last executing test programs: 1m35.635689965s ago: executing program 3 (id=94): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m35.380451695s ago: executing program 3 (id=98): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xf8, 0x6, &(0x7f0000000080)={0x2, "a7fd483e27b63657ca9c2abc43f3e4858a8715bdc36a2b06c5bdc2a67754f0ad4b"}}) 1m33.031733209s ago: executing program 3 (id=120): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c616c6c6f635f6d6f64653d72657573652c6e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c0059f4bd815bd5269b4f523c9fa8d344a3944fb455fe1b97b3eda5f977db05bfa9d02cc67646849b46fd481fbbd5b0fd213353e4ae7755b4985d63c4a5e13292c6d514d644c884482f93129a82c26ad8f1f7191de0ca75795a5f697573c1828a8ecf4a82e89215d1979fa2738c76683b231a638e5a0d6bd7235d108d564d307b3067ab6ac37a59e50763a2be3d70a1260e"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 1m31.617051303s ago: executing program 3 (id=131): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x30024, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m29.957192361s ago: executing program 3 (id=146): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='exec :'], 0x9d) 1m28.528949143s ago: executing program 3 (id=164): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100060000000400000300d700000000000000000050b122cb0c28deea", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265407c7f306003d8a0f4bd004a88c1e500", [0x9, 0x3]}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x88be}, @void, @ipv4=@dccp={{0x5, 0x4, 0x2, 0x37, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x7, "59c60e", 0x0, '5 S'}}}}, 0x28) 1m28.481224034s ago: executing program 32 (id=164): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100060000000400000300d700000000000000000050b122cb0c28deea", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265407c7f306003d8a0f4bd004a88c1e500", [0x9, 0x3]}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x88be}, @void, @ipv4=@dccp={{0x5, 0x4, 0x2, 0x37, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x7, "59c60e", 0x0, '5 S'}}}}, 0x28) 51.084943893s ago: executing program 2 (id=505): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x25, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xd, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d47, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x4, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c) 50.972674051s ago: executing program 2 (id=507): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_open_dev$dri(&(0x7f0000000000), 0xd21, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 50.860068079s ago: executing program 2 (id=508): syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x10001}, &(0x7f0000000040), &(0x7f00000000c0)) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) 50.566280312s ago: executing program 2 (id=509): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@noquota}, {}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x6313, &(0x7f0000002080)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) 49.523698739s ago: executing program 2 (id=514): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x102094) 48.469008374s ago: executing program 2 (id=524): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x3) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 48.264180254s ago: executing program 33 (id=524): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x3) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2.789054942s ago: executing program 4 (id=958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) 2.650591625s ago: executing program 4 (id=959): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000011, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.598933375s ago: executing program 4 (id=960): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x80, {0x80, 0xd, "82616faab7e983055eef9451b14709a6ea374c27aec68c7f7b64dfa67a66f51a9d26bdbb95a5c4bcf2a18537fa000000004c7154d09437dd35b0c8d50cf0a57d329ed033c9ede0e349136541ac6d209eb99f99b40e8b8302e8b10b3e16d5bf7d3644fbcbb2ca1c1352d9feeb0f6662759262f60e56da446124c62a36afa5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.31805109s ago: executing program 0 (id=968): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0xa9a], 0x2) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.540505249s ago: executing program 1 (id=980): socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) 1.486439049s ago: executing program 6 (id=981): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0xd, 0x4000003a, r1, 0x0) 1.459650224s ago: executing program 1 (id=982): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.411850674s ago: executing program 5 (id=983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 1.394926791s ago: executing program 0 (id=984): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*'], 0xa) 1.349545512s ago: executing program 6 (id=985): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000004c0)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x0, @private1, 0xfffffe01}}}, 0x108) 1.324643087s ago: executing program 5 (id=986): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) r1 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x4}) 1.272718347s ago: executing program 0 (id=987): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x8100, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 1.222478027s ago: executing program 6 (id=988): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1020020, &(0x7f00000000c0)={[{@noprefix}]}) 1.198548203s ago: executing program 5 (id=989): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x21e6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1.154619604s ago: executing program 0 (id=990): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0xc40, 0x27025}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d4}, 0x40000) 1.061489956s ago: executing program 5 (id=991): r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x38, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf6}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 1.040406352s ago: executing program 1 (id=992): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 979.79203ms ago: executing program 0 (id=993): mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x1808001, &(0x7f0000000000)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@commit}]}, 0x1, 0x4470, &(0x7f0000008c00)="$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") pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 923.14449ms ago: executing program 5 (id=994): setresgid(0xee00, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) 823.2171ms ago: executing program 6 (id=995): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 753.051586ms ago: executing program 1 (id=996): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 698.363846ms ago: executing program 6 (id=997): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x1}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) 568.74153ms ago: executing program 5 (id=998): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 380.181494ms ago: executing program 4 (id=999): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) poll(&(0x7f00000001c0)=[{r0, 0x2040}], 0x1, 0x401) 271.983193ms ago: executing program 1 (id=1000): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x38, 0x4048800}, 0x0) 271.773903ms ago: executing program 4 (id=1001): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 188.501687ms ago: executing program 6 (id=1002): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000002000)="$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") unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 152.850589ms ago: executing program 4 (id=1003): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xd9, 0x9, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 669.01µs ago: executing program 1 (id=1004): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "b07346e3"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) kernel console output (not intermixed with test programs): ice loop2): using 3.5.x disk format [ 79.132792][ T4184] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz-executor: path /22/file0/file0: directory fails checksum at offset 0 [ 79.133355][ T4642] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 79.161706][ T4227] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 79.189234][ T4184] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory block failed checksum [ 79.218428][ T4227] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.218428][ T4227] [ 79.223752][ T4184] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz-executor: path /22/file0/file0: directory fails checksum at offset 0 [ 79.258544][ T4227] EXT4-fs (loop4): Total free blocks count 0 [ 79.282807][ T4184] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory block failed checksum [ 79.288683][ T4227] EXT4-fs (loop4): Free/Dirty block details [ 79.330324][ T4227] EXT4-fs (loop4): free_blocks=0 [ 79.333768][ T4184] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz-executor: path /22/file0/file0: directory fails checksum at offset 0 [ 79.349482][ T4227] EXT4-fs (loop4): dirty_blocks=1 [ 79.356773][ T4184] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory block failed checksum [ 79.370284][ T4227] EXT4-fs (loop4): Block reservation details [ 79.376916][ T4184] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz-executor: path /22/file0/file0: directory fails checksum at offset 0 [ 79.398758][ T4227] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 79.638344][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 80.049412][ T4677] loop0: detected capacity change from 0 to 1024 [ 80.133702][ T4677] EXT4-fs (loop0): Ignoring removed orlov option [ 80.196167][ T4677] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 80.302315][ T4677] EXT4-fs (loop0): shut down requested (1) [ 80.461878][ T4691] loop1: detected capacity change from 0 to 16 [ 80.571318][ T4691] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.802957][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 80.873561][ T4706] loop2: detected capacity change from 0 to 64 [ 81.133524][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 81.218222][ T4702] chnl_net:caif_netlink_parms(): no params data found [ 81.376997][ T4721] loop1: detected capacity change from 0 to 256 [ 81.493591][ T4707] loop4: detected capacity change from 0 to 32768 [ 81.514815][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.519417][ T4721] exfat: Deprecated parameter 'namecase' [ 81.522633][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.537110][ T4702] device bridge_slave_0 entered promiscuous mode [ 81.550780][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.558277][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.567438][ T4702] device bridge_slave_1 entered promiscuous mode [ 81.599694][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.611715][ T4721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d) [ 81.624185][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.642108][ T4707] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.172 (4707) [ 81.701116][ T1111] cfg80211: failed to load regulatory.db [ 81.744004][ T4702] team0: Port device team_slave_0 added [ 81.759037][ T4707] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.807768][ T4707] BTRFS info (device loop4): setting nodatacow, compression disabled [ 81.824685][ T4702] team0: Port device team_slave_1 added [ 81.854716][ T4707] BTRFS info (device loop4): force clearing of disk cache [ 81.881149][ T4707] BTRFS info (device loop4): enabling ssd optimizations [ 81.917036][ T4707] BTRFS info (device loop4): using spread ssd allocation scheme [ 81.928225][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.946616][ T4707] BTRFS info (device loop4): turning off barriers [ 81.957653][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.994808][ T4707] BTRFS info (device loop4): disabling free space tree [ 82.015229][ T4707] BTRFS info (device loop4): not using ssd optimizations [ 82.041429][ T4707] BTRFS info (device loop4): not using spread ssd allocation scheme [ 82.060924][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.079593][ T4707] BTRFS info (device loop4): has skinny extents [ 82.207039][ T4742] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 82.277170][ T4736] loop2: detected capacity change from 0 to 4096 [ 82.309667][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.317019][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.410812][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.454885][ T4702] device hsr_slave_0 entered promiscuous mode [ 82.466727][ T4702] device hsr_slave_1 entered promiscuous mode [ 82.498356][ T4707] BTRFS info (device loop4): clearing free space tree [ 82.517303][ T4707] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.536266][ T4707] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.547150][ T4702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.571739][ T4702] Cannot create hsr debugfs directory [ 82.597834][ T4761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.908804][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 82.967837][ T4771] loop0: detected capacity change from 0 to 512 [ 83.181971][ T4771] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.347642][ T4769] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 83.363102][ T4776] set_capacity_and_notify: 1 callbacks suppressed [ 83.363117][ T4776] loop2: detected capacity change from 0 to 4096 [ 83.475035][ T4776] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 83.501924][ T4702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.552264][ T4702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.594689][ T4776] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 83.633269][ T4702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.649751][ T4776] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 83.698615][ T4776] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 83.782678][ T4702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.800897][ T4776] ntfs: volume version 3.1. [ 84.033144][ T4787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.128830][ T4776] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 