last executing test programs: 2.167808737s ago: executing program 4 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x1c, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2.150748299s ago: executing program 0 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r2, 0x2, [0x1, 0x8]}, {r1, 0x0, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) 2.106734763s ago: executing program 3 (id=865): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x800, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x100000d, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.052952737s ago: executing program 4 (id=867): openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x5, 0x9) 2.050500288s ago: executing program 3 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0b, 0xfac01]}]]}, 0x34}}, 0x4004050) 1.974188954s ago: executing program 0 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.972898755s ago: executing program 4 (id=870): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB='codepage=utf8,iocharset=cp855,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x286, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/54, 0x36) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.945135647s ago: executing program 3 (id=871): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper=0x8000000, 0x1}) 1.814790639s ago: executing program 3 (id=872): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x8, 0x0) 1.703592679s ago: executing program 0 (id=873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, 0x0) 1.703303389s ago: executing program 4 (id=875): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.608309917s ago: executing program 4 (id=876): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000280)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@acl}, {@noacl}, {@heap}, {@noinline_data}, {@norecovery}, {@adaptive_mode}, {@grpjquota}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPA37Xa/XYt48LYDi9DCJnT6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3ols/QGna2O3vB5Nn3rdvnnneUArPTEkAzq355OcfK+FGuBJCmA0hXA+hOK+UR2E9hufKuZnHjko5//vExRDC1RDCjVHymHP8nk9vD2+t/fDGT199c+nCtc++/HZ6uwam7fkQQncnnu93Y8xbMT4s5+vDdhG7q8Myxh90H5XjPMb9bKvIsF8fr6sXcaUV1+c7e/1R3O7UG6PYam8X8zu9eMH+sDXOU7zhYX23GDezrSK2+3kRW4exroPD+LftsD+IeZplvg+K9GEwGMc4nx1kcT87j4rY6A3K+Zg3b2YHozgsY3m50Mg7zaKOreN80v9vb7Z7ewfJMNvtt/NeslZLX6ild6rpbt7MBtlqtd5t3llNFlqd0bLqIKt311t53upktUbeXUwWWo1GNU2ThbvZVrveS9K0tlJbqq4tlme3k1fvv5N0msnCKL7c7u0N2p1+sp3vJvEdi8lybeXFxeRWmry1sZlsPrh3b2Pz7ffuvnv/pY3XXykX/aWsZGF5aXm5mi5Vl9PFc7T/j8qiJ7h/OJbKtAsAOHv+a/9/U/8PTMDJ9f+7D0I4+f4/6P8n4kz1v+e9/z+B/cOx6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6t7+Y+f604mY/ja+X8U+XUM+W4EkKYCSH8+jdmw8UjOWfLPHP/sH7uTzV8XQlFhtE1LpXH1RDCenn88vRJfwoAAADw5Priw5ufxG49vsxPuyBOU7xpM3P9/Qnlq4QQ5ua/n1C2mdHLsxNKVvx+XwgHE8pW3MC6PKFk8ZbbhUll+1dmj4TLj4VKDDOnWg4AAHAqjnYCp9uFAAAAcJo+nnYBTEcljB9ljp8FF/95/8cDwStHRgAAAMAZVJl2AQAAAMCJK/p/3/8HAAAAT7b4/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwG/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BL2uMeIAtIEBeRAWkgD1EBuKSGCCI9DIOIQyWNbib5PciZjmR9vEBxmRhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJ9tV7cXv2+bpuz27eTZzQAAADAJdtqvaj/maX+1+b+9+bWz6ZfREQZEZfm7qP4dJY5anKql+dvTp+vXtVwF1EnHN5j0lxfIuJPcz3+6PpTAAAAgI9rs1zN02w9/ZkNXRB9Sos25be/mfKKiKhmD5nSykPer0xh9fd7HP8zpdULWNNMYWnJbZwr7U3qn/tx1W560hSpKS++7FhktrEDAAA9Gp01/c5CAAAA6NO/oQtgGEU8b2UetwInqWm29z6f9QAAAIB3qBi6AAAAAKBz9fy/p/P/9s7/AwAAgGGk8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0rZaLzbL1bxtzm7fTp7RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz+vcVRxAMDfzOxsbVVco+whIgoe9GK329ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0POCeQSbznsIYJnZWZnspMf4PprZpN8PvDmfXcY5n3fLIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0ensSJ9mhM47j4tzm3sOlrN861Gcer23PZy2LozqTPhlerH6Ius0lAgAAwNmRlPV9CGEnXV/I+riT1/9peU1W83/79Dgu6/nDdX/Zl7V/1n75eff5/YE643Gym95cHg4uHU2l9f/NcrY985dXtPInn797SfIvJH5v9blRmj/P6OuNjXfaeXiujmwBgH/iYtkXQfn7UNb3m0wMgDOjVSm8y/o/6TSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdRqvhyTKOQgjzrUmc2dp7uHRc/3hte75s1x49WgtfTu6Z3SINIdxcHg4u1Tqb2Xbv/oPbi8Ph4G79wUshhKZGf6uY/u0Pprg4hEaej+A/CuLiy56VfE5G0OAPJQAATqW0aFldv5OuL2TnorkQ/vjuYP3/aiUOU9b/ux9e26yOVa3/+7XNcPb1Vu582rt3/8Hry3cWbw1uDT5+43L/zf6V61evXu/l70p63pgAAADw77SLVq3/47mj6/8XKnGYsv7/7Jv+F9WxEvX/sSaLfk1nAgAAcLY9+/Lvv0XHnI/a7fD54srK3f74uP/58vjYQKp/27miVev/ZK7prAAAAIA6jFajA+v/NypxmHL9/6nvX/ixes8khHC+WP+/uPTJ8EZ905lpdfw5cdNzBAAAoFnni1Zd/0/z/f/x/paHOITw2ivjuPg3gFPV/8m7X/1QHau6//9KfVOcSXF3/DzyvhtCq9t0RgAAAJxmTxQtK/Z/TdcXPvrpwvtt+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZnAAAA//9/Kz50") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x880, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 1.567025021s ago: executing program 1 (id=877): syz_mount_image$squashfs(&(0x7f0000001d80), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000001e80)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYBLOB="39008872e533a1", @ANYBLOB="90b5d3dcc0ea444178fea9304fbc98511b3462bd2f2dfec83f1f8d155f"], 0x1, 0x1d6, &(0x7f0000000f80)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.507602926s ago: executing program 0 (id=878): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c3220270600"], 0xb8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.479225298s ago: executing program 0 (id=879): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) 1.403184945s ago: executing program 1 (id=880): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0xa, 0xc36, &(0x7f0000002540)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setreuid(0xffffffffffffffff, 0xee00) fchown(r0, 0x0, 0x0) 1.329263131s ago: executing program 0 (id=882): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x80010000000, 0x10000000000000, 0x7fff, 0x9b}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.048085087s ago: executing program 1 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x2, 0x0, [{0x606, 0x0, 0x1}, {0xba1, 0x0, 0x6}]}) 1.047535497s ago: executing program 2 (id=885): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) write$nci(r0, &(0x7f0000000200)=@DATA={0x3, 0x1, 0x0, 0x0, 0x4d, "e2698a4aec722adbb46cd6947f63fb112ff18ca3d64a04588c682827e19d0b81ca7d23d36c8941e20a98ff3f"}, 0x2f) 899.58126ms ago: executing program 2 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000021000100000000000000000a80"], 0x30}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 871.787682ms ago: executing program 3 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0900000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663020000000000000000000080005000a0000000800050003"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 813.721317ms ago: executing program 1 (id=888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, 0x3ed, 0x400, 0x70bd28, 0x25dfdbff, "7c87f6aa24730d349213aab79a12c6357a68c5d04b5a5f4b11c6701684713ec8533d242c511042ee4a5f4771f0f47a97f6c8e639157da20cfc3630a2226cd120b02d91d14ad7e56f10959f5fec7e0755bac529a28cff8e2b21dbd512018f484cd7642279b8a6"}, 0x78}, 0x1, 0x0, 0x0, 0x48080}, 0x20040090) 724.951665ms ago: executing program 2 (id=889): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x516, &(0x7f0000001540)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000140)='./file0\x00') 724.252885ms ago: executing program 3 (id=890): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006a65e7621b51079e7afab4fc18af9394b2a2e53d0e32bd8abb51f1f81e3101913eb8a35fb2f044af003d51c0db37066d430597ae9e0f6ad0453f378f3d481425034ab5d859d0dd862cb5d8994e6c5290cbcde5490e514866cc694a6853397952d7ce79c82c5086d57c0f073b8b96ae8eb9fb44fb2e5b2c84ebb68c7701a9118557f24a6f2eef004d10b95739c3bf064933995a53b7b809013f4b59687d706f66c46106f41ecb577850fc"], 0x1, 0xef4, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x175) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, 0x0) 720.157506ms ago: executing program 1 (id=891): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x10, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1402}, 0xa5, 0x5, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 651.272802ms ago: executing program 1 (id=892): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa4, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 368.196837ms ago: executing program 2 (id=893): pipe2$9p(&(0x7f00000000c0), 0x80880) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 118.652289ms ago: executing program 4 (id=894): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 46.359295ms ago: executing program 2 (id=895): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) writev(r0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000001c0)="dae802a9ca", 0x5}], 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 0s ago: executing program 2 (id=896): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@host, 0x3db3}, @local, 0x0, 0x200, 0x6, 0x800052e, 0x0, 0x1000, 0xe278}) kernel console output (not intermixed with test programs): endpoint [ 57.974479][ T2421] pvrusb2: Invalid write control endpoint [ 57.980016][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.980477][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 57.997767][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 58.012283][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 58.041226][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.042103][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.056584][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.064347][ T2421] pvrusb2: Device being rendered inoperable [ 58.071597][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.073244][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 58.095537][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 58.119001][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.144786][ T2421] pvrusb2: Attached sub-driver cx25840 [ 58.162336][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.190700][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 58.242421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.262812][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 58.287594][ T4293] usb 1-1: USB disconnect, device number 2 [ 58.439674][ T4314] loop1: detected capacity change from 0 to 256 [ 58.698382][ T4314] attempt to access beyond end of device [ 58.698382][ T4314] loop1: rw=2049, want=356, limit=256 [ 58.935869][ T4331] loop2: detected capacity change from 0 to 1024 [ 59.091061][ T4331] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 59.103501][ T4346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 59.222919][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 59.367800][ T4356] netlink: 80 bytes leftover after parsing attributes in process `syz.3.26'. [ 59.384568][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 59.391043][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 59.412109][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.429158][ T4360] loop2: detected capacity change from 0 to 8 [ 59.442083][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 59.448214][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.481484][ T4362] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 59.503979][ T4364] loop3: detected capacity change from 0 to 64 [ 59.524955][ T4360] SQUASHFS error: lzo decompression failed, data probably corrupt [ 59.564197][ T4360] SQUASHFS error: Failed to read block 0x91: -5 [ 59.607526][ T4360] SQUASHFS error: Unable to read metadata cache entry [8f] [ 59.656199][ T4360] SQUASHFS error: Unable to read inode 0x11f [ 59.658894][ T4364] minix_free_block (loop3:21): bit already cleared [ 59.677621][ T4364] Trying to free block not in datazone [ 59.682139][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 59.813411][ T1111] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.821492][ T1111] usb 2-1: config 0 has no interface number 0 [ 59.859650][ T1111] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.886636][ T1111] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.896243][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.907159][ T1111] usb 2-1: config 0 descriptor?? [ 59.924274][ T4377] loop3: detected capacity change from 0 to 8 [ 59.930426][ T4379] loop2: detected capacity change from 0 to 128 [ 59.956506][ T1111] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 59.975472][ T4379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.986367][ T4379] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.991971][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.018475][ C1] vkms_vblank_simulate: vblank timer overrun [ 60.034939][ T4293] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 60.048212][ T4379] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.36: reserved inode found cleared - inode=2 [ 60.062496][ T4377] SQUASHFS error: Failed to read block 0x636: -5 [ 60.069056][ T4377] SQUASHFS error: Unable to read metadata cache entry [634] [ 60.232686][ T4298] usb 2-1: USB disconnect, device number 2 [ 60.402144][ T4293] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 60.410368][ T4293] usb 1-1: config 0 has no interface number 0 [ 60.416563][ T4293] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 60.426753][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.438509][ T4293] usb 1-1: config 0 descriptor?? [ 60.522058][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.534312][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.544781][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.642147][ T4232] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.651315][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.659483][ T4232] usb 5-1: SerialNumber: syz [ 60.722826][ T4293] usb 1-1: string descriptor 0 read error: -71 [ 60.731491][ T4293] usb-storage 1-1:0.168: USB Mass Storage device detected [ 60.753374][ T4293] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 60.770173][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 60.784806][ T4398] loop1: detected capacity change from 0 to 128 [ 60.838030][ T4398] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 60.842425][ T4293] usb 1-1: USB disconnect, device number 3 [ 60.859661][ T4398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.902574][ T4233] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.926004][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.941103][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.951382][ T26] audit: type=1800 audit(1771347961.039:2): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file2" dev="loop1" ino=105 res=0 errno=0 [ 60.955564][ T4232] usb 5-1: 0:2 : does not exist [ 60.976606][ T4233] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.976650][ T4233] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.976670][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.994876][ T4232] usb 5-1: unit 135 not found! [ 61.012523][ T4232] usb 5-1: unit 232 not found! [ 61.017313][ T4232] usb 5-1: unit 127 not found! [ 61.024469][ T4232] usb 5-1: unit 203 not found! [ 61.029525][ T4232] usb 5-1: unit 54 not found! [ 61.035735][ T4232] usb 5-1: unit 120 not found! [ 61.053787][ T4232] usb 5-1: USB disconnect, device number 2 [ 61.272107][ T4233] usb 3-1: GET_CAPABILITIES returned 0 [ 61.277823][ T4233] usbtmc 3-1:16.0: can't read capabilities [ 61.309266][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.514990][ T4293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.555742][ T4236] usb 3-1: USB disconnect, device number 2 [ 61.597514][ T26] audit: type=1326 audit(1771347961.689:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.3.