last executing test programs: 40.399407065s ago: executing program 4 (id=613): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x1f, 0x0, 0x0) 40.266839906s ago: executing program 4 (id=617): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) 40.159714866s ago: executing program 4 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x890) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x4800) 40.026888236s ago: executing program 4 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 39.825130357s ago: executing program 4 (id=626): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 39.411063028s ago: executing program 4 (id=632): r0 = syz_open_dev$loop(&(0x7f0000001c00), 0x6, 0x0) r1 = io_uring_setup(0x3ddd, &(0x7f0000002000)={0x0, 0x6b01, 0x2, 0x2, 0x164}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 39.188377399s ago: executing program 32 (id=632): r0 = syz_open_dev$loop(&(0x7f0000001c00), 0x6, 0x0) r1 = io_uring_setup(0x3ddd, &(0x7f0000002000)={0x0, 0x6b01, 0x2, 0x2, 0x164}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 5.071730927s ago: executing program 3 (id=1058): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4437, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40186f03, &(0x7f0000000240)={@id={0x2, 0x900, @b}}) 3.278746001s ago: executing program 3 (id=1072): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xa, 0x647, &(0x7f0000001100)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000340)=ANY=[], 0x381, 0x2) 2.273836544s ago: executing program 1 (id=1085): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.238710124s ago: executing program 3 (id=1086): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.113402794s ago: executing program 2 (id=1087): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000140)={[{@map_off}, {@map_acorn, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x27}}, {@session={'session', 0x3d, 0x62}}, {@norock, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nojoliet}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x6a5, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNgRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw0kRVmyRMmqFXdp3i+jFfXwy+f5klT4NS2REgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOVUisWSpZrX2N4x2ZxK4NfHzE96W9DtZOL2xHElK/pP+bwuJU2Xvn08+2L0v5u6kjy7onz0kNfhGxfffPCt+Vy6/JiEvgxN2+HzF4dPHrbbe89OETunqbv/Kil3iqBNt+GFvle3N13jhb7ZWF8v3t2qhqbq1dxwN2y5deMEbq7lB2bVuW1KGxtrxi3s+tuNzYpdc9PG+98rF4vr5odLyY6WVAidLa9W8xqbcUw0O4q5bz75SRLg2nVj9h+399YmJRkFlbJm5vqCypN6KhfL5VKpXC6t39u4d79YnB9qKEasYo+GImb+osUrZnYHb+CMclH9/5sl1ZRXQ9vakRn546iiQL7qGfO70vr/1l137Lj99T+t8pekd7qzLyuu/9eSZ9ey6n9GLkYmXmDUHCujfbqfhTgjo+d6oUM90UO11daens2gbyNzfSa9nMPPplw15CmUL0912XGL6bYYbWhd6yrqPW2pqlBGVXmqyVWoXYVqyY1fUY4CubLVkq9ARqtydFtGJW1oQ2syclXQrnxtq6FNVWTr351OZ1+P4+2+NiZHpUGljICl/qDymJ6y6v9PP05ep936X6T+v66S18FS8vB53DT0e/QMj97A2XS65/9Tuv5ysgEAAAAAAC+DFf/13Yrfu78qqaOqV3OL2Qssnmd2AAAAAABgFix1lnRFVnT+L+mqrAnn/wAAAAAA4JVjxdfYWZJW4g/1W8dXQp3mjwBz55AiAAAAAAA4o/jK/2uLUie+acV1WVOd/wMAAAAAgFfAb/vusT+f3mO3k76tn5MUNpesv/5zScGCddTc+Y51YEdz7IO5XBwy9AmAVvWyFf4huVFvfL/eRUnxM8e9YnVH694Es3ffwS/2J93r3wpOJLA419/BiQQudJe2opHX57vP9IluvDMQ++gwp3hOMspK1au5BcevPSjJti/kWu5O6xdPH/9SCnrruf+4vVd4/8P2oziXo6jp6CDK4+M0nb8sdjfdYC7xQy+X/3YS0tWRa7ysajrk7xr1FSset5iu/5zsg9zxPspc/8Ex9WvdTPbZzZUkduWwd8f9aP3z0fqXCvEuG1j7YME6zqJ0cs1H7YiMLPJxFreSmFurt5KHNL+on5yV/+6cVC4M74OBLMr9WUzeFta/hrbFuCy622ItyuKzqKOMLNamy2JojwDAV2U/vutPfOVffBPzobqblof0oPal6s7k6v7uYHX/6I9RZUx+vZjvvjcxdpS8oiP6qhXXoUXFB9b5y0NH9HRt7At5ZRzRi2eobtFYfz7+DqRu2kNZ/KfT6TwoxeP+/kRV/TRa4NPMccNastnvfnTws/gG+JEP9j7Ye1our60X3y4W75W1EK9G92FO1B4AwJDJ37EzMcJ6WzeSiBuP/vFWMjVQ8b7Z+0hBQe/rQ7X1SAvpVwhcH93rSt/HEO4kZ63qO2s1F998sCydjC3pTuZZXVxL+2LLvdgFpYsMVurj2LWXvBcAADhfNyfU4dH1Pz9Q/+9oNYlYvTzyvHuwlnfPjnun9FmxpcnJvzvrrQEAwOvBDb6wVlq/sYLAa75X2tgo2a0t1wS+8yMTeJVN13iNlhs4W3Zj0zXNwG/5jl8zzUBLXsUNTbjdbPpBy1T9wDT90NuJv/nddL/6PXTrdqPlOWGz5tqhaxy/0bKdlql4oWOa2z+oeeGWG8QLh03X8aqeY7c8v2FCfztw3IIxoev2BXoVt9Hyql402TDNwKvbwa75sV/brrum4oZO4DVbftJhOpbXqPpBPe62oM7UX3QIAMDX0fMXh08ettt7z05OLEen5knLkTJihicWR3TIPYIAAPg/c1yup1go35v6rPNSsgIAAAAAAAAAAAAAAAAAAAAAAP0mX9I35cTCqIsFpV7Lzy90W/QrHV9iONSPpVknNs1Ebtql0ksiDp98PiZ4udeSbv7+mKNzW8G/f0N6I25R0jI/Kjif3Y81eazlMTv3lBNz0QY6bfD395MtmhkTzRw5a6m3L+Zn/88hmnj6p4xZnU6nM37xpcFtuDhuBQcn5iU9WzzDLjj/YxGA8/W/AAAA///R+TzZ") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.603165396s ago: executing program 2 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x13, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.525041096s ago: executing program 5 (id=1093): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.504072056s ago: executing program 0 (id=1094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x34, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x34}}, 0x4040000) 1.428152286s ago: executing program 1 (id=1095): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x10800, &(0x7f00000004c0)={[{@fmask={'fmask', 0x3d, 0xbc61}}, {@discard}, {@discard}, {@discard}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@umask={'umask', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x5, 0x151c, &(0x7f00000037c0)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) 1.409662126s ago: executing program 5 (id=1096): io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8e, r1, 0x0}]) 1.398924036s ago: executing program 2 (id=1097): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) 1.296978126s ago: executing program 0 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r1, 0x1, 0xfffffffc, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x4, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) 1.222001866s ago: executing program 2 (id=1099): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000c80)={[{@nls={'nls', 0x3d, 'cp866'}}, {@nobarrier}]}, 0x1, 0x5f4, &(0x7f0000000640)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x221008, 0x0) 1.221332766s ago: executing program 1 (id=1100): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 1.175674157s ago: executing program 5 (id=1101): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 1.162171347s ago: executing program 3 (id=1102): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) 1.120092487s ago: executing program 1 (id=1103): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) syz_clone3(&(0x7f0000002980)={0x3000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) 1.101972837s ago: executing program 0 (id=1104): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000300)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@numtail}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.046497977s ago: executing program 5 (id=1105): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) 1.030384167s ago: executing program 3 (id=1106): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard_size={'discard', 0x3d, 0xc}}, {@grpquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota}, {@nodiscard}, {@noquota}]}, 0x1, 0x6310, &(0x7f0000019f80)="$eJzs3c1vHGcdB/Df7JtfStKoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXraK6gJKA0ioirnzhwB8BQuKIEEdO/AE9cOXGH0CkBAmUQ9VBYz+PM57ueu0k3llnPh/JmfntM+N9Jt+dffHM7BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPz4Rz89V0TElV+nG05EfCH6Eb2IpapeiYillRP1dV6IreZ4PiKGCxHV+lv/PBvxekR8cjzi3v3bq9XN5/fZjx/+5Z9//NkzP/nHn4dn/vfXm/03Ji1369bv/vu3O4++vQAAANBFZVmWRfqYfzIiBumzPQDw9Muv/2WSb1fPXb0xZ/1Rq9Vq9RGs68rx7tSLiNior1O9Z3A4HgCOmI140HYXaJH8O20QEc+03QlgrhVtd4BDce/+7dUi5VvUXw9WttvzuSC78t8odq7vmDSdpnmOyaweX5vRj+cm9GdpRn2YJzn/XjP/K9vto7TcYec/K5PyH21f+tQ5Of9+M/+Gpyf/3tj8uyrnPzhQ/n35AwAAAADAHMt//z/R8vHfhcfflH3Z6/jvyoz6AAAAAAAAAABP2kHH/xs0xv/bYfw/AAAAmFvVZ/XK748/vG3Sd7FVt18uIo41lgc6Jl0ss9x2PwAAAAAAAAAAAACgSwbb5/BeLiKGEXFsebksy+qnrlkf1OOuf9R1ffuhy9p+kgcAgG2fHG9cy19ELEbE5fRdf8Pl5eWyXFxaLpfLpYX8fna0sFgu1T7X5ml128JoH2+IB6Oy+mWLtfXqpn1entbe/H3VfY3K/j46NhstBg4AEbH9anRv0ivSp16vjqayfDZafpPDEbHH/s8RZf9nP9p+nAIAAACHryzLskhf530yHfPvtd0pAGAm8ut/87iAWn2w+tic9UetVqvV4+q6crw79SIiNurrVO8ZDMcPAEfMRjxouwu0SP6dNoiIF9ruBDDXirY7wKG4d//2apHyLeqvB2l893wuyK78N4qt9fL646bTNM8xmdXjazP68dyE/jw/oz7Mk5x/r5n/le32UVru8fMvd/2ZsK1zjCblX23niRb607acf7+Zf8Nh7/+zshm9sfl3Vc5/cKD8+/IHAAAAAIA5lv/+f2Kujv+OHnVzptrr+O/K2DUOry8AAAAAAAAA8KTcu397NV/3mo//f2nMcq7/fDrl/Av5d1LOv9fI/+uN5fq1+btvP8z/P/dvr/7p5r+/mKf7zX8hzxTpkVWkR0SR7qkYpOnjbN3nbQ77o+qehkWvP0jn/JTDd+NarMdanN21bC/9fzxsP7erverpcKu97G+3n9/VPthpz+tf2NU+TGcXlUu5/XSsxi9iPd7Zaq/aFqZs/+KU9nJKe86/b//vpJz/oPZT5b+c2ovGtHL3497n9vv6dNz9vHXty789e/ibM9Vm9He2ra7avpda6M/W/8kzo/jVjbXrp29dvXnz+rlIk123no80ecJy/sP0s/P8//J2e37er++vdz8eHTj/ebEZg4n5v1ybr7b3lRn3rQ05/1H6yfm/k9rH7/9HOf/J+/+rLfQHAAAAAAAAAAAAAAAA9lKW5dYlom9FxMV0/U9b12YCALOVX//LJN8+q7o/4/tTq494XcxZf55UvbCf5T8r56a/avWRrevK8d6sFxHx9/o61XuG34z7ZQDAPPssIv7Vdidojfw7LH/fXzU91XZngJm68eFH719dX1+7fqPtngAAAAAAAAAAjyqP/7lSG//5VFmWdxrL7Rr/9e1YedzxPwd5ZmeA0QkDVfcPvk172eyN+r3acOMvxqTxv4c7c3uN/z2Ycn/DKe2jKe0LU9oXp7SPvdCjJuf/Ym2881MRcbIx/PqTGP+1+HRKZ2Zgr/Ffm2Ped0HO/6Xa47nK/2uN5er5l384yuP/9nblf+bmB788c+PDj1679sHV99beW/v5hXPnzl64ePHSpUtn3r22vnZ2+98We3y4cv557GvngXZLzj9nLv9uyfl/JdXy75ac/1dTLf9uyfnn93vy75acf/7sI/9uyfm/kmr5d0vO/xupln+35PxfTbX8uyXn/81Uy79bcv6vpVr+3ZLzP51q+XdLzv9MqveZ/9Jh94vZyPnnI1z2/27J+eczG+TfLTn/86mWf7fk/C+kWv7dkvN/PdXy75ac/7dSLf9uyflfTLX8uyXn/+1Uy79bcv6XUi3/bsn5fyfV8u+WnP93Uy3/bsn5v5Fq+XdLzv976UIy+XdLzv/7qZZ/t+T8f5Bq+XdLzv/NVMu/Wx5+/78ZM23PPJiPbph5/+p6289MAAAAAAAAAAAAAEDTLE4nbnsbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3t3FyHXW9wM/u95drx1IDIT8nfwd2DgmhMTJru3EL7QpJoSXhrcSCIW+YLvetVnq2MZrl0Aj2TRQImFUVNESLtoCQm1uKlKJC1oBygVqhVQJWqn0BlGhchFVAQWkSrQCtppznufZmdl5W+9kc+acz0eyf96Zc+Y858wzZ+e36+8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDZTa9b+MRYlmWNP/lf27LsBY1/b5nZlt/26ud7hAAAAMB6/SL/+9lr0g2HB1ipaZl/etm3v7K8vLycvWfTn01+Znk53TGTZZObsyy/L3ryB+8da14meDSbHhtv+nq8z+Y39bl/os/9k33un+pz/+Y+90/3uX/VAVhlS/HzmPzBduX/3FYc0uzabDK/b1eHtR4d2zw+Hn+WkxvL11mePJEtZqeyhWyuZfli2bF8+a/d1NjWm7K4rfGmbe1ozJCfPHI8jmEsHONdLdtaeczoR6/NZn76k0eO//X5Z67vVPsehpbHK8Z5687GOD8WbinGOpZtTsckjnO8aZw7Ojwnm1rGOZav1/h3+zifHXCcm1aGuaHan/PpbDz/93fy4zTR/GO9dJx2hNt+dnOWZZdWht2+zKptZePZ1pZbxleen+liRjYeozGVXpxNrGme3jTAPG3U+V2t87T9NRGf/5vCehNdxtD8NP3oo1NNz/vPl69knkaNve72Wmmfg8N+rZRlDsZ58Z18px/rOAd3hf1/5Jbuc7Dj3OkwB9N+N83Bnf3m4PjUpnzM6UkYy9dZmYN7WpbflG9pLK9P39J7Ds6ef+js7NKHP3LH4kPHTi6cXDi9b8+euX379x88eHD2xOKphbni7ys82uW3NRtPr4Gd4djF18Ar25ZtnqrLX5hadf690tfhdI/X4ba2ZYf9Opxo37mxjXlBrp7TxWvjXY2DPn15POvyGsufn9vW/zpM+930Opxoeh12/J7S4XU4McDrsLHM2dsGe88y0fSn0xi6fy9Y3xzc1jQH29+PtM/BYb8fKcscnA7z4nu3df9esCOM97Hda30/smnVHEy7G849jVvS+/3pg3npNC9vaNxx1VR2YWnh3J0PHzt//tyeLJQN8ZKmudI+X7c27VO2ar6Or3m+Hl582WM3dLh9WzhW03c0/pru+lw1lrnrzt7PVf7drfPxbLl1bxbKkA1yPL+QrYw/utLj2em7eeN4TmXZ57750Qe+/sjnXtf1eDb6zY/Nrv+9eOhLlwsX88eY7HL+jX3/L4vtpYd6dNPkRPH63ZSOzmTL+bj1qZrIz11j+bafnR3sfDwZ/mz0+fjaHufj7W3LDvt8PNm+c/F8PNbvpx3r0/58Tod5cmqu9/m4scz2vWudkxM9z8c3hzoWjv+rQqeQ+qKmudNt3qZtTUxMhv2aiFtonaf7WpafDL1ZY1tP7A1vCtMoB5unt95cLL+pab1oo+bpTNuyw56n6Wdf3ebpWL+fvl2Z9udzOsyLa/f1nqeNZZ66a/3nzi3xn03vXaf6zcHJTVONMU+mSZif77PlLXEO3pkdz85kp7L5/N6pfD6N5dvaffdg58qp8Gejz5Xbe8zBW9uWHfYcTD9f7Tb3xiZW7/wQtD+f02FePH537znYWOa+A8N973pruCUt0/Tetf3na91+5nVD22F6rubKRBjnNw/0/tlsY5lTB9faZ/Y+TreHW67qcJzaX7/dXlPz2cYcp+1hnM8c7H6cGuNpLPOZQwPOp8NZll384L35z3vD71cuXvjuV+LvXSazLr/TufjBe3/8whP/uJbxAzD6flmUrcX3uqbfTA3y+38AAABgJMS+fzzURP8PAAAAlRH7/vi/whP9PwAAAFRG7PsnQk2q0P//Uf9Ftt/3zOIvL2YpmR8+NCF9NF86DPcXy8WM61z4emZ5ReP2e7+08N//cHGw4Y1nWfbz+/+w4/Lb74/jKsyEcT75+tbbV/nKHQNt++iDF9N2m/Prnw+PH/dn0GnQKYI7l2XZ1675VL6dmfdezutT9x/N6wOXHnu0scyzh4qv4/pPv6RY/i9C+PfwiWMt6z8djsMPQ517c+fjEdf78uVX7Tjw7pXtxfXGdl6d7/bj7yseN35OzqcfLZaPx7nb+L/+ySe+3Fj+4Vd0Hv/F8c7jfyI87pdC/Z8bi+Wbn4PG13G9j4fxx+3F9e784jc6jv/JTxTLn31DsdzRUOP2bw1f73rDM4vNx+vhsWMt+5W9sVgubn/uu3+S3x8fLz5++/inj1xuOR7t8+Opfy0eZ7Zt+Xh73E70923bbzxO8/yM23/ij4+2HOd+23/ygadvbDxu+/Zvb1vu7Advy7e/8nitn9j0lx//VMftxfEc/tuzLftz+B3hdRy2//j7wnwM9//vk8XjtX+6wtF3tJ5/4vKf33axZX+iN/202P6TrzmZ183TW7Ze9YIXXn3p5Y1jl2Xf2Vw8Xr/tn/yrMy3j/8J1xfGI98eMfvv2u4nbP/eh3afPLF1YnE9H9ZFr8s/OeUsxnjjea8K5tf3rI2fOv3/h3MzczFyWzVT3I/Su2BdD/XFRLvVeennVGfS2B8PzecNnv7b1ln/5ZLz9399V3H75zcX3rVeG5T4dbt8Wnr+1bX+1x7cUH4879lQY4fLqzwtejx27/uvgQAuG/W9/XxDn+9mXvj8/Do378u8b8XV903XrGv/354vH+Wo4rsvhk5l3Xreyvebl42cjXH5n8Xpf7/bjaS4+r38Tnu+3/rB4/DiuuL/fD+9jvrG99XwX58dXL463P37+KR6Xwvkku1TcH5eKx/vys9d1HF78HJLs0vX513+aHuf6Ne1mN0sfXpo9tXj6wsOz5xeWzs8uffgjRx46c+H0+SP5Z3ke+UC/9VfOT1vz89P8wv67svxsdaYoz7Hne/xnHzw+f2DulvmFE8cunDj/4NmFcyePLy0dX5hfuuXYiRMLH+q3/uL8PXv2Htp3YO/uk4vz9xw8dGjfod2Lp880hlEMqo/9c7+/+/S5I/kqS/fcdWjP3XffNbf7oTPzC/ccmJvbfaHf+vn3pt2Ntf9g97mFU8fOLz60sHtp8SML9+w5tH//3r6fBvjQ2RNLM7PnLpyevbC0cG622JeZ8/nNje99/danmpb+o3g/226s+CC+7O2370+fz9rwpY92fahikbYPEH0mfBbNt1509uAgX8e+fzLUpAr9PwAAAJCLff9UqIn+HwAAACoj9v2bQ030/wAAAFAZse+fDjX9l4Ca9P+Vy/9vvzjQ9kcq/z8m/y//L/8/1Pz/O8uW/y/OFyn/n2XZjfL/V2y9+fvnPf+/3vz6KhMtX8n/9yH/L/8v/y//z1CVLf8f+/4tWeb3/wAAAFBRse/fGmqi/wcAAIDKiH3/VaEm+n8AAACojNj3vyDUpCb9v/z/COT/Xf9f/l/+v175f9f/Xxf5/97k//uQ/5/N6pX/vzTM8T8P+f8tzV/I/1NGZcv/x77/haEmNen/AQAAYIR1/6lBm9j3Xx1qov8HAACAyoh9/zWhJgP3/8ud/us3AAAAUCKx798WalKT3//L/68r/58yV/L/reOX/28l/x/mg/y//P8GkP/vTf6/D/l/1/8frfx/C/l/yqhs+f/Y978o1KQm/T8AAADUQez7Xxxqov8HAACA8pm4stVi3/+SUJNV/f8VbgAAAAB43sW+/9qsLQhek9//y/+7/r/8v/y//H/n7Q+e/9+Uyf+Xh/x/b/L/fcj/y//L/68p/z/W9CZA/p9Oypb/z/v+bDp7aahJTfp/AAAAqIPY918XaqL/BwAAgMqIff//CzXR/wMAAEBlxL5/e6hJTfp/+f/K5P9/1vzUyf/L//favvy/6/9Xmfx/b/L/fcj/y//L/7v+P0NVtvx/7PuvDzWpSf8PAAAAdRD7/htCTfT/AAAAUBmx7///oSb6fwAAAKiM2PfvCDWpSf8v/1/y/H9Mjrr+v/y//H8p8//T8v+lI//fm/x/H/L/8v/y//L/DFXZ8v+x778x1KQm/T8AAADUQez7XxZqov8HAACAyoh9/8tDTfT/AAAAUBmx75/J/q31jpr0/2vJ/49dkv/v5jm+/v/UANf/byH/L//fa/vy/67/X2Xy/73J//ch/y//L/8v/89QlS3/P5OvNZ3dFGpSk/4fAAAA6iD2/TtDTfT/AAAAUBmx77851ET/DwAAAJUR+/5doSY16f9d/38k8v+Z/L/8v/y//L/8/2Dk/3uT/+9D/l/+X/5f/p+hKlv+P/b9rwg1qUn/DwAAAHUQ+/5bQk30/wAAAFAZse9/ZaiJ/h8AAAAqI/b9t4aa1KT/l/+X/5f/l/+X/++8ffn/0ST/35v8fx/y//L/8v/y/wxV2fL/se9/VahJTfp/AAAAqIPY998WaqL/BwAAgMqIff/toSb6fwAAAKiM2PfvDjWpSf8v/y//vyH5//FM/l/+X/5f/n9DyP/3Jv/fh/y//L/8v/w/Q1W2/H/s++8INalJ/w8AAAB1EPv+O0NN9P8AAABQGbHvnw010f8DAABAZcS+fy7UpCb9v/y//L/r/8v/ryn///KVx5X/L8j/l4v8f2/y/33I/8v/P+/5/0n5fyqlbPn/2PfvCTWpSf8PAAAAdRD7/r2hJvp/AAAAqIzY9+8LNdH/AwAAQGXEvv+uUJOa9P9Vyv/neyD/37Ke/L/8f6ftu/6//H+Vyf/3Nvz8f9xF+X/5f/l/1/+X/2e1suX/Y99/d6hJTfp/AAAAqIPY9+8PNdH/AwAAQGXEvv9AqIn+HwAAACoj9v0HQ01q0v9XKf9frCj/n5Uo/x/J/xfk/+X/5f+fe/L/vbn+fx/y//L/I5z/b8wt+X/Kpmz5/9j3Hwo1qUn/DwAAAHUQ+/5Xh5ro/wEAAKAyYt//K6Em+n8AAACojNj3/2qoSU36f/l/+X/X/5f/L3v+f0r+X/5/DeT/e5P/70P+X/5/hPP/rv9PGZUt/x/7/ntCTWrS/wMAAEAdxL7/10JN9P8AAABQGbHvf02oif4fAAAAKiP2/YdDTWrS/49u/n+qyw6VNP8fb6xk/n+T/H94HPn/guv/dyb/vzGGkv//O/l/+X/5f/l/+X/5f4ahbPn/2Pe/NtSkJv0/AAAA1EHs++8NNdH/AwAAQGXEvv91oSb6fwAAAKiM2PffF2pSk/5/dPP/3XaopPn/mlz/f/KK8v+TLWOX/19ZT/6/IP8v/78WA+Tvt/Ra3/X/A/l/+X/5f/l/+X+GYHj5/9AzrDP/H/v+14ea1KT/BwAAgDqIff8bQk30/wAAAFAZse9/Y6iJ/h8AAABKb3zA5WLf/6ZQk5r0//L/8v/DzP+7/r/8fyb/35X8/8YYyvX/5f/l/+X/5f/l/+X/GYoSXf8/fwsX+/5fDzWpSf8PAAAAdRD7/vtDTfT/AAAAUBmx739zqMng/f99nx3+sAAAAIAhin3/W0JNavL7f/l/+X/5f/l/+f/O25f/H03y/72NWP7/F1eH2+X/C/L/5R7/WvP/E21fPyf5/x90y/8vb25fX/6f50KJ8v/517Hvf2uoSU36fwAAAKiD2Pe/LdRE/w8AAACVEfv+t4ea6P8BAACgMmLf/xuhJjXp/+X/G+NYSS/L/8v/5zfI/8v/y/+PLPn/3kYs/+/6/23k/8s9ftf/l/9ntbLl/2Pf/45Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+d4aa6P8BAACgMmLf/65Qk5r0//L/rv8v/y//L//fefvy/6NJ/r83+f8+5P/l/8uW//9P+X9GW9ny/7HvfzDUpCb9PwAAANRB7PvfHWqi/wcAAIDKiH3/b4aa6P8BAACgMmLf/55Qk5r0//L/o5L/n5H/X2P+fyrcJv8v/y//Xy/y/73J//ch/y//X7b8fxmv/z/deX35fzopW/4/9v3vDTUZvP/v8goAAAAAyiL2/b8ValKT3/8DAABAHcS+/7dDTfT/AAAAUBmx7/+dUJOa9P/y/6OS/3f9/8z1/+X/2/ZH/l/+v5ONy//HM4/8v/y//H8k/1+T/H8X8v90Urb8f+z7fzfUpCb9PwAAANRB7PvfF2qi/wcAAICR0On/ZLeLff+RUBP9PwAAAFRG7PuPhprUpP+X/5f/l/8vaf7/z3f+8/e+/baje+T/5f/l/9dkQ6//33jxu/6//L/8fyL/L//fN/8/2e9RqJqy5f9j338s1GSl8XuLC/wDAADAaIt9/++FmtTk9/8AAABQB7HvPx5qov8HAACAyoh9/3yoSU36f/l/+X/5/5Lm/0f4+v/xeIxS/n/35hHK/8eTrvx/Rxua/3/3Sk5c/n+t+f+pjre25//H5P9byP+vefzfyrJM/r9M+X9qp2z5/9j3L4Sa1KT/BwAAgDoIff/4iaKu3KH/BwAAgMqIff/JUBP9PwAAAFRG7PvfH2pSk/5f/l/+X/5f/n/Q/H97Wtf1/wuu/18u8v+9lSf/35nr/8v/j/L45f/l/1mtbPn/2PcvhprUpP8HAACAOoh9/wdCTfT/8H/s3ceTZeV5x/Hb0JgZU5S988ILe++VF16xMAuv7D/ACzZe2FUuB7CNbWUxKEeUc0ABCRRQAAmhBMoBlJBQFpJQzgFlJNWooJ/nme7p0+d2z9zue877fj4LP2iY8W1cY9CP4csLAADQjNz9/x632P8AAADQjNz9/xG3dLL/9f/6f/2//n/V7//r/4fp/4+G/n+c/n8J/b/+X/+v/2elptb