84.189032][ T4776] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 84.225021][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.322046][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.345421][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.401190][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.408708][ T9] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 84.458782][ T9] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 84.486283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.507444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.525304][ T4189] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 84.529781][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.544298][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.699035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.740108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.769690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.799755][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.806971][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.885780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.966184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.987409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.026675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.038064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.046935][ T4819] Bluetooth: hci1: command 0x041b tx timeout [ 85.055260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.075755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.131905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.171962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.207575][ T4702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.237232][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.294982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.319313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.377144][ T4829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.395595][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.626410][ T4800] loop0: detected capacity change from 0 to 32768 [ 85.728031][ T4845] loop4: detected capacity change from 0 to 512 [ 85.739183][ T4800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.204 (4800) [ 85.822539][ T4800] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.866632][ T4845] EXT4-fs (loop4): 1 truncate cleaned up [ 85.869212][ T4800] BTRFS info (device loop0): setting nodatacow, compression disabled [ 85.885441][ T4800] BTRFS info (device loop0): force clearing of disk cache [ 85.886560][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.893046][ T4800] BTRFS info (device loop0): enabling ssd optimizations [ 85.908449][ T4800] BTRFS info (device loop0): using spread ssd allocation scheme [ 85.916248][ T4800] BTRFS info (device loop0): turning off barriers [ 85.922919][ T4800] BTRFS info (device loop0): disabling free space tree [ 85.931022][ T4800] BTRFS info (device loop0): not using ssd optimizations [ 85.938187][ T4800] BTRFS info (device loop0): not using spread ssd allocation scheme [ 85.946650][ T4800] BTRFS info (device loop0): has skinny extents [ 85.949768][ T4845] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 85.966439][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.001639][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.203324][ T4249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.316897][ T4800] BTRFS info (device loop0): clearing free space tree [ 86.348169][ T4800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.368368][ T4800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.407601][ T4249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.544680][ T4885] vivid-000: disconnect [ 86.566759][ T4877] vivid-000: reconnect [ 86.588121][ T4249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.742273][ T4249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.945915][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.993887][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.056363][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.129853][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.149179][ T4820] Bluetooth: hci1: command 0x040f tx timeout [ 87.166195][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.194647][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.239411][ T4702] device veth0_vlan entered promiscuous mode [ 87.303371][ T4702] device veth1_vlan entered promiscuous mode [ 87.483809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.530265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.552864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.581825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.645484][ T4702] device veth0_macvtap entered promiscuous mode [ 87.668352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.675753][ T4887] loop4: detected capacity change from 0 to 32768 [ 87.696068][ T4702] device veth1_macvtap entered promiscuous mode [ 87.766791][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.823079][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.888777][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.942044][ T4887] XFS (loop4): Mounting V5 Filesystem [ 87.967992][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.980252][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.032108][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.040395][ T4899] loop1: detected capacity change from 0 to 32768 [ 88.082374][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.114433][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.127266][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.138376][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.170896][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.208839][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.234838][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.249874][ T4887] XFS (loop4): Ending clean mount [ 88.262971][ T4932] loop0: detected capacity change from 0 to 512 [ 88.276056][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.297025][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.319767][ T4887] XFS (loop4): Quotacheck needed: Please wait. [ 88.334086][ T4899] XFS (loop1): Mounting V5 Filesystem [ 88.361513][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.408941][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.430322][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.441360][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.451701][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.454614][ T4887] XFS (loop4): Quotacheck: Done. [ 88.463174][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.476774][ T4899] XFS (loop1): Ending clean mount [ 88.480281][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.493383][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.507181][ T4899] XFS (loop1): Quotacheck needed: Please wait. [ 88.530037][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.553802][ T4932] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.230: invalid indirect mapped block 256 (level 2) [ 88.625090][ T4196] XFS (loop4): Unmounting Filesystem [ 88.671391][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.682487][ T4932] EXT4-fs (loop0): 2 truncates cleaned up [ 88.688255][ T4932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.722467][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.726970][ T4899] XFS (loop1): Quotacheck: Done. [ 88.824668][ T4702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877864][ T4702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.895558][ T4702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.909497][ T4932] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.0.230: path /37/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 88.953422][ T4702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978006][ T4951] bridge0: port 1(bridge_slave_0) entered listening state [ 88.992311][ T4185] XFS (loop1): Unmounting Filesystem [ 89.229021][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 89.461180][ T839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.492640][ T4961] loop0: detected capacity change from 0 to 1024 [ 89.500918][ T839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.554062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.612233][ T4557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.648675][ T4557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.723271][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.961623][ T4978] loop5: detected capacity change from 0 to 128 [ 90.060146][ T4978] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.095085][ T4984] loop1: detected capacity change from 0 to 128 [ 90.115421][ T4978] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.203220][ T4984] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.252528][ T4984] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.786930][ T4249] device hsr_slave_0 left promiscuous mode [ 90.886234][ T4249] device hsr_slave_1 left promiscuous mode [ 90.890445][ T5011] loop1: detected capacity change from 0 to 128 [ 90.922592][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.938873][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.954366][ T5011] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.992457][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.007005][ T5011] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.031483][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.056363][ T5010] loop4: detected capacity change from 0 to 4096 [ 91.065115][ T5009] loop0: detected capacity change from 0 to 4096 [ 91.075116][ T4249] device bridge_slave_1 left promiscuous mode [ 91.090612][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.149775][ T5009] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 91.159172][ T4249] device bridge_slave_0 left promiscuous mode [ 91.291713][ T5009] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 91.305551][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.365742][ T5009] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 91.451845][ T5009] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 91.530437][ T4249] device veth1_macvtap left promiscuous mode [ 91.537569][ T5018] loop1: detected capacity change from 0 to 512 [ 91.540605][ T4249] device veth0_macvtap left promiscuous mode [ 91.546103][ T5009] ntfs: volume version 3.1. [ 91.582827][ T4249] device veth1_vlan left promiscuous mode [ 91.640259][ T4249] device veth0_vlan left promiscuous mode [ 91.648079][ T5017] loop4: detected capacity change from 0 to 4096 [ 91.709268][ T5009] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 91.732188][ T5018] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 91.750599][ T5009] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 91.818892][ T5018] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 91.880122][ T4557] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 91.904309][ T5021] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.969061][ T4557] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 91.998711][ T5018] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.020147][ T4191] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 92.615032][ T5030] loop0: detected capacity change from 0 to 4096 [ 92.688068][ T5030] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 92.868777][ T4817] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 92.909305][ T4249] team0 (unregistering): Port device team_slave_1 removed [ 93.008729][ T4249] team0 (unregistering): Port device team_slave_0 removed [ 93.050987][ T4249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.092117][ T4249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.279111][ T4817] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.283313][ T4249] bond0 (unregistering): Released all slaves [ 93.288617][ T4817] usb 2-1: config 0 has no interface number 0 [ 93.312123][ T4817] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.332238][ T4817] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 93.345264][ T4817] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.356620][ T4817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.372693][ T4817] usb 2-1: config 0 descriptor?? [ 93.419099][ T5037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.487030][ T4817] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 93.715583][ T4591] usb 2-1: USB disconnect, device number 3 [ 94.578935][ T4591] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.948826][ T4591] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 94.970477][ T4591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.014267][ T4591] usb 3-1: config 0 descriptor?? [ 95.244299][ T5127] netlink: 'syz.4.287': attribute type 5 has an invalid length. [ 95.408786][ T4591] usb 3-1: Cannot read MAC address [ 95.419420][ T4591] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 95.477489][ T4591] usb 3-1: USB disconnect, device number 3 [ 95.546951][ T5139] loop5: detected capacity change from 0 to 128 [ 95.749513][ T5146] loop4: detected capacity change from 0 to 512 [ 95.854758][ T5146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.009752][ T5146] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.292: inode has both inline data and extents flags [ 96.117077][ T5146] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.292: couldn't read orphan inode 15 (err -117) [ 96.159482][ T5146] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.391917][ T5166] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.938754][ T4817] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.024304][ T5189] loop4: detected capacity change from 0 to 128 [ 97.180633][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.218828][ T4817] usb 2-1: Using ep0 maxpacket: 32 [ 97.235531][ T5189] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.358923][ T4817] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.371528][ T5189] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.304: bg 0: bad block bitmap checksum [ 97.398586][ T4817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.406321][ T4817] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 97.418206][ T5153] loop0: detected capacity change from 0 to 32768 [ 97.452906][ T4817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.498460][ T4817] usb 2-1: config 0 descriptor?? [ 97.656108][ T5153] XFS (loop0): Mounting V5 Filesystem [ 97.729682][ T5153] XFS (loop0): Ending clean mount [ 97.742496][ T5153] XFS (loop0): Quotacheck needed: Please wait. [ 97.823915][ T5153] XFS (loop0): Quotacheck: Done. [ 97.996721][ T4191] XFS (loop0): Unmounting Filesystem [ 98.026685][ T4817] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 98.393036][ T5236] program syz.4.