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe95a116629 code=0x0 [ 61.618818][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.890552][ T4425] loop0: detected capacity change from 0 to 40427 [ 61.897173][ T4293] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.906944][ T4293] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.916860][ T4208] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 61.924420][ T4293] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.952400][ T4425] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 61.961295][ T4425] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.976756][ T4425] F2FS-fs (loop0): invalid crc value [ 61.989113][ T4425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.052722][ T4425] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.060573][ T4425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.094191][ T4293] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.113989][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.145618][ T4293] usb 2-1: Product: syz [ 62.149843][ T4293] usb 2-1: Manufacturer: syz [ 62.154163][ T4431] loop2: detected capacity change from 0 to 256 [ 62.158557][ T4293] usb 2-1: SerialNumber: syz [ 62.196913][ T4431] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.255135][ T4293] hub 2-1:1.0: bad descriptor, ignoring hub [ 62.261228][ T4293] hub: probe of 2-1:1.0 failed with error -5 [ 62.292353][ T4208] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.302303][ T4208] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 62.315144][ T4208] usb 5-1: config 0 interface 0 has no altsetting 0 [ 62.321799][ T4208] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 62.330937][ T4208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.367421][ T4208] usb 5-1: config 0 descriptor?? [ 62.463883][ T4293] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 62.872192][ T4236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 62.881548][ T4298] usb 2-1: USB disconnect, device number 3 [ 62.918689][ T4298] usblp0: removed [ 63.172043][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 63.280465][ T4458] loop3: detected capacity change from 0 to 40427 [ 63.315124][ T4458] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 63.324168][ T4236] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 63.342612][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.381828][ T4458] F2FS-fs (loop3): invalid crc value [ 63.399138][ T4236] usb 3-1: config 0 descriptor?? [ 63.469423][ T4458] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.469862][ T4452] loop0: detected capacity change from 0 to 131072 [ 63.479978][ T4236] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 63.495613][ T4208] microsoft 0003:045E:009D.0001: item fetching failed at offset 2/5 [ 63.504538][ T4208] microsoft 0003:045E:009D.0001: parse failed [ 63.510640][ T4208] microsoft: probe of 0003:045E:009D.0001 failed with error -22 [ 63.532649][ T4452] F2FS-fs (loop0): invalid crc value [ 63.554604][ T4208] usb 5-1: USB disconnect, device number 3 [ 63.570337][ T26] audit: type=1326 audit(1771347963.659:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.69" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33f190d629 code=0x0 [ 63.588726][ T4452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.636341][ T4452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.644984][ T4458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.724644][ T4452] F2FS-fs (loop0): inode (7) has corrupted xattr [ 63.767679][ T26] audit: type=1800 audit(1771347963.859:5): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 63.805797][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 63.851535][ T4196] attempt to access beyond end of device [ 63.851535][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 64.283609][ T4482] loop3: detected capacity change from 0 to 256 [ 64.360890][ T4236] gspca_sonixj: reg_r err -71 [ 64.366100][ T4236] sonixj: probe of 3-1:0.0 failed with error -71 [ 64.421674][ T4236] usb 3-1: USB disconnect, device number 3 [ 64.639979][ T4495] loop0: detected capacity change from 0 to 1024 [ 64.713548][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 64.748032][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.775748][ T4501] loop1: detected capacity change from 0 to 164 [ 64.972573][ T4511] loop4: detected capacity change from 0 to 128 [ 64.993382][ T4511] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.032763][ T4511] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.132236][ T1111] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 65.150010][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.158299][ T4293] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.173537][ T1111] usb 4-1: config 0 descriptor?? [ 65.201408][ T4521] netlink: 'syz.0.97': attribute type 25 has an invalid length. [ 65.229515][ T4521] netlink: 'syz.0.97': attribute type 28 has an invalid length. [ 65.285837][ T4523] loop1: detected capacity change from 0 to 4096 [ 65.319151][ T4528] loop0: detected capacity change from 0 to 1024 [ 65.344216][ T4531] loop4: detected capacity change from 0 to 256 [ 65.369735][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.385098][ T4531] exfat: Deprecated parameter 'namecase' [ 65.390802][ T4531] exfat: Deprecated parameter 'namecase' [ 65.418751][ T4531] exfat: Deprecated parameter 'utf8' [ 65.424565][ T4293] usb 3-1: Using ep0 maxpacket: 32 [ 65.439652][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 65.457899][ T4523] ======================================================= [ 65.457899][ T4523] WARNING: The mand mount option has been deprecated and [ 65.457899][ T4523] and is ignored by this kernel. Remove the mand [ 65.457899][ T4523] option from the mount to silence this warning. [ 65.457899][ T4523] ======================================================= [ 65.481322][ T4528] overlayfs: missing 'lowerdir' [ 65.504800][ T4523] EXT4-fs (loop1): Cannot specify journal on remount [ 65.558435][ T4531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 65.582158][ T4293] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 65.590371][ T4293] usb 3-1: config 0 has no interface number 0 [ 65.600443][ T4528] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.99: directory missing '..' [ 65.651991][ T4293] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 65.672076][ T1111] hackrf 4-1:0.0: Board ID: 00 [ 65.676894][ T1111] hackrf 4-1:0.0: Firmware version: [ 65.713841][ T1111] hackrf 4-1:0.0: Registered as swradio24 [ 65.721603][ T4293] usb 3-1: config 0 interface 196 has no altsetting 0 [ 65.730743][ T1111] hackrf 4-1:0.0: Registered as swradio25 [ 65.766689][ T1111] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 65.888757][ T4233] usb 4-1: USB disconnect, device number 2 [ 65.898280][ T4293] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 65.923960][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.979597][ T4293] usb 3-1: Product: syz [ 66.001466][ T4293] usb 3-1: Manufacturer: syz [ 66.019033][ T4293] usb 3-1: SerialNumber: syz [ 66.053779][ T4293] usb 3-1: config 0 descriptor?? [ 66.072215][ T4505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 66.108933][ T4554] loop0: detected capacity change from 0 to 64 [ 66.334034][ T4564] Zero length message leads to an empty skb [ 66.374238][ T4568] loop0: detected capacity change from 0 to 512 [ 66.397233][ T4568] EXT4-fs (loop0): Ignoring removed bh option [ 66.421766][ T4568] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.483001][ T4568] EXT4-fs (loop0): 1 truncate cleaned up [ 66.488929][ T4568] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 66.517179][ T4573] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.555281][ T4293] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 66.568734][ T4575] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.764740][ T4233] usb 3-1: USB disconnect, device number 4 [ 66.807157][ T4571] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 66.851780][ T4571] Remounting filesystem read-only [ 66.894289][ T4233] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 66.919004][ T4190] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 67.018005][ T4588] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 67.100885][ T4588] exFAT-fs (loop3): hint_cluster is invalid (17) [ 67.123247][ T4588] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 67.208587][ T4588] exFAT-fs (loop3): Filesystem has been set read-only [ 67.243528][ T4588] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 67.383184][ T4603] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 67.412004][ T4603] exFAT-fs (loop1): failed to load upcase table [ 67.418401][ T4603] exFAT-fs (loop1): failed to recognize exfat type [ 67.451642][ T4606] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 67.875379][ T4609] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 67.929254][ T4609] REISERFS (device loop3): using ordered data mode [ 67.929436][ T4624] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.935907][ T4609] reiserfs: using flush barriers [ 67.949045][ T4618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.022371][ T4609] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.054535][ T4624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 68.063732][ T4624] System zones: 0-1, 15-15, 18-18, 34-34 [ 68.077000][ T4624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.094056][ T4624] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 68.108231][ T4624] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.125401][ T4624] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 68.135099][ T4624] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.132: bg 0: block 40: padding at end of block bitmap is not set [ 68.166141][ T4609] REISERFS (device loop3): checking transaction log (loop3) [ 68.179530][ T4624] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 68.274287][ T4624] EXT4-fs (loop2): 1 truncate cleaned up [ 68.279975][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 68.511992][ T4624] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 68.519949][ T4642] set_capacity_and_notify: 9 callbacks suppressed [ 68.519963][ T4642] loop1: detected capacity change from 0 to 4096 [ 68.572660][ T4609] REISERFS (device loop3): Using tea hash to sort names [ 68.583591][ T4653] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 68.594833][ T4609] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 68.620901][ T4652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 68.626243][ T4609] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 68.803635][ T4642] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 68.990486][ T4668] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.129392][ T4188] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 69.334934][ T4682] loop2: detected capacity change from 0 to 256 [ 69.603565][ T4700] loop1: detected capacity change from 0 to 2048 [ 69.729258][ T4700] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 69.794892][ T4700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.822403][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.873162][ T4702] loop2: detected capacity change from 0 to 8192 [ 69.918328][ T4713] loop3: detected capacity change from 0 to 16 [ 69.950726][ T4702] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 70.034256][ T4702] REISERFS (device loop2): using ordered data mode [ 70.040814][ T4702] reiserfs: using flush barriers [ 70.102054][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 70.156725][ T4702] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.215618][ T4702] REISERFS (device loop2): checking transaction log (loop2) [ 70.226005][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.258870][ T4722] loop0: detected capacity change from 0 to 128 [ 70.312232][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 70.319841][ T21] usb 5-1: can't read configurations, error -71 [ 70.326888][ T4718] loop1: detected capacity change from 0 to 32768 [ 70.348799][ T4722] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.402161][ T4722] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.426470][ T4718] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.163 (4718) [ 70.448264][ T4702] REISERFS (device loop2): Using tea hash to sort names [ 70.487393][ T4702] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 70.508576][ T4726] program syz.3.169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.546838][ T4702] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 70.607192][ T4718] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 70.662557][ T4718] BTRFS info (device loop1): using free space tree [ 70.721912][ T4718] BTRFS info (device loop1): has skinny extents [ 70.769120][ T4733] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 70.816180][ T4741] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 70.828515][ T4741] program syz.3.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.884794][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 71.100498][ T4718] BTRFS info (device loop1): enabling ssd optimizations [ 71.316611][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.326503][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564708][ T4766] loop3: detected capacity change from 0 to 32768 [ 71.860565][ T4772] loop0: detected capacity change from 0 to 512 [ 71.893567][ T4766] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 72.000649][ T4777] loop4: detected capacity change from 0 to 512 [ 72.040576][ T4718] syz.1.163 (4718) used greatest stack depth: 20856 bytes left [ 72.106654][ T4777] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.153805][ T4777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.279033][ T4777] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.183: bad orphan inode 131083 [ 72.291205][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.314508][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 72.345617][ T4772] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.359687][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000008,abort,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 72.668523][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 73.046217][ T4812] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.103033][ T4812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 73.111211][ T4812] System zones: 0-1, 3-36 [ 73.159594][ T4812] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,max_dir_size_kb=0x0000000000000002,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 73.282146][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 73.298736][ T4812] EXT4-fs (loop0): shut down requested (2) [ 73.313038][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.321073][ T1108] usb 3-1: Product: syz [ 73.347159][ T1108] usb 3-1: Manufacturer: syz [ 73.351823][ T1108] usb 3-1: SerialNumber: syz [ 73.530952][ T4836] set_capacity_and_notify: 1 callbacks suppressed [ 73.530967][ T4836] loop0: detected capacity change from 0 to 512 [ 73.562709][ T4839] overlayfs: upper fs does not support tmpfile. [ 73.636289][ T4843] raw_sendmsg: syz.4.206 forgot to set AF_INET. Fix it! [ 73.725107][ T4836] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 73.792258][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.807412][ T4836] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.856080][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 