logical block 56576, async page read [ 109.812174][ T4225] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 109.841640][ T4225] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 109.886594][ T4225] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 109.925588][ T4225] hid-generic 0004:0004:FFFF0001.000C: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 110.080946][ T6239] device bridge_slave_1 left promiscuous mode [ 110.086453][ T6237] fido_id[6237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.126920][ T6243] loop4: detected capacity change from 0 to 512 [ 110.135561][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.145302][ T6239] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 110.184088][ T4804] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.195217][ T6243] EXT4-fs (loop4): Ignoring removed nobh option [ 110.238577][ T6243] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.822: invalid indirect mapped block 256 (level 2) [ 110.293618][ T6243] EXT4-fs (loop4): Remounting filesystem read-only [ 110.300751][ T6243] EXT4-fs (loop4): 2 truncates cleaned up [ 110.306885][ T6243] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 110.421825][ T4225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.451709][ T4804] usb 4-1: Using ep0 maxpacket: 32 [ 110.522663][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 110.571850][ T4804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.582706][ T4804] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.593880][ T4804] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.603955][ T4804] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.616956][ T4804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.623616][ T4804] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 110.632800][ T4804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.642626][ T4804] usb 4-1: config 0 descriptor?? [ 110.701816][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 110.861785][ T4225] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 110.870807][ T4225] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 110.880522][ T4225] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 110.890202][ T4225] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 110.900031][ T4225] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 110.910325][ T4225] usb 3-1: config 1 interface 0 has no altsetting 0 [ 110.916959][ T4225] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 110.926022][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.974229][ T4225] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 111.125859][ T4804] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 111.133350][ T4804] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 111.140738][ T4804] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 111.150033][ T4804] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 111.231760][ T4804] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-38) [ 111.241258][ T4804] corsair-psu: probe of 0003:1B1C:1C09.000D failed with error -38 [ 111.246979][ T4225] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 111.274529][ T4225] usb 3-1: USB disconnect, device number 7 [ 111.339495][ T4453] usb 4-1: USB disconnect, device number 5 [ 111.845552][ T6270] loop0: detected capacity change from 0 to 256 [ 111.879066][ T4804] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 111.891312][ T4804] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 111.899498][ T4804] hid-generic 0004:0004:FFFF0001.000E: unknown main item tag 0x0 [ 111.910824][ T4804] hid-generic 0004:0004:FFFF0001.000E: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 111.968659][ T6270] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 112.005612][ T6276] loop3: detected capacity change from 0 to 4096 [ 112.031366][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'. [ 112.081736][ T4804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.188414][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 112.232614][ T4193] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 112.251941][ T6281] fido_id[6281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.331667][ T4804] usb 3-1: Using ep0 maxpacket: 16 [ 112.451843][ T4804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.487482][ T4804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.517781][ T4804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.518651][ T6288] loop3: detected capacity change from 0 to 8192 [ 112.537851][ T4804] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.562256][ T4804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.573586][ T4804] usb 3-1: config 0 descriptor?? [ 112.599739][ T6275] loop4: detected capacity change from 0 to 32768 [ 112.665807][ T6288] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 112.708172][ T6288] REISERFS (device loop3): using ordered data mode [ 112.741361][ T6288] reiserfs: using flush barriers [ 112.778246][ T6288] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.861140][ T6301] loop1: detected capacity change from 0 to 40427 [ 112.869027][ T6288] REISERFS (device loop3): checking transaction log (loop3) [ 112.908391][ T6301] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 112.941824][ T6301] F2FS-fs (loop1): invalid crc value [ 112.997792][ T6301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.064469][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.083980][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.091238][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.117672][ T6301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.161897][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.169249][ T26] audit: type=1800 audit(1777496573.489:5): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.846" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 113.235172][ T6288] REISERFS (device loop3): Using tea hash to sort names [ 113.252642][ T6288] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 113.268190][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.285717][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.312655][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.319903][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.361716][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.382516][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.396274][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.426637][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.441700][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.448987][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.471775][ T4804] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 113.488370][ T4804] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input10 [ 113.515167][ T4804] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 113.540027][ T4184] attempt to access beyond end of device [ 113.540027][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 