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.452377][ T4817] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -71 [ 98.485020][ T4817] usb 2-1: USB disconnect, device number 4 [ 98.662687][ T5241] fido_id[5241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 98.770946][ T5252] loop4: detected capacity change from 0 to 1024 [ 98.806326][ T5222] loop2: detected capacity change from 0 to 32768 [ 98.949809][ T4591] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.012718][ T5222] XFS (loop2): Mounting V5 Filesystem [ 99.071685][ T5270] loop5: detected capacity change from 0 to 64 [ 99.095349][ T9] hfsplus: b-tree write err: -5, ino 8 [ 99.106489][ T5269] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 99.248672][ T4591] usb 1-1: Using ep0 maxpacket: 8 [ 99.313743][ T5222] XFS (loop2): Ending clean mount [ 99.366377][ T5281] loop1: detected capacity change from 0 to 128 [ 99.412939][ T4591] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 99.444702][ T5281] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.449627][ T4591] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.520818][ T5281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.541652][ T4591] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.599918][ T4591] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.634102][ T4591] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.665393][ T4591] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.693599][ T4591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.764560][ T4189] XFS (loop2): Unmounting Filesystem [ 99.776205][ T154] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.804863][ T5295] loop4: detected capacity change from 0 to 128 [ 99.814082][ T5291] netlink: 104 bytes leftover after parsing attributes in process `syz.5.334'. [ 99.874919][ T5295] FAT-fs (loop4): bogus number of reserved sectors [ 99.929187][ T5295] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 99.937359][ T5298] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 99.988824][ T4591] usb 1-1: GET_CAPABILITIES returned 0 [ 99.994373][ T4591] usbtmc 1-1:16.0: can't read capabilities [ 99.999784][ T5295] FAT-fs (loop4): Can't find a valid FAT filesystem [ 100.189115][ T5295] 9p: Unknown Cache mode readè÷)ahead [ 100.194594][ T5295] 9p: Unknown Cache mode IcÉŽ#?Èÿ·°®çÞ3çÌK–G£ÑöïwVK+UノÊašòËóÍW?Ì?ûÊý]©Ùé…LV©°ˆ\ºñ`âimô¿Ç_?IÈÖøåíìÛ­¤ˆì/\“°*VUYk­ÕR¥R ÙÁËÅjÉPê_«`VC^e:ýæ’UP+Vem­®ÌòòØÈÚz¡ZUf¹®J…ºªUTm½®Ì«f±¬ ÃPc#‡ÖüEo·Â=}î*Næïïj-;öJ4EkêÓl5bÞã¾>yÅ8'º¶ß±=;Gd˜•á4ìêh{ûÇlÿNÚ3Äâ0t»Ú>ˆ_ßuÿÆY—ƒS6ÿÿâßÓ¹ÜÌœRI‘ÕÛù¼ûèö¿•¢XR͹_÷Žz­%dÿœý+73¥ãòÓjËoläÝ?Ó+^|FÒöë_¼´â3 wñ1ñÇg%-ßÇg•/a_|\~þÑoHZ^\‘ŠX²ì<{ÄßÌ(õç?¹®ü¾WU [ 100.196753][ T4591] usb 1-1: USB disconnect, device number 3 [ 100.913356][ T5337] loop0: detected capacity change from 0 to 128 [ 101.366361][ T5353] loop1: detected capacity change from 0 to 128 [ 101.390250][ T26] audit: type=1800 audit(1772021500.482:4): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.352" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 101.567189][ T5353] FAT-fs (loop1): Directory bread(block 32) failed [ 101.600988][ T5353] FAT-fs (loop1): Directory bread(block 33) failed [ 101.632619][ T5353] FAT-fs (loop1): Directory bread(block 34) failed [ 101.671985][ T5353] FAT-fs (loop1): Directory bread(block 35) failed [ 101.706061][ T5353] FAT-fs (loop1): Directory bread(block 36) failed [ 101.748733][ T5353] FAT-fs (loop1): Directory bread(block 37) failed [ 101.790777][ T5353] FAT-fs (loop1): Directory bread(block 38) failed [ 101.824130][ T5353] FAT-fs (loop1): Directory bread(block 39) failed [ 101.858791][ T5353] FAT-fs (loop1): Directory bread(block 40) failed [ 101.901306][ T5373] loop0: detected capacity change from 0 to 1024 [ 101.907914][ T5353] FAT-fs (loop1): Directory bread(block 41) failed [ 102.098059][ T5373] hfsplus: bad catalog entry type [ 102.221933][ T839] hfsplus: b-tree write err: -5, ino 4 [ 102.245246][ T5340] loop4: detected capacity change from 0 to 32768 [ 102.309199][ T5353] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 102.356023][ T5353] FAT-fs (loop1): Filesystem has been set read-only [ 102.485810][ T5340] XFS (loop4): Mounting V5 Filesystem [ 102.649884][ T5340] XFS (loop4): Ending clean mount [ 102.681434][ T5403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.364'. [ 102.696669][ T5400] loop1: detected capacity change from 0 to 2048 [ 102.880143][ T5407] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.909122][ T4196] XFS (loop4): Unmounting Filesystem [ 103.202018][ T5412] loop5: detected capacity change from 0 to 256 [ 103.703225][ T5392] loop2: detected capacity change from 0 to 32768 [ 103.730290][ T5419] loop5: detected capacity change from 0 to 16 [ 103.823761][ T5419] erofs: (device loop5): mounted with root inode @ nid 36. [ 103.892463][ T26] audit: type=1800 audit(1772021502.992:5): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.373" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 104.054283][ T5421] loop4: detected capacity change from 0 to 4096 [ 104.203406][ T5421] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 104.265287][ T5421] ntfs3: loop4: Failed to load $Extend. [ 104.332990][ T5409] loop0: detected capacity change from 0 to 32768 [ 104.460820][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 104.541254][ T5409] XFS (loop0): Mounting V5 Filesystem [ 104.931569][ T5409] XFS (loop0): Ending clean mount [ 105.040354][ T5414] XFS (loop1): Mounting V5 Filesystem [ 105.339970][ T5414] XFS (loop1): Ending clean mount [ 105.366695][ T5414] XFS (loop1): Quotacheck needed: Please wait. [ 105.385252][ T4191] XFS (loop0): Unmounting Filesystem [ 105.516383][ T5455] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 105.516383][ T5455] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 105.516383][ T5455] [ 105.598874][ T5414] XFS (loop1): Quotacheck: Done. [ 105.708504][ C0] sched: RT throttling activated [ 105.719721][ T5455] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.829228][ T5455] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 105.958980][ T4185] XFS (loop1): Unmounting Filesystem [ 106.609188][ T5440] set_capacity_and_notify: 2 callbacks suppressed [ 106.609204][ T5440] loop5: detected capacity change from 0 to 262144 [ 106.703261][ T5440] F2FS-fs (loop5): invalid crc value [ 106.760536][ T5440] F2FS-fs (loop5): Found nat_bits in checkpoint [ 106.804198][ T5440] F2FS-fs (loop5): Start checkpoint disabled! [ 106.849044][ T5440] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 106.981072][ T5443] loop2: detected capacity change from 0 to 40427 [ 107.148211][ T5443] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 107.200078][ T5443] F2FS-fs (loop2): invalid crc value [ 107.219988][ T5474] nft_compat: unsupported protocol 0 [ 107.247051][ T5443] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.508404][ T5443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.617659][ T5489] loop1: detected capacity change from 0 to 512 [ 107.732169][ T4189] attempt to access beyond end of device [ 107.732169][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 107.785879][ T5489] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,usrquota,,errors=continue. Quota mode: writeback. [ 107.818733][ T5489] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.025443][ T5489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.388: bg 0: block 400: padding at end of block bitmap is not set [ 108.183336][ T5489] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 108.214986][ T5489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.388: missing EA_INODE flag [ 108.289424][ T5489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.388: error while reading EA inode 12 err=-117 [ 108.330849][ T5489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.388: missing EA_INODE flag [ 108.363924][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 108.379475][ T5511] capability: warning: `syz.4.394' uses deprecated v2 capabilities in a way that may be insecure [ 108.410445][ T5489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.388: error while reading EA inode 12 err=-117 [ 108.448751][ T5511] overlayfs: upper fs does not support tmpfile. [ 108.556125][ T5515] sch_tbf: burst 3 is lower than device bond0 mtu (1514) ! [ 109.377314][ T5551] loop1: detected capacity change from 0 to 256 [ 109.577752][ T5559] loop2: detected capacity change from 0 to 128 [ 109.656184][ T5559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.813920][ T5562] loop1: detected capacity change from 0 to 1024 [ 109.828729][ T5559] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.888156][ T5559] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 109.978455][ T5544] loop4: detected capacity change from 0 to 32768 [ 110.003502][ T5544] XFS: attr2 mount option is deprecated. [ 110.126015][ T5544] XFS (loop4): Mounting V5 Filesystem [ 110.132276][ T839] hfsplus: b-tree write err: -5, ino 4 [ 110.342538][ T5544] XFS (loop4): Ending clean mount [ 110.351026][ T5544] XFS (loop4): Quotacheck needed: Please wait. [ 110.480970][ T5544] XFS (loop4): Quotacheck: Done. [ 110.537761][ T5584] loop0: detected capacity change from 0 to 2048 [ 110.702241][ T4196] XFS (loop4): Unmounting Filesystem [ 110.829476][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 110.848636][ T1111] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 111.089859][ T5602] loop0: detected capacity change from 0 to 1024 [ 111.192928][ T26] audit: type=1326 audit(1772021510.292:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.246444][ T1111] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 111.262799][ T5568] loop2: detected capacity change from 0 to 32768 [ 111.268942][ T26] audit: type=1326 audit(1772021510.292:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.296815][ T1111] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 111.314988][ T1111] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.337598][ T26] audit: type=1326 audit(1772021510.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.402459][ T26] audit: type=1326 audit(1772021510.292:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.439931][ T26] audit: type=1326 audit(1772021510.292:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.440323][ T1111] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.470141][ T26] audit: type=1326 audit(1772021510.292:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.501725][ T26] audit: type=1326 audit(1772021510.292:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.532048][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.540561][ T26] audit: type=1326 audit(1772021510.292:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.540698][ T1111] usb 6-1: SerialNumber: syz [ 111.577069][ T5568] XFS (loop2): Mounting V5 Filesystem [ 111.598242][ T26] audit: type=1326 audit(1772021510.292:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.626436][ T5587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.631952][ T26] audit: type=1326 audit(1772021510.292:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b011629 code=0x7ff00000 [ 111.646182][ T5587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.751077][ T5568] XFS (loop2): Ending clean mount [ 111.933087][ T5587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.937477][ T4189] XFS (loop2): Unmounting Filesystem [ 111.954108][ T5587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.030334][ T4591] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.065355][ T5636] loop0: detected capacity change from 0 to 128 [ 112.271765][ T5640] loop0: detected capacity change from 0 to 256 [ 112.288617][ T4591] usb 2-1: Using ep0 maxpacket: 8 [ 112.306714][ T5640] /dev/loop0: Can't open blockdev [ 112.395256][ T5646] loop2: detected capacity change from 0 to 128 [ 112.409032][ T4591] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 112.421944][ T4591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.448398][ T1111] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 112.541305][ T4591] pvrusb2: Hardware description: Terratec Grabster AV400 [ 112.564190][ T4591] pvrusb2: ********** [ 112.584134][ T4591] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 112.610673][ T4591] pvrusb2: Important functionality might not be entirely working. [ 112.619300][ T4591] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 112.675128][ T4591] pvrusb2: ********** [ 112.761012][ T2426] pvrusb2: Invalid write control endpoint [ 112.851539][ T4591] usb 6-1: USB disconnect, device number 2 [ 112.865894][ T4591] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 112.921787][ T2426] pvrusb2: Invalid write control endpoint [ 112.927865][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 112.953827][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 112.969513][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 113.018076][ T2426] pvrusb2: Device being rendered inoperable [ 113.030952][ T4590] usb 2-1: USB disconnect, device number 5 [ 113.041066][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 113.056550][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 113.101416][ T2426] pvrusb2: Attached sub-driver cx25840 [ 113.119670][ T5661] loop2: detected capacity change from 0 to 128 [ 113.133095][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 113.163608][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 113.834343][ T5687] loop5: detected capacity change from 0 to 512 [ 113.866589][ T5691] loop1: detected capacity change from 0 to 64 [ 113.954508][ T5687] EXT4-fs (loop5): first meta block group too large: 16711680 (group descriptor block count 1) [ 114.159433][ T5691] minix_free_block (loop1:21): bit already cleared [ 114.186058][ T5691] Trying to free block not in datazone [ 115.260140][ T5748] loop2: detected capacity change from 0 to 2048 [ 115.324363][ T5711] loop5: detected capacity change from 0 to 32768 [ 115.381799][ T5748] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 115.399338][ T5711] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.460 (5711) [ 115.438580][ T5748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.514338][ T5711] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 115.542980][ T5759] netlink: 'syz.1.476': attribute type 2 has an invalid length. [ 115.560523][ T5711] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.603435][ T5711] BTRFS info (device loop5): use zstd compression, level 3 [ 115.611126][ T4916] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.695111][ T5711] BTRFS info (device loop5): using free space tree [ 115.702143][ T5711] BTRFS info (device loop5): has skinny extents [ 115.717630][ T5763] loop4: detected capacity change from 0 to 1024 [ 115.906808][ T5763] hfsplus: bad catalog entry type [ 115.938666][ T4916] usb 1-1: Using ep0 maxpacket: 16 [ 116.005635][ T5711] BTRFS info (device loop5): enabling ssd optimizations [ 116.060274][ T154] hfsplus: b-tree write err: -5, ino 4 [ 116.273100][ T4916] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 116.318525][ T4916] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.326696][ T4916] usb 1-1: Product: syz [ 116.362376][ T4916] usb 1-1: Manufacturer: syz [ 116.367792][ T4916] usb 1-1: SerialNumber: syz [ 116.403079][ T4916] usb 1-1: config 0 descriptor?? [ 116.653094][ T5816] netlink: 'syz.1.492': attribute type 6 has an invalid length. [ 116.662908][ T4817] usb 1-1: USB disconnect, device number 4 [ 116.723389][ T5816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.492'. [ 116.914279][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.923663][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.953297][ T4818] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.238696][ T4818] usb 5-1: Using ep0 maxpacket: 16 [ 117.368830][ T4818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.378705][ T4818] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.408656][ T4818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.448440][ T4818] usb 5-1: config 0 descriptor?? [ 117.512361][ T5849] loop0: detected capacity change from 0 to 4096 [ 117.565048][ T4585] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.808715][ T4585] usb 2-1: Using ep0 maxpacket: 8 [ 117.928940][ T4585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.950347][ T4585] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.955690][ T4818] hid (null): invalid report_count 22537 [ 117.961754][ T4585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.980801][ T4818] hid (null): unknown global tag 0xa8 [ 117.986291][ T4818] hid (null): unknown global tag 0xe [ 118.007733][ T4585] usb 2-1: config 0 descriptor?? [ 118.197149][ T4818] usb 5-1: USB disconnect, device number 3 [ 118.325860][ T4585] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 118.424669][ T5855] loop5: detected capacity change from 0 to 32768 [ 118.542630][ T5855] XFS (loop5): Mounting V5 Filesystem [ 118.774429][ T5855] XFS (loop5): Ending clean mount [ 118.876086][ T4818] usb 2-1: USB disconnect, device number 6 [ 119.001658][ T4702] XFS (loop5): Unmounting Filesystem [ 119.035770][ T5876] loop2: detected capacity change from 0 to 32768 [ 119.043192][ T5898] tap0: tun_chr_ioctl cmd 1074025677 [ 119.086163][ T5898] tap0: linktype set to 778 [ 119.165256][ T5864] loop0: detected capacity change from 0 to 40427 [ 119.338045][ T4189] read_mapping_page failed! [ 119.394266][ T4189] ERROR: (device loop2): txCommit: [ 119.394266][ T4189] [ 119.423717][ T4189] read_mapping_page failed! [ 119.490001][ T4189] ERROR: (device loop2): txCommit: [ 119.490001][ T4189] [ 119.676562][ T5916] comedi comedi0: das16m1: I/O port conflict (0x501,8) [ 119.911866][ T5924] program syz.0.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.013651][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.158711][ T4818] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.165475][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.293287][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.405210][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.428718][ T4818] usb 6-1: Using ep0 maxpacket: 16 [ 120.559615][ T4818] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 120.778845][ T4818] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 120.808995][ T4818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.837618][ T4818] usb 6-1: Product: syz [ 120.847748][ T4818] usb 6-1: Manufacturer: syz [ 120.857879][ T4818] usb 6-1: SerialNumber: syz [ 120.890668][ T4818] usb 6-1: config 0 descriptor?? [ 120.965153][ T4818] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 120.983106][ T4818] usb 6-1: Detected FT232RL [ 121.093165][ T5966] loop4: detected capacity change from 0 to 128 [ 121.181671][ T5966] FAT-fs (loop4): Directory bread(block 162) failed [ 121.188396][ T5966] FAT-fs (loop4): Directory bread(block 163) failed [ 121.188812][ T4818] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 121.219688][ T5966] FAT-fs (loop4): Directory bread(block 164) failed [ 121.226365][ T5966] FAT-fs (loop4): Directory bread(block 165) failed [ 121.328706][ T5966] FAT-fs (loop4): Directory bread(block 166) failed [ 121.338589][ T5966] FAT-fs (loop4): Directory bread(block 167) failed [ 121.364966][ T5966] FAT-fs (loop4): Directory bread(block 168) failed [ 121.396979][ T5966] FAT-fs (loop4): Directory bread(block 169) failed [ 121.406848][ T5966] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.463397][ T5966] FAT-fs (loop4): Directory bread(block 162) failed [ 121.485713][ T4818] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.485967][ T5966] FAT-fs (loop4): Directory bread(block 163) failed [ 121.533685][ T5980] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.689937][ T4281] usb 6-1: USB disconnect, device number 3 [ 121.714982][ T4281] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.766903][ T4281] ftdi_sio 6-1:0.0: device disconnected [ 121.767013][ T5995] loop4: detected capacity change from 0 to 256 [ 121.867385][ T5999] netlink: 104 bytes leftover after parsing attributes in process `syz.0.542'. [ 122.048902][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 122.065609][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 122.101601][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 122.433347][ T6024] sctp: [Deprecated]: syz.4.550 (pid 6024) Use of int in maxseg socket option. [ 122.433347][ T6024] Use struct sctp_assoc_value instead [ 122.502277][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.570630][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.580741][ T5961] device bridge_slave_0 entered promiscuous mode [ 122.615858][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.654877][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.665873][ T5961] device bridge_slave_1 entered promiscuous mode [ 122.808992][ T154] device hsr_slave_0 left promiscuous mode [ 122.852137][ T154] device hsr_slave_1 left promiscuous mode [ 122.916857][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.928553][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.953804][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 122.971507][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.989578][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.025019][ T154] device bridge_slave_1 left promiscuous mode [ 123.034620][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.047291][ T154] device bridge_slave_0 left promiscuous mode [ 123.055355][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.070078][ T154] device veth1_macvtap left promiscuous mode [ 123.076235][ T154] device veth0_macvtap left promiscuous mode [ 123.084863][ T154] device veth1_vlan left promiscuous mode [ 123.091542][ T154] device veth0_vlan left promiscuous mode [ 123.142930][ T4817] Bluetooth: hci2: command 0x0409 tx timeout [ 123.278629][ T4581] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.322809][ T6044] loop5: detected capacity change from 0 to 32768 [ 123.454866][ T154] team0 (unregistering): Port device team_slave_1 removed [ 123.465139][ T6044] JBD2: Ignoring recovery information on journal [ 123.476143][ T154] team0 (unregistering): Port device team_slave_0 removed [ 123.482482][ T6044] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 123.497345][ T6044] JBD2: bad block at offset 32 [ 123.513687][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.529252][ T4581] usb 5-1: Using ep0 maxpacket: 32 [ 123.544786][ T6044] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 123.554482][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.605401][ T6044] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 123.635882][ T6044] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 123.648701][ T4581] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.653418][ T6044] OCFS2: File system is now read-only. [ 123.656821][ T4581] usb 5-1: config 0 has no interface number 0 [ 123.676960][ T6044] (syz.5.557,6044,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 123.685205][ T6044] (syz.5.557,6044,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 123.704803][ T6044] (syz.5.557,6044,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 123.716961][ T6044] (syz.5.557,6044,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 123.726314][ T6044] (syz.5.557,6044,1):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 123.746848][ T6044] (syz.5.557,6044,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 123.763071][ T6044] (syz.5.557,6044,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 123.773852][ T6044] (syz.5.557,6044,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 123.779462][ T154] bond0 (unregistering): Released all slaves [ 123.783283][ T6044] (syz.5.557,6044,1):ocfs2_mknod:298 ERROR: status = -5 [ 123.796768][ T6044] (syz.5.557,6044,1):ocfs2_mknod:502 ERROR: status = -5 [ 123.804472][ T6044] (syz.5.557,6044,0):ocfs2_create:676 ERROR: status = -5 [ 123.818867][ T4581] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.828033][ T4581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.843603][ T4581] usb 5-1: Product: syz [ 123.847817][ T4581] usb 5-1: Manufacturer: syz [ 123.854995][ T4581] usb 5-1: SerialNumber: syz [ 123.883619][ T4581] usb 5-1: config 0 descriptor?? [ 123.950672][ T4581] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.957823][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.042345][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.075655][ T4702] ocfs2: Unmounting device (7,5) on (node local) [ 124.170746][ T4581] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.214040][ T5961] team0: Port device team_slave_0 added [ 124.215630][ T4581] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.276852][ T5961] team0: Port device team_slave_1 added [ 124.447624][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.495566][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.580295][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.630913][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.637909][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.708615][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.725578][ T4281] usb 5-1: USB disconnect, device number 4 [ 124.728624][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.742640][ T4281] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.859068][ T4281] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.895341][ T4281] quatech2 5-1:0.51: device disconnected [ 124.928787][ T4582] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.937961][ T5961] device hsr_slave_0 entered promiscuous mode [ 124.999073][ T5961] device hsr_slave_1 entered promiscuous mode [ 125.150193][ T6095] loop0: detected capacity change from 0 to 4096 [ 125.219617][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 125.256472][ T6095] /dev/loop0: Can't open blockdev [ 125.298995][ T4582] usb 2-1: config 0 has no interfaces? [ 125.305438][ T4582] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 125.348740][ T4582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.393705][ T4582] usb 2-1: config 0 descriptor?? [ 125.576314][ T5961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.683015][ T4585] usb 2-1: USB disconnect, device number 7 [ 125.708011][ T5961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.761120][ T5961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.814242][ T5961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.076687][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.140068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.183360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.233357][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.297380][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.325125][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.389938][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.397085][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.488318][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.546923][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.567248][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.585362][ C1] sd 0:0:1:0: tag#10234 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 126.595569][ C1] sd 0:0:1:0: tag#10234 CDB: Test Unit Ready [ 126.601840][ C1] sd 0:0:1:0: tag#10234 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.609474][ T6098] loop5: detected capacity change from 0 to 40427 [ 126.610992][ C1] sd 0:0:1:0: tag#10234 CDB[10]: 00 00 00 a6 8e 32 b7 c9 0e 92 4b 9a f0 ab 7f a6 [ 126.626572][ C1] sd 0:0:1:0: tag#10234 CDB[20]: 79 [ 126.636807][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.644000][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.684002][ T6147] netlink: 56 bytes leftover after parsing attributes in process `syz.4.591'. [ 126.707779][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.727342][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.741800][ C1] sd 0:0:1:0: tag#10235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 126.751811][ C1] sd 0:0:1:0: tag#10235 CDB: Test Unit Ready [ 126.757934][ C1] sd 