74.092160][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 74.136074][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 74.165308][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 74.189733][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 74.220438][ T1108] lan78xx: probe of 3-1:1.0 failed with error -71 [ 74.242050][ T4232] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.262959][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.284386][ T1108] usb 3-1: USB disconnect, device number 5 [ 74.298008][ T4232] usb 4-1: config 0 descriptor?? [ 74.572075][ T4232] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 74.592190][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.632557][ T4232] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 74.640128][ T4232] usb 4-1: media controller created [ 74.671089][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.742796][ T4866] device batadv_slave_1 entered promiscuous mode [ 74.767681][ T4796] kernel write not supported for file /dsp (pid: 4796 comm: kworker/1:11) [ 74.782099][ T4232] az6027: usb out operation failed. (-71) [ 74.799119][ T4865] device batadv_slave_1 left promiscuous mode [ 74.832235][ T4232] az6027: usb out operation failed. (-71) [ 74.837996][ T4232] stb0899_attach: Driver disabled by Kconfig [ 74.866734][ T4232] az6027: no front-end attached [ 74.866734][ T4232] [ 74.922177][ T4232] az6027: usb out operation failed. (-71) [ 74.927940][ T4232] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 74.980035][ T4232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 75.016460][ T4232] dvb-usb: schedule remote query interval to 400 msecs. [ 75.041838][ T4232] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 75.085144][ T4232] usb 4-1: USB disconnect, device number 3 [ 75.262607][ T4232] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 75.341215][ T4882] loop2: detected capacity change from 0 to 1024 [ 75.622537][ T4887] block nbd0: server does not support multiple connections per device. [ 75.676094][ T4887] block nbd0: shutting down sockets [ 75.879840][ T4882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 75.905380][ T4882] EXT4-fs (loop2): inline encryption not supported [ 75.967120][ T4882] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 76.170647][ T4889] loop4: detected capacity change from 0 to 131072 [ 76.229995][ T4906] loop3: detected capacity change from 0 to 136 [ 76.252043][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.252065][ T4882] EXT4-fs error (device loop2): ext4_remount:6060: comm syz.2.220: Abort forced by user [ 76.281221][ T4889] F2FS-fs (loop4): invalid crc value [ 76.315089][ T4889] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.361978][ T4882] EXT4-fs (loop2): Remounting filesystem read-only [ 76.368875][ T4889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.403938][ T4906] rock: directory entry would overflow storage [ 76.429535][ T7] cfg80211: failed to load regulatory.db [ 76.467433][ T4882] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 76.478738][ T4906] rock: sig=0x4f50, size=4, remaining=3 [ 76.492027][ T4889] F2FS-fs (loop4): inode (7) has corrupted xattr [ 76.498987][ T4906] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 76.536779][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 76.770061][ T4917] loop2: detected capacity change from 0 to 64 [ 76.780270][ T4901] loop1: detected capacity change from 0 to 32768 [ 76.862741][ T4917] hfs: invalid btree extent records (0 size) [ 76.892114][ T4917] hfs: unable to open catalog tree [ 76.967210][ T1108] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.986755][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.077572][ T1108] usb 1-1: Product: syz [ 77.081777][ T1108] usb 1-1: Manufacturer: syz [ 77.167117][ T1108] usb 1-1: SerialNumber: syz [ 77.223211][ T1108] r8152-cfgselector 1-1: config 0 descriptor?? [ 77.236881][ T4927] loop2: detected capacity change from 0 to 256 [ 77.329690][ T4927] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.373883][ T4901] XFS (loop1): Mounting V5 Filesystem [ 77.427666][ T4927] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 77.537564][ T4927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 77.550239][ T4901] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 77.572114][ T1108] r8152-cfgselector 1-1: Unknown version 0x0000 [ 77.731679][ T4901] XFS (loop1): Starting recovery (logdev: internal) [ 77.832057][ T1108] r8152-cfgselector 1-1: Unknown version 0x0000 [ 77.860194][ T1108] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 77.964310][ T4901] XFS (loop1): Ending recovery (logdev: internal) [ 78.255180][ T4920] loop3: detected capacity change from 0 to 262144 [ 78.353884][ T4920] F2FS-fs (loop3): invalid crc value [ 78.393649][ T4920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.450982][ T4920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.499185][ T4188] XFS (loop1): Unmounting Filesystem [ 78.931835][ T4296] kernel write not supported for file /input/event2 (pid: 4296 comm: kworker/1:7) [ 78.960107][ T4932] loop2: detected capacity change from 0 to 32768 [ 79.063729][ T4932] JBD2: Ignoring recovery information on journal [ 79.255210][ T4932] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 79.859481][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 79.926052][ T4976] loop3: detected capacity change from 0 to 4096 [ 79.946090][ T4980] loop0: detected capacity change from 0 to 22 [ 80.062718][ T4980] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 80.076848][ T4980] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 80.138335][ T4976] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 80.184911][ T4976] ntfs3: loop3: Failed to load $Extend. [ 80.269539][ T4976] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 80.618020][ T4967] loop4: detected capacity change from 0 to 40427 [ 80.677748][ T4972] loop1: detected capacity change from 0 to 32768 [ 80.706046][ T4967] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 80.752346][ T4967] F2FS-fs (loop4): invalid crc value [ 80.774802][ T4967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.980318][ T4967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.268125][ T4190] attempt to access beyond end of device [ 81.268125][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 81.895036][ T5038] loop3: detected capacity change from 0 to 64 [ 82.056307][ T26] audit: type=1804 audit(1771347982.149:6): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.279" name="/newroot/62/bus/file1" dev="loop3" ino=21 res=1 errno=0 [ 82.137704][ T5050] loop2: detected capacity change from 0 to 256 [ 82.208525][ T5050] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.289009][ T26] audit: type=1800 audit(1771347982.379:7): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 82.363031][ T26] audit: type=1800 audit(1771347982.429:8): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 82.445110][ T5061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.287'. [ 82.446001][ T5058] FAT-fs (loop2): error, corrupted file size (i_pos 196, 3938) [ 82.496613][ T5058] FAT-fs (loop2): Filesystem has been set read-only [ 82.792447][ T5079] loop1: detected capacity change from 0 to 64 [ 82.950995][ T5048] loop4: detected capacity change from 0 to 40427 [ 82.998396][ T5084] loop2: detected capacity change from 0 to 1024 [ 83.043742][ T5048] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 83.071698][ T5048] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 83.103258][ T5084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.115198][ T5048] F2FS-fs (loop4): invalid crc value [ 83.139890][ T5048] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.202401][ T5048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.228736][ T5094] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.300: unexpected EA_INODE flag [ 83.261330][ T4190] attempt to access beyond end of device [ 83.261330][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 83.408554][ T5075] mmap: syz.3.296 (5075) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 83.795231][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.862223][ T4247] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.943931][ T5112] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 84.014835][ T5112] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.159982][ T4247] usb 2-1: Using ep0 maxpacket: 16 [ 84.332330][ T4247] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 84.350809][ T4247] usb 2-1: config 0 has no interface number 0 [ 84.379047][ T4247] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 84.424058][ T4247] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 84.607832][ T5150] set_capacity_and_notify: 3 callbacks suppressed [ 84.607845][ T5150] loop2: detected capacity change from 0 to 512 [ 84.627681][ T4247] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 84.645248][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.674758][ T4247] usb 2-1: Product: syz [ 84.678963][ T4247] usb 2-1: Manufacturer: syz [ 84.690631][ T4247] usb 2-1: SerialNumber: syz [ 84.721164][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 84.740178][ T4247] usb 2-1: config 0 descriptor?? [ 84.757349][ T5150] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.772383][ T5100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.782276][ T5100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.808354][ T5150] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.323: corrupted xattr block 33 [ 84.828274][ T5150] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.323: corrupted xattr block 33 [ 84.890165][ T5150] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 84.892099][ T4796] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.014172][ T5100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.028795][ T5140] loop3: detected capacity change from 0 to 32768 [ 85.036923][ T5100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.099840][ T5140] XFS (loop3): Mounting V5 Filesystem [ 85.211603][ T5140] XFS (loop3): Ending clean mount [ 85.244954][ T5140] XFS (loop3): Quotacheck needed: Please wait. [ 85.282499][ T4796] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.291674][ T4796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.335301][ T4796] usb 1-1: config 0 descriptor?? [ 85.351172][ T5140] XFS (loop3): Quotacheck: Done. [ 85.373945][ T4796] cp210x 1-1:0.0: cp210x converter detected [ 85.474278][ T5173] loop2: detected capacity change from 0 to 32768 [ 85.521131][ T5160] loop4: detected capacity change from 0 to 32768 [ 85.532439][ T4247] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 198 [ 85.559815][ T5173] JBD2: Ignoring recovery information on journal [ 85.580250][ T4196] XFS (loop3): Unmounting Filesystem [ 85.615738][ T5160] JBD2: Ignoring recovery information on journal [ 85.638315][ T5173] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.693416][ T26] audit: type=1800 audit(1771347985.789:9): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.329" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 85.730882][ T5160] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.771591][ T4247] usb 2-1: USB disconnect, device number 4 [ 85.812011][ T4796] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 85.883457][ T4796] usb 1-1: cp210x converter now attached to ttyUSB0 [ 85.921516][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 85.967293][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 86.068928][ T4232] usb 1-1: USB disconnect, device number 5 [ 86.102564][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.108088][ T5179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.136680][ T4232] cp210x 1-1:0.0: device disconnected [ 86.660800][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 86.711740][ T5218] kvm [5214]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 86.842130][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.034116][ T5245] tipc: Started in network mode [ 87.039545][ T5245] tipc: Node identity ac14140f, cluster identity 4711 [ 87.069245][ T5245] tipc: New replicast peer: 255.255.255.255 [ 87.091161][ T5245] tipc: Enabled bearer , priority 10 [ 87.220095][ T5253] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 87.262246][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.278379][ T5257] loop3: detected capacity change from 0 to 256 [ 87.292040][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.301802][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.320595][ T4232] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.329849][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.332763][ T5257] exfat: Deprecated parameter 'namecase' [ 87.360511][ T4232] usb 3-1: config 0 descriptor?? [ 87.380242][ T5257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 87.391988][ T4296] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.408330][ T5261] loop4: detected capacity change from 0 to 16 [ 87.421625][ T5261] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 87.641470][ T5269] process 'syz.4.372' launched '/dev/fd/3' with NULL argv: empty string added [ 87.642195][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 87.772344][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.793539][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.821977][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.852832][ T4296] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.878335][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.882051][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.904933][ T4296] usb 1-1: config 0 descriptor?? [ 87.908601][ T5283] loop4: detected capacity change from 0 to 512 [ 87.919438][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.933964][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.013094][ T5283] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 88.022061][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.029481][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.060845][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.098742][ T5283] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.378: bad orphan inode 15 [ 88.117692][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.129782][ T5283] ext4_test_bit(bit=14, block=18) = 1 [ 88.135477][ T5283] is_bad_inode(inode)=0 [ 88.135542][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.145643][ T5283] NEXT_ORPHAN(inode)=1023 [ 88.155835][ T5283] max_ino=32 [ 88.159065][ T5283] i_nlink=0 [ 88.161539][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.170194][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.174198][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.188926][ T5283] ext2 filesystem being mounted at /75/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 88.204169][ T4208] tipc: Node number set to 2886997007 [ 88.238630][ T5304] input: syz0 as /devices/virtual/input/input7 [ 88.241970][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.263254][ T5283] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.378: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 