last executing test programs: 4.806299785s ago: executing program 4 (id=1687): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000000)={[{@gid}, {}, {@nls={'nls', 0x3d, 'maccyrillic'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$eJzs3U1rXNcZB/D/nRlLHhccJbGT1C1EpFBMTGy9mLSFQtViihbBBLrJVtRyLDx2gjQpkyyKWvxB0oW6yqKbEihdZOF1F/kCgi4LhS5FNy5z585oYsvyqNG8OP798Jl7js495zz38b1XmivBBHhhrX+QM7spsn7lvU63vb+32trfW73XryeZT1Ir/6XRrf4zqT9IFtMr+X6SopqueNo6X658cenrm53LvVatKuX+9ePGjWa3Klmrglw7xfkefuv5isERdie90Z98Fjx6tv+Mcfn6GOfmBIqn/F8sJOeSnK3uA/0TtzbZ6E7fzFyAAAAAMEYvHeQgnZyfdhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPKk+/7+oSq1fX0zR//z/ueprqerPta+mHQAAAAAAAAAAnII3D3KQTs7324+K8nf+b5WNC+Xr9/JJdrKZ7VxNJxtpp53tLCdZ6I2pV2Pb7e3lEUauHI4szXU22u3tlQkdMAAAAAAAAAB8N/0x64e//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFlQJPXepiwX+vWF1BpJziaZ6+63m/y9X3+efTXtAAAAAGACXjrIQTo5328/Ksr3/K+V7/vP5pPcTztbaaeVzdwqnwX03vXX9vdWW/t7q/e65cl5f/nvE4VRzpjes4ejV14q97g4GLGeX+c3uZLFvJ/tbOV32Ug7m1nMjbK2kSIL1dOLhX6cR8e79o3W+8+K9Y0ykmZuZ6uM7Wp+m4/Syq3UymMo9zl+xT90s1P8ojJijm5V2yIpflAd2bjNj7TXQpmRM4OMLFW572bj5eMzccLz5PGVllMbPIO6MIacn6u2xcw96Ho8EytDZ99rx2cieaf91zfvtO7fvXN758okTqOxejwTq0OZeP2FysRclY3eXfRkd8u3yrHns5Wb+Si3spmf5N2slGW13A7n9eII11rtZNfajy5XlVeSotnbzohuXl8eyuvwnW6h7Bv+ymGWXjn9O1LjUlWpJ0VjENMseDwTy0OZePX4TPzpUfd1p3X/7vadjY9HXO/H1bb7/XB+Qt8PRzNXnb2NsvXNs6Pb9+qRfctl34VBX+2JvouDvmddqXPVz3BPzrRS9r1+ZF9v3BtDfUf9lAPAzDv39rm55r+a/2h+3nzQvNN87+yv5n86/8O5nHnY+Fv9L7U/135evJ3P8/vD9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/b+fTz+5utFqb25OszE9j0RekUstMhDFipZGZCEPlycrR94vGpG9QjNW19r2Pr+18+tk7W/c2Ptz8cPP+9aVm3r2+/LPr125vtTaXeq/TjpJxObzopx0JAAAAAAAAAAAAJzGJPyed9jECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Fj/IGd2U2R56epSt72/t9rqln79cM9akkZ3+9+k/iBZTK9kYWi64mnrfLnyxaWvb3YuH85V6+9fP27caHarkrUqyLVTnO/ht56vGBxhd9Ib/clh2v4XAAD//3D1GxQ=") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810053, 0x0, 0x1, 0x0, &(0x7f0000001180)) mount(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x800000, 0x0) 3.864083469s ago: executing program 4 (id=1692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000200000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb301a913bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd5441110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5e080eaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffda707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c7fdffffffffffffff0000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe030000008e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000f1e2be1b2290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be479998cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa39596443447671971868345e92e4b33079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166fa3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9cdfd008c898