0:0:1:0: tag#10235 CDB[00]: 00 00 00 00 05 00 00 00 00 00 00 00 32 00 00 00 [ 126.767131][ C1] sd 0:0:1:0: tag#10235 CDB[10]: 01 00 00 00 8e 32 b7 c9 0e 92 4b 9a f0 ab 7f a6 [ 126.776502][ C1] sd 0:0:1:0: tag#10235 CDB[20]: 79 [ 126.786605][ T6098] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 126.803626][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 126.813270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.851886][ T6098] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 126.888653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.933401][ T6098] F2FS-fs (loop5): invalid crc value [ 126.945487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.973429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.989365][ T6098] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.000886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.032214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.069377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.102242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.128035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.168172][ T6098] F2FS-fs (loop5): Start checkpoint disabled! [ 127.170527][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.227102][ T6098] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 127.278879][ T4818] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.299313][ T4916] Bluetooth: hci2: command 0x040f tx timeout [ 127.446663][ T6174] tap0: tun_chr_ioctl cmd 1074025677 [ 127.459198][ T6174] tap0: linktype set to 0 [ 127.550469][ T4818] usb 5-1: Using ep0 maxpacket: 32 [ 127.613539][ T6181] netlink: 52 bytes leftover after parsing attributes in process `syz.5.599'. [ 127.686806][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.699049][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.702221][ T4818] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.743817][ T4818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.758206][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.826811][ T4818] usb 5-1: config 0 descriptor?? [ 128.108997][ T4818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.138414][ T4818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.166845][ T6202] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 128.178798][ T6200] loop1: detected capacity change from 0 to 128 [ 128.209018][ T4818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.226607][ T4818] usb 5-1: media controller created [ 128.230815][ T6204] loop5: detected capacity change from 0 to 128 [ 128.319115][ T6156] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 128.356261][ T4818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.371989][ T6200] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.386516][ T6204] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.438690][ T6200] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.490013][ T6204] hpfs: filesystem error: improperly stopped [ 128.497965][ T6204] hpfs: You really don't want any checks? You are crazy... [ 128.527573][ T6204] hpfs: hpfs_map_sector(): read error [ 128.553862][ T6204] hpfs: code page support is disabled [ 128.570677][ T6204] hpfs: hpfs_map_4sectors(): unaligned read [ 128.572635][ T4818] az6027: usb out operation failed. (-71) [ 128.636029][ T4818] az6027: usb out operation failed. (-71) [ 128.639145][ T6204] hpfs: hpfs_map_4sectors(): unaligned read [ 128.647709][ T6204] hpfs: filesystem error: unable to find root dir [ 128.666017][ T4818] stb0899_attach: Driver disabled by Kconfig [ 128.686273][ T4818] az6027: no front-end attached [ 128.686273][ T4818] [ 128.742398][ T4818] az6027: usb out operation failed. (-71) [ 128.781061][ T4818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.783135][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.841113][ T4818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 128.844757][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.875055][ T6204] hpfs: hpfs_map_4sectors(): unaligned read [ 128.912669][ T4818] dvb-usb: schedule remote query interval to 400 msecs. [ 128.929463][ T6204] hpfs: hpfs_map_sector(): read error [ 128.962931][ T4818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.972009][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.026105][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.038831][ T4818] usb 5-1: USB disconnect, device number 5 [ 129.075172][ T5961] device veth0_vlan entered promiscuous mode [ 129.087905][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.119333][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.166050][ T5961] device veth1_vlan entered promiscuous mode [ 129.227709][ T4818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.291647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.320188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.348222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.378345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.388710][ T4916] Bluetooth: hci2: command 0x0419 tx timeout [ 129.410608][ T5961] device veth0_macvtap entered promiscuous mode [ 129.457191][ T5961] device veth1_macvtap entered promiscuous mode [ 129.532121][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.578572][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.588430][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.588939][ T4281] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.618663][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.635148][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.658661][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.670145][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.681905][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.693657][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.707866][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.723303][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.735067][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.745896][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.755796][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.766773][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.776933][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.788667][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.799748][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.816127][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.825845][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.834995][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.844047][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.857651][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.869247][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.883042][ T5961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.892047][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.901082][ T5961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.910373][ T5961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.998364][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.022977][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.038976][ T4281] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.058982][ T4281] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.061216][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.084685][ T4281] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.091276][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.093291][ T4281] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 130.105769][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.119070][ T4281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.124178][ T839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.137659][ T4281] usb 6-1: config 0 descriptor?? [ 130.430356][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'. [ 130.585991][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 130.632024][ T4281] hid_mf 0003:0079:1843.0004: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.5-1/input0 [ 130.678676][ T4281] hid_mf 0003:0079:1843.0004: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 130.976358][ T4916] usb 6-1: USB disconnect, device number 4 [ 131.198794][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.418208][ T6264] loop6: detected capacity change from 0 to 32768 [ 131.450551][ T6264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.614 (6264) [ 131.463441][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 131.555755][ T6264] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 131.588813][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.612755][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.645584][ T6264] BTRFS info (device loop6): setting nodatacow, compression disabled [ 131.685266][ T6264] BTRFS info (device loop6): force clearing of disk cache [ 131.695176][ T1111] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 131.715231][ T6264] BTRFS info (device loop6): enabling ssd optimizations [ 131.743449][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.777232][ T6264] BTRFS info (device loop6): using spread ssd allocation scheme [ 131.806699][ T1111] usb 1-1: config 0 descriptor?? [ 131.811282][ T4916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.812935][ T6264] BTRFS info (device loop6): turning off barriers [ 131.862281][ T6264] BTRFS info (device loop6): disabling free space tree [ 131.888075][ T6264] BTRFS info (device loop6): not using ssd optimizations [ 131.904315][ T6264] BTRFS info (device loop6): not using spread ssd allocation scheme [ 131.933269][ T6264] BTRFS info (device loop6): has skinny extents [ 132.173089][ T6264] BTRFS info (device loop6): clearing free space tree [ 132.203070][ T6354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.222392][ T6264] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.237435][ T6264] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.248141][ T4916] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 132.277302][ T4916] usb 5-1: config 0 has no interface number 0 [ 132.303914][ T4916] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 132.306749][ T1111] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 132.346591][ T1111] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 132.356346][ T4916] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.415623][ T4916] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.467177][ T4916] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 132.504791][ T4916] usb 5-1: config 0 interface 16 has no altsetting 0 [ 132.518970][ T1111] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 132.523451][ T4916] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 132.560679][ T1111] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 132.581592][ T4916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.634433][ T1111] usb 1-1: USB disconnect, device number 5 [ 132.664641][ T4916] usb 5-1: config 0 descriptor?? [ 132.672083][ T6365] process 'syz.5.645' launched './file0' with NULL argv: empty string added [ 132.853948][ T6369] fido_id[6369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.901537][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.908004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.140577][ T6384] program syz.0.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.221975][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.252896][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.274614][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.288756][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.289357][ T4592] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.316559][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.360888][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.402708][ T6393] loop1: detected capacity change from 0 to 256 [ 133.409416][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.416498][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.448687][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.466021][ T4916] uclogic 0003:5543:004D.0006: unknown main item tag 0x0 [ 133.484699][ T4916] uclogic 0003:5543:004D.0006: No inputs registered, leaving [ 133.505413][ T4916] uclogic 0003:5543:004D.0006: hidraw0: USB HID v0.00 Device [HID 5543:004d] on usb-dummy_hcd.4-1/input16 [ 133.521456][ T6393] exfat: Deprecated parameter 'namecase' [ 133.549681][ T4916] usb 5-1: USB disconnect, device number 6 [ 133.693374][ T6393] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc7d52ca, utbl_chksum : 0xe619d30d) [ 133.718961][ T4592] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.748640][ T4592] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.798631][ T4592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.812959][ T6398] fido_id[6398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.832826][ T4592] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 133.843941][ T4592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.896624][ T4592] usb 6-1: config 0 descriptor?? [ 134.275683][ T6396] loop0: detected capacity change from 0 to 32768 [ 134.529522][ T6380] loop5: detected capacity change from 0 to 1024 [ 134.591559][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4178) [ 134.788644][ T4592] usbhid 6-1:0.0: can't add hid device: -71 [ 134.803958][ T4592] usbhid: probe of 6-1:0.0 failed with error -71 [ 134.827880][ T6423] loop6: detected capacity change from 0 to 8192 [ 134.859522][ T4592] usb 6-1: USB disconnect, device number 5 [ 134.912063][ T6423] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 134.932106][ T6423] REISERFS (device loop6): using ordered data mode [ 134.999398][ T6423] reiserfs: using flush barriers [ 135.039755][ T6423] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.148905][ T6423] REISERFS (device loop6): checking transaction log (loop6) [ 135.175243][ T6423] REISERFS (device loop6): Using tea hash to sort names [ 135.206876][ T6423] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 135.276669][ T6443] netlink: 'syz.0.667': attribute type 3 has an invalid length. [ 135.299844][ T6444] loop4: detected capacity change from 0 to 512 [ 135.358543][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 135.363443][ T6444] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 135.451497][ T6444] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 