88.277375][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.301723][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.319565][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.332529][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.339996][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.347870][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.355387][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.362884][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.370442][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.380518][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.387993][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.395654][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.403652][ T4296] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 88.403738][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.418045][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.419022][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.426363][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.433786][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.445944][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.448325][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.455346][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.467416][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.470167][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.478522][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.485490][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.497449][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.499538][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.509883][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.514741][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.526735][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.528831][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.543389][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.543808][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.550629][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.562895][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.566244][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.581088][ T4296] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 88.584536][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.597613][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.605185][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.612671][ T4232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.629017][ T4232] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 88.636021][ T4296] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 88.676191][ T4296] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 88.694320][ T4232] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.697049][ T4296] microsoft 0003:045E:07DA.0003: no inputs found [ 88.713886][ T4296] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 88.725718][ T5312] netlink: 92 bytes leftover after parsing attributes in process `syz.1.390'. [ 88.726800][ T4232] usb 3-1: USB disconnect, device number 6 [ 88.787942][ T5312] netem: unknown loss type 0 [ 88.858531][ T4296] usb 1-1: USB disconnect, device number 6 [ 88.869084][ T5317] loop1: detected capacity change from 0 to 512 [ 88.935448][ T5317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.971640][ T5315] fido_id[5315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.009323][ T5318] fido_id[5318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.026267][ T5317] EXT4-fs (loop1): 1 truncate cleaned up [ 89.050827][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 89.207907][ T5314] loop3: detected capacity change from 0 to 32768 [ 89.276234][ T5314] JBD2: Ignoring recovery information on journal [ 89.308596][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.388070][ T5330] loop1: detected capacity change from 0 to 2048 [ 89.390415][ T5314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.478678][ T5330] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.632071][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 89.683570][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 89.752135][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.781137][ T4232] usb 3-1: config 0 has no interface number 0 [ 89.806483][ T5333] set_capacity_and_notify: 1 callbacks suppressed [ 89.806500][ T5333] loop0: detected capacity change from 0 to 40427 [ 89.810912][ T4232] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.834638][ T154] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 89.848998][ T4232] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.861930][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.896012][ T5340] loop4: detected capacity change from 0 to 4096 [ 89.911718][ T5333] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 89.915858][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.930792][ T4232] usb 3-1: config 0 descriptor?? [ 89.951547][ T5340] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 89.964821][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.964821][ T154] [ 89.971621][ T5333] F2FS-fs (loop0): invalid crc value [ 89.992578][ T154] EXT4-fs (loop1): Total free blocks count 0 [ 89.998596][ T154] EXT4-fs (loop1): Free/Dirty block details [ 90.005755][ T154] EXT4-fs (loop1): free_blocks=4096 [ 90.030148][ T154] EXT4-fs (loop1): dirty_blocks=512 [ 90.040886][ T4232] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 90.056150][ T5333] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.076142][ T154] EXT4-fs (loop1): Block reservation details [ 90.122069][ T154] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 90.127222][ T5340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 90.154793][ T5340] ntfs3: loop4: Failed to load $Extend. [ 90.155102][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 90.222012][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.222012][ T154] [ 90.281481][ T5333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.492868][ T4799] usb 3-1: USB disconnect, device number 7 [ 90.560529][ T4184] attempt to access beyond end of device [ 90.560529][ T4184] loop0: rw=2049, want=45104, limit=40427 [ 90.833888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 90.843425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 90.920061][ T5374] loop0: detected capacity change from 0 to 8 [ 90.930545][ T4232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.972762][ T5374] SQUASHFS error: lzo decompression failed, data probably corrupt [ 90.980632][ T5374] SQUASHFS error: Failed to read block 0x91: -5 [ 90.992976][ T5374] SQUASHFS error: Unable to read metadata cache entry [8f] [ 91.000208][ T5374] SQUASHFS error: Unable to read inode 0x11f [ 91.076869][ T5380] loop4: detected capacity change from 0 to 512 [ 91.130103][ T5384] loop0: detected capacity change from 0 to 1024 [ 91.212175][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 91.237329][ T5380] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.415: inode has both inline data and extents flags [ 91.293768][ T5384] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 91.313619][ T5380] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.415: couldn't read orphan inode 15 (err -117) [ 91.337334][ T5380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.337645][ T5384] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.372079][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.378783][ T4232] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 91.405407][ T5384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.417: bg 0: block 112: padding at end of block bitmap is not set [ 91.424326][ T5384] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 91.448507][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.459908][ T5384] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.459908][ T5384] [ 91.531583][ T4232] usb 2-1: config 0 descriptor?? [ 91.902015][ T4296] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.934920][ T5427] option changes via remount are deprecated (pid=5426 comm=syz.3.435) [ 91.956952][ T5427] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 92.005318][ T4232] petalynx 0003:18B1:0037.0004: global environment stack underflow [ 92.040381][ T4232] petalynx 0003:18B1:0037.0004: item 0 2 1 11 parsing failed [ 92.066072][ T5437] loop3: detected capacity change from 0 to 512 [ 92.073037][ T4232] petalynx 0003:18B1:0037.0004: parse failed [ 92.082361][ T4232] petalynx: probe of 0003:18B1:0037.0004 failed with error -22 [ 92.139500][ T5437] EXT4-fs (loop3): Ignoring removed bh option [ 92.152075][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 92.160361][ T5437] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 92.198811][ T5437] EXT4-fs (loop3): 1 truncate cleaned up [ 92.206177][ T4232] usb 2-1: USB disconnect, device number 5 [ 92.212357][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 92.233250][ T5439] loop0: detected capacity change from 0 to 4096 [ 92.272163][ T4296] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.280225][ T4296] usb 5-1: config 0 has no interface number 0 [ 92.350020][ T4296] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.402395][ T4296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.404722][ T5433] loop2: detected capacity change from 0 to 40427 [ 92.411495][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.432635][ T5433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.456373][ T5433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.513480][ T5433] F2FS-fs (loop2): invalid crc value [ 92.517737][ T4296] usb 5-1: config 0 descriptor?? [ 92.545220][ T5433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.572717][ T4296] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 92.693535][ T5433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.706607][ T5433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.844572][ T4796] usb 5-1: USB disconnect, device number 6 [ 92.939600][ T5453] netlink: 'syz.1.446': attribute type 3 has an invalid length. [ 92.989060][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 93.158880][ T5459] loop1: detected capacity change from 0 to 64 [ 93.169339][ T5461] loop2: detected capacity change from 0 to 256 [ 93.209198][ T5459] UBIFS error (pid: 5459): cannot open "c8:", error -22 [ 93.265559][ T5461] attempt to access beyond end of device [ 93.265559][ T5461] loop2: rw=2049, want=356, limit=256 [ 93.434456][ T5446] JBD2: Ignoring recovery information on journal [ 93.463506][ T5449] XFS: attr2 mount option is deprecated. [ 93.509136][ T5446] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.610432][ T5449] XFS (loop0): Mounting V5 Filesystem [ 93.649802][ T5472] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 93.666347][ T5472] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.693838][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 93.720103][ T5472] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.450: corrupted xattr block 33 [ 93.731564][ T5479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa483dd5f, utbl_chksum : 0xe619d30d) [ 93.749773][ T5472] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.450: corrupted xattr block 33 [ 93.827420][ T5479] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 93.840278][ T5449] XFS (loop0): Ending clean mount [ 93.872196][ T5472] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 93.913233][ T5449] XFS (loop0): Quotacheck needed: Please wait. [ 94.049407][ T5449] XFS (loop0): Quotacheck: Done. [ 94.192097][ T4184] XFS (loop0): Unmounting Filesystem [ 94.431228][ T5505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.549818][ T5500] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 94.592507][ T5500] Remounting filesystem read-only [ 94.665598][ T4196] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 95.068917][ T5541] set_capacity_and_notify: 5 callbacks suppressed [ 95.068931][ T5541] loop4: detected capacity change from 0 to 1024 [ 95.281029][ T5541] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.300919][ T5553] Bluetooth: hci0: load_link_keys: expected 6403 bytes, got 7 bytes [ 95.377643][ T5541] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.477: unexpected EA_INODE flag [ 95.406357][ T5556] loop1: detected capacity change from 0 to 512 [ 95.417880][ T5532] loop0: detected capacity change from 0 to 32768 [ 95.461907][ T5532] JBD2: Ignoring recovery information on journal [ 95.601245][ T5532] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.768323][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 95.886702][ T5577] loop3: detected capacity change from 0 to 128 [ 95.918025][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 95.966834][ T5579] loop4: detected capacity change from 0 to 1024 [ 95.998312][ T5577] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.066489][ T5577] hpfs: filesystem error: improperly stopped [ 96.120748][ T5577] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 96.144200][ T5579] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.157259][ T5577] hpfs: You really don't want any checks? You are crazy... [ 96.168190][ T5579] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.181109][ T5577] hpfs: hpfs_map_sector(): read error [ 96.204083][ T5579] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.211574][ T5577] hpfs: code page support is disabled [ 96.221653][ T5579] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.231180][ T5577] hpfs: hpfs_map_4sectors(): unaligned read [ 96.258216][ T5584] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.267332][ T5577] hpfs: hpfs_map_4sectors(): unaligned read [ 96.279122][ T5577] hpfs: filesystem error: unable to find root dir [ 96.288013][ T5584] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.400023][ T4785] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.437449][ T4785] hfsplus: request for non-existent node 33554434 in B*Tree [ 96.547955][ T5590] loop3: detected capacity change from 0 to 1024 [ 96.707185][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue. Quota mode: none. [ 96.736877][ T5590] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.790294][ T5581] loop2: detected capacity change from 0 to 32768 [ 96.819502][ T5583] loop1: detected capacity change from 0 to 32768 [ 96.855380][ T5599] loop4: detected capacity change from 0 to 4096 [ 96.879862][ T5605] loop0: detected capacity change from 0 to 4096 [ 96.880554][ T5581] XFS (loop2): Mounting V5 Filesystem [ 96.888137][ T5590] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.498: lblock 3 mapped to illegal pblock 3 (length 3) [ 96.919780][ T5610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.498: bg 0: block 112: padding at end of block bitmap is not set [ 96.931989][ T5590] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 96.967576][ T5583] JBD2: Ignoring recovery information on journal [ 97.003448][ T5590] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.003448][ T5590] [ 97.056329][ T5583] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.071660][ T4773] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 5) [ 97.103789][ T5599] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 97.131422][ T4773] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 97.162520][ T4773] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.162520][ T4773] [ 97.184641][ T5581] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 97.233884][ T5599] ntfs3: loop4: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 97.319829][ T5581] XFS (loop2): Starting recovery (logdev: internal) [ 97.377384][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 97.391776][ T4190] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 