d73bb97168ca390ef5398000000000000000000000000a454f930ada97e4d7460bf0d3312c03639870f8b33fa044a805867e88bf164474513ec0cd466baf22573597c7bf340d67a6854e39371fb671a46be4942b49cc28ac921188461979e530c8a90dcfacdad19469540b9deb65290e786e53a715e6b712642087c9a0640b6910f4c07cde1ba22c2224cd9c8c39dd73a9b0a15c743b6c29c7635d96dee702dce815913a7ad9b661da02d7decc1649d06d55c9a8f24dc63f02c3bc2d6ad0425cf71147d0efa8a255819a1c3b54fffe7f2cb3629990f034cae989dd1dfebc50a2a7ed4fbaa267e7c4cd6f11511a12a7116ca9a78e83a59d90a4abe6b0aafc9c9e408c324f67910b938765e0bf7e80d6e306b6827ae12ecae85472d88ad4646256329b6ae3b3974b420504c6df932eb45506db7d0d5d838aeb7ad7b90a38a24ba58e67e8c6845cd16e294fb25681c3c752d02862feb48bb7c67fde3ab4035c7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 3.591883362s ago: executing program 4 (id=1693): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ppoll(&(0x7f0000000040)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) 2.55471683s ago: executing program 0 (id=1699): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) umount2(&(0x7f0000000040)='./mnt\x00', 0x0) 2.495213483s ago: executing program 0 (id=1701): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x55c2, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) 2.029493356s ago: executing program 2 (id=1709): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1.91377183s ago: executing program 2 (id=1711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 1.784175347s ago: executing program 2 (id=1713): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 1.675849982s ago: executing program 2 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048041}, 0x0) 1.607699665s ago: executing program 1 (id=1717): openat$capi20(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002c80), 0x8200, 0x0) read(r0, &(0x7f00000035c0)=""/225, 0xe1) 1.606932155s ago: executing program 4 (id=1718): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000c80)=""/4105, 0x1009}], 0x1) 1.439791353s ago: executing program 1 (id=1719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, r1, 0x7}, 0x10) 1.375265316s ago: executing program 2 (id=1721): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x88, &(0x7f0000000140)={[{@nobarrier}, {@nls={'nls', 0x3d, 'ascii'}}, {@part={'part', 0x3d, 0x101}}, {}, {@gid}, {@nobarrier}, {@uid}]}, 0x44, 0x72f, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.366396796s ago: executing program 0 (id=1722): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x58, r0, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x800) 1.326164258s ago: executing program 4 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000020900010073797a31000000002c0004802800018007000100637400001c0002800800014000000013050003000000000008000240000000170900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40480d4}, 0x24000000) 1.325626808s ago: executing program 3 (id=1724): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0), 0x1f, 0x28, 0x0, 0xffffffffffffff30}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 1.164582956s ago: executing program 1 (id=1725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 922.857417ms ago: executing program 1 (id=1726): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=@newqdisc={0x40, 0x24, 0xd0f, 0x10000003, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffea3, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x400009}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1c4}, 0x8840) 767.671634ms ago: executing program 2 (id=1727): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 756.465495ms ago: executing program 3 (id=1728): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) 597.227283ms ago: executing program 1 (id=1729): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 539.623555ms ago: executing program 4 (id=1730): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 536.662605ms ago: executing program 0 (id=1731): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x21, 0x1da, &(0x7f0000000e80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 405.415441ms ago: executing program 3 (id=1732): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 374.613093ms ago: executing program 1 (id=1733): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x55c2, &(0x7f000000ac40)="$eJzs3W9sVeUdB/BzWwoNuNKNFRgvCCWmBkmQLVscQevFGNiGi5cKCnNWICoxtVKb6AYjtdhkmTFooRPBRSQkmsxY7PCFghl2GZaxjD/b3GJsVlAqzZJtoGaNI0aX3nvP5d5zue2VOeqfz8e05zz3d57nPvfkvLjfynNOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEQHI4teHdO34tHxld89f5//XT6oxt/NnXXvi0Hb7mv7f7Fp8fdtGNe/eD6WS2LNmxsPNz69N7aW4MgluwXS/e/7drv1N15423fLw8HXLkkta2sLPSWqa4nUo2xOS8O9cv9WRUEQVlkgNL09tX0TknOAJnd5vwBh/VOx9Lg7uqFMzp7n5qyPL6kP/+jM6R8tCcwWtLXVf+5ayme/F0SOSLTzrr0YjmXaKp/9IK7KB8CAPhY5iaSm8zX0fRX3Ey7NVqPtOORdnukHX5DaM9uXIjUuGMLzXNGtD5K84ynosK4gvOM1NPnP9NORPtH2pGo8THmmXtoOtKUF5pnU6Q+WvMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DSZfOzI2lWdj+y+79fdFYfffb/2yge+0n2oc9nx8VevWL197cyfz6sfXD+rZdGGjY2HW5/eW3trEFQm+8VS3WPH2y//fWLyor49U95o3vVcxWBpetxwOybr4OD1cGfexCBYnVXpD4f9e0UQJHILyWawPb9wV3Lnu2EBAACAz5OvJX+XZNqpOFiW044l02Qs+V8oFRbf6Vga3F29cEZn71NTlseX9F/4eIkC48XPO16mXXnuJ5YVjMP4Gx3vXD08tDlvnOFFR4zm+UsnTXr7req66m/OWvDEDc9M6Ov90pNzNif+XFXxwhXXD9Q9e11e/q8cPv+HZ07+BwAA4H8h/0fHGd5I+f+OFTWbX//VmDW/7Wh84kDd9r92fO+ZHUtP9t/wk8GXa+K3P3p1Xv6fkfOWefk/nHGY/0uCC8v/AAAA8Gn2/87/8bxxhjdS/m88PTj/Rwdeq+r+Z+2y3b956IplZ079Y9HJXTvHrr2jfX3VQ1fm5f+5xeX/MdnTDl/8QzjhholBMLf4kwoAAADkCP+/+7k/LYR5PfWXg2hev/bfV7XuvfmDb3/rwXv+8ubbvzu6f/6Mdduq5h54+aa6D0t/sK0vL//Hi8v/ZRfn4wIAAABFeP7I6gULj/WfffzMC70nDu0aODHnydPrWgZPdVzS3rCm7ehrefk/UVz+Hzc6HwcAAAA4j3vvfG7VpldfGnxg312TZ/aXXNV8SeyWrdtrWqZ91HPpwOXbtuTl/5XF5f/x6W165UOqU0/4rxA6JgZB+dBOU6pwMGi/JlMAAAAAPiFhTt/ywar6yTsmD0w9duqxioNvHJr/t6ae2o3X9JX1beqpb74s734BYWIvdP//8E4H4fr/nPv/5a3/zyqk7vo3340BAAAA+CLKX88f3h4/9eSCQs/fL3b9//Kq6cdjnW+9t+brZ/efnbR43w+vb1tXNzBwz7SX/vjjP83+qDwv/7cWl/9Ls7ef5PP/AAAA4AJ81p7/tyJvnOGNdP//lpLBxjXr9sxu2Ny0eUmsfn/5yQcb9ry/eO1/am5+vqXiuv15+b+9uPwfbidkf7zu8Py0TQyCqUM76bsJ/jKcbkOk0FWWVUid+EiPG8Me6ULXuKxCUlOkxzcmBkH10E5rpPDlsNAeKZypSBd2RgpHw0L6esgUdkcK3eGVtrUiPd1o4cWwkF5g0RWuoJiQWRIR6fFeoR5DhfP26M28OQAAwBdKGJ7TWbYstxlEo2xXbKQDxo90QMlIB5SOdMCYyAHRAwu9HqzMLYSv397zyIa2xpnxVx5e8Ngv3ny2edrexy+rGtj04Stb752+Y3Z7TV7+31lc/g9PxdjUptD6/yBc/59+rmFm/f/KsFAZKXSFhUT0jgGJ8D1SYffh8D0qE+keZ6ZmCgAAAPA5Eiv4SulFnwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX/buPU6q6k4Q+OmmH3TTNG2ciGacpKMGNCNNQ2sYBsegidGoSDOrjpuMBgINIo0QHqsgagPqjEP8jK+dNRMdQUFkV/0Q42owGImLmFEnUUx8AD7W0XVd36MSo5mwn+5bp6i61WUXAko73+8fXafqd563Hl3n3lvnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf0T3HPrSiUMXzfmHDxrOuXhN1bTF/6NjzKV/uPJbn3/yH5cv/rew4Bcjz9g6/5ALjl2wcPq/dKxYc+TpIbR2lStLipc9e/mXH2zd59hnbh+4adYNt9RvrcrUm4mHfp1/yjN3LoqtvtA/hLvKQqhIB4bUJYHKzP26WN/+dSHsFbYHsiXaapMS6YbD/TUhLA3bA9mq1tSEUJcTOHnjffde1pm4uiaEL4UQqtNtPF2dtFGTDgyqSgK16cCMiiTw222JbOAn5UkAdlp8M2Rf9Ktb8zM0dF+uyOuvcpd17JOVHl6fmGgonu+1o3Zzp3JUpR9o3amnraA6douCt8c677Ze8G4r2M6Xe9pyv0hlvqFs2x6qDuWT2iZPmNs+Jz5SHpqa+hSraTc9z0+9tWDijqR7zeswdqBhl7wOL3l05Yx+y8dcctWWX43deGbNQTvbzSdzNmluenerDpnXXK95HqPRPk96wduv4FtSoy9dIYRt55w18+tzJ511ZJ+bn1j/ygMP1G09a+7CX5wx6dzFF5208d8XvFgw/2/48Pl/fDnH2/K83LHVD+qTuXl8pC4m3qhP5uYAAADQa/SGvaarznvtr177/rrWWYtP+/abh57zwT6tvx5534Cqg15f39R63qbPvlww/28s7fh/PORflzvadSGM7kosHhDCvl2PJ4FVsTvfHRDCF7tSrfmBo1KBdSHs15U4JFtVqkTfWKIxFXipPhMYnQpsiIHWVGBFDFyeClwUA6tTgYkxsC4VODoGwtT8cXy5PjOOkgM1MTA+2Yir41kIb9fH1lLbanO2KgAAgF0kMzuszL+bc67DzmaI08vVNT1liGdgF81QnaohPYPNTquK1lDRUw3lPdWQHXfHhw+/oOaynmouOA2jLD/DDWv/8t7FLxz+uXH7TPrskqHnT/3ZhHDmW3dVPda89IU39z/ypvUF8//mD5//V3fTkbKC4/8hjOv6G3OXZyLt2fj41rwMAAAAwE648I//Yq/al4Yc1LD5vbJ7Fqx7/JGVv9yy18mnvTf+uNd+eERN4z0F8//RpZ3/H/eJ9MnJHB6OuyGmDQihOT+QVDuqMJAc9e6XCQAAAEBvkD0enz0WPjVzm5yinZ5PF+Zv3cH88cD/6G7z//7u/1l7+7Z/faHs/O+eM7JmwLJ/eqVj4vEnHX3zcd96e7+Kg35ZXjD/by3t/P/a/NukExtiL64aEELfnMADsZedgS6NMfDcV/MDmfFviBtgSawqc2JCtqolscT4GGhOBZYWK/FItsS++YHMk5VtfHF2HFMzJXICAAAA8LGLuwPicfl4/n/L6SNP/evvzf7bRS8/cO6a8y/+qxEdC0adeN9THzTMu2JZ2PzGkQXz//E7dv5/1zy44PT+9n4hDK0IoU/6hwEP1yYLA8ZAXVkmcU9tUlefdFWLakMY1TmwdFXPZ9b/r0ivMfhYTVJVDOx7wM1vDepMLK8JYWhu4PFvLzu8MzE3Fcg2fmpNCF/oHG268Tv7Jo1Xphu/pm8In88JZKua2DeEzsaq0lX9r+rMdQzSVa2uDmHvnEC2qhHVIcwLAPRW8X/ppNwHZ8+bP21Ce3vbrN2YiDvxa8Lkqe1tTRNntE+qLtKnSak+561jtLBwTKVe+mZzZo2iJaumVJaSzv5QsDm3rcyO/IIzBzP345ehyq5xDq/Mu9uSHvLBBxY2EXK+ShUbcvluHnJtbiXbn8SC+mP+qtAv9J07u21W07kT5syZNSz5W2r24cnfeJwp2VbD0tuqtru+lfDyKLpcVspH3VaDcisZOmf6zKGz580fMnX6hCltU9rObjnsz1pGjhjxlZFDOwfVnPztYaSDuqs5NdJty0oc1i4c6ecqcir5OD40JCQkelvigP+y5aExe284+7qfvfrj8/p989R79v3qrB8eduW0B6v3P2LJbUMOLpj/z/zw+X/81Ikf/Jn1GYod/2+Ih/mTx7cf5h8fA0tLPf7fUOxofvbEgMZUoCMGOhzmBwAA4NMh7o6MezPjTuktN29Yv2lpy7wfNLzdcsva9mU33njvKT+5Y+DxXxgc9tl47fGfKZj/d5T2+/9dtP5/dun644st839ILNFcbP3/9DL/2fX/O4qt/59e5j+7/v/ST2D9/7nZQGqTvG39fwAA4NPg41v/v8fl/dMXCCjI0OPy/ukLBBRk6HEZ/1IvELDD6/+vfeCvv1TVb+ztf9Lym/qLX/27uw9v/er6LbP+5AvbNky699pxN68tmP9fXtr838L9AAAAsOf4z5deXXH0WXfd3rJ+2qbxbwx+54k3lw7q837F0Q+1j3p+4Ou3nFsw/19a2vz/41//LxQ7/7+xWKC12MKA1v8DAACglyq2/t/dQ1sa/zC2/x+eGvabFQ/cNOanD//89ysO+PkJPyvfb+Exz826dHLB/H91afP/eNpFeV7u2JsP6pM17UJ6Tbs36rM/GQAAAIDeoTw0NVWWmDdvYdSjPnqbT2WWAv2wdK7vvXzNWVuen3HsY6et/7ua4wfvPXH6+asb/2bEwXd8dvTFey/bfErB/H9dafP/vN9lXPLoyhn9lo+55IOrtvxq7MYzaw7afvwfAAAA2H1K3S8BAAAAAAAAAAAAAAB88s7pWHLBw8uPefebt/3FgUcufWXwrXce/Lsh/V68/Mr7J69+/YwpXy/4/X8Y11Wu2O//43X/4u8L/igvd2y15/X/MvdPPuG2eV1LFj5cH8KBuYFpi6btFTLX5h+cG7j39EMGdiYWpUusfeboFzsT30kHjhvyma2diSNSgfFxkcT90oF4VcWt/VOBuLziY+lA3B6r04GqTODS/sk4ytLb6uW6ZFuVpbfVproQBuQEstvqrrqkjbL0AK9OBbID/F46EAd4UiZQnu7Vbf2SXsVAXSx6fb+kVwAA7LHit8DKMHlqe1tz/Aofbz9XkX8b5S1ZtrCw2rISm9+cWZpsyaoplaWk+6S/i26/1nhlqO4cwrCCr6u5Wcq6Rrlraulh0/1RkSH3tNpbeZFyaTu66aqKj6gmGVHTxBntkyp7HHhLz1mGV/SYZVjBZCc3S3nXJi2hlhL6UsKIStw2JXQ53i8PTU19Urn+PAYbQp6eXhGl/l4/d52/Yq+C3Dy3HnbFm1/82k+fff+fP/t4/2+cWnPb7O+/c8KvX7vv4OFHXjuxae3Wgvl/Q2nz/+rccW3NXAygI15Zb9SAEMaXOCIAAAD49Lv1wltuP23Ghpcnr6t44tFHp5WPPa1y24I7Fsy/eNM9S4679NCVOxs//Mzffv83gw/8t2eufPGno/a7//qb/s8Thz/2579/6EcPvl23qs+4dwvm/42lzf/jHqzMoeBkb8e6eP3/xQNC6Lq0fkMSWBWH+90BIXyxK9UaSyQX1D8+lmhOAqviDpNDYonxrflV9Y2B1anAS/WZwLpUYEMMZPZS3Bwyu3KuqA/h8K7UuPwSM2OJhlRgbAw0pgJNMdCcCvSPgdGpwKv9M4HWVOChGAhT87fVj/tnthUAAMCOyMyzKvPvhvQ8b3VFTxnKespQ21OG8p4yVPeUodgo4v3bY4bK1MkrZTmZKtO11qRqKcgQL4a/w/0qyBAeyc+ZLljQdDz/IHu+QVl+hit+8MwpGwbPeHDNlq99ZeCt/zhk70ObZ9S9u/D6J3879uxrn/vTQQXz/+bS5v+1+bdJ6xvi/H/79f+SwAOxe1fFU8cbY+C5r+YHMjsGNsTJ7pJsVa2ZEplJ+5JYYnQMNKYCM2NgdCowflwmsHRgfiAz0842vjjb+NRMiZwAAAAAfOziDoK4mybO/2846gdXvTdg0tbl82fdN67l8ZPGfOOqO390z4HL73hn5eAB49/9TsH8f3Rp8//YXr/cxi6KvXmhfwh3lW3vTTYwpC4JxP0YdfHn8fvXhbBXzg6ObIm22qREVarhcH9N8gv1qnRVa2qSNQbi/ZM33nfvZZ2Jq2tC+FLO3pdsG09XJ23UpAODqpJAbTowoyIJxD0/2cBPypMA7LTsXsH4gsqc6pLV0H25Iq+/T8s1QdPDK9gH2k2+7n5ztbtUpx/I7FPN2rGnraA6douCt8c677be+G5r8G7L/SKV+YaybXuoOpRPaps8YW77nPhI7i9ZC+ym5zn3V6qlpHfB67Djo/e2Z9XpDjSnPj6auy/X/euwLFZ3yaMrZ/RbPuaSq7b8auzGM2sOKrkbRcQfCv9o6/+ufDJn8+5u1SHzmut1nyetPX2e1OxQdb1Ur3vaGv0bCCFcet3X9l/6zq8PePb6Z09ZX3bDuFf+cvbdm1f8TeURo9e/98TQMZcVzP9bS5v/V6Ruu/wubszZA0I4OGfjPhw3/9cGJJ+DOYHkU3LvwkByyP1f64t+cgIAAMCult3dkd1fMDVzm5wQnp4nF+Zv3cH8cX/F6G7zl9rvY9ZvWnXi0NevPehvzz/h9b+/5ognH7zu0rL1K/77uPfXrL1sybuPF8z/x3/4/L9vqpuO/zv+z27i+H+39vRd0X3TD3Ts1K7ogurYLRz/79ae/m5z/L9bjv87/t8dx/97sOPH/xOf8s+TPf1pK/iWNNOXrs5J8HV3/Px3k258f17jAYee+OTTh0269p+ubLnrzpNf/m/nnDv91W9tKZj/zyxt/m/9v+4X7cuu/ze+2Pp/M4ut/9dh/T8AAGC3KrLQXHqeV7B6X0GG9Op9BRl6XCCwxyUGrf+3w+v/LRr17xde8MPnWq55+47xl63dfMwZrzy1fs3Ts1cee855b7beeWdrwfy/o7T5f3w59Mttvbes/9c4rkhVl8fATAsDAgAAsCcqtoMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAT9Zhp7793sVf/4e2Qb9YedPf3/L//u8ztevu/+Y3bhzxy6l/enrZ2o1Xjzxj6/xDLjh2wcLp/9KxYs2Rp4cwtatcWVK87NnLv/xg6z7HPnP7wE2zbrilfmt1pt7KzO0f5+WOrX5QH8LSnEfqYuKN+s472wMnn3DbvIrOxMP1IRyYG5i2aNpenYkV9SEMzg3ce/ohAzsTi9Il1j5z9Iudie+kA8cN+czWzsQRmUBZurvX9k+6W5bu7mX9QxiQE8h296z++VVl2zg2EyhPt7GyLmkjBupi0WvqkjZioD2WmNo3hKEVIfRJV/XP1UlVfdJV3V2dVNUnXdWF1SGMCiFUpKt6tiqpqiI98keqkqpiYN8Dbn5rUGdiWVUIQ3MDj3972eGdiVmpQLbx/1QVwhc6XzLpxn9cmTRemW78v1aG8PkQQlW6xLsVSYmqdInnK0LYOyewfSNWhDAv8OkQP30m5T44e978aRPa29tm7cZEVaatmjB5antb08QZ7ZOqU30qpiwnvW3hRx/75rcWTOy8XbJqSmUp6YpMucquLg+vzLvbsqf3PvarNreS7c9HQf0xf1XoF/rOnd02q+ncCXPmzBqW/P2w7Nsyyc6Mw7uyD++TeSjZVsN6y7YalFvJ0DnTZw6dPW/+kKnTJ0xpm9J2dsthf9YycsSIr4wc2jmo5uTvrhjpso9/pJ+ryKnk43j/f7oTDXtGNyRKS1SHPaIbe2ZiXN8Q4iPleZ9uzXv653jBF/3tHa0M1V0f0AXTitwsZV2j3BWDPuojjvijfE3pcUTDCiYOBVmG95ylpWAysT1LTZKl62tdweQwt6byrk0a75eHpqY+xbZDQ/7d3M372k5s3qcym67UNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmbx1GzwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXAgAA//8RlxXC") ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) 275.507017ms ago: executing program 0 (id=1734): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 179.714522ms ago: executing program 3 (id=1735): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b31, 0xffffffffffffffc4) 169.628863ms ago: executing program 3 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r1, 0x9, 0xfffffffd, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) 40.446078ms ago: executing program 0 (id=1737): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 0s ago: executing program 3 (id=1738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): =0x7fa2ed022159 code=0x50000 [ 141.510021][ T26] audit: type=1326 audit(1789484537.275:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ed022159 code=0x50000 [ 141.536814][ T26] audit: type=1326 audit(1789484537.275:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ed022159 code=0x50000 [ 141.560758][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.585514][ T6011] rock: directory entry would overflow storage [ 141.598288][ T6011] rock: sig=0x66, size=4, remaining=3 [ 141.630726][ T6011] rock: directory entry would overflow storage [ 141.644706][ T6011] rock: sig=0x66, size=4, remaining=3 [ 141.695537][ T6011] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 141.965591][ T5969] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 142.691050][ T6057] loop0: detected capacity change from 0 to 128 [ 142.785889][ T6057] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 142.897396][ T6061] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 142.913341][ T6061] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 142.928689][ T6061] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.204136][ T6063] loop0: detected capacity change from 0 to 8192 [ 143.320875][ T6063] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 143.342516][ T6063] REISERFS (device loop0): using ordered data mode [ 143.365997][ T6063] reiserfs: using flush barriers [ 143.454347][ T6063] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.475397][ T6056] loop2: detected capacity change from 0 to 32768 [ 143.482399][ T6063] REISERFS (device loop0): checking transaction log (loop0) [ 143.518837][ T6076] ip_tables: iptables: counters copy to user failed while replacing table [ 143.536412][ T6063] REISERFS (device loop0): Using r5 hash to sort names [ 143.573470][ T6063] REISERFS warning (device loop0): super-2030 reiserfs_fill_super: This file system claims to use 23297 bitmap blocks in its super block, but requires 131072. Clearing to zero. [ 143.590995][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.626761][ T6063] REISERFS (device loop0): using 3.5.x disk format [ 143.645107][ T6063] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 143.702939][ T6063] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 143.736419][ T6056] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 143.757872][ T6056] JBD2: Ignoring recovery information on journal [ 143.797887][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 533 (0) [ 143.849718][ T6063] REISERFS (device loop0): Remounting filesystem read-only [ 143.859408][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 534 (0) [ 143.873282][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 535 (0) [ 143.883669][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 536 (0) [ 143.895024][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 537 (0) [ 143.906009][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 538 (0) [ 143.916318][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 539 (0) [ 143.926825][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 540 (0) [ 143.937768][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 541 (0) [ 143.943712][ T1110] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.949626][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 542 (0) [ 143.973693][ T6056] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.008231][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 543 (0) [ 144.045639][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 544 (0) [ 144.045665][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 545 (0) [ 144.045686][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 546 (0) [ 144.045706][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 547 (0) [ 144.045726][ T6063] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 548 (0) [ 144.235619][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 144.355525][ T1110] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.370360][ T1110] usb 5-1: config 0 has no interface number 0 [ 144.487770][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 