135.648603][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.819735][ T6425] loop1: detected capacity change from 0 to 32768 [ 135.890492][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 135.896908][ T6463] netlink: 'syz.4.673': attribute type 1 has an invalid length. [ 136.008769][ T13] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.188780][ T6472] netlink: 'syz.4.677': attribute type 12 has an invalid length. [ 136.198884][ T13] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 136.208424][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.224074][ T13] usb 7-1: Product: syz [ 136.257480][ T13] usb 7-1: Manufacturer: syz [ 136.279044][ T13] usb 7-1: SerialNumber: syz [ 136.304405][ T13] usb 7-1: config 0 descriptor?? [ 136.586120][ T4817] usb 7-1: USB disconnect, device number 2 [ 136.963089][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.970706][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.187704][ T6485] loop1: detected capacity change from 0 to 32768 [ 137.364613][ T6485] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 137.364613][ T6485] [ 137.388992][ T6485] ERROR: (device loop1): remounting filesystem as read-only [ 137.409022][ T6485] ialloc: diAlloc returned -5! [ 137.657322][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.699765][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.060075][ T6472] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.069592][ T6472] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.080265][ T6472] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.089528][ T6472] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.403496][ T6472] syz.4.677 (6472) used greatest stack depth: 20688 bytes left [ 138.544696][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.6.689'. [ 138.643602][ T6517] netlink: 116 bytes leftover after parsing attributes in process `syz.1.692'. [ 138.813080][ T6526] loop5: detected capacity change from 0 to 128 [ 138.846193][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 138.872322][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 138.909037][ T6526] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 138.943631][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.485691][ T6506] loop0: detected capacity change from 0 to 32768 [ 139.572425][ T6553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.710'. [ 139.698879][ T4592] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.705549][ T6506] XFS (loop0): Mounting V5 Filesystem [ 139.788704][ T4581] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.834791][ T6506] XFS (loop0): Ending clean mount [ 139.969045][ T4191] XFS (loop0): Unmounting Filesystem [ 140.033824][ T4581] usb 6-1: Using ep0 maxpacket: 16 [ 140.159063][ T4581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.178764][ T4581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.191533][ T6571] loop6: detected capacity change from 0 to 512 [ 140.201459][ T4581] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.215269][ T4581] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.226812][ T4581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.238715][ T4592] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.266851][ T4581] usb 6-1: config 0 descriptor?? [ 140.279409][ T4592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.296837][ T4592] usb 2-1: Product: syz [ 140.312397][ T6564] loop4: detected capacity change from 0 to 32768 [ 140.325506][ T4592] usb 2-1: Manufacturer: syz [ 140.334027][ T6571] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.354018][ T4592] usb 2-1: SerialNumber: syz [ 140.388910][ T6564] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.712 (6564) [ 140.484907][ T4592] usb 2-1: config 0 descriptor?? [ 140.540887][ T6564] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 140.560709][ T4592] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 140.560773][ T6564] BTRFS info (device loop4): setting nodatacow, compression disabled [ 140.597712][ T6564] BTRFS info (device loop4): turning on flush-on-commit [ 140.604330][ T4592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.621634][ T6580] loop0: detected capacity change from 0 to 64 [ 140.631044][ T6564] BTRFS info (device loop4): using free space tree [ 140.639097][ T6564] BTRFS info (device loop4): has skinny extents [ 140.652793][ T4592] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 140.693551][ T4592] usb 2-1: media controller created [ 140.763471][ T6545] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 140.774058][ T4581] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 140.802631][ T4592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.820842][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.823414][ T6545] dvb-usb: bulk message failed: -22 (7/0) [ 140.828284][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.828311][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.854410][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.883197][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.909145][ T6590] netlink: 'syz.0.719': attribute type 10 has an invalid length. [ 140.949608][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.969845][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.991684][ T4592] DVB: Unable to find symbol mt352_attach() [ 140.998070][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.006179][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.025199][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.044628][ T6564] BTRFS info (device loop4): enabling ssd optimizations [ 141.046572][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.084989][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.098011][ T4581] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.098114][ T4592] DVB: Unable to find symbol nxt6000_attach() [ 141.114519][ T4592] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 141.138117][ T4581] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 141.177457][ T4581] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 141.193545][ T4592] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 141.213298][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 141.213316][ T26] audit: type=1800 audit(1772021540.312:90): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.712" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 141.243131][ T4581] microsoft 0003:045E:07DA.0007: no inputs found [ 141.251718][ T4581] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 141.261659][ T4592] dvb-usb: schedule remote query interval to 1000 msecs. [ 141.279040][ T4592] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 141.293743][ T4581] usb 6-1: USB disconnect, device number 6 [ 141.300521][ T4592] dvb-usb: bulk message failed: -22 (7/0) [ 141.306300][ T4592] dvb-usb: bulk message failed: -22 (7/0) [ 141.336221][ T4592] usb 2-1: USB disconnect, device number 8 [ 141.523359][ T4592] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 141.534218][ T6609] fido_id[6609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 141.621531][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 141.821107][ T6624] device erspan0 entered promiscuous mode [ 142.121400][ T6635] loop0: detected capacity change from 0 to 256 [ 142.152358][ T6635] /dev/loop0: Can't open blockdev [ 142.252541][ T4818] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 142.318185][ T6643] loop0: detected capacity change from 0 to 512 [ 142.538838][ T4818] usb 6-1: Using ep0 maxpacket: 8 [ 142.551381][ T6647] loop4: detected capacity change from 0 to 4096 [ 142.619536][ T6657] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.671160][ T4818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 142.699388][ T4818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.708771][ T4584] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 142.796557][ T4818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 142.820836][ T4818] pvrusb2: ********** [ 142.825418][ T4818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 142.840369][ T4818] pvrusb2: Important functionality might not be entirely working. [ 142.848438][ T4818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 142.879348][ T4818] pvrusb2: ********** [ 143.009036][ T2426] pvrusb2: Invalid write control endpoint [ 143.071498][ T4584] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.101296][ T4584] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.137440][ T2426] pvrusb2: Invalid write control endpoint [ 143.157092][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 143.188656][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 143.196509][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 143.208945][ T4584] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.223155][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 143.236490][ T6676] loop1: detected capacity change from 0 to 4096 [ 143.243120][ T4584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.258220][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 143.258240][ T2426] pvrusb2: Device being rendered inoperable [ 143.267558][ T4584] usb 7-1: SerialNumber: syz [ 143.313562][ T6676] EXT4-fs (loop1): Test dummy encryption mode enabled [ 143.321138][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 143.338725][ T4818] usb 6-1: USB disconnect, device number 7 [ 143.344346][ T6676] EXT4-fs (loop1): bad block size 8192 [ 143.398814][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 143.447153][ T2426] pvrusb2: Attached sub-driver cx25840 [ 143.468744][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.491141][ T6694] loop4: detected capacity change from 0 to 1024 [ 143.525865][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.576789][ T4584] usb 7-1: 0:2 : does not exist [ 143.631023][ T6694] EXT4-fs (loop4): inline encryption not supported [ 143.654737][ T4584] usb 7-1: USB disconnect, device number 3 [ 143.666664][ T6694] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.775256][ T6694] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 143.935476][ T6706] loop1: detected capacity change from 0 to 736 [ 144.030854][ T6711] netlink: 'syz.5.761': attribute type 6 has an invalid length. [ 144.093790][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.093997][ T6713] loop0: detected capacity change from 0 to 512 [ 144.532044][ T6725] loop1: detected capacity change from 0 to 512 [ 144.724151][ T6725] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 144.789905][ T6725] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.960878][ T6745] Quota error (device loop1): find_block_dqentry: Quota for id 62708 referenced but not present [ 145.002614][ T6745] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 62708 [ 145.098780][ T6745] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.765: Failed to acquire dquot type 0 [ 145.492379][ T6765] loop6: detected capacity change from 0 to 512 [ 145.677753][ T6765] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.708690][ T6772] loop0: detected capacity change from 0 to 4096 [ 145.806580][ T6765] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 145.810622][ T6779] loop1: detected capacity change from 0 to 16 [ 145.838660][ T4591] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.884459][ T6765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 145.899310][ T6765] System zones: 1-12 [ 145.904545][ T6765] EXT4-fs (loop6): orphan cleanup on readonly fs [ 145.916349][ T6765] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.780: invalid indirect mapped block 2 (level 2) [ 145.922784][ T6779] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.978803][ T6765] EXT4-fs (loop6): Remounting filesystem read-only [ 146.006715][ T6765] EXT4-fs (loop6): 1 truncate cleaned up [ 146.037180][ T6765] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,debug_want_extra_isize=0x0000000000000010. Quota mode: writeback. [ 146.078861][ T4591] usb 5-1: Using ep0 maxpacket: 32 [ 146.208830][ T4591] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 146.228291][ T4591] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 146.251960][ T4591] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 146.298287][ T4591] usb 5-1: config 1 has no interface number 0 [ 146.324586][ T4591] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.376904][ T4591] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 146.434555][ T4591] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 146.484767][ T4591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.571680][ T4591] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 146.970274][ T4591] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 146.978303][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.996239][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.048265][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 147.080077][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 147.097159][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 147.112817][ T6797] JBD2: Ignoring recovery information on journal [ 147.163986][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 147.178367][ T6797] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.197986][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 147.235146][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 147.280956][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 147.309668][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 147.323909][ T6797] (syz.1.787,6797,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 147.337144][ T6797] (syz.1.787,6797,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 147.346574][ T6797] (syz.1.787,6797,0):ocfs2_quota_read:201 ERROR: status = -5 [ 147.354372][ T6797] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 147.363799][ T6797] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 147.373437][ T6797] (syz.1.787,6797,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 147.383666][ T6797] (syz.1.787,6797,0):ocfs2_mknod:314 ERROR: status = -5 [ 147.391812][ T6797] (syz.1.787,6797,0):ocfs2_mknod:502 ERROR: status = -5 [ 147.398916][ T6797] (syz.1.787,6797,0):ocfs2_create:676 ERROR: status = -5 [ 147.411481][ T6803] set_capacity_and_notify: 2 callbacks suppressed [ 147.411497][ T6803] loop5: detected