97.408937][ T5581] XFS (loop2): Ending recovery (logdev: internal) [ 97.451597][ T4190] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 97.575090][ T5617] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 97.632298][ T5617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.735674][ T4193] XFS (loop2): Unmounting Filesystem [ 98.119080][ T5631] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.595437][ T5658] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 98.622092][ T5668] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.631128][ T5658] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.655131][ T5658] ntfs3: loop0: Failed to load $Extend. [ 98.734938][ T154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 98.759575][ T5668] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.792327][ T154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.931275][ T154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.931275][ T154] [ 99.018235][ T154] EXT4-fs (loop3): Total free blocks count 0 [ 99.039973][ T154] EXT4-fs (loop3): Free/Dirty block details [ 99.061108][ T154] EXT4-fs (loop3): free_blocks=4096 [ 99.089974][ T154] EXT4-fs (loop3): dirty_blocks=784 [ 99.108075][ T154] EXT4-fs (loop3): Block reservation details [ 99.130071][ T154] EXT4-fs (loop3): i_reserved_data_blocks=49 [ 99.140157][ T4785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 752 with error 28 [ 99.177445][ T4785] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.177445][ T4785] [ 99.233041][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.356085][ T5691] rock: directory entry would overflow storage [ 99.396463][ T5691] rock: sig=0x4f50, size=4, remaining=3 [ 99.427341][ T5691] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 99.570248][ T5705] tap0: tun_chr_ioctl cmd 1074025677 [ 99.596486][ T5705] tap0: linktype set to 0 [ 99.600335][ T5703] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 99.612169][ T4232] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.620837][ T4232] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.635401][ T5703] loop3: partition table partially beyond EOD, truncated [ 99.652924][ T5703] loop3: p1 size 917504 extends beyond EOD, truncated [ 99.661947][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.671147][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 99.672746][ T5703] loop3: p2 start 4278190080 is beyond EOD, [ 99.684944][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 99.686967][ T5703] truncated [ 99.707083][ T5703] loop3: p4 size 8192 extends beyond EOD, truncated [ 99.716635][ T5703] loop3: p5 size 917504 extends beyond EOD, truncated [ 99.726069][ T5703] loop3: p6 size 8192 extends beyond EOD, truncated [ 99.745933][ T5709] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 99.759577][ T5708] NILFS (loop0): invalid segment: Checksum error in segment payload [ 99.802085][ T5708] NILFS (loop0): trying rollback from an earlier position [ 99.812713][ T4232] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.843100][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.851659][ T4232] usb 3-1: Product: syz [ 99.861746][ T5709] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 99.886788][ T5709] ntfs3: loop1: Failed to load $Extend. [ 99.892923][ T5708] NILFS (loop0): recovery complete [ 99.914501][ T5714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.933329][ T4232] usb 3-1: Manufacturer: syz [ 100.030312][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 100.064137][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 100.098098][ T4232] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 100.107190][ T4232] cdc_wdm 3-1:1.0: Unknown control protocol [ 100.233932][ T4912] udevd[4912]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.257952][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 100.258417][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.279622][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 100.281816][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 100.302950][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.323568][ T4232] usb 3-1: USB disconnect, device number 8 [ 100.376481][ T5722] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.383593][ T5722] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.411668][ T5724] set_capacity_and_notify: 8 callbacks suppressed [ 100.411682][ T5724] loop4: detected capacity change from 0 to 136 [ 100.550457][ T5724] rock: directory entry would overflow storage [ 100.562620][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 100.573012][ T5724] rock: sig=0x4f50, size=4, remaining=3 [ 100.578595][ T5724] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 100.583865][ T5730] loop0: detected capacity change from 0 to 4096 [ 100.662015][ T5730] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 100.864898][ T5741] loop0: detected capacity change from 0 to 64 [ 100.873926][ T5743] loop1: detected capacity change from 0 to 512 [ 100.893281][ T1108] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 100.912213][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.920889][ T1108] usb 4-1: Product: syz [ 100.928618][ T1108] usb 4-1: Manufacturer: syz [ 100.933725][ T1108] usb 4-1: SerialNumber: syz [ 100.959256][ T5741] hfs: hfs: Invalid key length: 94 [ 101.015756][ T5743] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 101.054109][ T5743] FAT-fs (loop1): Filesystem has been set read-only [ 101.076416][ T5743] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 101.108892][ T5750] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 101.136572][ T5743] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 101.248761][ T1108] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 101.282297][ T1108] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.317932][ T1108] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 101.331956][ T1108] usb 4-1: media controller created [ 101.386962][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.455252][ T5761] loop0: detected capacity change from 0 to 512 [ 101.493406][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 101.550212][ T1108] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 101.569967][ T5761] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 101.588288][ T5746] loop2: detected capacity change from 0 to 32768 [ 101.602186][ T1108] usb 4-1: USB disconnect, device number 4 [ 101.636052][ T5761] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 101.674987][ T5746] JBD2: Ignoring recovery information on journal [ 101.687465][ T5749] loop4: detected capacity change from 0 to 32768 [ 101.736455][ T5746] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.746629][ T5749] XFS (loop4): Mounting V5 Filesystem [ 101.771968][ T4247] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.830122][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 101.941409][ T5749] XFS (loop4): Ending clean mount [ 101.949292][ T5749] XFS (loop4): Quotacheck needed: Please wait. [ 102.047836][ T5749] XFS (loop4): Quotacheck: Done. [ 102.062169][ T4247] usb 2-1: Using ep0 maxpacket: 8 [ 102.128896][ T5781] program syz.2.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.152199][ T4232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.181247][ T5783] loop3: detected capacity change from 0 to 1024 [ 102.215799][ T4190] XFS (loop4): Unmounting Filesystem [ 102.262292][ T4247] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.336209][ T5787] netlink: 72 bytes leftover after parsing attributes in process `syz.2.575'. [ 102.339342][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,usrjquota=,lazytime,nobarrier,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 102.368317][ T4247] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 102.388763][ T4247] usb 2-1: can't read configurations, error -71 [ 102.563036][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.605387][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.639070][ T4232] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 102.661590][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.692975][ T4232] usb 1-1: config 0 descriptor?? [ 102.810963][ T5806] netlink: 'syz.4.573': attribute type 5 has an invalid length. [ 102.911543][ T5814] loop1: detected capacity change from 0 to 128 [ 102.978205][ T5814] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 103.015598][ T5814] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.042222][ T5814] ext2 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.190606][ T4232] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 103.225124][ T4232] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 103.253894][ T4232] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 103.268826][ T4232] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 103.350051][ T5827] loop1: detected capacity change from 0 to 128 [ 103.435843][ T5827] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 103.491563][ T5827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.507303][ T4247] usb 1-1: USB disconnect, device number 7 [ 103.713130][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.726486][ T5812] XFS (loop2): Mounting V5 Filesystem [ 103.782133][ T4296] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.818164][ T5812] XFS (loop2): Ending clean mount [ 103.839336][ T5812] XFS (loop2): Quotacheck needed: Please wait. [ 103.953104][ T5812] XFS (loop2): Quotacheck: Done. [ 103.972080][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 104.032107][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 104.107800][ T4232] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 104.144664][ T4232] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 104.152056][ T4296] usb 4-1: config 0 has too many interfaces: 235, using maximum allowed: 32 [ 104.166953][ T4232] usb 5-1: config 0 has no interface number 0 [ 104.181120][ T5847] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.190952][ T4232] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 104.191606][ T4296] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 235 [ 104.209632][ T5847] EXT4-fs (loop0): inline encryption not supported [ 104.216042][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.217501][ T5849] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.239232][ T4193] XFS (loop2): Unmounting Filesystem [ 104.251037][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3499, setting to 64 [ 104.271686][ T4232] usb 5-1: config 0 descriptor?? [ 104.299445][ T5847] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 104.359808][ T4232] bfusb: probe of 5-1:0.94 failed with error -5 [ 104.421465][ T5847] EXT4-fs error (device loop0): ext4_remount:6060: comm syz.0.598: Abort forced by user [ 104.492658][ T5847] EXT4-fs (loop0): Remounting filesystem read-only [ 104.499255][ T5847] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 104.506294][ T4296] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 104.525400][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.564226][ T4296] usb 4-1: Product: syz [ 104.568458][ T4296] usb 4-1: Manufacturer: syz [ 104.605648][ T4296] usb 4-1: SerialNumber: syz [ 104.633381][ T4296] usb 4-1: config 0 descriptor?? [ 104.673785][ T4799] usb 5-1: USB disconnect, device number 7 [ 104.739687][ T4296] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 104.798662][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.960828][ T4799] usb 4-1: USB disconnect, device number 5 [ 105.869177][ T5884] set_capacity_and_notify: 3 callbacks suppressed [ 105.869191][ T5884] loop0: detected capacity change from 0 to 4096 [ 105.974792][ T5864] loop2: detected capacity change from 0 to 32768 [ 106.065506][ T5884] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 106.125257][ T5884] ntfs3: loop0: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 106.201276][ T5864] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.599 (5864) [ 106.249015][ T4184] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 106.277023][ T4184] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 106.290674][ T5864] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 106.337590][ T5864] BTRFS info (device loop2): using free space tree [ 106.372241][ T5864] BTRFS info (device loop2): has skinny extents [ 106.401701][ T26] audit: type=1326 audit(1771348006.489:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.4.624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fb19f6629 code=0x0 [ 106.755321][ T5864] BTRFS info (device loop2): enabling ssd optimizations [ 106.794462][ T5928] loop3: detected capacity change from 0 to 4096 [ 106.835192][ T5928] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.021090][ T5928] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 107.082462][ T5928] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 107.139391][ T5928] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 107.212402][ T5928] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 107.471594][ T5928] ntfs: volume version 3.1. [ 107.544374][ T5928] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 107.707727][ T5928] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 107.841987][ T5928] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 108.066245][ T5939] loop4: detected capacity change from 0 to 131072 [ 108.115670][ T5939] F2FS-fs (loop4): invalid crc value [ 108.157185][ T5939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.200732][ T5939] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 108.217563][ T5957] loop0: detected capacity change from 0 to 128 [ 108.262304][ T5939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 108.478743][ T5957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.552147][ T5957] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.579644][ T5966] loop1: detected capacity change from 0 to 128 [ 108.707242][ T5966] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.767544][ T5970] loop2: detected capacity change from 0 to 128 [ 108.778635][ T5972] loop0: detected capacity change from 0 to 256 [ 108.870013][ T5972] exfat: Deprecated parameter 'utf8' [ 108.882692][ T5966] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000000,,errors=continue. Quota mode: none. [ 108.904680][ T5974] loop4: detected capacity change from 0 to 8192 [ 108.905207][ T5970] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 108.982855][ T5966] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.987024][ T5974] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 109.019014][ T5970] sysv_free_block: trying to free block not in datazone [ 109.056384][ T5972] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 109.079783][ T5974] REISERFS (device loop4): using ordered data mode [ 109.181918][ T5974] reiserfs: using flush barriers [ 109.205844][ T5974] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.231979][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.312987][ T5974] REISERFS (device loop4): checking transaction log (loop4) [ 109.344443][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 109.432160][ T5979] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 109.477438][ T5986] loop0: detected capacity change from 0 to 256 [ 109.625136][ T4233] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.657391][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.720319][ T5974] REISERFS (device loop4): Using tea hash to sort names [ 109.727336][ T4233] usb 4-1: config 0 descriptor?? [ 109.758148][ T5974] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 109.783104][ T4233] cp210x 4-1:0.0: cp210x converter detected [ 109.893984][ T26] audit: type=1800 audit(1771348009.989:11): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 110.262149][ T4233] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 110.315821][ T4233] usb 4-1: cp210x converter now attached to ttyUSB0 [ 110.412802][ T6001] NILFS (loop1): invalid segment: Checksum error in segment payload [ 110.420842][ T6001] NILFS (loop1): trying rollback from an earlier position [ 110.544396][ T7] usb 4-1: USB disconnect, device number 6 [ 110.554721][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.559207][ T6001] NILFS (loop1): recovery complete [ 110.594139][ T7] cp210x 4-1:0.0: device disconnected [ 110.630477][ T6008] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.689199][ T6010] program syz.4.