/5+7/z7ilk/0PAAAAPcjdf2ncYv8DAABAM3L3Xxa32P8AAADQjNz9/xW3dLL/9f/6/2b7/7/V/+/1+fp//X/L9P/j9P9L6P/1//p//T8rNbX+P3f/f8ctnex/AAAA6EHu/v+JW+x/AAAAaEbu/svjFvsfAAAAmpG7/3/jlk72/2n9/8aiz/4/M179f0v9v/f/9/x8/b/+v2VH2/9fed+f+fT/+n/9f9D/6//1/5xuav1/7v7/i1s62f8AAADQg9z9/x+32P8AAADQjNz9D4hb7H8AAABoRu7+B8Ytnex/7/97/39a/f85+n/9v/5f/39WvP8/rqf+//I7L7j0npv+/OaDfL7+X/+v/9f/s1pT6/9z9z8obulk/wMAAEAPcvc/OG6x/wEAAKAZufsfErfY/wAAADBDxwe/NXf/Q+OWTva//l//P63+f43v/x+bZP+fv6n/1//r//dJ/z+up/7/TD5f/6//1//r/1mtqfX/ufsfFrd0sv8BAACgB7n7Hx632P8AAAAwXUP/IPaI3P1XxC32PwAAADQjd/+JuKWT/a//P/z+//f6/3n0/97/1//r/5uwjv7/j+L76P/1/0n/r//X/+v/2TK1/j93/5VxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/e/9f/99z//838Xv0/0Ofr/+fJ+//j5tu/7/1/1n6/9n3/+fp//X/+n+2O2D/f+/In7ZX0v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAKAZufsfF7d0sv/1//p//X/P/f9Zvv+/+6fe/fT/w/T/R0P/P24y/f/G5uA36//X3f+f/BPv/+v/9f+s0tTe/8/d//i4pZP9DwAAAD3I3f+EuGVk/x/4b+YDAAAAa5W7/4lxi1//BwAAgNnL6ix3/5Pilk72v/5f/6//1/+fcf/f8fv/N2/7+vT/06L/HzeZ/n8P+v919//r7efn/vXr//X/7Da1/j93/5Pjlk72PwAAAPQgd/9VcYv9DwAAAM3I3f+UuMX+BwAAgGbk7n9q3NLJ/h/u/0/9fv3//uj/d379+v/hnx+r6v/zf6P+f7T/v9j7/33S/4/T/y+h/9f/6//36v+PL/vx+n+GTK3/z93/tLilk/0PAAAAPcjd//S4xf4HAACAZuTuf0bcYv8DAABAM3L3PzNu6WT/e/9f/6//X3//vxF/3G29/787E2zp/f/Fkff/m/r/fdL/j9P/L6H/39bPbyz0/x33/xfu8f7/yL8FQP/PkKn1/7n7nxW3dLL/AQAAoAe5+58dt9j/AAAAMA/b/9mB0/+B0pC7/zlxi/0PAAAAzcjd/9y4pZ39P1Tp1B+d/l//r/9ff/9/0Pf/59H/r/39/8b6f+//75f+f5z+f4m9+v/7/kTRXf+/sn5+s7H+/+q9fvwU+v8rDu/9/79e9uP1/wzZ0f/fcurb19X/5+5/XtzSzv4HAACA7uXuf37cYv8DAABAM3L3vyBusf8BAACgGbn7Xxi3dLL/D73/H3kjVP+v/9f/6//1//r/VdP/j9P/L+H9/7W+nz/3r38K/f/K3v/X/7MiO/r/bdbV/+fuf1Hc0sn+BwAAgB7k7n9x3GL/AwAAQDNy918dt9j/AAAA0Izc/S+JWzrZ/97/1//r//X/+v/hz9f/z9NZ9ffn6P+L/l//r//X/+v/WYGp9f+5+18at3Sy/wEAAKAHuftfFrfY/wAAANCM3P0vj1vsfwAAAGhG7v5r4pZO9r/+/3D7//z2bvv/a/X/C/3/qZ+X+n/9/xHo9v3/jaG/Eu22R/9/+7+e+Ied36L/1//r//X/+n/26U9Hft8k+v+Tp/7bZe7+V8Qtnex/AAAA6EHu/lfGLfY/AAAANCN3/7Vxi/0PAAAAzcjdf13ccsD9P9Y8TJn+3/v/3v/X/+v/hz9f/z9P3fb/++T9/yX0//p//X/+dNT/sxKT6P+3/efc/a+KW/z6PwAAADQjd/+r4xb7HwAAAJqRu/81cYv9DwAAAM3I3f/auKWT/a//1//r//X/+v/hz9f/z5P+f5z+f4k59f/XnUX/vzn8zevu58/Wur/+Rvp/7/+zUlPr/3P3Xx+3dLL/AQAAoAe5+18Xt9j/AAAA0Izc/a+PW+x/AAAAaEbu/jfELZ3sf/2//l//r//X/w9/vv5/nvT/4/T/i8XihpEvYKj/P3n+NPt/7/9P7uvX/+v/2W1q/X/u/jfGLZ3sfwAAAOhB7v4b4hb7HwAAAJqRu//GuMX+BwAAgGbk7n9T3NLJ/tf/6//1//p//f/w5+v/50n/P07/v8Sc3v/X/0/u69f/6//ZbWr9f+7+N8ctnex/AAAA6EHu/pviFvsfAAAAmpG7/y1xi/0PAAAAzcjdf3Pc0sn+1//r//X/+v9Z9f/n6v/1/+MOr/9f6P/1//r/JabX/59Y6P/1/6zX1Pr/3P1vjVs62f8AAADQg9z9b4tb7H8AAABoRu7+t8ct9j8AAAA0I3f/O+KWTva//l//r//X/8+q//f+v/5/Ce//j9P/L6H/b6z/9/6//p91G+7/r1hb/5+7/51xSyf7HwAAAHqQu/+WuMX+BwAAgGbk7r81brH/AQAAoBm5+98Vt3Sy//X/+v+d/f9iof/X/+v/t4z1/8dW0/8fW+j/V+5Q+/9rIkbX/+v/9f+DJtv/n7NoqP8/vueP1/8zRVN7/z93/7vjlk72PwAAAPQgd/974hb7HwAAAJqRu/+9cYv9DwAAAM3I3f++uKWT/a//1/97/1//r/8f/nzv/8+T9//H6f+X0P+32f97/1//z9rc+sdb/36x062r/8/d//64pZP9DwAAAD3I3f+BuMX+BwAAgGbk7v9g3GL/AwAAwKxtbvvt3P0fils62f/6f/2//l//r/8f/nz9/zzp/8fp/5fQ/+v/9f/6f1Zqau//5+7/cNzSyf4HAACAHuTuvy1usf8BAACgGbn7b49b7H8AAABoRu7+j8Qtnex//b/+X/8/z/7/mP5f/6//H7TS/v/EPfXtB+3/L7ro7+/Q/+v/9f/6f/2//r93U+v/c/d/NG7pZP8DAABAD3L3fyxusf8BAACgGbn7Px632P8AAADQjNz9n4hbOtn/u/v/8xZbheqWof4/GjX9/zb6/51fv/5/+OeH9//1//r/w+f9/3H6/yX0//r/o+r//3L3j19p/59/cdP/s2ZT6/9z998Rt3Sy/wEAAKAHufs/GbfY/wAAANCM3P2filvsfwAAAGhG7v4745YZ7//NA3xf7//r//X/+n/9//Dn6//nSf8/Tv+/hP5f/+/9/8v++Vz9P6sztf4/d/+n45YZ738AAABgp9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/hz9f/z9P+v9x+v9y+h/aln76/2ND37jufv5srfvrb6b/9/4/KzS1/j93/+fjlk72PwAAAPQgd/8X4hb7HwAAAJqRu/+LcYv9DwAAAM3I3f+luKWT/a//1/+33///k/7/tM/X/+v/Wzba328u//Et9P/njfw+/f8S/fT/g9bdz8/969f/6//ZbWr9f+7+u+KWTvY/AAAA9CB3/5fjFvsfAAAAmpG7/ytxi/0PAAAAzcjd/9W4pZP9r//vq//fWPTY/3v/X/+v/++J9//H6f+X0P/r//X/+n9Wamr9f+7+uzc2u9z/AAAAMFf/+Ff/dtd+v+/d9//PY4uvxS0XL07u85exAQAAgIm7b/dvbC4WX7//P/n1fwAAAGhR7v5vxC2d7H/9f1/9f5/v/+v/9f/6/57o/8fp/5fQ/+v/9/r6T+r/l/14/T9Dptb/5+7/ZtyybfhtHviPEgAAAJiS3P3fils6+fV/AAAA6EHu/m/HLbv2v38dIAAAAMxV7v7vxC2z/fX/Cw/0vfX/E+//F4fU/8f30/9v0f/r/4c+X/8/T/r/cWfZ/5/c0P/r/0c03f97/1//zxmZWv+fu/+7ccts9z8AAACwWCx2/B2F3P3fi1vsfwAAAGhG7v7vxy32PwAAADQjd/8P4pZO9r/+/8j7/0zVD/H9/+P1W97/77z/v+rY4Ofr//X/LdP/j+v7/f+/W/6ks/6/lf7/fP2//p9pmFr/n7v/h3FLJ/sfAAAAepC7/0dxi/0PAAAAzcjd/+O4xf4HAACAZuTu/0nc0sn+1/9P/P3/M+r/9/H+v/6/j/5/j89vp///swtO3HbJv9x4vf6fU46y/8+fC/r/ufT/+6D/b6X/9/6//p+JWH3/v/Nf5XLQ/j93/0/jlk72PwAAAPQgd/89cYv9DwAAAM3I3f+zuMX+BwAAgGbk7v953NLJ/tf/H3H/n7mK/n9XP5//t15D/3/ijPv/44vFYi39fzbFvff/3v/X/+/m/f9x+v8l9P/6f/2//p+VWn3/v/MbD9r/5+7/RdzSyf4HAACAHuTu/2Xckvt/48B/6x4AAACYmNz9v4pb/Po/AAAANCN3/6/jlk72v/7f+/9T6f+T9/9P/bi23v+/pOLUPvv/v6jf0v8fLv3/OP3/Evp//b/+X//PSk2t/8/d/5u4pZP9DwAAAD3I3X9v3GL/AwAAQDNy9/82brH/AQAAoBm5+38Xt3Sy//X/rfb/WcTr//X/U+n/vf/v/f+jof8fp/9fQv+v/9f/6/9Zqan1/7n7/xAAAP//1xFddQ==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 969.215777ms ago: executing program 2 (id=1107): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 909.010418ms ago: executing program 1 (id=1108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcff7f00ffdbdf25210000000a0001007770616e34ffff0009001f"], 0x2c}, 0x1, 0x0, 0x0, 0x20004055}, 0x200440c4) 629.900558ms ago: executing program 1 (id=1109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 402.080739ms ago: executing program 0 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dffbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x800}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48805}, 0x40000) 319.182529ms ago: executing program 2 (id=1111): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8020}], 0x1, 0xfff) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xd0) 319.058359ms ago: executing program 5 (id=1112): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) accept4$llc(r0, 0x0, 0x0, 0x0) 177.32501ms ago: executing program 0 (id=1113): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 176.874299ms ago: executing program 3 (id=1114): r0 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xa, "ce"}], 0x18}, 0x24004800) mknod$loop(0x0, 0x0, 0x0) 63.845179ms ago: executing program 5 (id=1115): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x9, &(0x7f0000000300)=0x0) io_submit(r1, 0x2, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000400)="d7dd59cf4c6b182ea1", 0x9, 0x8}]) 0s ago: executing program 0 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x50d4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) kernel console output (not intermixed with test programs): T4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.463549][ T4238] usb 3-1: selecting invalid altsetting 1 [ 67.473536][ T4238] dvb_ttusb_budget: ttusb_init_controller: error [ 67.481516][ T4238] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 67.520307][ T4337] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.21: corrupted in-inode xattr [ 67.538111][ T4337] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.562052][ T4238] DVB: Unable to find symbol cx22700_attach() [ 67.570185][ T4337] EXT4-fs (loop4): 1 orphan inode deleted [ 67.576809][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 67.578473][ T4337] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 67.597532][ T4361] loop1: detected capacity change from 0 to 512 [ 67.634239][ T4238] DVB: Unable to find symbol tda10046_attach() [ 67.648260][ T4238] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 67.683159][ T4238] usb 3-1: USB disconnect, device number 2 [ 67.731027][ T4361] EXT4-fs (loop1): Ignoring removed nobh option [ 67.737330][ T4361] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 67.777903][ T4361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.834922][ T4361] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.28: iget: bad i_size value: 38620345925642 [ 67.849150][ T4361] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.28: couldn't read orphan inode 15 (err -117) [ 67.918289][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nomblk_io_submit,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 68.096671][ T4374] loop0: detected capacity change from 0 to 1024 [ 68.235118][ T4374] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 68.284190][ T4374] netlink: 'syz.0.32': attribute type 8 has an invalid length. [ 68.436240][ T4390] capability: warning: `syz.0.38' uses deprecated v2 capabilities in a way that may be insecure [ 68.578941][ T4400] loop1: detected capacity change from 0 to 256 [ 68.613274][ T4407] loop0: detected capacity change from 0 to 128 [ 68.634474][ T4405] loop4: detected capacity change from 0 to 2048 [ 68.705557][ T4411] loop3: detected capacity change from 0 to 64 [ 68.756571][ T4417] loop1: detected capacity change from 0 to 1024 [ 68.758575][ T4405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.778770][ T4405] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.781488][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.819605][ T4407] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.866305][ T4411] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3 [ 68.960284][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,discard,nodiscard,. Quota mode: none. [ 69.084763][ T4434] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use) [ 69.196726][ T4439] loop3: detected capacity change from 0 to 136 [ 69.203943][ T4440] program syz.4.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.315072][ T4439] Symlink component flag not implemented [ 69.555174][ T4465] loop0: detected capacity change from 0 to 128 [ 69.675655][ T4465] process 'syz.0.72' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 69.699716][ T4465] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/8/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 69.866578][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.976183][ T4485] loop4: detected capacity change from 0 to 256 [ 70.270457][ T4497] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 70.278076][ T4497] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 70.424297][ T4504] loop2: detected capacity change from 0 to 64 [ 70.468609][ T4232] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.518569][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.596501][ T26] audit: type=1800 audit(1762452627.492:3): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 70.688519][ T4232] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.723175][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.772931][ T4232] usb 2-1: Product: syz [ 70.777293][ T4232] usb 2-1: Manufacturer: syz [ 70.828339][ T4232] usb 2-1: SerialNumber: syz [ 70.855195][ T4232] usb 2-1: config 0 descriptor?? [ 70.931141][ T4232] usb 2-1: selecting invalid altsetting 0 [ 71.267131][ T4467] usb 2-1: selecting invalid altsetting 0 [ 71.268065][ T4531] program syz.2.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.285631][ T4467] usb 2-1: 0:0: usb_set_interface failed (-22) [ 71.302610][ T4467] usb 2-1: selecting invalid altsetting 0 [ 71.312396][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.320491][ T4467] usb 2-1: 0:0: usb_set_interface failed (-22) [ 71.365341][ T4463] usb 2-1: selecting invalid altsetting 0 [ 71.404945][ T4463] usb 2-1: 0:0: usb_set_interface failed (-22) [ 71.425798][ T4463] usb 2-1: selecting invalid altsetting 0 [ 71.446279][ T4463] usb 2-1: 0:0: usb_set_interface failed (-22) [ 71.466519][ T4463] usb 2-1: selecting invalid altsetting 0 [ 71.482978][ T4535] mmap: syz.2.105 (4535) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.489392][ T4463] usb 2-1: 0:0: usb_set_interface failed (-22) [ 71.528917][ T7] usb 2-1: USB disconnect, device number 2 [ 71.739428][ T4520] loop0: detected capacity change from 0 to 32768 [ 71.777667][ T4521] loop4: detected capacity change from 0 to 32768 [ 71.807854][ T4520] XFS (loop0): Mounting V5 Filesystem [ 71.953335][ T4520] XFS (loop0): Ending clean mount [ 71.979622][ T4520] XFS (loop0): Quotacheck needed: Please wait. [ 72.005101][ T4551] loop2: detected capacity change from 0 to 1024 [ 72.080455][ T4520] XFS (loop0): Quotacheck: Done. [ 72.148729][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 72.493423][ T4191] XFS (loop0): Unmounting Filesystem [ 72.777550][ T4571] device gtp0 entered promiscuous mode [ 72.777575][ T4558] loop1: detected capacity change from 0 to 32768 [ 72.918455][ T4558] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 73.072958][ T4582] loop4: detected capacity change from 0 to 1024 [ 73.147090][ T4184] XFS (loop1): Unmounting Filesystem [ 73.573193][ T4607] loop0: detected capacity change from 0 to 128 [ 73.680349][ T4607] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.746384][ T4607] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.820297][ T4620] loop4: detected capacity change from 0 to 64 [ 73.997461][ T4630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.138'. [ 74.607701][ T4664] loop4: detected capacity change from 0 to 4096 [ 74.683431][ T4677] loop0: detected capacity change from 0 to 4096 [ 74.709494][ T4664] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 74.747052][ T4677] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 74.770880][ T4677] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 74.799509][ T4664] ntfs3: loop4: Failed to load $Extend. [ 74.808447][ T4677] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 74.838437][ T4238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.851708][ T4677] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 74.924596][ T4677] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 74.986533][ T4677] ntfs: volume version 3.1. [ 75.015439][ T4677] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 75.042627][ T4677] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 75.089521][ T4677] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 75.153893][ T4677] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 75.210543][ T4675] loop3: detected capacity change from 0 to 32768 [ 75.248553][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.284539][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.292165][ T4675] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 75.361248][ T4675] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 75.390933][ T4238] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 75.478252][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.511215][ T4686] loop0: detected capacity change from 0 to 1024 [ 75.532204][ T4238] usb 3-1: config 0 descriptor?? [ 75.561834][ T4686] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.576672][ T4686] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.633460][ T4686] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.165: bg 0: block 10: padding at end of block bitmap is not set [ 75.649835][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 75.649850][ T26] audit: type=1326 audit(1762452632.552:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb97ae6c9 code=0x7ffc0000 [ 75.680249][ T26] audit: type=1800 audit(1762452632.562:5): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file0" dev="loop3" ino=17058 res=0 errno=0 [ 75.737787][ T26] audit: type=1326 audit(1762452632.632:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb97ae6c9 code=0x7ffc0000 [ 75.746966][ T4692] loop4: detected capacity change from 0 to 512 [ 75.771317][ T4686] Quota error (device loop0): write_blk: dquota write failed [ 75.793302][ T4686] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 75.814197][ T26] audit: type=1326 audit(1762452632.642:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4eb97ae6c9 code=0x7ffc0000 [ 75.837135][ T4686] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 75.870703][ T4698] loop1: detected capacity change from 0 to 16 [ 75.877532][ T4686] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.165: Failed to acquire dquot type 0 [ 75.895255][ T26] audit: type=1326 audit(1762452632.642:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4eb97ae703 code=0x7ffc0000 [ 75.918011][ T26] audit: type=1326 audit(1762452632.642:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4eb97ad17f code=0x7ffc0000 [ 75.940428][ T4686] Quota error (device loop0): write_blk: dquota write failed [ 75.946560][ T4692] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.947983][ T4686] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.165: Failed to acquire dquot type 0 [ 75.983342][ T4692] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 75.993003][ T4686] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.165: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.005549][ T4698] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.020539][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 76.022143][ T4686] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.165: Failed to acquire dquot type 0 [ 76.041050][ T4686] EXT4-fs (loop0): 1 orphan inode deleted [ 76.048051][ T4692] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.169: invalid indirect mapped block 2683928664 (level 1) [ 76.067728][ T4238] viewsonic 0003:0543:E621.0001: item fetching failed at offset 3/5 [ 76.080785][ T4238] viewsonic: probe of 0003:0543:E621.0001 failed with error -22 [ 76.117363][ T4692] EXT4-fs (loop4): Remounting filesystem read-only [ 76.124738][ T4692] EXT4-fs (loop4): 1 truncate cleaned up [ 76.130495][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 76.192666][ T4686] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.274267][ T4238] usb 3-1: USB disconnect, device number 3 [ 76.346568][ T4686] syz.0.165 (4686) used greatest stack depth: 20144 bytes left [ 76.387209][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 76.576841][ T4713] loop4: detected capacity change from 0 to 16 [ 76.646037][ T4717] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 76.658694][ T4713] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 76.910533][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.048069][ T4739] loop4: detected capacity change from 0 to 64 [ 77.048368][ T4185] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.127221][ T4741] loop2: detected capacity change from 0 to 1024 [ 77.283995][ T4233] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 77.297057][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.318325][ T4185] usb 2-1: Using ep0 maxpacket: 8 [ 77.335177][ T4233] usb 1-1: config 0 descriptor?? [ 77.438489][ T4185] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 77.456847][ T4185] usb 2-1: config 2 has no interface number 0 [ 77.463479][ T4185] usb 2-1: config 2 interface 31 has no altsetting 0 [ 77.477104][ T4749] loop4: detected capacity change from 0 to 4096 [ 77.499261][ T4749] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 77.577081][ T4749] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 77.633871][ T4185] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 77.653384][ T4185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.674312][ T4185] usb 2-1: Product: syz [ 77.692671][ T4185] usb 2-1: Manufacturer: syz [ 77.703381][ T4185] usb 2-1: SerialNumber: syz [ 77.735125][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 77.840575][ T4233] lenovo 0003:17EF:6062.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 77.878120][ T4741] loop2: detected capacity change from 0 to 32768 [ 77.926095][ T4745] loop3: detected capacity change from 0 to 32768 [ 77.948683][ T4741] XFS (loop2): Mounting V5 Filesystem [ 78.032086][ T4233] usb 1-1: USB disconnect, device number 2 [ 78.161808][ T4741] XFS (loop2): Ending clean mount [ 78.256184][ T4183] XFS (loop2): Unmounting Filesystem [ 78.315631][ T4770] loop3: detected capacity change from 0 to 512 [ 78.622455][ T4185] ch9200: probe of 2-1:2.31 failed with error -22 [ 78.649244][ T4774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 78.674335][ T4185] usb 2-1: USB disconnect, device number 3 [ 78.832551][ T4778] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 78.852053][ T4778] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 78.928417][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.966870][ T4777] loop2: detected capacity change from 0 to 8192 [ 79.076574][ T4764] loop4: detected capacity change from 0 to 32768 [ 79.165665][ T4786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 79.177498][ T4764] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 79.194039][ T4764] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 79.303323][ T4791] loop3: detected capacity change from 0 to 64 [ 79.328576][ T13] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 79.358605][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.365053][ T4764] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 79.374348][ T4792] loop1: detected capacity change from 0 to 1024 [ 79.381796][ T13] usb 1-1: config 0 descriptor?? [ 79.411305][ T3522] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 79.428331][ T3522] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 79.430814][ T13] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 79.536116][ T3522] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 79.565064][ T4796] netlink: 108 bytes leftover after parsing attributes in process `syz.2.213'. [ 79.598571][ T3522] gfs2: fsid=syz:syz.0: jid=0: Done [ 79.604624][ T4764] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 79.626991][ T4796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'. [ 79.903426][ T4807] vivid-003: disconnect [ 79.916880][ T4806] vivid-003: reconnect [ 80.098686][ T13] gspca_cpia1: usb_control_msg 01, error -71 [ 80.104740][ T13] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 80.142009][ T13] usb 1-1: USB disconnect, device number 3 [ 80.512510][ T4834] loop1: detected capacity change from 0 to 64 [ 80.610939][ T4838] loop4: detected capacity change from 0 to 1024 [ 80.734905][ T4838] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.859546][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000001,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 81.078494][ T7] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 81.258383][ T4843] loop2: detected capacity change from 0 to 32768 [ 81.272703][ T4858] tipc: Enabling of bearer rejected, failed to enable media [ 81.336176][ T4843] XFS (loop2): Mounting V5 Filesystem [ 81.366099][ T4832] loop3: detected capacity change from 0 to 32768 [ 81.468340][ T7] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.488327][ T7] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 81.507820][ T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 81.518724][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.525424][ T7] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 81.535359][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.543038][ T21] cfg80211: failed to load regulatory.db [ 81.551625][ T7] usb 2-1: config 0 descriptor?? [ 81.579052][ T4848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.617068][ T4843] XFS (loop2): Ending clean mount [ 81.640086][ T4843] XFS (loop2): Quotacheck needed: Please wait. [ 81.760373][ T4843] XFS (loop2): Quotacheck: Done. [ 81.928445][ T13] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.936514][ T13] usb 1-1: config 0 has no interface number 0 [ 81.975975][ T13] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 82.008249][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.027218][ T4183] XFS (loop2): Unmounting Filesystem [ 82.050076][ T7] holtek_mouse 0003:04D9:A067.0003: unbalanced delimiter at end of report description [ 82.069770][ T13] usb 1-1: config 0 descriptor?? [ 82.078961][ T7] holtek_mouse 0003:04D9:A067.0003: hid parse failed: -22 [ 82.086143][ T7] holtek_mouse: probe of 0003:04D9:A067.0003 failed with error -22 [ 82.130082][ T13] usb 1-1: selecting invalid altsetting 1 [ 82.136067][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 82.166821][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 82.289572][ T13] DVB: Unable to find symbol cx22700_attach() [ 82.304053][ T21] usb 2-1: USB disconnect, device number 4 [ 82.316851][ T4884] loop3: detected capacity change from 0 to 1024 [ 82.367534][ T13] DVB: Unable to find symbol tda10046_attach() [ 82.386389][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 82.438333][ T13] usb 1-1: USB disconnect, device number 4 [ 82.571184][ T454] hfsplus: b-tree write err: -5, ino 4 [ 82.740222][ T4886] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 82.768871][ T4876] loop4: detected capacity change from 0 to 32768 [ 82.858800][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 82.858814][ T26] audit: type=1800 audit(2000000004.900:27): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.247" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 83.020121][ T4895] loop3: detected capacity change from 0 to 16 [ 83.082980][ T4895] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.474162][ T4917] tmpfs: Unexpected value for 'inode32' [ 83.604225][ T4926] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 83.676630][ T4930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.270'. [ 84.008755][ T4907] loop3: detected capacity change from 0 to 32768 [ 84.015512][ T4940] loop1: detected capacity change from 0 to 4096 [ 84.045504][ T4907] JBD2: Invalid start block of journal: 2 [ 84.051833][ T4907] (syz.3.261,4907,1):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 84.059870][ T4907] (syz.3.261,4907,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 84.067809][ T4907] (syz.3.261,4907,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 84.076594][ T4907] (syz.3.261,4907,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 84.079818][ T4940] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 84.111215][ T3522] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.119047][ T4907] (syz.3.261,4907,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 84.155102][ T4940] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.248555][ T4185] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.365446][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 84.488318][ T3522] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.499551][ T4185] usb 1-1: Using ep0 maxpacket: 32 [ 84.519178][ T3522] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.543099][ T3522] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 84.588958][ T3522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.597310][ T4959] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 84.618456][ T4185] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.633363][ T3522] usb 5-1: config 0 descriptor?? [ 84.638828][ T4185] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.647052][ T4185] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 84.656589][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.675264][ T4185] usb 1-1: config 0 descriptor?? [ 84.707207][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.719844][ T4959] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.009632][ T4971] loop1: detected capacity change from 0 to 4096 [ 85.048433][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.081804][ T4971] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 85.089524][ T4971] ntfs3: loop1: Failed to load $Extend. [ 85.125075][ T3522] hid-alps 0003:044E:1215.0004: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.4-1/input0 [ 85.160933][ T4185] lg-g15 0003:046D:C225.0005: item fetching failed at offset 5/6 [ 85.185085][ T4185] lg-g15: probe of 0003:046D:C225.0005 failed with error -22 [ 85.340191][ T4185] usb 5-1: USB disconnect, device number 2 [ 85.392811][ T4238] usb 1-1: USB disconnect, device number 5 [ 85.451007][ T4980] loop3: detected capacity change from 0 to 4096 [ 85.503566][ T4980] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 85.527861][ T4980] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 85.598588][ T21] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 85.618200][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.636525][ T21] usb 3-1: Product: syz [ 85.641031][ T21] usb 3-1: Manufacturer: syz [ 85.645654][ T21] usb 3-1: SerialNumber: syz [ 85.679565][ T21] usb 3-1: config 0 descriptor?? [ 85.694889][ T4192] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 85.721401][ T21] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 85.753109][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.782392][ T21] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 85.811619][ T21] usb 3-1: media controller created [ 85.837300][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.923275][ T4964] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 85.958507][ T4964] dvb-usb: bulk message failed: -22 (7/0) [ 86.006428][ T21] DVB: Unable to find symbol mt352_attach() [ 86.054701][ T21] DVB: Unable to find symbol nxt6000_attach() [ 86.074008][ T21] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 86.161516][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 86.213636][ T21] dvb-usb: schedule remote query interval to 1000 msecs. [ 86.231892][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 86.273711][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 86.282550][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 86.297626][ T21] usb 3-1: USB disconnect, device number 4 [ 86.303761][ T1109] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.353778][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 86.399896][ T4175] udevd[4175]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 86.462263][ T4238] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.512564][ T5023] sp0: Synchronizing with TNC [ 86.719020][ T1109] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 86.740852][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.753434][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 86.768403][ T1109] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 86.777643][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.796244][ T1109] usb 1-1: config 0 descriptor?? [ 86.872441][ T4238] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 86.883883][ T4238] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 86.898760][ T4238] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 86.918649][ T4238] usb 2-1: config 220 has no interface number 2 [ 86.925170][ T4238] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 86.942019][ T4238] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 86.967052][ T4238] usb 2-1: config 220 interface 0 has no altsetting 0 [ 86.988178][ T4238] usb 2-1: config 220 interface 76 has no altsetting 0 [ 87.004100][ T4238] usb 2-1: config 220 interface 1 has no altsetting 0 [ 87.088914][ T5041] loop2: detected capacity change from 0 to 2048 [ 87.191761][ T5043] loop3: detected capacity change from 0 to 4096 [ 87.191761][ T5029] loop4: detected capacity change from 0 to 32768 [ 87.205396][ T4238] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.215666][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.224768][ T4238] usb 2-1: Product: syz [ 87.229230][ T4238] usb 2-1: Manufacturer: syz [ 87.231274][ T5041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.233840][ T4238] usb 2-1: SerialNumber: syz [ 87.261820][ T5043] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 87.333674][ T1109] viewsonic 0003:2133:0018.0006: hidraw0: USB HID v10.00 Device [HID 2133:0018] on usb-dummy_hcd.0-1/input0 [ 87.365764][ T5029] XFS (loop4): Mounting V5 Filesystem [ 87.513945][ T1109] usb 1-1: USB disconnect, device number 6 [ 87.629197][ T5029] XFS (loop4): Ending clean mount [ 87.636671][ T5029] XFS (loop4): Quotacheck needed: Please wait. [ 87.669518][ T4238] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 87.696409][ T4238] usb 2-1: No valid video chain found. [ 87.716701][ T4238] usb 2-1: selecting invalid altsetting 0 [ 87.775057][ T5029] XFS (loop4): Quotacheck: Done. [ 87.842609][ T4238] usb 2-1: selecting invalid altsetting 0 [ 87.853837][ T4238] usbtest: probe of 2-1:220.1 failed with error -22 [ 87.927395][ T4238] usb 2-1: USB disconnect, device number 5 [ 88.013862][ T4197] XFS (loop4): Unmounting Filesystem [ 88.760682][ T5100] loop4: detected capacity change from 0 to 128 [ 88.852909][ T5100] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 88.887627][ T5100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.379959][ T5113] loop4: detected capacity change from 0 to 2048 [ 89.496920][ T5115] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.524160][ T5098] loop1: detected capacity change from 0 to 32768 [ 89.596428][ T5098] ialloc: diAlloc returned -5! [ 89.638421][ T4238] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.647818][ T5094] loop0: detected capacity change from 0 to 32768 [ 89.688692][ T5094] jfs_mount: Failed to read AGGREGATE_I [ 89.694827][ T5094] Mount JFS Failure: -5 [ 89.703072][ T5094] jfs_mount failed w/return code = -5 [ 89.747471][ T5094] IPv6: addrconf: prefix option has invalid lifetime [ 89.774175][ T5093] loop3: detected capacity change from 0 to 40427 [ 89.776990][ T5094] IPv6: addrconf: prefix option has invalid lifetime [ 89.888213][ T3522] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 89.893400][ T5093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.930710][ T5093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.945134][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 89.961403][ T5093] F2FS-fs (loop3): invalid crc value [ 90.033161][ T5093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.078500][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.116572][ T4238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.131465][ T26] audit: type=1107 audit(2000000012.170:28): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 90.157789][ T4238] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.248508][ T3522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 90.317570][ T3522] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 90.366161][ T3522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.366642][ T5093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.400653][ T5093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.406741][ T3522] usb 5-1: config 0 descriptor?? [ 90.420944][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.428823][ T5117] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.445690][ T4238] usb 3-1: config 0 descriptor?? [ 90.489272][ T4238] hub 3-1:0.0: USB hub found [ 90.728521][ T4238] hub 3-1:0.0: 1 port detected [ 90.911935][ T3522] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 90.958430][ T4238] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 90.968117][ T4238] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 91.126239][ T5161] loop0: detected capacity change from 0 to 4096 [ 91.141445][ T3522] usb 5-1: USB disconnect, device number 3 [ 91.146191][ T4238] usbhid 3-1:0.0: can't add hid device: -71 [ 91.163388][ T5163] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 91.163512][ T4238] usbhid: probe of 3-1:0.0 failed with error -71 [ 91.219496][ T5163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.237709][ T5163] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.292522][ T5161] ntfs3: loop0: failed to convert name for inode 1e. [ 91.300839][ T4238] usb 3-1: USB disconnect, device number 5 [ 91.759973][ T5158] loop1: detected capacity change from 0 to 32768 [ 91.783203][ T5181] loop0: detected capacity change from 0 to 512 [ 91.821876][ T5181] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 91.857012][ T5181] EXT4-fs (loop0): invalid journal inode [ 91.878266][ T5181] EXT4-fs (loop0): can't get journal size [ 91.919613][ T5158] XFS (loop1): Mounting V5 Filesystem [ 91.958920][ T5181] EXT4-fs (loop0): 1 truncate cleaned up [ 91.970758][ T5181] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 92.003676][ T5194] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 92.054701][ T5181] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 92.062653][ T5158] XFS (loop1): Ending clean mount [ 92.081190][ T5158] XFS (loop1): Quotacheck needed: Please wait. [ 92.136192][ T5158] XFS (loop1): Quotacheck: Done. [ 92.180294][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.219104][ T5194] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 92.254762][ T4184] XFS (loop1): Unmounting Filesystem [ 92.597344][ T5206] loop4: detected capacity change from 0 to 4096 [ 92.701536][ T5206] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 92.847309][ T5213] loop2: detected capacity change from 0 to 512 [ 92.930795][ T5213] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 92.974578][ T5213] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.038697][ T5213] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.057767][ T5213] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext3 [ 93.265831][ T5199] loop3: detected capacity change from 0 to 40427 [ 93.333583][ T5199] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 93.357108][ T5199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.425165][ T5199] F2FS-fs (loop3): invalid crc value [ 93.505982][ T5199] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.635204][ T5207] loop0: detected capacity change from 0 to 32768 [ 93.677356][ T5199] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.702926][ T5236] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 93.716383][ T5199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.772502][ T5207] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 93.788593][ T5215] loop1: detected capacity change from 0 to 32768 [ 93.862909][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.888636][ T5215] XFS (loop1): Mounting V5 Filesystem [ 93.950410][ T5236] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.959772][ T4191] XFS (loop0): Unmounting Filesystem [ 94.177812][ T5215] XFS (loop1): Ending clean mount [ 94.199239][ T5215] XFS (loop1): Quotacheck needed: Please wait. [ 94.282228][ T5215] XFS (loop1): Quotacheck: Done. [ 94.474473][ T4184] XFS (loop1): Unmounting Filesystem [ 94.788199][ T4238] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.188284][ T4238] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.196350][ T4238] usb 5-1: config 0 has no interface number 0 [ 95.391265][ T4238] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 95.400964][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.409698][ T4238] usb 5-1: Product: syz [ 95.413901][ T4238] usb 5-1: Manufacturer: syz [ 95.418557][ T4238] usb 5-1: SerialNumber: syz [ 95.438915][ T4238] usb 5-1: config 0 descriptor?? [ 95.632725][ T5287] loop3: detected capacity change from 0 to 256 [ 95.687348][ T5287] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.708592][ T4238] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 95.730107][ T5287] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 95.743816][ T4238] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.765317][ T5289] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 95.778382][ T4238] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 95.785995][ T5287] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.826674][ T4238] usb 5-1: media controller created [ 95.856411][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.905686][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.943464][ T5289] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.058995][ T4238] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 96.081292][ T4238] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 96.188950][ T4238] DVB: Unable to find symbol mxl5005s_attach() [ 96.329318][ T4238] usb 5-1: USB disconnect, device number 4 [ 96.511153][ T5314] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 96.558244][ T5314] netlink: 17 bytes leftover after parsing attributes in process `syz.0.427'. [ 96.654635][ T5286] loop2: detected capacity change from 0 to 32768 [ 96.693081][ T5323] loop0: detected capacity change from 0 to 512 [ 96.755813][ T5286] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 96.777317][ T5323] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.824584][ T5323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.849232][ T5336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 96.927866][ T5323] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.431: bad orphan inode 131083 [ 96.975436][ T4183] XFS (loop2): Unmounting Filesystem [ 96.982573][ T5323] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 97.339063][ T5351] loop3: detected capacity change from 0 to 8192 [ 97.376136][ T5364] loop4: detected capacity change from 0 to 2048 [ 97.399767][ T5366] loop0: detected capacity change from 0 to 256 [ 97.446799][ T5351] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.459224][ T5366] exfat: Deprecated parameter 'namecase' [ 97.485399][ T5351] REISERFS (device loop3): using ordered data mode [ 97.492374][ T5351] reiserfs: using flush barriers [ 97.503876][ T5351] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.520481][ T5368] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.532173][ T5351] REISERFS (device loop3): checking transaction log (loop3) [ 97.555866][ T5351] REISERFS (device loop3): Using r5 hash to sort names [ 97.561724][ T5366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 97.570036][ T5351] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.590469][ T1112] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.598698][ T5351] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.878398][ T1112] usb 2-1: Using ep0 maxpacket: 8 [ 97.952851][ T5376] device bridge0 entered promiscuous mode [ 97.998486][ T5376] device vlan2 entered promiscuous mode [ 98.005337][ T5376] bridge0: port 3(vlan2) entered blocking state [ 98.048548][ T1112] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 98.081680][ T1112] usb 2-1: config 2 has no interface number 0 [ 98.086040][ T5376] bridge0: port 3(vlan2) entered disabled state [ 98.104623][ T1112] usb 2-1: config 2 interface 31 has no altsetting 0 [ 98.308542][ T1112] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 98.320079][ T5385] loop2: detected capacity change from 0 to 1024 [ 98.327404][ T1112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.366603][ T1112] usb 2-1: Product: syz [ 98.417957][ T1112] usb 2-1: Manufacturer: syz [ 98.428744][ T1112] usb 2-1: SerialNumber: syz [ 98.469792][ T144] hfsplus: b-tree write err: -5, ino 4 [ 98.698268][ T1109] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.823207][ T5378] loop4: detected capacity change from 0 to 32768 [ 98.905707][ T5409] loop3: detected capacity change from 0 to 1024 [ 98.948000][ T5378] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 98.965350][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.078593][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.124384][ T5399] loop2: detected capacity change from 0 to 32768 [ 99.131399][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.141677][ T1109] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 99.152017][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.167829][ T1109] usb 1-1: config 0 descriptor?? [ 99.223382][ T4197] XFS (loop4): Unmounting Filesystem [ 99.386562][ T5421] loop2: detected capacity change from 0 to 64 [ 99.408552][ T1112] ch9200: probe of 2-1:2.31 failed with error -22 [ 99.460693][ T1112] usb 2-1: USB disconnect, device number 6 [ 99.583651][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 99.608546][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 99.638810][ T5426] netlink: 'syz.3.470': attribute type 13 has an invalid length. [ 99.650330][ T1109] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 99.668571][ T5426] netlink: 'syz.3.470': attribute type 11 has an invalid length. [ 99.693273][ T1109] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 99.875285][ T1109] cp2112 0003:10C4:EA90.0008: error requesting version [ 99.895416][ T1109] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 99.941321][ T1109] usb 1-1: USB disconnect, device number 7 [ 100.088350][ T5446] fido_id[5446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.091430][ T5445] loop2: detected capacity change from 0 to 4096 [ 100.163578][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 100.181331][ T5445] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.221279][ T5445] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.239392][ T5452] loop3: detected capacity change from 0 to 256 [ 100.252455][ T5445] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 100.264733][ T5445] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.294015][ T5445] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.315689][ T5445] ntfs: volume version 3.1. [ 100.326570][ T5452] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 100.371743][ T5445] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 100.442195][ T5445] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 100.538757][ T5445] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 100.618271][ T5445] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 100.641989][ T5445] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 100.846338][ T5442] loop1: detected capacity change from 0 to 32768 [ 100.940775][ T5442] XFS (loop1): Invalid device [./file0], error=-16 [ 101.020639][ T5466] loop3: detected capacity change from 0 to 64 [ 101.083490][ T5464] loop4: detected capacity change from 0 to 40427 [ 101.159508][ T5464] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 101.168524][ T5464] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 101.301409][ T5473] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 101.559916][ T5477] loop3: detected capacity change from 0 to 2048 [ 101.643568][ T5487] delete_channel: no stack [ 101.674012][ T5490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.684330][ T5477] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 101.781186][ T5477] Remounting filesystem read-only [ 102.218672][ T5512] loop3: detected capacity change from 0 to 16 [ 102.224698][ T5460] loop0: detected capacity change from 0 to 32768 [ 102.256339][ T5460] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.271612][ T5460] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.283133][ T5512] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.367263][ T5460] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 102.405681][ T3522] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.415772][ T3522] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.565104][ T3522] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 149ms [ 102.593252][ T3522] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.611000][ T5460] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.809064][ T5493] loop1: detected capacity change from 0 to 32768 [ 103.143895][ T5532] loop3: detected capacity change from 0 to 4096 [ 103.187311][ T5549] loop1: detected capacity change from 0 to 128 [ 103.252674][ T5532] ntfs3: loop3: ino=3, Correct links count -> 2. [ 103.308928][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 103.751752][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.793726][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.828196][ T13] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.874243][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.894467][ T5545] loop2: detected capacity change from 0 to 32768 [ 103.918057][ T13] usb 5-1: config 0 descriptor?? [ 103.960271][ T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.966028][ T5571] loop3: detected capacity change from 0 to 128 [ 103.977701][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 103.993426][ T5545] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.523 (5545) [ 104.028395][ T13] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.060264][ T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.067411][ T13] usb 5-1: media controller created [ 104.077368][ T5573] loop0: detected capacity change from 0 to 256 [ 104.087769][ T5571] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 104.111884][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.135953][ T5545] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 104.144377][ T5571] hpfs: filesystem error: improperly stopped [ 104.167297][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 104.172229][ T5571] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 104.187226][ T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.194842][ T5545] BTRFS info (device loop2): using free space tree [ 104.207933][ T5571] hpfs: You really don't want any checks? You are crazy... [ 104.208537][ T5545] BTRFS info (device loop2): has skinny extents [ 104.228993][ T5571] hpfs: hpfs_map_sector(): read error [ 104.236825][ T5573] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.249664][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 104.276829][ T5571] hpfs: code page support is disabled [ 104.286130][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 104.293371][ T5573] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 104.303117][ T5571] hpfs: hpfs_map_4sectors(): unaligned read [ 104.323663][ T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.341595][ T5571] hpfs: hpfs_map_4sectors(): unaligned read [ 104.344897][ T5573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.361619][ T13] usb 5-1: USB disconnect, device number 5 [ 104.398397][ T5571] hpfs: filesystem error: unable to find root dir [ 104.479081][ T13] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.487269][ T5557] loop1: detected capacity change from 0 to 32768 [ 104.546167][ T5545] BTRFS info (device loop2): enabling ssd optimizations [ 104.657555][ T5557] XFS (loop1): Mounting V5 Filesystem [ 104.902340][ T5557] XFS (loop1): Ending clean mount [ 105.030140][ T5613] hpfs: bad mount options. [ 105.159045][ T4184] XFS (loop1): Unmounting Filesystem [ 105.445592][ T5621] loop4: detected capacity change from 0 to 512 [ 105.755767][ T5621] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.548: bad orphan inode 11862016 [ 105.822655][ T5621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.840680][ T5622] loop3: detected capacity change from 0 to 32768 [ 105.866939][ T5621] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.963215][ T5622] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.971601][ T5622] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.983841][ T5622] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 105.983841][ T5622] inode = 1 19 [ 105.983841][ T5622] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 106.002486][ T5622] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 106.010124][ T5622] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 106.018986][ T5622] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 106.025626][ T5622] gfs2: fsid=syz:syz.s: File system withdrawn [ 106.031809][ T5622] CPU: 0 PID: 5622 Comm: syz.3.547 Not tainted syzkaller #0 [ 106.039209][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.049302][ T5622] Call Trace: [ 106.052614][ T5622] [ 106.055584][ T5622] dump_stack_lvl+0x168/0x230 [ 106.060321][ T5622] ? kobject_uevent_env+0x371/0x890 [ 106.065659][ T5622] ? show_regs_print_info+0x20/0x20 [ 106.070890][ T5622] ? load_image+0x3b0/0x3b0 [ 106.075440][ T5622] ? kobject_uevent_env+0x371/0x890 [ 106.080676][ T5622] gfs2_withdraw+0x111b/0x1460 [ 106.085488][ T5622] ? gfs2_lm+0x220/0x220 [ 106.089823][ T5622] ? _raw_spin_unlock+0x24/0x40 [ 106.094707][ T5622] ? gfs2_glock_nq+0xcb0/0x1550 [ 106.099597][ T5622] ? gfs2_consist_inode_i+0xc0/0xe0 [ 106.104832][ T5622] gfs2_jdesc_check+0x137/0x290 [ 106.109717][ T5622] check_journal_clean+0x151/0x300 [ 106.114861][ T5622] ? gfs2_trans_remove_revoke+0x370/0x370 [ 106.120618][ T5622] ? check_journal_clean+0x10d/0x300 [ 106.125939][ T5622] ? __rwlock_init+0x140/0x140 [ 106.130731][ T5622] ? do_raw_spin_unlock+0x11d/0x230 [ 106.135960][ T5622] ? _raw_spin_unlock+0x24/0x40 [ 106.140833][ T5622] ? gfs2_jdesc_find+0xa7/0xc0 [ 106.145629][ T5622] init_journal+0x179c/0x2220 [ 106.150350][ T5622] ? end_bio_io_page+0x100/0x100 [ 106.155375][ T5622] ? vsnprintf+0x1905/0x1a00 [ 106.160010][ T5622] ? snprintf+0xd7/0x120 [ 106.164303][ T5622] ? init_journal+0x710/0x2220 [ 106.169090][ T5622] ? vscnprintf+0x80/0x80 [ 106.173465][ T5622] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 106.178610][ T5622] init_inodes+0xdb/0x320 [ 106.182972][ T5622] gfs2_fill_super+0x1701/0x1f50 [ 106.187953][ T5622] ? gfs2_reconfigure+0xcd0/0xcd0 [ 106.193005][ T5622] ? gfs2_glock_nq_num+0x82/0x1b0 [ 106.198055][ T5622] ? preempt_count_add+0x8d/0x190 [ 106.203111][ T5622] ? sb_set_blocksize+0xa5/0xe0 [ 106.207988][ T5622] get_tree_bdev+0x3f1/0x610 [ 106.212609][ T5622] ? gfs2_reconfigure+0xcd0/0xcd0 [ 106.217666][ T5622] gfs2_get_tree+0x4d/0x1e0 [ 106.222201][ T5622] vfs_get_tree+0x88/0x270 [ 106.226653][ T5622] do_new_mount+0x24a/0xa40 [ 106.231189][ T5622] __se_sys_mount+0x2d6/0x3c0 [ 106.235896][ T5622] ? __x64_sys_mount+0xc0/0xc0 [ 106.240683][ T5622] ? lockdep_hardirqs_on+0x94/0x140 [ 106.245912][ T5622] ? __x64_sys_mount+0x1c/0xc0 [ 106.250719][ T5622] do_syscall_64+0x4c/0xa0 [ 106.255154][ T5622] ? clear_bhb_loop+0x30/0x80 [ 106.259850][ T5622] ? clear_bhb_loop+0x30/0x80 [ 106.264586][ T5622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.270524][ T5622] RIP: 0033:0x7fc28bd63e6a [ 106.274969][ T5622] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.294597][ T5622] RSP: 002b:00007fc289fc8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.303042][ T5622] RAX: ffffffffffffffda RBX: 00007fc289fc8ef0 RCX: 00007fc28bd63e6a [ 106.311052][ T5622] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fc289fc8eb0 [ 106.319054][ T5622] RBP: 0000200000000400 R08: 00007fc289fc8ef0 R09: 0000000000200001 [ 106.327051][ T5622] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 106.335139][ T5622] R13: 00007fc289fc8eb0 R14: 0000000000012608 R15: 0000200000000440 [ 106.343155][ T5622] [ 106.346201][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.354168][ T5622] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 106.707528][ T5636] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.549'. [ 106.768471][ T5636] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 106.788554][ T5636] openvswitch: netlink: Message has 1 unknown bytes. [ 107.440935][ T5655] loop2: detected capacity change from 0 to 32768 [ 107.558073][ T5655] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.566498][ T5655] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.597856][ T5655] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 107.597856][ T5655] inode = 1 19 [ 107.597856][ T5655] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 107.616952][ T5655] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 107.625020][ T5655] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 107.633887][ T5655] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 107.640563][ T5655] gfs2: fsid=syz:syz.s: File system withdrawn [ 107.646660][ T5655] CPU: 1 PID: 5655 Comm: syz.2.558 Not tainted syzkaller #0 [ 107.653990][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.664075][ T5655] Call Trace: [ 107.667383][ T5655] [ 107.670352][ T5655] dump_stack_lvl+0x168/0x230 [ 107.675087][ T5655] ? kobject_uevent_env+0x371/0x890 [ 107.680315][ T5655] ? show_regs_print_info+0x20/0x20 [ 107.685549][ T5655] ? load_image+0x3b0/0x3b0 [ 107.690091][ T5655] ? kobject_uevent_env+0x371/0x890 [ 107.695343][ T5655] gfs2_withdraw+0x111b/0x1460 [ 107.700163][ T5655] ? gfs2_lm+0x220/0x220 [ 107.704437][ T5655] ? make_kgid+0x1aa/0x640 [ 107.708892][ T5655] ? from_kuid_munged+0x690/0x690 [ 107.713957][ T5655] ? gfs2_consist_inode_i+0xc0/0xe0 [ 107.719194][ T5655] gfs2_inode_refresh+0xb5e/0xfe0 [ 107.724266][ T5655] ? gfs2_inode_metasync+0xf0/0xf0 [ 107.729426][ T5655] ? __lock_acquire+0x7c60/0x7c60 [ 107.734487][ T5655] inode_go_lock+0x127/0x470 [ 107.739112][ T5655] do_promote+0x741/0xab0 [ 107.743504][ T5655] finish_xmote+0x514/0xb70 [ 107.748128][ T5655] do_xmote+0x7b6/0x1120 [ 107.752448][ T5655] gfs2_glock_nq+0xc7a/0x1550 [ 107.757169][ T5655] check_journal_clean+0x115/0x300 [ 107.762314][ T5655] ? gfs2_trans_remove_revoke+0x370/0x370 [ 107.768070][ T5655] ? check_journal_clean+0x10d/0x300 [ 107.773406][ T5655] ? __rwlock_init+0x140/0x140 [ 107.778211][ T5655] ? do_raw_spin_unlock+0x11d/0x230 [ 107.783438][ T5655] ? _raw_spin_unlock+0x24/0x40 [ 107.788314][ T5655] ? gfs2_jdesc_find+0xa7/0xc0 [ 107.793107][ T5655] init_journal+0x179c/0x2220 [ 107.797847][ T5655] ? end_bio_io_page+0x100/0x100 [ 107.802819][ T5655] ? vsnprintf+0x1905/0x1a00 [ 107.807458][ T5655] ? snprintf+0xd7/0x120 [ 107.811730][ T5655] ? init_journal+0x710/0x2220 [ 107.816523][ T5655] ? vscnprintf+0x80/0x80 [ 107.820884][ T5655] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 107.826289][ T5655] init_inodes+0xdb/0x320 [ 107.830663][ T5655] gfs2_fill_super+0x1701/0x1f50 [ 107.835641][ T5655] ? gfs2_reconfigure+0xcd0/0xcd0 [ 107.840706][ T5655] ? gfs2_glock_nq_num+0x82/0x1b0 [ 107.845769][ T5655] ? preempt_count_add+0x8d/0x190 [ 107.850855][ T5655] ? sb_set_blocksize+0xa5/0xe0 [ 107.855751][ T5655] get_tree_bdev+0x3f1/0x610 [ 107.860546][ T5655] ? gfs2_reconfigure+0xcd0/0xcd0 [ 107.865604][ T5655] gfs2_get_tree+0x4d/0x1e0 [ 107.870129][ T5655] vfs_get_tree+0x88/0x270 [ 107.874573][ T5655] do_new_mount+0x24a/0xa40 [ 107.879112][ T5655] __se_sys_mount+0x2d6/0x3c0 [ 107.883820][ T5655] ? __x64_sys_mount+0xc0/0xc0 [ 107.888628][ T5655] ? lockdep_hardirqs_on+0x94/0x140 [ 107.893860][ T5655] ? __x64_sys_mount+0x1c/0xc0 [ 107.898664][ T5655] do_syscall_64+0x4c/0xa0 [ 107.903124][ T5655] ? clear_bhb_loop+0x30/0x80 [ 107.907826][ T5655] ? clear_bhb_loop+0x30/0x80 [ 107.912540][ T5655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.918467][ T5655] RIP: 0033:0x7f0ac0c8ce6a [ 107.920584][ T5673] loop4: detected capacity change from 0 to 256 [ 107.922916][ T5655] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.922936][ T5655] RSP: 002b:00007f0abeef1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.957228][ T5655] RAX: ffffffffffffffda RBX: 00007f0abeef1ef0 RCX: 00007f0ac0c8ce6a [ 107.965228][ T5655] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f0abeef1eb0 [ 107.973245][ T5655] RBP: 0000200000000400 R08: 00007f0abeef1ef0 R09: 0000000000200001 [ 107.981242][ T5655] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 107.989239][ T5655] R13: 00007f0abeef1eb0 R14: 00000000000125d5 R15: 0000200000000240 [ 107.997253][ T5655] [ 108.001579][ T5655] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 108.011630][ T1109] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.097278][ T5675] nbd: socks must be embedded in a SOCK_ITEM attr [ 108.120561][ T5673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 108.226063][ T5679] netlink: 104 bytes leftover after parsing attributes in process `syz.2.570'. [ 108.291175][ T1109] usb 2-1: Using ep0 maxpacket: 8 [ 108.469620][ T4199] udevd[4199]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 108.517213][ T5688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 108.531024][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 108.531038][ T26] audit: type=1326 audit(2000000030.570:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.0.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36994c96c9 code=0x0 [ 108.569376][ T1109] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 108.590504][ T1109] usb 2-1: New USB device strings: Mfr=32, Product=2, SerialNumber=3 [ 108.612348][ T1109] usb 2-1: Product: syz [ 108.637610][ T1109] usb 2-1: Manufacturer: syz [ 108.655044][ T1109] usb 2-1: SerialNumber: syz [ 108.674397][ T1109] usb 2-1: config 0 descriptor?? [ 108.699029][ T5699] loop2: detected capacity change from 0 to 1024 [ 108.938360][ T1109] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 109.032794][ T5713] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 109.116039][ T5709] loop4: detected capacity change from 0 to 4096 [ 109.159118][ T5709] ntfs3: loop4: ino=3, Correct links count -> 2. [ 109.296019][ T26] audit: type=1800 audit(2000000031.330:33): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.582" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 109.368488][ T1109] usb write operation failed. (-71) [ 109.386589][ T1109] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.427460][ T1109] dvbdev: DVB: registering new adapter (Terratec H7) [ 109.459854][ T1109] usb 2-1: media controller created [ 109.510949][ T1109] usb read operation failed. (-71) [ 109.531258][ T1109] usb write operation failed. (-71) [ 109.562405][ T1109] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 109.623264][ T1109] usb 2-1: USB disconnect, device number 7 [ 109.753998][ T5748] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 109.905710][ T5762] netlink: 'syz.1.610': attribute type 6 has an invalid length. [ 109.924541][ T5762] netlink: 'syz.1.610': attribute type 6 has an invalid length. [ 109.948430][ T5762] Zero length message leads to an empty skb [ 110.238273][ T5630] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.387583][ T26] audit: type=1326 audit(2000000032.420:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5788 comm="syz.1.623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12b90616c9 code=0x0 [ 110.664869][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.679906][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.706022][ T5630] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 110.715642][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.753232][ T5630] usb 3-1: config 0 descriptor?? [ 110.811671][ T5803] device bridge0 entered promiscuous mode [ 110.817863][ T5803] device vlan2 entered promiscuous mode [ 110.849994][ T5803] bridge0: port 3(vlan2) entered blocking state [ 110.873646][ T5803] bridge0: port 3(vlan2) entered disabled state [ 111.100467][ T5811] overlayfs: unrecognized mount option "\loc" or missing value [ 111.122301][ T3063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.242863][ T3063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.300462][ T5630] sony 0003:054C:0268.0009: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 111.319495][ T5817] netlink: 256 bytes leftover after parsing attributes in process `syz.0.636'. [ 111.338167][ T5630] sony 0003:054C:0268.0009: failed to claim input [ 111.378927][ T5817] netlink: 56 bytes leftover after parsing attributes in process `syz.0.636'. [ 111.424691][ T3063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.467549][ T5630] usb 3-1: USB disconnect, device number 6 [ 111.516267][ T5821] fido_id[5821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 111.562188][ T3063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.603789][ T5818] loop1: detected capacity change from 0 to 8192 [ 111.684799][ T5818] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 111.731663][ T5818] REISERFS (device loop1): using ordered data mode [ 111.808253][ T5818] reiserfs: using flush barriers [ 111.821563][ T5818] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.905919][ T5818] REISERFS (device loop1): checking transaction log (loop1) [ 112.286951][ T5818] REISERFS (device loop1): Using tea hash to sort names [ 112.298630][ T5818] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 112.370721][ T5818] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 112.516916][ T5628] libceph: connect (1)[c::]:6789 error -101 [ 112.523769][ T5628] libceph: mon0 (1)[c::]:6789 connect error [ 112.535395][ T5628] libceph: connect (1)[c::]:6789 error -101 [ 112.586256][ T5628] libceph: mon0 (1)[c::]:6789 connect error [ 112.723482][ T5848] loop0: detected capacity change from 0 to 2048 [ 112.738993][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 112.840306][ T5856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.910131][ T5628] libceph: connect (1)[c::]:6789 error -101 [ 112.916186][ T5628] libceph: mon0 (1)[c::]:6789 connect error [ 113.033042][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.047034][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.113557][ T5827] device bridge_slave_0 entered promiscuous mode [ 113.118006][ T5830] loop3: detected capacity change from 0 to 32768 [ 113.230418][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.246473][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.279141][ T5841] ceph: No mds server is up or the cluster is laggy [ 113.298411][ T5827] device