capacity change from 0 to 1024 [ 147.575381][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 147.726666][ T6811] loop6: detected capacity change from 0 to 512 [ 147.885640][ T6811] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.007611][ T6815] loop1: detected capacity change from 0 to 256 [ 148.028314][ T6811] EXT4-fs (loop6): 1 truncate cleaned up [ 148.034811][ T4591] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 148.053425][ T6811] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 148.429875][ T6821] binder: 6820:6821 ioctl c018620b 200000000040 returned -14 [ 148.589704][ T4584] usb 5-1: USB disconnect, device number 7 [ 148.609132][ T4584] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 148.890044][ T6807] loop0: detected capacity change from 0 to 32768 [ 148.955885][ T6843] loop4: detected capacity change from 0 to 256 [ 149.002415][ T6835] loop5: detected capacity change from 0 to 4096 [ 149.088067][ T6843] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 149.225515][ T4228] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.238876][ T4228] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.308093][ T6859] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.371580][ T6854] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.416096][ T6858] loop6: detected capacity change from 0 to 4096 [ 149.589191][ T6864] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.891186][ T6875] loop0: detected capacity change from 0 to 512 [ 149.977090][ T6875] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 150.112997][ T6875] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 150.138712][ T6875] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 150.225624][ T6882] loop4: detected capacity change from 0 to 1024 [ 150.293409][ T6875] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 150.308731][ T6882] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 150.400849][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 150.557798][ T6882] netlink: 277 bytes leftover after parsing attributes in process `syz.4.819'. [ 151.218735][ T4584] Bluetooth: hci5: command 0x1003 tx timeout [ 151.224911][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 151.228776][ T6926] loop4: detected capacity change from 0 to 2048 [ 151.347196][ T6926] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 151.410023][ T6926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.828150][ T26] audit: type=1326 audit(1772021550.922:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.4.834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f62d5f629 code=0x0 [ 152.091017][ T6950] FAT-fs (loop6): Directory bread(block 64) failed [ 152.123069][ T6950] FAT-fs (loop6): Directory bread(block 65) failed [ 152.149475][ T6950] FAT-fs (loop6): Directory bread(block 66) failed [ 152.174000][ T6950] FAT-fs (loop6): Directory bread(block 67) failed [ 152.197877][ T6950] FAT-fs (loop6): Directory bread(block 68) failed [ 152.230607][ T6950] FAT-fs (loop6): Directory bread(block 69) failed [ 152.245570][ T6950] FAT-fs (loop6): Directory bread(block 70) failed [ 152.275495][ T6950] FAT-fs (loop6): Directory bread(block 71) failed [ 152.293511][ T6950] FAT-fs (loop6): Directory bread(block 72) failed [ 152.313777][ T6950] FAT-fs (loop6): Directory bread(block 73) failed [ 152.531360][ T6953] set_capacity_and_notify: 2 callbacks suppressed [ 152.531378][ T6953] loop5: detected capacity change from 0 to 8192 [ 152.668736][ T6971] loop0: detected capacity change from 0 to 512 [ 152.769093][ T6953] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 152.794928][ T6971] EXT4-fs (loop0): Ignoring removed orlov option [ 152.848627][ T6971] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 152.941273][ T6953] REISERFS (device loop5): using ordered data mode [ 152.959131][ T6953] reiserfs: using flush barriers [ 153.035661][ T6978] loop4: detected capacity change from 0 to 4096 [ 153.056251][ T6953] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.136946][ T6982] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.169495][ T6953] REISERFS (device loop5): checking transaction log (loop5) [ 153.216787][ T6953] REISERFS (device loop5): Using tea hash to sort names [ 153.288614][ T4591] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.298962][ T4584] Bluetooth: hci5: command 0x1001 tx timeout [ 153.305893][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 153.324183][ T6953] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 153.528726][ T4591] usb 1-1: Using ep0 maxpacket: 16 [ 153.648809][ T4591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.662916][ T4591] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.743397][ T6976] loop6: detected capacity change from 0 to 32768 [ 153.838683][ T4591] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.849271][ T4584] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.883152][ T4591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.903451][ T4591] usb 1-1: Product: syz [ 153.907680][ T4591] usb 1-1: Manufacturer: syz [ 153.933898][ T4591] usb 1-1: SerialNumber: syz [ 153.938783][ T4817] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 154.149545][ T4584] usb 6-1: Using ep0 maxpacket: 32 [ 154.331366][ T4584] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.388850][ T4817] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 154.408259][ T4817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.450955][ T4817] usb 5-1: config 0 descriptor?? [ 154.528723][ T4584] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 154.551175][ T4584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.580064][ T4584] usb 6-1: Product: syz [ 154.601895][ T4584] usb 6-1: Manufacturer: syz [ 154.608888][ T4584] usb 6-1: SerialNumber: syz [ 154.622188][ T4584] usb 6-1: config 0 descriptor?? [ 154.629175][ T6406] usb 1-1: USB disconnect, device number 6 [ 154.907993][ T6406] usb 6-1: USB disconnect, device number 8 [ 154.971433][ T4817] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 154.982549][ T4817] [drm] Initialized udl on minor 2 [ 155.327733][ T7031] input: syz0 as /devices/virtual/input/input10 [ 155.379389][ T6406] Bluetooth: hci5: command 0x1009 tx timeout [ 155.398664][ T4817] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 155.447127][ T4817] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 155.460494][ T4817] usb 5-1: USB disconnect, device number 8 [ 155.469514][ T4281] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.510074][ T4281] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.539466][ T4281] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 155.551925][ T7035] loop0: detected capacity change from 0 to 1024 [ 156.121724][ T7043] loop6: detected capacity change from 0 to 40427 [ 156.156029][ T7047] loop5: detected capacity change from 0 to 128 [ 156.184247][ T7043] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x1ffff [ 156.193215][ T7043] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 156.204098][ T7043] F2FS-fs (loop6): invalid crc value [ 156.215550][ T7043] F2FS-fs (loop6): Found nat_bits in checkpoint [ 156.256940][ T7043] F2FS-fs (loop6): Start checkpoint disabled! [ 156.274752][ T7043] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 156.340803][ T7047] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 156.418578][ T7047] hpfs: filesystem error: improperly stopped [ 156.533403][ T7047] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 156.549322][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 156.649597][ T7047] hpfs: You really don't want any checks? You are crazy... [ 156.689836][ T839] attempt to access beyond end of device [ 156.689836][ T839] loop6: rw=2049, want=40976, limit=40427 [ 156.721724][ T7047] hpfs: hpfs_map_sector(): read error [ 156.782708][ T7047] hpfs: code page support is disabled [ 156.824505][ T7047] hpfs: hpfs_map_4sectors(): unaligned read [ 156.997760][ T7047] hpfs: hpfs_map_4sectors(): unaligned read [ 157.054762][ T7047] hpfs: filesystem error: unable to find root dir [ 157.628825][ T7076] loop0: detected capacity change from 0 to 32768 [ 157.718434][ T7097] loop4: detected capacity change from 0 to 2048 [ 157.860565][ T7097] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.164025][ T7096] loop5: detected capacity change from 0 to 32768 [ 158.244027][ T7107] loop4: detected capacity change from 0 to 2048 [ 158.290975][ T7096] JBD2: Ignoring recovery information on journal [ 158.325654][ T7108] loop0: detected capacity change from 0 to 8192 [ 158.364596][ T7110] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.504145][ T7096] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 158.535536][ T7107] syz.4.875 (7107) used greatest stack depth: 20504 bytes left [ 158.553944][ T7117] loop6: detected capacity change from 0 to 64 [ 158.647637][ T7096] (syz.5.871,7096,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 158.657750][ T7096] (syz.5.871,7096,0):update_backups:188 ERROR: status = -12 [ 158.715538][ T7096] ocfs2: Failed to update super blocks on 7,5 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 159.103792][ T7134] loop6: detected capacity change from 0 to 256 [ 159.132634][ T4702] ocfs2: Unmounting device (7,5) on (node local) [ 159.270972][ T7134] FAT-fs (loop6): Directory bread(block 64) failed [ 159.288902][ T7134] FAT-fs (loop6): Directory bread(block 65) failed [ 159.295688][ T7134] FAT-fs (loop6): Directory bread(block 66) failed [ 159.321509][ T7134] FAT-fs (loop6): Directory bread(block 67) failed [ 159.344182][ T7134] FAT-fs (loop6): Directory bread(block 68) failed [ 159.368660][ T7134] FAT-fs (loop6): Directory bread(block 69) failed [ 159.376374][ T7134] FAT-fs (loop6): Directory bread(block 70) failed [ 159.398839][ T7134] FAT-fs (loop6): Directory bread(block 71) failed [ 159.405568][ T7134] FAT-fs (loop6): Directory bread(block 72) failed [ 159.412727][ T7134] FAT-fs (loop6): Directory bread(block 73) failed [ 159.449545][ T7138] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 159.500965][ T6406] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 159.562942][ T7132] loop4: detected capacity change from 0 to 32768 [ 159.614792][ T7132] (syz.4.883,7132,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.633577][ T7132] (syz.4.883,7132,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.691596][ T7132] JBD2: Ignoring recovery information on journal [ 159.774189][ T7132] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 159.928830][ T4591] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 160.032944][ T6406] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.055288][ T6406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.072466][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 160.095374][ T6406] usb 1-1: Product: syz [ 160.108687][ T6406] usb 1-1: Manufacturer: syz [ 160.113466][ T6406] usb 1-1: SerialNumber: syz [ 160.137363][ T6406] usb 1-1: config 0 descriptor?? [ 160.288854][ T4591] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.305528][ T4591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.349478][ T4591] usb 7-1: config 0 descriptor?? [ 160.408704][ T6406] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.420939][ T4591] cp210x 7-1:0.0: cp210x converter detected [ 160.772796][ T7177] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 160.858760][ T4591] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 160.918751][ T6406] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 160.933787][ T4591] usb 7-1: cp210x converter now attached to ttyUSB0 [ 160.962140][ T6406] usb 1-1: USB disconnect, device number 7 [ 161.068213][ T7186] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 161.093089][ T7186] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 161.132931][ T4817] usb 7-1: USB disconnect, device number 4 [ 161.166326][ T4817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.188751][ T7188] program syz.1.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.228320][ T4817] cp210x 7-1:0.0: device disconnected [ 161.277798][ T7174] loop5: detected capacity change from 0 to 32768 [ 161.329057][ T7174] (syz.5.903,7174,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.348280][ T7174] (syz.5.903,7174,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.378432][ T7174] JBD2: Ignoring recovery information on journal [ 161.449870][ T7174] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 161.724695][ T7212] trusted_key: encrypted_key: keyword 'updAte' not recognized [ 161.748113][ T7209] loop0: detected capacity change from 0 to 4096 [ 161.860697][ T4702] ocfs2: Unmounting device (7,5) on (node local) [ 162.015284][ T7223] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 162.133369][ T7219] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 162.198593][ T4590] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.207051][ T7219] REISERFS (device loop4): using ordered data mode [ 162.239986][ T7219] reiserfs: using flush barriers [ 162.270964][ T7219] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.287873][ T7219] REISERFS (device loop4): checking transaction log (loop4) [ 162.448732][ T4590] usb 1-1: Using ep0 maxpacket: 8 [ 162.464674][ T7216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.921 (7216) [ 162.502419][ T7229] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 162.512437][ T7219] REISERFS (device loop4): Using tea hash to sort names [ 162.512725][ T7219] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 162.547339][ T7216] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 162.568717][ T7216] BTRFS info (device loop1): using free space tree [ 162.568903][ T4590] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 162.581066][ T7216] BTRFS info (device loop1): has skinny extents [ 162.592480][ T4590] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.675488][ T4590] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.689421][ T4590] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.700078][ T4590] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.718930][ T4590] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.728418][ T4590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.747714][ T7237] set_capacity_and_notify: 3 callbacks suppressed [ 162.747731][ T7237] loop6: detected capacity