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.952352][ T6014] set_capacity_and_notify: 2 callbacks suppressed [ 110.952366][ T6014] loop4: detected capacity change from 0 to 512 [ 111.067366][ T6014] EXT4-fs (loop4): Ignoring removed nobh option [ 111.083965][ T6014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.153963][ T6005] loop2: detected capacity change from 0 to 32768 [ 111.200843][ T6005] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.654 (6005) [ 111.249205][ T6014] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.300703][ T6005] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.352981][ T6005] BTRFS info (device loop2): force zlib compression, level 3 [ 111.375445][ T6014] EXT4-fs (loop4): 1 truncate cleaned up [ 111.381270][ T6014] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 111.404081][ T6005] BTRFS info (device loop2): turning on flush-on-commit [ 111.428767][ T6005] BTRFS info (device loop2): max_inline at 4096 [ 111.462554][ T6005] BTRFS info (device loop2): using free space tree [ 111.482003][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.535643][ T6005] BTRFS info (device loop2): has skinny extents [ 111.753378][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 111.887865][ T6005] BTRFS info (device loop2): enabling ssd optimizations [ 111.912194][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.953609][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.016040][ T5941] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 112.052188][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.112851][ T5941] usb 4-1: config 0 descriptor?? [ 112.222880][ T6058] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.666'. [ 112.235592][ T6005] BTRFS info (device loop2): balance: start -d -m [ 112.327937][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 112.377550][ T6005] BTRFS info (device loop2): balance: paused [ 112.573058][ T6067] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.679'. [ 112.604483][ T5941] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 112.622892][ T5941] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 112.639085][ T5941] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 112.682333][ T5941] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 112.914321][ T4799] usb 4-1: USB disconnect, device number 7 [ 112.982190][ T4208] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.158265][ T6084] loop2: detected capacity change from 0 to 4096 [ 113.210498][ T6086] loop4: detected capacity change from 0 to 1024 [ 113.272882][ T6086] EXT4-fs (loop4): Ignoring removed bh option [ 113.287102][ T6084] NILFS (loop2): invalid segment: Checksum error in segment payload [ 113.321219][ T6084] NILFS (loop2): trying rollback from an earlier position [ 113.351096][ T6084] NILFS (loop2): recovery complete [ 113.352445][ T4208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.387178][ T4208] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.400978][ T6091] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.417237][ T6086] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 113.472986][ T6086] EXT4-fs error (device loop4): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.4.673: path /147/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 113.511005][ T6086] EXT4-fs (loop4): Remounting filesystem read-only [ 113.572231][ T4208] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 113.587705][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.643039][ T4208] usb 1-1: Product: syz [ 113.653787][ T4208] usb 1-1: Manufacturer: syz [ 113.658441][ T4208] usb 1-1: SerialNumber: syz [ 113.675531][ T4208] usb 1-1: config 0 descriptor?? [ 113.713691][ T4208] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 113.736004][ T4208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.753651][ T6107] loop1: detected capacity change from 0 to 256 [ 113.772671][ T4208] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 113.791686][ T4208] usb 1-1: media controller created [ 113.821019][ T4208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.864810][ T4208] DVB: Unable to find symbol tda10046_attach() [ 113.871009][ T4208] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 113.880267][ T6103] loop2: detected capacity change from 0 to 32768 [ 113.881482][ T4208] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 113.930145][ T6103] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.678 (6103) [ 113.984538][ T6107] FAT-fs (loop1): Directory bread(block 64) failed [ 113.991118][ T6107] FAT-fs (loop1): Directory bread(block 65) failed [ 113.992140][ T6103] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.006730][ T6103] BTRFS info (device loop2): using free space tree [ 114.013693][ T6103] BTRFS info (device loop2): has skinny extents [ 114.020519][ T6107] FAT-fs (loop1): Directory bread(block 66) failed [ 114.042207][ T6107] FAT-fs (loop1): Directory bread(block 67) failed [ 114.062060][ T6107] FAT-fs (loop1): Directory bread(block 68) failed [ 114.068800][ T6107] FAT-fs (loop1): Directory bread(block 69) failed [ 114.114669][ T6107] FAT-fs (loop1): Directory bread(block 70) failed [ 114.122744][ T6107] FAT-fs (loop1): Directory bread(block 71) failed [ 114.153798][ T6107] FAT-fs (loop1): Directory bread(block 72) failed [ 114.160496][ T6107] FAT-fs (loop1): Directory bread(block 73) failed [ 114.188882][ T6127] loop4: detected capacity change from 0 to 512 [ 114.288477][ T6127] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.687: inode has both inline data and extents flags [ 114.417425][ T6103] BTRFS info (device loop2): enabling ssd optimizations [ 114.427018][ T6103] BTRFS info (device loop2): checking UUID tree [ 114.442479][ T6127] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.687: couldn't read orphan inode 15 (err -117) [ 114.521470][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.596841][ T4208] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 114.612763][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4176) [ 114.636269][ T4208] usb 1-1: USB disconnect, device number 8 [ 114.854471][ T6148] loop3: detected capacity change from 0 to 4096 [ 115.071193][ T6148] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 115.157679][ T6155] loop4: detected capacity change from 0 to 1024 [ 115.215101][ T6155] EXT4-fs (loop4): inline encryption not supported [ 115.347520][ T6160] [U] ^@^@ [ 115.404242][ T6155] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 115.570186][ T6169] loop0: detected capacity change from 0 to 1024 [ 115.894005][ T6176] hfsplus: bad catalog entry type [ 115.929922][ T6173] NILFS (loop3): invalid segment: Inconsistency found [ 115.973189][ T6173] NILFS (loop3): trying rollback from an earlier position [ 116.038159][ T6173] NILFS (loop3): recovery complete [ 116.102200][ T9] hfsplus: b-tree write err: -5, ino 4 [ 116.108815][ T6178] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.193465][ T6181] set_capacity_and_notify: 1 callbacks suppressed [ 116.193481][ T6181] loop4: detected capacity change from 0 to 2048 [ 116.246410][ T6184] loop1: detected capacity change from 0 to 512 [ 116.377506][ T6181] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 116.409026][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 116.472658][ T6186] loop0: detected capacity change from 0 to 4096 [ 116.505587][ T6181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.539370][ T6184] EXT4-fs (loop1): shut down requested (1) [ 116.655909][ T6198] loop3: detected capacity change from 0 to 128 [ 116.660233][ T6181] UDF-fs: unknown compression code (0) [ 116.793232][ T6198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.898610][ T6198] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.084497][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 117.110423][ T6216] loop3: detected capacity change from 0 to 1024 [ 117.210681][ T6218] nbd0: detected capacity change from 0 to 549764202496 [ 117.229571][ T4195] block nbd0: Receive control failed (result -32) [ 117.300939][ T150] block nbd0: Dead connection, failed to find a fallback [ 117.305570][ T6222] loop1: detected capacity change from 0 to 1024 [ 117.308753][ T150] block nbd0: shutting down sockets [ 117.323438][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.335103][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.343915][ T6216] hfsplus: bad catalog entry type [ 117.352936][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.364529][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.373960][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.386485][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.394446][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.405277][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.413243][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.424062][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.433626][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.444529][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.452994][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.464605][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.476065][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.487764][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.496184][ T4703] ldm_validate_partition_table(): Disk read failed. [ 117.502922][ T4233] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.531402][ T9] hfsplus: b-tree write err: -5, ino 4 [ 117.535600][ T6226] program syz.2.724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.560542][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.571572][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.580029][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.590977][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.610116][ T4703] Dev nbd0: unable to read RDB block 0 [ 117.616265][ T4703] nbd0: unable to read partition table [ 117.630785][ T6230] loop2: detected capacity change from 0 to 164 [ 117.633428][ T26] audit: type=1800 audit(1771348017.719:12): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.721" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 117.698205][ T4703] ldm_validate_partition_table(): Disk read failed. [ 117.724734][ T4703] Dev nbd0: unable to read RDB block 0 [ 117.763501][ T4703] nbd0: unable to read partition table [ 117.797413][ T26] audit: type=1800 audit(1771348017.769:13): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.721" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 117.851808][ T9] hfsplus: b-tree write err: -5, ino 4 [ 117.882370][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.912014][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.932450][ T4703] ldm_validate_partition_table(): Disk read failed. [ 117.952382][ T4703] Dev nbd0: unable to read RDB block 0 [ 118.007506][ T6245] loop2: detected capacity change from 0 to 128 [ 118.014192][ T4233] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.063696][ T4703] nbd0: unable to read partition table [ 118.066223][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.109615][ T4703] ldm_validate_partition_table(): Disk read failed. [ 118.120778][ T4233] usb 1-1: SerialNumber: syz [ 118.205938][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.217217][ T4703] Dev nbd0: unable to read RDB block 0 [ 118.262543][ T4703] nbd0: unable to read partition table [ 118.308382][ T6248] loop4: detected capacity change from 0 to 32768 [ 118.318278][ T6245] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.364999][ T6252] IPv6: NLM_F_REPLACE set, but no existing node found! [ 118.436067][ T4233] usb 1-1: 0:2 : does not exist [ 118.478543][ T26] audit: type=1326 audit(1771348018.569:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.4.737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fb19f6629 code=0x0 [ 118.516848][ T4233] usb 1-1: USB disconnect, device number 9 [ 118.719010][ T6261] EXT4-fs (loop2): inline encryption not supported [ 118.812614][ T6261] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 118.826976][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.857844][ T6241] F2FS-fs (loop3): invalid crc value [ 118.897380][ T6241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.940990][ T4176] udevd[4176]: incorrect f2fs checksum on /dev/loop3 [ 119.048708][ T6241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.104103][ T26] audit: type=1800 audit(1771348019.199:15): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 119.145587][ T4196] attempt to access beyond end of device [ 119.145587][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 119.296282][ T4176] udevd[4176]: incorrect f2fs checksum on /dev/loop3 [ 119.321711][ T6284] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 119.523925][ T6293] EXT4-fs (loop0): inline encryption not supported [ 119.600694][ T6302] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.646393][ T6293] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 119.836417][ T6311] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.015518][ T6322] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.042837][ T6315] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 120.065787][ T6315] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 120.091038][ T6322] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.109944][ T6315] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 120.139607][ T6322] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.764: Allocating blocks 41-42 which overlap fs metadata [ 120.216238][ T6322] Quota error (device loop2): write_blk: dquota write failed [ 120.227268][ T6322] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 120.249769][ T6315] ntfs: volume version 3.1. [ 120.277273][ T6322] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.380536][ T6322] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.764: Failed to acquire dquot type 1 [ 120.401560][ T6322] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 120.476825][ T6336] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.768: Failed to acquire dquot type 0 [ 120.542840][ T6336] EXT4-fs error (device loop0): mb_free_blocks:1876: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 120.552203][ T6322] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.764: corrupted inode contents [ 120.576783][ T6336] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #13: comm syz.0.768: corrupted inode contents [ 120.601214][ T6322] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #12: comm syz.2.764: mark_inode_dirty