bridge_slave_1 entered promiscuous mode [ 113.450370][ T5631] libceph: connect (1)[c::]:6789 error -101 [ 113.456515][ T5631] libceph: mon0 (1)[c::]:6789 connect error [ 113.542687][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.650037][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.721639][ T5877] usb usb7: usbfs: process 5877 (syz.3.652) did not claim interface 0 before use [ 113.766077][ T5871] loop0: detected capacity change from 0 to 4096 [ 113.782763][ T4185] Bluetooth: hci4: command 0x0409 tx timeout [ 113.796718][ T5879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 113.803798][ T5879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.818818][ T5827] team0: Port device team_slave_0 added [ 113.855902][ T5879] vhci_hcd vhci_hcd.0: Device attached [ 113.863712][ T5827] team0: Port device team_slave_1 added [ 113.924733][ T5871] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 113.967415][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.015264][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.048429][ T4185] vhci_hcd: vhci_device speed not set [ 114.068334][ T5628] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 114.101312][ T5885] netlink: 'syz.3.656': attribute type 29 has an invalid length. [ 114.118224][ T4185] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 114.137979][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.190748][ T5885] netlink: 'syz.3.656': attribute type 29 has an invalid length. [ 114.261118][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.277505][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.367179][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.428483][ T5886] netlink: 'syz.3.656': attribute type 29 has an invalid length. [ 114.498556][ T5628] usb 2-1: config 0 has no interfaces? [ 114.504679][ T5628] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.524920][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.551003][ T5628] usb 2-1: config 0 descriptor?? [ 114.657345][ T5875] loop2: detected capacity change from 0 to 32768 [ 114.680994][ T5827] device hsr_slave_0 entered promiscuous mode [ 114.695398][ T5630] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 114.713963][ T5827] device hsr_slave_1 entered promiscuous mode [ 114.730722][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.741032][ T5827] Cannot create hsr debugfs directory [ 114.824047][ T1109] usb 2-1: USB disconnect, device number 8 [ 114.830919][ T5881] vhci_hcd: connection closed [ 114.834140][ T454] vhci_hcd: stop threads [ 114.889563][ T454] vhci_hcd: release socket [ 114.898742][ T4185] vhci_hcd: vhci_device speed not set [ 114.924466][ T454] vhci_hcd: disconnect device [ 114.978346][ T4185] usb 35-1: device descriptor read/64, error -71 [ 115.188416][ T4185] vhci_hcd: vhci_device speed not set [ 115.315119][ T3063] device hsr_slave_0 left promiscuous mode [ 115.348681][ T3063] device hsr_slave_1 left promiscuous mode [ 115.385217][ T5628] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 115.404391][ T3063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.420128][ T3063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.462626][ T3063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.495062][ T3063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.504710][ T3063] device bridge_slave_1 left promiscuous mode [ 115.520531][ T3063] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.554777][ T3063] device bridge_slave_0 left promiscuous mode [ 115.573408][ T3063] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.646604][ T5940] loop2: detected capacity change from 0 to 512 [ 115.656599][ T3063] device veth1_macvtap left promiscuous mode [ 115.673043][ T3063] device veth0_macvtap left promiscuous mode [ 115.692427][ T3063] device veth1_vlan left promiscuous mode [ 115.706853][ T3063] device veth0_vlan left promiscuous mode [ 115.718554][ T5940] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 115.734047][ T5940] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.807335][ T5940] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.676: inode #13: comm syz.2.676: iget: illegal inode # [ 115.858586][ T1109] Bluetooth: hci4: command 0x041b tx timeout [ 115.874160][ T5940] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.676: couldn't read orphan inode 13 (err -117) [ 115.954282][ T5940] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000080222a,delalloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 116.017039][ T5933] loop0: detected capacity change from 0 to 40427 [ 116.035229][ T5940] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.676: inode #13: comm syz.2.676: iget: illegal inode # [ 116.076850][ T5933] F2FS-fs (loop0): invalid crc value [ 116.147843][ T5933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.254661][ T5933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.407507][ T5953] program syz.2.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.419470][ T4191] attempt to access beyond end of device [ 116.419470][ T4191] loop0: rw=2049, want=45104, limit=40427 [ 116.570638][ T3063] team0 (unregistering): Port device team_slave_1 removed [ 116.617758][ T3063] team0 (unregistering): Port device team_slave_0 removed [ 116.659594][ T3063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.699579][ T3063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.832579][ T3063] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 116.937912][ T3063] bond0 (unregistering): Released all slaves [ 117.035824][ T5930] tipc: Started in network mode [ 117.047085][ T5930] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 117.078413][ T5930] tipc: Enabling of bearer rejected, failed to enable media [ 117.233007][ T5827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.251810][ T5827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.266841][ T5827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.292364][ T5827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.500528][ T5969] loop3: detected capacity change from 0 to 4096 [ 117.638573][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.709743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.734823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.806630][ T5989] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.828564][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.850362][ T5961] loop2: detected capacity change from 0 to 32768 [ 117.919202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.930495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.938868][ T3522] Bluetooth: hci4: command 0x040f tx timeout [ 117.957058][ T5961] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.684 (5961) [ 118.016265][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.023433][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.030290][ T5987] loop0: detected capacity change from 0 to 4096 [ 118.054751][ T5961] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.067829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.076113][ T5961] BTRFS info (device loop2): allowing degraded mounts [ 118.098860][ T5961] BTRFS info (device loop2): setting nodatasum [ 118.105147][ T5961] BTRFS info (device loop2): disabling tree log [ 118.112937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.162149][ T5987] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 118.162754][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.178371][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.198307][ T5961] BTRFS info (device loop2): using free space tree [ 118.204868][ T5961] BTRFS info (device loop2): has skinny extents [ 118.257543][ T5987] ntfs3: loop0: Failed to load $Extend. [ 118.325964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.432942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.559689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.670371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.761205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.815023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.864773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.936649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.965695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.013248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.051339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.074439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.096450][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.600416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.614893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.677082][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.834602][ T6067] netlink: 104 bytes leftover after parsing attributes in process `syz.3.703'. [ 120.018586][ T4185] Bluetooth: hci4: command 0x0419 tx timeout [ 120.045778][ T6077] loop0: detected capacity change from 0 to 16 [ 120.099384][ T6082] netlink: 'syz.3.709': attribute type 3 has an invalid length. [ 120.154898][ T6077] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.241597][ T26] audit: type=1800 audit(2000000042.280:35): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.707" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 120.490421][ T6098] loop0: detected capacity change from 0 to 512 [ 120.517175][ T6100] loop3: detected capacity change from 0 to 16 [ 120.546299][ T6098] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.596009][ T6100] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.626586][ T6100] attempt to access beyond end of device [ 120.626586][ T6100] loop3: rw=0, want=34359214088, limit=16 [ 120.676948][ T6100] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 120.734109][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.742738][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.760780][ T6098] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 120.799731][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.804116][ T6098] Quota error (device loop0): write_blk: dquota write failed [ 120.816603][ T6098] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 120.835131][ T5827] device veth0_vlan entered promiscuous mode [ 120.851687][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.865902][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.894366][ T6098] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.712: Failed to acquire dquot type 0 [ 120.950889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.987487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.995855][ T6098] EXT4-fs (loop0): 1 truncate cleaned up [ 121.003513][ T6098] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000d04,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 121.042862][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 121.044058][ T5827] device veth1_vlan entered promiscuous mode [ 121.126619][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.175497][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.193845][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.202813][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.215936][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.224716][ T6098] Quota error (device loop0): write_blk: dquota write failed [ 121.258800][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.267328][ T6098] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 121.280862][ T5827] device veth0_macvtap entered promiscuous mode [ 121.298013][ T5827] device veth1_macvtap entered promiscuous mode [ 121.307575][ T6098] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.712: Failed to acquire dquot type 0 [ 121.380660][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.438534][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.446502][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.467067][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.467832][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.485939][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.495840][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.543197][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.553343][ T13] usb 3-1: Product: syz [ 121.553364][ T13] usb 3-1: Manufacturer: syz [ 121.553378][ T13] usb 3-1: SerialNumber: syz [ 121.600884][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.626917][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.652365][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.702085][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.774127][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.803803][ T6133] loop0: detected capacity change from 0 to 512 [ 121.815428][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.840048][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.853758][ T6133] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.890752][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.911173][ T13] usb 3-1: 0:2 : does not exist [ 121.931013][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.955520][ T6133] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 121.980544][ T6133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.722: bg 0: block 248: padding at end of block bitmap is not set [ 121.996982][ T13] usb 3-1: USB disconnect, device number 7 [ 122.025477][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.041507][ T6133] Quota error (device loop0): write_blk: dquota write failed [ 122.049497][ T6133] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 122.061432][ T6133] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.722: Failed to acquire dquot type 1 [ 122.080416][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.095745][ T6133] EXT4-fs (loop0): 1 truncate cleaned up [ 122.103896][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.111343][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.119564][ T6133] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.131698][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.144234][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.162782][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.204817][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.234270][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.288676][ T5827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.297508][ T5827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.385473][ T5827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.413623][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.676395][ T466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.708695][ T466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.791137][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.799660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.829719][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.865245][ T6168] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 122.933083][ T6168] [U] J"—e:ÀÆ" [ 122.934883][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.423755][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 123.460090][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 123.549325][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 123.588363][ T6207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.607813][ T6204] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 123.637189][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 123.776367][ T6214] loop0: detected capacity change from 0 to 256 [ 123.823935][ T6219] loop2: detected capacity change from 0 to 64 [ 123.845505][ T6214] exfat: Deprecated parameter 'utf8' [ 123.923884][ T6219] hfs: unable to locate alternate MDB [ 123.942607][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 123.956451][ T6219] hfs: continuing without an alternate MDB [ 123.975916][ T6214] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 124.651641][ T6184] loop5: detected capacity change from 0 to 40427 [ 124.677232][ T6184] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 124.722569][ T6184] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 124.796248][ T6184] F2FS-fs (loop5): invalid crc value [ 124.831000][ T6184] F2FS-fs (loop5): Found nat_bits in checkpoint [ 124.946964][ T6184] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 124.962104][ T6213] loop3: detected capacity change from 0 to 32768 [ 124.972687][ T6184] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 125.057667][ T6240] loop1: detected capacity change from 0 to 32768 [ 125.075835][ T6213] XFS (loop3): Mounting V5 Filesystem [ 125.280638][ T6213] XFS (loop3): Ending clean mount [ 125.302803][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 125.323453][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 125.350467][ T6213] XFS (loop3): Quotacheck needed: Please wait. [ 125.388379][ T6274] netlink: 'syz.1.766': attribute type 19 has an invalid length. [ 125.396311][ T6274] netlink: 'syz.1.766': attribute type 20 has an invalid length. [ 125.422222][ T6213] XFS (loop3): Quotacheck: Done. [ 125.596405][ T4192] XFS (loop3): Unmounting Filesystem [ 125.687666][ T6281] loop2: detected capacity change from 0 to 64 [ 126.772365][ T6324] loop1: detected capacity change from 0 to 1024 [ 127.260808][ T6353] loop2: detected capacity change from 0 to 64 [ 127.397597][ T5628] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.431426][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 127.610378][ T6378] loop2: detected capacity change from 0 to 128 [ 127.683300][ T6384] comedi: No check for data length of config insn id 1003 is implemented [ 127.701101][ T6384] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 127.715597][ T6384] comedi: Assuming n=15 is correct [ 127.726055][ T6378] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.837093][ T5628] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.878600][ T5628] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.914588][ T5628] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.951924][ T5628] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 128.009856][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.054120][ T5628] usb 2-1: config 0 descriptor?? [ 128.435639][ T1093] block nbd5: Attempted send on invalid socket [ 128.444011][ T1093] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.472914][ T6410] efs: cannot read volume header [ 128.544110][ T5628] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000A/input/input8 [ 128.703573][ T5628] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v1d.