change from 0 to 64 [ 162.787568][ T7229] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 162.984568][ T7229] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.5.924: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 163.007939][ T4590] usb 1-1: GET_CAPABILITIES returned 0 [ 163.013979][ T4590] usbtmc 1-1:16.0: can't read capabilities [ 163.068675][ T7216] BTRFS info (device loop1): enabling ssd optimizations [ 163.150408][ T7254] overlayfs: upper fs does not support tmpfile. [ 163.178004][ T7256] loop4: detected capacity change from 0 to 256 [ 163.228401][ T4590] usb 1-1: USB disconnect, device number 8 [ 163.307119][ T7256] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 163.443920][ T26] audit: type=1800 audit(1772021562.542:92): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.926" name="file1" dev="loop4" ino=1048630 res=0 errno=0 [ 163.474163][ T7256] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 163.491372][ T7267] loop5: detected capacity change from 0 to 128 [ 163.504665][ T7256] exFAT-fs (loop4): error, failed to bmap (inode : ffff888060290e60 iblock : 8, err : -5) [ 163.526139][ T7256] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 163.544942][ T7256] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 163.554175][ T7267] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 163.620570][ T7267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.075558][ T7273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.261851][ T7280] loop6: detected capacity change from 0 to 256 [ 164.368580][ T4590] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.377396][ T7280] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 164.410623][ T7280] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 164.618603][ T4590] usb 2-1: Using ep0 maxpacket: 16 [ 164.663743][ T7298] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.742315][ T4590] usb 2-1: config 1 has an invalid interface number: 170 but max is 0 [ 164.763360][ T4590] usb 2-1: config 1 has no interface number 0 [ 164.779086][ T7304] loop4: detected capacity change from 0 to 256 [ 164.795387][ T4590] usb 2-1: config 1 interface 170 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 164.815097][ T4590] usb 2-1: config 1 interface 170 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 164.842418][ T21] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.847993][ T4590] usb 2-1: config 1 interface 170 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 164.858346][ T21] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.891954][ T7304] FAT-fs (loop4): Directory bread(block 64) failed [ 164.906745][ T21] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.908557][ T4590] usb 2-1: config 1 interface 170 altsetting 2 bulk endpoint 0xC has invalid maxpacket 911 [ 164.919207][ T7304] FAT-fs (loop4): Directory bread(block 65) failed [ 164.939480][ T21] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.947158][ T21] rtc rtc0: __rtc_set_alarm: err=-22 [ 164.959392][ T7304] FAT-fs (loop4): Directory bread(block 66) failed [ 164.974082][ T4590] usb 2-1: config 1 interface 170 altsetting 2 has an invalid endpoint with address 0xEC, skipping [ 164.977390][ T7304] FAT-fs (loop4): Directory bread(block 67) failed [ 164.998889][ T7304] FAT-fs (loop4): Directory bread(block 68) failed [ 165.006785][ T7304] FAT-fs (loop4): Directory bread(block 69) failed [ 165.016722][ T4590] usb 2-1: config 1 interface 170 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 165.020408][ T7304] FAT-fs (loop4): Directory bread(block 70) failed [ 165.043650][ T7304] FAT-fs (loop4): Directory bread(block 71) failed [ 165.045811][ T4590] usb 2-1: config 1 interface 170 has no altsetting 0 [ 165.051121][ T7304] FAT-fs (loop4): Directory bread(block 72) failed [ 165.065791][ T7304] FAT-fs (loop4): Directory bread(block 73) failed [ 165.195122][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.950'. [ 165.208811][ T4590] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=5f.38 [ 165.232133][ T4590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.263262][ T4590] usb 2-1: Product: syz [ 165.267607][ T4590] usb 2-1: Manufacturer: syz [ 165.287869][ T4590] usb 2-1: SerialNumber: syz [ 165.340426][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.531485][ T7330] netlink: 27 bytes leftover after parsing attributes in process `syz.4.955'. [ 165.606227][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 165.618773][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 165.669547][ T4590] radio-si470x 2-1:1.170: could not find interrupt in endpoint [ 165.688260][ T4590] radio-si470x: probe of 2-1:1.170 failed with error -5 [ 165.698075][ T4590] usbhid 2-1:1.170: couldn't find an input interrupt endpoint [ 165.715011][ T7335] loop4: detected capacity change from 0 to 256 [ 165.741242][ T4590] usb 2-1: USB disconnect, device number 9 [ 165.797972][ T26] audit: type=1800 audit(1772021564.892:93): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.957" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 165.855530][ T26] audit: type=1800 audit(1772021564.922:94): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.957" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 165.886642][ T7336] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 165.916593][ T7336] FAT-fs (loop4): Filesystem has been set read-only [ 165.918706][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 165.927074][ T7336] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 165.936851][ T7328] loop6: detected capacity change from 0 to 32768 [ 165.952731][ T7336] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 165.973485][ T7336] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 165.993370][ T7328] (syz.6.953,7328,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.016904][ T7328] (syz.6.953,7328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.067016][ T7328] JBD2: Ignoring recovery information on journal [ 166.074153][ T21] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 166.082524][ T21] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.158244][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.190614][ T7328] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 166.205756][ T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.222483][ T21] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.241385][ T21] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.264427][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.506889][ T5961] ocfs2: Unmounting device (7,6) on (node local) [ 166.513734][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 166.523836][ T7352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.531969][ T7352] IPv6: NLM_F_CREATE should be set when creating new route [ 166.539412][ T7352] IPv6: NLM_F_CREATE should be set when creating new route [ 166.568994][ T4281] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.599327][ T21] usb 6-1: GET_CAPABILITIES returned 0 [ 166.604872][ T21] usbtmc 6-1:16.0: can't read capabilities [ 166.697352][ T7359] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 166.735137][ T7359] netlink: 92 bytes leftover after parsing attributes in process `syz.1.970'. [ 166.852772][ T7321] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 166.858559][ T4281] usb 5-1: Using ep0 maxpacket: 16 [ 166.906709][ T4590] usb 6-1: USB disconnect, device number 9 [ 166.935422][ T7367] loop6: detected capacity change from 0 to 2048 [ 166.996821][ T7367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.006069][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.026552][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.034248][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 167.043238][ T4281] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 167.084282][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.119635][ T4281] usb 5-1: config 0 descriptor?? [ 167.590911][ T4281] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x6 [ 167.619697][ T4281] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 167.847231][ T4281] usb 5-1: USB disconnect, device number 9 [ 167.926772][ T7404] fido_id[7404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.125260][ T7419] loop1: detected capacity change from 0 to 128 [ 168.206510][ T7421] loop6: detected capacity change from 0 to 512 [ 168.218812][ T7419] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.238744][ T7419] hpfs: filesystem error: improperly stopped [ 168.244780][ T7419] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.294273][ T7419] hpfs: You really don't want any checks? You are crazy... [ 168.321667][ T7419] hpfs: hpfs_map_sector(): read error [ 168.338698][ T7419] hpfs: code page support is disabled [ 168.344550][ T7419] hpfs: hpfs_map_4sectors(): unaligned read [ 168.348420][ T7421] EXT4-fs (loop6): 1 orphan inode deleted [ 168.357361][ T7421] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.358617][ T7419] hpfs: hpfs_map_4sectors(): unaligned read [ 168.374405][ T7419] hpfs: filesystem error: unable to find root dir [ 168.408689][ T7421] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.699901][ T7411] loop0: detected capacity change from 0 to 32768 [ 168.780962][ T7411] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 168.799024][ T7411] ocfs2: Mounting device (7,0) on (node local, slot 65535) with writeback data mode. [ 168.844073][ T7438] loop6: detected capacity change from 0 to 1024 [ 168.880283][ T4191] INFO: trying to register non-static key. [ 168.886130][ T4191] The code is fine but needs lockdep annotation, or maybe [ 168.893241][ T4191] you didn't initialize this object before use? [ 168.899478][ T4191] turning off the locking correctness validator. [ 168.905892][ T4191] CPU: 1 PID: 4191 Comm: syz-executor Not tainted syzkaller #0 [ 168.913465][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.923619][ T4191] Call Trace: [ 168.926898][ T4191] [ 168.929826][ T4191] dump_stack_lvl+0x188/0x250 [ 168.934626][ T4191] ? show_regs_print_info+0x20/0x20 [ 168.939912][ T4191] ? load_image+0x400/0x400 [ 168.944502][ T4191] ? cpumask_next+0xb3/0xd0 [ 168.949039][ T4191] ? __is_module_percpu_address+0x2a7/0x410 [ 168.955025][ T4191] ? is_kernel_percpu_address+0x143/0x160 [ 168.960751][ T4191] assign_lock_key+0x1ec/0x200 [ 168.965513][ T4191] ? SOFTIRQ_verbose+0x10/0x10 [ 168.970448][ T4191] ? rcu_lock_release+0x5/0x20 [ 168.975296][ T4191] register_lock_class+0x21d/0x890 [ 168.980406][ T4191] ? deref_stack_reg+0xd0/0x120 [ 168.985267][ T4191] ? mark_lock+0x94/0x320 [ 168.989626][ T4191] ? is_dynamic_key+0x1f0/0x1f0 [ 168.994510][ T4191] ? __lock_acquire+0x13bc/0x7d10 [ 168.999717][ T4191] __lock_acquire+0x16f/0x7d10 [ 169.004508][ T4191] ? deref_stack_reg+0xd0/0x120 [ 169.009390][ T4191] ? 0xffffffffa003e000 [ 169.013635][ T4191] ? is_bpf_text_address+0x254/0x270 [ 169.018930][ T4191] ? verify_lock_unused+0x140/0x140 [ 169.024140][ T4191] ? __kernel_text_address+0x9a/0x100 [ 169.029529][ T4191] ? unwind_get_return_address+0x49/0x80 [ 169.035160][ T4191] ? stack_trace_save+0xf0/0xf0 [ 169.040289][ T4191] ? mark_lock+0x94/0x320 [ 169.044620][ T4191] lock_acquire+0x19e/0x400 [ 169.049130][ T4191] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 169.055056][ T4191] ? lock_chain_count+0x20/0x20 [ 169.059905][ T4191] ? memset+0x1e/0x40 [ 169.063890][ T4191] ? read_lock_is_recursive+0x10/0x10 [ 169.069262][ T4191] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 169.075499][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 169.080874][ T4191] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 169.086332][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 169.091701][ T4191] _raw_spin_lock_irqsave+0xb0/0x100 [ 169.097078][ T4191] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 169.102966][ T4191] ? _raw_spin_lock+0x40/0x40 [ 169.107726][ T4191] ? ktime_get+0x247/0x270 [ 169.112411][ T4191] ocfs2_mark_lockres_freeing+0x159/0x600 [ 169.118165][ T4191] ? ocfs2_dlm_shutdown+0x240/0x240 [ 169.123457][ T4191] ? slab_free_freelist_hook+0xea/0x170 [ 169.129000][ T4191] ? ocfs2_release_system_inodes+0x426/0x480 [ 169.134986][ T4191] ? kfree+0xef/0x2a0 [ 169.139050][ T4191] ocfs2_dlm_shutdown+0x36/0x240 [ 169.144004][ T4191] ocfs2_dismount_volume+0x45d/0x8a0 [ 169.149830][ T4191] ? ocfs2_enable_quotas+0x490/0x490 [ 169.155114][ T4191] ? clear_inode+0x150/0x150 [ 169.159812][ T4191] ? ocfs2_free_inode+0x20/0x20 [ 169.164766][ T4191] generic_shutdown_super+0x130/0x300 [ 169.170154][ T4191] kill_block_super+0x7c/0xe0 [ 169.174830][ T4191] deactivate_locked_super+0x93/0xf0 [ 169.180168][ T4191] cleanup_mnt+0x42d/0x4e0 [ 169.184688][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 169.189891][ T4191] task_work_run+0x125/0x1a0 [ 169.194633][ T4191] exit_to_user_mode_loop+0x10f/0x130 [ 169.200210][ T4191] exit_to_user_mode_prepare+0xee/0x180 [ 169.205751][ T4191] syscall_exit_to_user_mode+0x16/0x40 [ 169.211205][ T4191] do_syscall_64+0x58/0xa0 [ 169.216255][ T4191] ? clear_bhb_loop+0x30/0x80 [ 169.220929][ T4191] ? clear_bhb_loop+0x30/0x80 [ 169.225628][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.231664][ T4191] RIP: 0033:0x7fc3e4787897 [ 169.236079][ T4191] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.255686][ T4191] RSP: 002b:00007ffef42409b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.264185][ T4191] RAX: 0000000000000000 RBX: 00007fc3e481bef0 RCX: 00007fc3e4787897 [ 169.272266][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4240a70 [ 169.280338][ T4191] RBP: 00007ffef4240a70 R08: 00007ffef4241a70 R09: 00000000ffffffff [ 169.288305][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef4241b00 [ 169.296358][ T4191] R13: 00007fc3e481bef0 R14: 0000000000029344 R15: 00007ffef4241b40 [ 169.304333][ T4191] [ 169.330842][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 169.427904][ T144] hfsplus: b-tree write err: -5, ino 4 [ 169.458570][ T6406] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.698590][ T6406] usb 5-1: Using ep0 maxpacket: 32 [ 169.828638][ T6406] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 169.837802][ T6406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.879648][ T6406] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 170.537419][ T4281] usb 5-1: USB disconnect, device number 10