error [ 120.612627][ T6336] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #13: comm syz.0.768: mark_inode_dirty error [ 120.635046][ T6322] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.764: corrupted inode contents [ 120.640049][ T6336] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #13: comm syz.0.768: corrupted inode contents [ 120.660238][ T6336] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.768: mark_inode_dirty error [ 120.671771][ T6322] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.764: mark_inode_dirty error [ 120.682442][ T6336] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #13: comm syz.0.768: corrupted inode contents [ 120.700379][ T6336] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 120.702178][ T6322] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.764: corrupted inode contents [ 120.709839][ T6336] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #13: comm syz.0.768: corrupted inode contents [ 120.732920][ T6322] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 120.735770][ T6336] EXT4-fs error (device loop0): ext4_truncate:4279: inode #13: comm syz.0.768: mark_inode_dirty error [ 120.747286][ T6322] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.764: corrupted inode contents [ 120.780800][ T6322] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.764: mark_inode_dirty error [ 120.816777][ T6336] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 120.831828][ T6322] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 120.869661][ T6336] EXT4-fs (loop0): 1 truncate cleaned up [ 120.870248][ T6322] EXT4-fs (loop2): 1 truncate cleaned up [ 120.879640][ T6336] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.928015][ T6322] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 121.028774][ T6336] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 121.078237][ T6322] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 121.099958][ T6336] EXT4-fs (loop0): Ignoring removed orlov option [ 121.128934][ T6336] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 121.146592][ T6336] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 121.157873][ T6336] EXT4-fs (loop0): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 121.320621][ T6346] set_capacity_and_notify: 10 callbacks suppressed [ 121.320637][ T6346] loop4: detected capacity change from 0 to 32768 [ 121.382400][ T6346] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.772 (6346) [ 121.404214][ T6346] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 121.413953][ T6346] BTRFS info (device loop4): using free space tree [ 121.420480][ T6346] BTRFS info (device loop4): has skinny extents [ 121.449946][ T6346] BTRFS info (device loop4): enabling ssd optimizations [ 121.587458][ T6373] overlayfs: upper fs does not support tmpfile. [ 121.734006][ T4177] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4177) [ 122.117974][ T6410] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.790'. [ 122.177438][ T6412] loop1: detected capacity change from 0 to 256 [ 122.602760][ T6437] loop1: detected capacity change from 0 to 128 [ 122.647002][ T6437] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 122.662104][ T4173] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.675876][ T6441] loop4: detected capacity change from 0 to 256 [ 122.708778][ T6439] loop2: detected capacity change from 0 to 4096 [ 122.712629][ T6443] loop0: detected capacity change from 0 to 2048 [ 122.754962][ T6441] exfat: Deprecated parameter 'namecase' [ 122.774365][ T6443] NILFS (loop0): invalid segment: Inconsistency found [ 122.781176][ T6443] NILFS (loop0): trying rollback from an earlier position [ 122.816871][ T6441] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 122.870902][ T6443] NILFS (loop0): recovery complete [ 122.906928][ T6444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.952971][ T4173] usb 4-1: Using ep0 maxpacket: 8 [ 122.981437][ T4188] sysv_free_block: flc_count > flc_size [ 123.032620][ T4188] sysv_free_block: flc_count > flc_size [ 123.080085][ T4188] sysv_free_block: flc_count > flc_size [ 123.102344][ T4173] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 123.117253][ T4188] sysv_free_block: flc_count > flc_size [ 123.129142][ T4173] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.129368][ T6453] loop2: detected capacity change from 0 to 256 [ 123.162212][ T4173] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.162689][ T4188] sysv_free_block: flc_count > flc_size [ 123.175868][ T4173] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.187930][ T4173] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.201633][ T4188] sysv_free_block: flc_count > flc_size [ 123.239720][ T4188] sysv_free_block: flc_count > flc_size [ 123.247806][ T6457] loop4: detected capacity change from 0 to 128 [ 123.257543][ T4188] sysv_free_block: flc_count > flc_size [ 123.276592][ T4188] sysv_free_block: flc_count > flc_size [ 123.283712][ T4173] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.292308][ T4188] sysv_free_block: flc_count > flc_size [ 123.333176][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.356396][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 123.663160][ T4173] usb 4-1: GET_CAPABILITIES returned 0 [ 123.669705][ T4173] usbtmc 4-1:16.0: can't read capabilities [ 123.855276][ T6479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.873547][ T6479] bond0: (slave bond1): Enslaving as an active interface with an up link [ 123.891712][ T6078] usb 4-1: USB disconnect, device number 8 [ 124.025384][ T6460] loop4: detected capacity change from 0 to 40427 [ 124.049547][ T6482] loop2: detected capacity change from 0 to 8192 [ 124.072012][ T4173] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.087192][ T6460] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 124.098990][ T6460] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x724 [ 124.134853][ T6482] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 124.145592][ T6460] F2FS-fs (loop4): invalid crc value [ 124.155726][ T6482] REISERFS (device loop2): using ordered data mode [ 124.177796][ T6482] reiserfs: using flush barriers [ 124.187952][ T6460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.200020][ T6482] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.229157][ T6460] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 124.245414][ T6482] REISERFS (device loop2): checking transaction log (loop2) [ 124.279940][ T6460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.309093][ T6486] __ntfs_error: 3 callbacks suppressed [ 124.309111][ T6486] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 124.310287][ T6460] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a4/0x1dc0 [ 124.335690][ T6486] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 124.344663][ T6460] attempt to access beyond end of device [ 124.344663][ T6460] loop4: rw=2049, want=45104, limit=40427 [ 124.359057][ T6486] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 124.398184][ T6486] ntfs: volume version 3.1. [ 124.512064][ T4173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.536708][ T4173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.588581][ T6482] REISERFS (device loop2): Using tea hash to sort names [ 124.603181][ T6482] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 124.603714][ T4184] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 124.753489][ T4173] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 124.770120][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.792961][ T4173] usb 2-1: Product: syz [ 124.803556][ T4173] usb 2-1: Manufacturer: syz [ 124.821359][ T4173] usb 2-1: SerialNumber: syz [ 124.851075][ T4173] usb 2-1: config 0 descriptor?? [ 124.905932][ T4173] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 124.964852][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.022616][ T4173] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 125.041721][ T4173] usb 2-1: media controller created [ 125.100212][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.180008][ T4173] DVB: Unable to find symbol tda10046_attach() [ 125.200412][ T4173] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 125.215292][ T6499] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 125.225575][ T4173] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 125.245679][ T6492] JBD2: Ignoring recovery information on journal [ 125.306659][ T6501] FAT-fs (loop4): Directory bread(block 64) failed [ 125.370857][ T6501] FAT-fs (loop4): Directory bread(block 65) failed [ 125.377664][ T6501] FAT-fs (loop4): Directory bread(block 66) failed [ 125.380980][ T6499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.390149][ T6501] FAT-fs (loop4): Directory bread(block 67) failed [ 125.400153][ T6501] FAT-fs (loop4): Directory bread(block 68) failed [ 125.417850][ T6501] FAT-fs (loop4): Directory bread(block 69) failed [ 125.425072][ T6501] FAT-fs (loop4): Directory bread(block 70) failed [ 125.433219][ T6492] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.445335][ T6501] FAT-fs (loop4): Directory bread(block 71) failed [ 125.457897][ T6501] FAT-fs (loop4): Directory bread(block 72) failed [ 125.470833][ T6501] FAT-fs (loop4): Directory bread(block 73) failed [ 125.590469][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 125.662154][ T4232] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 125.794692][ T6522] syz.4.838[6522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.794851][ T6522] syz.4.838[6522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.869701][ T6524] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 125.901628][ T6524] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 125.922128][ T6524] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 125.923188][ T4173] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 125.933546][ T4799] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 125.967021][ T6524] ntfs: volume version 3.1. [ 125.985084][ T4173] usb 2-1: USB disconnect, device number 8 [ 126.070664][ T6531] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 126.082323][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.101352][ T4232] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.121113][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.142831][ T4196] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 126.166450][ T4232] usb 3-1: config 0 descriptor?? [ 126.239203][ T4232] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 126.312412][ T4799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.339861][ T4799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.346300][ T6541] set_capacity_and_notify: 6 callbacks suppressed [ 126.346316][ T6541] loop3: detected capacity change from 0 to 4096 [ 126.358594][ T4799] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 126.377147][ T4799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.388843][ T4799] usb 1-1: config 0 descriptor?? [ 126.396522][ T6541] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 126.446084][ T6541] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 126.491458][ T6543] loop4: detected capacity change from 0 to 512 [ 126.499881][ T4232] usb 3-1: USB disconnect, device number 9 [ 126.529477][ T6541] ntfs: volume version 3.1. [ 126.530878][ T6543] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.575867][ T6546] loop1: detected capacity change from 0 to 64 [ 126.583034][ T6543] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 126.637378][ T6543] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 126.646729][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 126.855733][ T6543] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 126.932518][ T6556] loop3: detected capacity change from 0 to 4096 [ 126.933881][ T4799] logitech 0003:046D:C295.0007: unknown main item tag 0x1 [ 126.947217][ T4799] logitech 0003:046D:C295.0007: unknown global tag 0xe [ 126.954698][ T4799] logitech 0003:046D:C295.0007: item 0 0 1 14 parsing failed [ 126.962614][ T4799] logitech 0003:046D:C295.0007: parse failed [ 126.968641][ T4799] logitech: probe of 0003:046D:C295.0007 failed with error -22 [ 127.050097][ T6559] loop4: detected capacity change from 0 to 128 [ 127.084338][ T6559] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 127.105204][ T6562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.140590][ T4799] usb 1-1: USB disconnect, device number 10 [ 127.317660][ T6565] loop2: detected capacity change from 0 to 1024 [ 127.420441][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 127.429755][ T4190] sysv_free_block: flc_count > flc_size [ 127.436248][ T4190] sysv_free_block: flc_count > flc_size [ 127.439816][ T6565] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.855: Failed to acquire dquot type 0 [ 127.441812][ T4190] sysv_free_block: flc_count > flc_size [ 127.470050][ T6565] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 127.474547][ T4190] sysv_free_block: flc_count > flc_size [ 127.512128][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.855: corrupted inode contents [ 127.523102][ T4190] sysv_free_block: flc_count > flc_size [ 127.529580][ T4190] sysv_free_block: flc_count > flc_size [ 127.535427][ T4190] sysv_free_block: flc_count > flc_size [ 127.540990][ T4190] sysv_free_block: flc_count > flc_size [ 127.546754][ T4190] sysv_free_block: flc_count > flc_size [ 127.552371][ T4190] sysv_free_block: flc_count > flc_size [ 127.558403][ T4190] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 127.567796][ T6565] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #13: comm syz.2.855: mark_inode_dirty error [ 127.583105][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.855: corrupted inode contents [ 127.602830][ T6565] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #13: comm syz.2.855: mark_inode_dirty error [ 127.631528][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.855: corrupted inode contents [ 127.726425][ T6565] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 127.763128][ T6565] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #13: comm syz.2.855: corrupted inode contents [ 127.797923][ T6565] EXT4-fs error (device loop2): ext4_truncate:4279: inode #13: comm syz.2.855: mark_inode_dirty error [ 127.853387][ T6565] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 127.878763][ T6590] loop1: detected capacity change from 0 to 2048 [ 127.927576][ T6565] EXT4-fs (loop2): 1 truncate cleaned up [ 127.968773][ T6565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.992891][ T6598] loop4: detected capacity change from 0 to 64 [ 128.019556][ T6601] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.047759][ T6590] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..' [ 128.076531][ T6590] Remounting filesystem read-only [ 128.146523][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 128.168059][ T6565] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 128.284922][ T6606] EXT4-fs (loop2): Ignoring removed orlov option [ 128.294826][ T6606] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 128.322500][ T6606] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 128.347878][ T6606] EXT4-fs (loop2): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 128.400667][ T6618] loop1: detected capacity change from 0 to 8 [ 128.648163][ T6622] loop1: detected capacity change from 0 to 2048 [ 128.756150][ T6622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.024033][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 