113.564266][ T4804] usb 3-1: USB disconnect, device number 8 [ 113.632908][ T6321] fido_id[6321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 113.967174][ T6338] openvswitch: netlink: Port 1048718283 exceeds max allowable 65535 [ 114.022983][ T6340] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.192920][ T6352] netlink: 72 bytes leftover after parsing attributes in process `syz.0.869'. [ 114.203442][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 114.222899][ T6353] netlink: 'syz.3.870': attribute type 21 has an invalid length. [ 114.241378][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.870'. [ 114.359500][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 114.419534][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 114.463021][ T6362] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 114.487759][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 114.501735][ T4805] Bluetooth: hci4: command 0x0405 tx timeout [ 114.642441][ T6383] loop2: detected capacity change from 0 to 64 [ 114.821867][ T4453] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 114.840919][ T6400] loop3: detected capacity change from 0 to 128 [ 115.112186][ T6400] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.136349][ T6400] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 115.152396][ T6400] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.187658][ T6429] loop2: detected capacity change from 0 to 64 [ 115.244090][ T4453] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.256359][ T4453] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.267961][ T4453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.274986][ T4453] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 115.285081][ T4453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.300476][ T4453] usb 2-1: config 0 descriptor?? [ 115.462307][ T6437] loop2: detected capacity change from 0 to 512 [ 115.535153][ T6437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.906: bg 0: block 393: padding at end of block bitmap is not set [ 115.539618][ T6444] loop3: detected capacity change from 0 to 2048 [ 115.571541][ T6437] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 115.611258][ T6437] EXT4-fs (loop2): 2 truncates cleaned up [ 115.659580][ T6437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.677318][ T6449] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.690736][ T6453] loop4: detected capacity change from 0 to 128 [ 115.740897][ T6453] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.775966][ T6444] NILFS error (device loop3): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 115.802928][ T6453] attempt to access beyond end of device [ 115.802928][ T6453] loop4: rw=2051, want=1052, limit=128 [ 115.815853][ T4453] hid-steam 0003:28DE:1102.0010: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 115.838894][ T6444] Remounting filesystem read-only [ 115.880802][ T6444] syz.3.910 (6444) used greatest stack depth: 19672 bytes left [ 115.941409][ T4193] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 116.010011][ T4453] usb 2-1: USB disconnect, device number 5 [ 116.306839][ T6472] fido_id[6472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 116.799240][ T6512] loop4: detected capacity change from 0 to 64 [ 117.077144][ T6480] loop2: detected capacity change from 0 to 32768 [ 117.256601][ T6533] loop0: detected capacity change from 0 to 4096 [ 117.275534][ T6480] read_mapping_page failed! [ 117.285258][ T6480] ERROR: (device loop2): txCommit: [ 117.285258][ T6480] [ 117.326035][ T6541] loop1: detected capacity change from 0 to 64 [ 117.362856][ T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 117.370187][ T276] ------------[ cut here ]------------ [ 117.379427][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 117.395961][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 117.402056][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 117.409249][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.419163][ T6544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.419304][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 117.430003][ T6533] NILFS (loop0): nilfs_sufile_do_free: segment 7 is already clean [ 117.434725][ T276] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 117.434742][ T276] RSP: 0018:ffffc90002c9fd28 EFLAGS: 00010246 [ 117.434758][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 90773ff49bebd400 [ 117.434767][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 117.434777][ T276] RBP: ffffc900028120d8 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 117.434787][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88801eceb4d8 [ 117.434798][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900025f1110 [ 117.434808][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 117.434820][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.434830][ T276] CR2: 000000110c40d0c1 CR3: 0000000064e8c000 CR4: 00000000003506e0 [ 117.434843][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.434852][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.434861][ T276] Call Trace: [ 117.434867][ T276] [ 117.434875][ T276] ? lockdep_hardirqs_on+0x94/0x140 [ 117.558844][ T276] jfs_lazycommit+0x581/0xb40 [ 117.563515][ T276] ? txFreelock+0x5a0/0x5a0 [ 117.567995][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.573869][ T276] ? sched_dynamic_update+0x210/0x210 [ 117.579221][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.585099][ T276] ? __kthread_parkme+0x157/0x1b0 [ 117.590107][ T276] kthread+0x436/0x520 [ 117.594157][ T276] ? txFreelock+0x5a0/0x5a0 [ 117.598651][ T276] ? kthread_blkcg+0xd0/0xd0 [ 117.603226][ T276] ret_from_fork+0x1f/0x30 [ 117.607629][ T276] [ 117.610637][ T276] Modules linked in: [ 117.614559][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.623933][ T276] ---[ end trace 7c63f7620f158395 ]--- [ 117.629433][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 117.634479][ T276] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 117.654117][ T276] RSP: 0018:ffffc90002c9fd28 EFLAGS: 00010246 [ 117.660173][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 90773ff49bebd400 [ 117.668175][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 117.676172][ T276] RBP: ffffc900028120d8 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 117.684164][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88801eceb4d8 [ 117.692150][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900025f1110 [ 117.700122][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 117.709385][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.716165][ T276] CR2: 000000110c40d0c1 CR3: 000000002aaae000 CR4: 00000000003506e0 [ 117.724400][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.734154][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.742186][ T276] Kernel panic - not syncing: Fatal exception [ 117.748549][ T276] Kernel Offset: disabled [ 117.752884][ T276] Rebooting in 86400 seconds..