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 128.768708][ T5628] usb 2-1: USB disconnect, device number 9 [ 128.868468][ T6428] loop3: detected capacity change from 0 to 2048 [ 128.945880][ T6428] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.956475][ T6382] loop0: detected capacity change from 0 to 32768 [ 128.991242][ T6428] NILFS (loop3): mounting unchecked fs [ 129.031271][ T6431] fido_id[6431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.057329][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop3 [ 129.071586][ T6428] NILFS (loop3): recovery complete [ 129.095441][ T6439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.243226][ T6382] XFS (loop0): Mounting V5 Filesystem [ 129.275848][ T6450] loop2: detected capacity change from 0 to 1024 [ 129.549024][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 129.557419][ T6463] loop1: detected capacity change from 0 to 512 [ 129.586325][ T6382] XFS (loop0): Ending clean mount [ 129.618462][ T6463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.640339][ T466] hfsplus: b-tree write err: -5, ino 4 [ 129.677545][ T4191] XFS (loop0): Unmounting Filesystem [ 129.725249][ T6463] EXT4-fs (loop1): 1 truncate cleaned up [ 129.779348][ T6463] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 129.879180][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 130.225618][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 130.308330][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 130.317258][ T6495] netlink: 'syz.2.853': attribute type 18 has an invalid length. [ 130.359648][ T6485] loop5: detected capacity change from 0 to 4096 [ 130.573832][ T6503] loop0: detected capacity change from 0 to 4096 [ 130.673744][ T6503] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 130.801012][ T6503] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 130.825995][ T6503] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 130.885970][ T6503] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 130.913535][ T6525] loop2: detected capacity change from 0 to 512 [ 130.954068][ T6503] ntfs: volume version 3.1. [ 131.037773][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 131.096985][ T6525] EXT4-fs (loop2): Ignoring removed oldalloc option [ 131.147979][ T6525] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.866: corrupted in-inode xattr [ 131.168960][ T6525] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.866: couldn't read orphan inode 15 (err -117) [ 131.209188][ T6525] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,noblock_validity,grpjquota=,oldalloc,nouid32,bsdgroups,barrier=0x0000000000000053,,errors=continue. Quota mode: none. [ 131.233598][ T4191] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 131.446604][ T6547] loop0: detected capacity change from 0 to 256 [ 131.533376][ T6547] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.611870][ T6555] netlink: 128 bytes leftover after parsing attributes in process `syz.3.880'. [ 131.668430][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 131.825363][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 132.005907][ T6578] loop2: detected capacity change from 0 to 1024 [ 132.073877][ T6582] mkiss: ax0: crc mode is auto. [ 132.175391][ T6578] hfsplus: bad catalog entry type [ 132.184395][ T6593] loop3: detected capacity change from 0 to 256 [ 132.215415][ T6593] exfat: Deprecated parameter 'namecase' [ 132.222128][ T466] hfsplus: b-tree write err: -5, ino 4 [ 132.249180][ T6597] loop0: detected capacity change from 0 to 64 [ 132.317386][ T6593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 132.412744][ T6606] loop1: detected capacity change from 0 to 128 [ 132.516182][ T6610] comedi comedi3: fl512: I/O port conflict (0xfffffffffffffffb,16) [ 132.750799][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757205][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809596][ T6628] netlink: 364 bytes leftover after parsing attributes in process `syz.1.912'. [ 132.859346][ T6628] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 133.106937][ T6639] loop1: detected capacity change from 0 to 256 [ 133.197636][ T6639] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 133.365396][ T6646] loop3: detected capacity change from 0 to 512 [ 133.379696][ T26] audit: type=1800 audit(2000000055.420:36): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.916" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 133.468589][ T6639] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 133.500051][ T6639] exFAT-fs (loop1): Filesystem has been set read-only [ 133.541211][ T6602] loop5: detected capacity change from 0 to 32768 [ 133.594720][ T6657] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 133.599996][ T6646] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,bsdgroups,. Quota mode: writeback. [ 133.738340][ T6646] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.877411][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.924'. [ 133.887094][ T6663] loop1: detected capacity change from 0 to 1024 [ 133.967877][ T6646] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.919: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 133.995872][ T6663] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000006,nogrpid,acl,delalloc,dioread_lock,,errors=continue. Quota mode: none. [ 134.054599][ T6646] EXT4-fs (loop3): Remounting filesystem read-only [ 134.226110][ T6641] loop0: detected capacity change from 0 to 32768 [ 134.387527][ T6641] JBD2: Ignoring recovery information on journal [ 134.656746][ T6641] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.724971][ T6693] loop5: detected capacity change from 0 to 512 [ 134.814761][ T6693] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 134.846937][ T6693] EXT4-fs (loop5): filesystem is read-only [ 134.866927][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 134.886447][ T6693] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.917090][ T6693] EXT4-fs (loop5): filesystem is read-only [ 134.953651][ T6693] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.986935][ T6661] loop2: detected capacity change from 0 to 32768 [ 135.031007][ T6693] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #16: comm syz.5.930: iget: bad i_size value: 648518346341360424 [ 135.095404][ T6661] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 135.154207][ T6688] loop1: detected capacity change from 0 to 32768 [ 135.212788][ T6661] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.236261][ T6693] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.930: couldn't read orphan inode 16 (err -117) [ 135.263051][ T6693] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,noblock_validity,nomblk_io_submit,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 135.278633][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 135.360356][ T6688] XFS (loop1): Mounting V5 Filesystem [ 135.493260][ T6688] XFS (loop1): Ending clean mount [ 135.503742][ T6688] XFS (loop1): Quotacheck needed: Please wait. [ 135.594594][ T6688] XFS (loop1): Quotacheck: Done. [ 135.687986][ T6717] loop3: detected capacity change from 0 to 512 [ 135.739794][ T6717] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 135.782657][ T4184] XFS (loop1): Unmounting Filesystem [ 135.798731][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.938'. [ 135.815734][ T6718] delete_channel: no stack [ 135.905169][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 136.077864][ T6728] loop3: detected capacity change from 0 to 512 [ 136.106536][ T6731] loop5: detected capacity change from 0 to 256 [ 136.169525][ T6728] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 136.241133][ T6728] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 136.263760][ T6728] EXT4-fs (loop3): 1 truncate cleaned up [ 136.278053][ T6735] program syz.2.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.278246][ T6728] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,usrquota,nodelalloc,journal_dev=0x0000000000000006,norecovery,,errors=continue. Quota mode: writeback. [ 136.481150][ T6739] loop2: detected capacity change from 0 to 256 [ 136.627134][ T6739] FAT-fs (loop2): Directory bread(block 64) failed [ 136.653045][ T6739] FAT-fs (loop2): Directory bread(block 65) failed [ 136.689931][ T6739] FAT-fs (loop2): Directory bread(block 66) failed [ 136.696519][ T6739] FAT-fs (loop2): Directory bread(block 67) failed [ 136.733821][ T6739] FAT-fs (loop2): Directory bread(block 68) failed [ 136.767077][ T6739] FAT-fs (loop2): Directory bread(block 69) failed [ 136.786349][ T6739] FAT-fs (loop2): Directory bread(block 70) failed [ 136.832534][ T6739] FAT-fs (loop2): Directory bread(block 71) failed [ 136.849687][ T6739] FAT-fs (loop2): Directory bread(block 72) failed [ 136.868794][ T6739] FAT-fs (loop2): Directory bread(block 73) failed [ 137.069903][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 137.187916][ T6782] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 137.221274][ C1] sd 0:0:1:0: tag#3142 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 137.231236][ C1] sd 0:0:1:0: tag#3142 CDB: Read(6) 08 00 00 00 00 2c [ 137.308396][ T6788] loop3: detected capacity change from 0 to 16 [ 137.358235][ T4185] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.372949][ T6788] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.427496][ T6780] loop0: detected capacity change from 0 to 8192 [ 137.477608][ T6794] loop1: detected capacity change from 0 to 2048 [ 137.524527][ T6780] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 137.555265][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 137.643356][ T6780] REISERFS (device loop0): using ordered data mode [ 137.653910][ T6794] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.678436][ T6780] reiserfs: using flush barriers [ 137.716961][ T6780] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.738509][ T4185] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 137.747590][ T4185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.759738][ T6780] REISERFS (device loop0): checking transaction log (loop0) [ 137.770068][ T4185] usb 6-1: config 0 descriptor?? [ 137.811073][ T4185] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 137.860410][ T4185] dvb_usb_af9015: probe of 6-1:0.0 failed with error -22 [ 137.862702][ T6780] REISERFS (device loop0): Using r5 hash to sort names [ 137.889045][ T6780] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.047009][ T4185] usb 6-1: USB disconnect, device number 2 [ 138.088259][ T3522] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.324079][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 138.348325][ T3522] usb 4-1: Using ep0 maxpacket: 32 [ 138.468525][ T3522] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 138.489353][ T3522] usb 4-1: config 0 has no interface number 0 [ 138.495496][ T3522] usb 4-1: config 0 interface 184 has no altsetting 0 [ 138.663363][ T6852] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 138.684497][ T6849] sp0: Synchronizing with TNC [ 138.698476][ T3522] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 138.714829][ T3522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.747091][ T3522] usb 4-1: Product: syz [ 138.763033][ T3522] usb 4-1: Manufacturer: syz [ 138.777271][ T3522] usb 4-1: SerialNumber: syz [ 138.784303][ T3522] usb 4-1: config 0 descriptor?? [ 138.839291][ T3522] smsc75xx v1.0.0 [ 138.987059][ T6870] loop2: detected capacity change from 0 to 256 [ 138.987474][ T6872] loop1: detected capacity change from 0 to 512 [ 139.016590][ T6875] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 139.028003][ T6875] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 139.036359][ T6875] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 139.064710][ T6866] loop0: detected capacity change from 0 to 4096 [ 139.100420][ T26] audit: type=1800 audit(2000000061.140:37): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.994" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 139.100466][ T6870] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.124224][ T6872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.149149][ T6866] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 139.172659][ T6879] loop5: detected capacity change from 0 to 256 [ 139.179212][ T6870] FAT-fs (loop2): Filesystem has been set read-only [ 139.206240][ T6872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 139.216453][ T6872] System zones: 1-12 [ 139.229990][ T6872] EXT4-fs (loop1): 1 truncate cleaned up [ 139.239058][ T6872] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 139.276798][ T6879] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 139.499540][ T3522] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 139.553623][ T3522] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 139.583841][ T3522] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 139.604980][ T3522] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 139.677988][ T3522] usb 4-1: USB disconnect, device number 2 [ 139.813374][ T6901] loop0: detected capacity change from 0 to 1024 [ 139.881545][ T6901] EXT4-fs (loop0): Ignoring removed bh option [ 139.898311][ T6901] EXT4-fs (loop0): inline encryption not supported [ 139.944599][ T6901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 140.082470][ T6901] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.1003: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.150294][ T6901] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 140.228477][ T5628] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 140.238430][ T6915] nbd: must specify a size in bytes for the device [ 140.418764][ T6923] loop1: detected capacity change from 0 to 32768 [ 140.428396][ T6901] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.1003: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.454197][ T6901] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 140.468428][ T6901] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1003: Failed to acquire dquot type 0 [ 140.508720][ T6901] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 140.551278][ T6923] XFS (loop1): Mounting V5 Filesystem [ 140.555891][ T6901] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.1003: mark_inode_dirty error [ 140.658720][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.684858][ T6923] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 140.696888][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 140.698268][ T3522] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.715453][ T6901] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 140.734146][ T6901] EXT4-fs (loop0): 1 orphan inode deleted [ 140.753857][ T6901] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 140.766453][ T5628] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 140.773934][ T6923] XFS (loop1): Starting recovery (logdev: internal) [ 140.832431][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.848551][ T6901] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm syz.0.1003: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.882664][ T6923] XFS (loop1): Corruption warning: Metadata has LSN (256:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 140.895740][ T6901] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 140.898016][ T6923] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 140.918185][ T6923] XFS (loop1): Unmount and run xfs_repair [ 140.923933][ T6923] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 140.931403][ T6923] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 140.940326][ T6923] 00000010: 00 00 00 00 00 00 00 20 00 00 01 00 00 00 00 10 ....... ........ [ 140.941811][ T3063] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.949235][ T6923] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 140.949253][ T6923] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 140.949267][ T6923] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 140.949280][ T6923] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.949294][ T6923] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.949308][ T6923] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.959628][ T6923] XFS (loop1): log mount/recovery failed: error -74 [ 140.978431][ T5628] usb 3-1: config 0 descriptor?? [ 141.008333][ T3522] usb 4-1: Using ep0 maxpacket: 32 [ 141.048367][ T6923] XFS (loop1): log mount failed [ 141.080193][ T3063] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 141.092078][ T3063] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:5: Failed to release dquot type 0 [ 141.109758][ T6911] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.168768][ T3522] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.173038][ T4191] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 141.184306][ T3522] usb 4-1: config 0 interface 0 has no altsetting 1 [ 141.210259][ T4191] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 141.225805][ T4191] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 141.278449][ T3522] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 141.287772][ T3522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.296139][ T3522] usb 4-1: SerialNumber: syz [ 141.394055][ T3522] usb 4-1: config 0 descriptor?? [ 141.449455][ T3522] usb-storage 4-1:0.0: USB Mass Storage device detected [ 141.496056][ T3522] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 141.572335][ T6968] loop1: detected capacity change from 0 to 512 [ 141.633398][ T5628] glorious 0003:22D4:1503.000B: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0 [ 141.670128][ T6968] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.698684][ T6968] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.718406][ T5628] usb 4-1: USB disconnect, device number 3 [ 141.775000][ T6968] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 141.787530][ T6968] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 141.798584][ T6968] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1019: Failed to acquire dquot type 0 [ 141.857163][ T13] usb 3-1: USB disconnect, device number 8 [ 141.889980][ T6976] fido_id[6976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.091783][ T6984] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.289865][ T6993] loop3: detected capacity change from 0 to 256 [ 142.438248][ T6993] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 142.599407][ T6962] loop0: detected capacity change from 0 to 40427 [ 142.678384][ T6962] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 142.688015][ T6962] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.795144][ T6962] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.889973][ T7021] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1031'. [ 142.909497][ T7020] loop2: detected capacity change from 0 to 256 [ 142.990961][ T6962] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 143.002933][ T6962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.046125][ T7020] FAT-fs (loop2): Directory bread(block 64) failed [ 143.099885][ T7025] loop3: detected capacity change from 0 to 2048 [ 143.106900][ T7020] FAT-fs (loop2): Directory bread(block 65) failed [ 143.152383][ T7020] FAT-fs (loop2): Directory bread(block 66) failed [ 143.194280][ T7020] FAT-fs (loop2): Directory bread(block 67) failed [ 143.212251][ T7025] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 143.237990][ T7020] FAT-fs (loop2): Directory bread(block 68) failed [ 143.291421][ T7020] FAT-fs (loop2): Directory bread(block 69) failed [ 143.298524][ T7020] FAT-fs (loop2): Directory bread(block 70) failed [ 143.324018][ T7025] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 143.324318][ T7020] FAT-fs (loop2): Directory bread(block 71) failed [ 143.364683][ T4191] attempt to access beyond end of device [ 143.364683][ T4191] loop0: rw=2049, want=45104, limit=40427 [ 143.368510][ T7020] FAT-fs (loop2): Directory bread(block 72) failed [ 143.468056][ T7020] FAT-fs (loop2): Directory bread(block 73) failed [ 143.506568][ T7025] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 5: comm syz.3.1034: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 143.607773][ T7025] EXT4-fs (loop3): Remounting filesystem read-only [ 144.247642][ T7056] netlink: 'syz.3.1041': attribute type 25 has an invalid length. [ 144.329609][ T7060] netlink: 'syz.3.1041': attribute type 25 has an invalid length. [ 144.457459][ T7026] loop5: detected capacity change from 0 to 32768 [ 144.756870][ T7032] loop1: detected capacity change from 0 to 32768 [ 144.863586][ T7032] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1036 (7032) [ 144.976596][ T7032] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 145.006004][ T7077] loop3: detected capacity change from 0 to 4096 [ 145.018619][ T7032] BTRFS info (device loop1): using free space tree [ 145.046099][ T7032] BTRFS info (device loop1): has skinny extents [ 145.215478][ T7077] ntfs3: loop3: ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 145.396310][ T4192] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 145.428393][ T7032] BTRFS info (device loop1): enabling ssd optimizations [ 145.451887][ T4192] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 145.783856][ T7090] loop0: detected capacity change from 0 to 40427 [ 145.876196][ T7090] F2FS-fs (loop0): invalid crc value [ 145.985876][ T7090] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.205763][ T7134] loop2: detected capacity change from 0 to 4096 [ 146.223441][ T7090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 146.258501][ T7134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.328324][ T7134] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 146.406667][ T7134] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 146.427884][ T4191] attempt to access beyond end of device [ 146.427884][ T4191] loop0: rw=2049, want=45104, limit=40427 [ 146.466539][ T7134] System zones: 0-5 [ 146.533931][ T7134] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,max_dir_size_kb=0x0000000000000007,test_dummy_encryption,mb_optimize_scan=0x0000000000000001,min_batch_time=0x0000000000000004,mblk_io_submit,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 146.604016][ T7117] loop3: detected capacity change from 0 to 32768 [ 146.745303][ T7117] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.816559][ T7145] loop1: detected capacity change from 0 to 32768 [ 146.874382][ T7145] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.1059 (7145) [ 146.902199][ T7117] (syz.3.1058,7117,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 147.022760][ T7117] (syz.3.1058,7117,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 9895604649986 from the device. [ 147.056058][ T7145] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 147.069301][ T7154] loop5: detected capacity change from 0 to 4096 [ 147.140081][ T4192] (syz-executor,4192,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 147.198678][ T7145] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 147.230331][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 147.250642][ T7145] BTRFS info (device loop1): use lzo compression, level 0 [ 147.257864][ T7145] BTRFS info (device loop1): using free space tree [ 147.304554][ T7145] BTRFS info (device loop1): has skinny extents [ 147.656398][ T7180] loop2: detected capacity change from 0 to 764 [ 147.754016][ T7192] loop3: detected capacity change from 0 to 1024 [ 147.825047][ T7197] loop5: detected capacity change from 0 to 256 [ 147.828444][ T7145] BTRFS info (device loop1): enabling ssd optimizations [ 147.844556][ T7180] rock: directory entry would overflow storage [ 147.893922][ T7180] rock: sig=0x4654, size=5, remaining=4 [ 147.901054][ T7197] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 147.982329][ T7203] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 148.043556][ T7203] hfsplus: cannot replace xattr [ 148.298213][ T5580] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop1 scanned by udevd (5580) [ 148.403518][ T7211] loop2: detected capacity change from 0 to 164 [ 148.651204][ T7211] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 149.185865][ T7236] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 149.275659][ T7238] loop2: detected capacity change from 0 to 1024 [ 149.347242][ T7248] loop0: detected capacity change from 0 to 256 [ 149.383003][ T7251] loop5: detected capacity change from 0 to 512 [ 149.519903][ T7251] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 149.585361][ T7248] FAT-fs (loop0): Directory bread(block 64) failed [ 149.594690][ T7251] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 149.616625][ T7258] loop2: detected capacity change from 0 to 512 [ 149.631967][ T7248] FAT-fs (loop0): Directory bread(block 65) failed [ 149.671887][ T7248] FAT-fs (loop0): Directory bread(block 66) failed [ 149.687759][ T7251] EXT4-fs (loop5): 1 truncate cleaned up [ 149.702217][ T7248] FAT-fs (loop0): Directory bread(block 67) failed [ 149.702226][ T7258] EXT4-fs (loop2): Ignoring removed oldalloc option [ 149.720101][ T7258] EXT4-fs (loop2): 1 truncate cleaned up [ 149.725926][ T7258] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 149.730771][ T7251] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 149.749575][ T7253] loop3: detected capacity change from 0 to 32768 [ 149.775391][ T7248] FAT-fs (loop0): Directory bread(block 68) failed [ 149.776157][ T7258] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1107: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 149.782498][ T7248] FAT-fs (loop0): Directory bread(block 69) failed [ 149.811729][ T7248] FAT-fs (loop0): Directory bread(block 70) failed [ 149.822362][ T7248] FAT-fs (loop0): Directory bread(block 71) failed [ 149.830413][ T7248] FAT-fs (loop0): Directory bread(block 72) failed [ 149.836976][ T7248] FAT-fs (loop0): Directory bread(block 73) failed [ 149.904374][ T7258] EXT4-fs (loop2): Remounting filesystem read-only [ 149.925741][ T7253] read_mapping_page failed! [ 149.984809][ T7253] ERROR: (device loop3): txCommit: [ 149.984809][ T7253] [ 150.047511][ T7253] ERROR: (device loop3): remounting filesystem as read-only [ 150.101910][ T7137] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 150.304335][ T276] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 150.325090][ T276] ------------[ cut here ]------------ [ 150.356667][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 150.385459][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 150.391603][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 150.398826][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.408892][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 150.413854][ T276] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba [ 150.433502][ T276] RSP: 0018:ffffc90002d3fd28 EFLAGS: 00010246 [ 150.439585][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: acbdbbdfe2239500 [ 150.447572][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 150.455570][ T276] RBP: ffffc900028b2090 R08: dffffc0000000000 R09: ffffed10172067b0 [ 150.463557][ T276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff8880616a3c98 [ 150.471533][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002691220 [ 150.479548][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 150.488471][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.495069][ T276] CR2: 00007f954e955765 CR3: 0000000029bda000 CR4: 00000000003506f0 [ 150.503044][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.511099][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.519083][ T276] Call Trace: [ 150.522407][ T276] [ 150.525343][ T276] ? lockdep_hardirqs_on+0x94/0x140 [ 150.530559][ T276] jfs_lazycommit+0x583/0xb20 [ 150.535242][ T276] ? txFreelock+0x5a0/0x5a0 [ 150.539759][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 150.545661][ T276] ? sched_dynamic_update+0x210/0x210 [ 150.551038][ T276] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 150.556934][ T276] ? __kthread_parkme+0x157/0x1b0 [ 150.562063][ T276] kthread+0x436/0x520 [ 150.566125][ T276] ? txFreelock+0x5a0/0x5a0 [ 150.570626][ T276] ? kthread_blkcg+0xd0/0xd0 [ 150.575210][ T276] ret_from_fork+0x1f/0x30 [ 150.579644][ T276] [ 150.582681][ T276] Modules linked in: [ 150.592095][ T276] ---[ end trace ae1f3113f970d7d7 ]--- [ 150.597584][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 150.603079][ T276] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba [ 150.622943][ T276] RSP: 0018:ffffc90002d3fd28 EFLAGS: 00010246 [ 150.629338][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: acbdbbdfe2239500 [ 150.637339][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 150.645673][ T276] RBP: ffffc900028b2090 R08: dffffc0000000000 R09: ffffed10172067b0 [ 150.653727][ T276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff8880616a3c98 [ 150.662729][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002691220 [ 150.670789][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 150.679919][ T7137] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.687920][ T7137] usb 2-1: config 0 has no interface number 0 [ 150.695629][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.702394][ T276] CR2: 00007f954e955765 CR3: 000000007af25000 CR4: 00000000003506f0 [ 150.711990][ T7137] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.722911][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.731276][ T7137] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.741127][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.749181][ T7137] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 150.758523][ T276] Kernel panic - not syncing: Fatal exception [ 150.764860][ T276] Kernel Offset: disabled [ 150.769189][ T276] Rebooting in 86400 seconds..