129.056060][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 129.164195][ T6624] (syz.0.882,6624,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.246706][ T6614] F2FS-fs (loop4): Invalid segment count (1) [ 129.248332][ T6624] (syz.0.882,6624,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.275233][ T6614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 129.323660][ T6614] F2FS-fs (loop4): invalid crc value [ 129.348317][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 129.373785][ T6642] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.377606][ T6614] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.394608][ T6624] JBD2: Ignoring recovery information on journal [ 129.436665][ T6642] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.889: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 129.468800][ T6642] EXT4-fs (loop2): Remounting filesystem read-only [ 129.481806][ T6642] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.889: directory missing '.' [ 129.538269][ T6649] __quota_error: 7 callbacks suppressed [ 129.538289][ T6649] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 129.542284][ T6614] F2FS-fs (loop4): recover fsync data on readonly fs [ 129.565150][ T6649] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 129.567920][ T6614] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 129.587247][ T6614] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.590975][ T6624] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 129.607499][ T6653] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.660156][ T6649] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.892: Failed to acquire dquot type 0 [ 129.689238][ T6649] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 129.716983][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #13: comm syz.1.892: corrupted inode contents [ 129.735507][ T6649] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #13: comm syz.1.892: mark_inode_dirty error [ 129.793090][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #13: comm syz.1.892: corrupted inode contents [ 129.824615][ T6649] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #13: comm syz.1.892: mark_inode_dirty error [ 129.859147][ T6624] [ 129.861464][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #13: comm syz.1.892: corrupted inode contents [ 129.861502][ T6624] ====================================================== [ 129.861510][ T6624] WARNING: possible circular locking dependency detected [ 129.887010][ T6649] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 129.887235][ T6624] syzkaller #0 Not tainted [ 129.900104][ T6624] ------------------------------------------------------ [ 129.904886][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #13: comm syz.1.892: corrupted inode contents [ 129.907118][ T6624] syz.0.882/6624 is trying to acquire lock: [ 129.919927][ T6649] EXT4-fs error (device loop1): ext4_truncate:4279: inode #13: comm syz.1.892: mark_inode_dirty error [ 129.924689][ T6624] ffff88802399c650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x688/0xb10 [ 129.924740][ T6624] [ 129.924740][ T6624] but task is already holding lock: [ 129.924744][ T6624] ffff88805343cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 129.924776][ T6624] [ 129.924776][ T6624] which lock already depends on the new lock. [ 129.924776][ T6624] [ 129.924780][ T6624] [ 129.924780][ T6624] the existing dependency chain (in reverse order) is: [ 129.924785][ T6624] [ 129.924785][ T6624] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 129.924807][ T6624] down_write+0x38/0x60 [ 129.924825][ T6624] ocfs2_lock_global_qf+0x1fe/0x290 [ 129.924838][ T6624] ocfs2_acquire_dquot+0x29d/0xb10 [ 129.924851][ T6624] dqget+0x778/0xeb0 [ 129.924864][ T6624] __dquot_initialize+0x3c3/0xcd0 [ 129.924878][ T6624] ocfs2_get_init_inode+0x144/0x1b0 [ 129.924893][ T6624] ocfs2_mknod+0x8ab/0x2510 [ 129.924906][ T6624] ocfs2_mkdir+0x192/0x420 [ 129.924919][ T6624] vfs_mkdir+0x387/0x570 [ 129.924933][ T6624] do_mkdirat+0x1df/0x5b0 [ 129.924948][ T6624] __x64_sys_mkdirat+0x85/0x90 [ 129.924962][ T6624] do_syscall_64+0x4c/0xa0 [ 129.924976][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.924991][ T6624] [ 129.924991][ T6624] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 129.925016][ T6624] down_write+0x38/0x60 [ 129.925029][ T6624] ocfs2_lock_global_qf+0x1d7/0x290 [ 129.925041][ T6624] ocfs2_acquire_dquot+0x29d/0xb10 [ 129.925055][ T6624] dqget+0x778/0xeb0 [ 129.925068][ T6624] __dquot_initialize+0x3c3/0xcd0 [ 129.925082][ T6624] ocfs2_get_init_inode+0x144/0x1b0 [ 129.925095][ T6624] ocfs2_mknod+0x8ab/0x2510 [ 129.925107][ T6624] ocfs2_mkdir+0x192/0x420 [ 129.925118][ T6624] vfs_mkdir+0x387/0x570 [ 129.925130][ T6624] do_mkdirat+0x1df/0x5b0 [ 129.925143][ T6624] __x64_sys_mkdirat+0x85/0x90 [ 129.925157][ T6624] do_syscall_64+0x4c/0xa0 [ 129.941337][ T6649] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 129.945426][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.945452][ T6624] [ 129.945452][ T6624] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 129.945477][ T6624] __mutex_lock_common+0x1e3/0x2400 [ 129.954824][ T6649] EXT4-fs (loop1): 1 truncate cleaned up [ 129.963640][ T6624] mutex_lock_nested+0x17/0x20 [ 129.963665][ T6624] dquot_commit+0x5a/0x410 [ 129.963681][ T6624] ext4_write_dquot+0x1f0/0x360 [ 129.963697][ T6624] mark_all_dquot_dirty+0xf9/0x400 [ 129.986026][ T6649] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.991901][ T6624] __dquot_alloc_space+0x5d0/0xe20 [ 129.991925][ T6624] ext4_mb_new_blocks+0xf81/0x4980 [ 129.991942][ T6624] ext4_ext_map_blocks+0x191c/0x6580 [ 130.103739][ T6662] netlink: 108 bytes leftover after parsing attributes in process `syz.4.894'. [ 130.106677][ T6624] ext4_map_blocks+0x98e/0x1b30 [ 130.106704][ T6624] ext4_getblk+0x176/0x670 [ 130.232583][ T6649] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 130.233822][ T6624] ext4_bread+0x26/0x180 [ 130.233846][ T6624] ext4_append+0x2be/0x560 [ 130.251467][ T6624] ext4_init_new_dir+0x2a2/0x940 [ 130.256924][ T6624] ext4_mkdir+0x4fb/0xce0 [ 130.261769][ T6624] vfs_mkdir+0x387/0x570 [ 130.266518][ T6624] do_mkdirat+0x1df/0x5b0 [ 130.271358][ T6624] __x64_sys_mkdir+0x6a/0x80 [ 130.276448][ T6624] do_syscall_64+0x4c/0xa0 [ 130.281366][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.287777][ T6624] [ 130.287777][ T6624] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 130.295413][ T6624] down_write+0x38/0x60 [ 130.300078][ T6624] ext4_truncate+0x97f/0x10f0 [ 130.305258][ T6624] ext4_setattr+0xffe/0x19e0 [ 130.310350][ T6624] notify_change+0xbcd/0xee0 [ 130.315443][ T6624] do_truncate+0x1ac/0x240 [ 130.320357][ T6624] do_sys_ftruncate+0x31b/0x3d0 [ 130.325708][ T6624] do_syscall_64+0x4c/0xa0 [ 130.330622][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.337015][ T6624] [ 130.337015][ T6624] -> #2 (jbd2_handle){++++}-{0:0}: [ 130.344285][ T6624] wait_transaction_locked+0x1bb/0x270 [ 130.350244][ T6624] add_transaction_credits+0x103/0xc80 [ 130.356201][ T6624] start_this_handle+0x74d/0x15c0 [ 130.361724][ T6624] jbd2__journal_restart+0x233/0x630 [ 130.367508][ T6624] ocfs2_extend_trans+0x2bb/0x6f0 [ 130.373034][ T6624] ocfs2_reserve_suballoc_bits+0x1761/0x44d0 [ 130.379513][ T6624] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 130.385471][ T6624] ocfs2_mknod+0x885/0x2510 [ 130.390475][ T6624] ocfs2_mkdir+0x192/0x420 [ 130.395391][ T6624] vfs_mkdir+0x387/0x570 [ 130.400134][ T6624] do_mkdirat+0x1df/0x5b0 [ 130.404963][ T6624] __x64_sys_mkdirat+0x85/0x90 [ 130.410226][ T6624] do_syscall_64+0x4c/0xa0 [ 130.415141][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.421534][ T6624] [ 130.421534][ T6624] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 130.430022][ T6624] down_read+0x44/0x2e0 [ 130.434682][ T6624] ocfs2_start_trans+0x3a6/0x6f0 [ 130.440124][ T6624] ocfs2_reserve_suballoc_bits+0x7ab/0x44d0 [ 130.446517][ T6624] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 130.452478][ T6624] ocfs2_symlink+0xc17/0x27e0 [ 130.457654][ T6624] vfs_symlink+0x247/0x3d0 [ 130.462569][ T6624] do_symlinkat+0x1ab/0x6b0 [ 130.467569][ T6624] __x64_sys_symlinkat+0x95/0xa0 [ 130.473007][ T6624] do_syscall_64+0x4c/0xa0 [ 130.477923][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.484313][ T6624] [ 130.484313][ T6624] -> #0 (sb_internal#4){.+.+}-{0:0}: [ 130.491763][ T6624] __lock_acquire+0x2c42/0x7d10 [ 130.497117][ T6624] lock_acquire+0x19e/0x400 [ 130.502124][ T6624] ocfs2_start_trans+0x2a7/0x6f0 [ 130.507559][ T6624] ocfs2_acquire_dquot+0x688/0xb10 [ 130.513171][ T6624] dqget+0x778/0xeb0 [ 130.517566][ T6624] __dquot_initialize+0x3c3/0xcd0 [ 130.523090][ T6624] ocfs2_get_init_inode+0x144/0x1b0 [ 130.528798][ T6624] ocfs2_mknod+0x8ab/0x2510 [ 130.533800][ T6624] ocfs2_mkdir+0x192/0x420 [ 130.538714][ T6624] vfs_mkdir+0x387/0x570 [ 130.543458][ T6624] do_mkdirat+0x1df/0x5b0 [ 130.548287][ T6624] __x64_sys_mkdirat+0x85/0x90 [ 130.553551][ T6624] do_syscall_64+0x4c/0xa0 [ 130.558465][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.564858][ T6624] [ 130.564858][ T6624] other info that might help us debug this: [ 130.564858][ T6624] [ 130.575065][ T6624] Chain exists of: [ 130.575065][ T6624] sb_internal#4 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 130.575065][ T6624] [ 130.591996][ T6624] Possible unsafe locking scenario: [ 130.591996][ T6624] [ 130.599423][ T6624] CPU0 CPU1 [ 130.604764][ T6624] ---- ---- [ 130.610107][ T6624] lock(&ocfs2_quota_ip_alloc_sem_key); [ 130.615728][ T6624] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 130.625526][ T6624] lock(&ocfs2_quota_ip_alloc_sem_key); [ 130.633657][ T6624] lock(sb_internal#4); [ 130.637881][ T6624] [ 130.637881][ T6624] *** DEADLOCK *** [ 130.637881][ T6624] [ 130.646000][ T6624] 6 locks held by syz.0.882/6624: [ 130.650999][ T6624] #0: ffff88802399c460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 130.660205][ T6624] #1: ffff8880534342c8 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 130.670888][ T6624] #2: ffff88805343a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 130.684517][ T6624] #3: ffff8880534b60a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28b/0xb10 [ 130.694495][ T6624] #4: ffff88805343d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 130.707425][ T6624] #5: ffff88805343cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 130.718702][ T6624] [ 130.718702][ T6624] stack backtrace: [ 130.724582][ T6624] CPU: 1 PID: 6624 Comm: syz.0.882 Not tainted syzkaller #0 [ 130.731843][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.741891][ T6624] Call Trace: [ 130.745153][ T6624] [ 130.748064][ T6624] dump_stack_lvl+0x188/0x250 [ 130.752732][ T6624] ? load_image+0x400/0x400 [ 130.757216][ T6624] ? show_regs_print_info+0x20/0x20 [ 130.762399][ T6624] ? print_circular_bug+0x12b/0x1a0 [ 130.767575][ T6624] check_noncircular+0x296/0x330 [ 130.772494][ T6624] ? add_chain_block+0x940/0x940 [ 130.777409][ T6624] ? lockdep_lock+0xf1/0x1f0 [ 130.781983][ T6624] ? mark_lock+0x94/0x320 [ 130.786290][ T6624] __lock_acquire+0x2c42/0x7d10 [ 130.791125][ T6624] ? verify_lock_unused+0x140/0x140 [ 130.796307][ T6624] ? verify_lock_unused+0x140/0x140 [ 130.801485][ T6624] ? ocfs2_get_init_inode+0x144/0x1b0 [ 130.806838][ T6624] ? do_mkdirat+0x1df/0x5b0 [ 130.811319][ T6624] ? __x64_sys_mkdirat+0x85/0x90 [ 130.816234][ T6624] ? do_syscall_64+0x4c/0xa0 [ 130.820803][ T6624] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.826850][ T6624] ? verify_lock_unused+0x140/0x140 [ 130.832032][ T6624] lock_acquire+0x19e/0x400 [ 130.836517][ T6624] ? ocfs2_acquire_dquot+0x688/0xb10 [ 130.841786][ T6624] ? __might_sleep+0xf0/0xf0 [ 130.846355][ T6624] ? do_raw_spin_lock+0x128/0x2f0 [ 130.851361][ T6624] ? read_lock_is_recursive+0x10/0x10 [ 130.856715][ T6624] ? __rwlock_init+0x140/0x140 [ 130.861461][ T6624] ? do_raw_spin_unlock+0x11d/0x230 [ 130.866638][ T6624] ocfs2_start_trans+0x2a7/0x6f0 [ 130.871555][ T6624] ? ocfs2_acquire_dquot+0x688/0xb10 [ 130.876819][ T6624] ? ocfs2_recovery_exit+0x50/0x50 [ 130.881909][ T6624] ? do_raw_spin_unlock+0x11d/0x230 [ 130.887091][ T6624] ? _raw_spin_unlock+0x24/0x40 [ 130.891920][ T6624] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 130.897106][ T6624] ocfs2_acquire_dquot+0x688/0xb10 [ 130.902200][ T6624] ? ocfs2_destroy_dquot+0x40/0x40 [ 130.907291][ T6624] ? percpu_counter_add_batch+0x13b/0x160 [ 130.912998][ T6624] dqget+0x778/0xeb0 [ 130.916878][ T6624] __dquot_initialize+0x3c3/0xcd0 [ 130.921887][ T6624] ? dquot_initialize+0x20/0x20 [ 130.926718][ T6624] ? do_raw_spin_unlock+0x11d/0x230 [ 130.931898][ T6624] ocfs2_get_init_inode+0x144/0x1b0 [ 130.937078][ T6624] ? ocfs2_create_inode_in_orphan+0x11a0/0x11a0 [ 130.943300][ T6624] ? mark_lock+0x94/0x320 [ 130.947611][ T6624] ocfs2_mknod+0x8ab/0x2510 [ 130.952096][ T6624] ? mark_lock+0x94/0x320 [ 130.956403][ T6624] ? ocfs2_mkdir+0x420/0x420 [ 130.960982][ T6624] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 130.966683][ T6624] ? __lock_acquire+0x7d10/0x7d10 [ 130.971687][ T6624] ? do_raw_spin_lock+0x128/0x2f0 [ 130.976695][ T6624] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 130.982568][ T6624] ? __lock_acquire+0x7d10/0x7d10 [ 130.987574][ T6624] ? __rwlock_init+0x140/0x140 [ 130.992317][ T6624] ? ocfs2_lookup+0x490/0x950 [ 130.996977][ T6624] ? do_raw_spin_unlock+0x11d/0x230 [ 131.002159][ T6624] ? put_pid+0xda/0x120 [ 131.006302][ T6624] ocfs2_mkdir+0x192/0x420 [ 131.010698][ T6624] ? make_kgid+0x660/0x660 [ 131.015097][ T6624] ? ocfs2_symlink+0x27e0/0x27e0 [ 131.020012][ T6624] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 131.024932][ T6624] ? ocfs2_getattr+0x360/0x360 [ 131.029679][ T6624] ? inode_permission+0xef/0x480 [ 131.034596][ T6624] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 131.039602][ T6624] ? security_inode_mkdir+0xb3/0x100 [ 131.044875][ T6624] vfs_mkdir+0x387/0x570 [ 131.049105][ T6624] do_mkdirat+0x1df/0x5b0 [ 131.053416][ T6624] ? vfs_mkdir+0x570/0x570 [ 131.057811][ T6624] ? getname_flags+0x1fe/0x500 [ 131.062557][ T6624] __x64_sys_mkdirat+0x85/0x90 [ 131.067306][ T6624] do_syscall_64+0x4c/0xa0 [ 131.071701][ T6624] ? clear_bhb_loop+0x30/0x80 [ 131.076357][ T6624] ? clear_bhb_loop+0x30/0x80 [ 131.081014][ T6624] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.086897][ T6624] RIP: 0033:0x7f65253fb507 [ 131.091295][ T6624] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.110881][ T6624] RSP: 002b:00007f6523655e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 131.119292][ T6624] RAX: ffffffffffffffda RBX: 00007f6523655ee0 RCX: 00007f65253fb507 [ 131.127259][ T6624] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 131.135217][ T6624] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000 [ 131.143176][ T6624] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000040 [ 131.151130][ T6624] R13: 00007f6523655ea0 R14: 0000000000000000 R15: 0000000000000000 [ 131.159093][ T6624] [ 131.179788][ T6663] EXT4-fs (loop1): Ignoring removed orlov option [ 131.193545][ T6663] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 131.204015][ T6663] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 131.215396][ T6663] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 131.248770][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 132.743880][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750192][ T1422] ieee802154 phy1 wpan1: encryption failed: -22