144.543590][ T1110] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.552724][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.579707][ T1110] usb 5-1: Product: syz [ 144.594344][ T1110] usb 5-1: Manufacturer: syz [ 144.599015][ T1110] usb 5-1: SerialNumber: syz [ 144.636312][ T1110] usb 5-1: config 0 descriptor?? [ 144.688604][ T1110] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.896293][ T1110] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.925781][ T1110] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.974959][ T6102] loop3: detected capacity change from 0 to 4096 [ 145.130960][ T6102] ntfs3: loop3: failed to convert name for inode 1e. [ 145.158585][ T6122] loop0: detected capacity change from 0 to 512 [ 145.301829][ T6130] vivid-000: disconnect [ 145.334684][ T6122] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.721: Unrecognised inode hash code 255 [ 145.357637][ T1110] usb 5-1: USB disconnect, device number 10 [ 145.373196][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.375507][ T6128] vivid-000: reconnect [ 145.389374][ T1110] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.403349][ T6122] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.721: Corrupt directory, running e2fsck is recommended [ 145.426878][ T1110] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.450237][ T1110] quatech2 5-1:0.51: device disconnected [ 145.471470][ T6122] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 145.523228][ T6122] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.721: corrupted in-inode xattr [ 145.611730][ T6139] loop1: detected capacity change from 0 to 512 [ 145.643958][ T6122] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.721: couldn't read orphan inode 15 (err -117) [ 145.696267][ T6122] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 145.748279][ T6143] loop2: detected capacity change from 0 to 1024 [ 145.797899][ T6122] EXT4-fs error (device loop0): ext4_remount:6062: comm syz.0.721: Abort forced by user [ 145.821867][ T6122] EXT4-fs (loop0): Remounting filesystem read-only [ 145.829123][ T6122] EXT4-fs (loop0): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000. Quota mode: writeback. [ 145.879417][ T6143] hfsplus: xattr searching failed [ 146.023302][ T4805] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.061621][ T6145] loop1: detected capacity change from 0 to 256 [ 146.184766][ T6145] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 146.426858][ T4805] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 146.447720][ T4805] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.502337][ T4805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.660519][ T6154] loop0: detected capacity change from 0 to 8192 [ 146.701891][ T6154] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 146.701891][ T6154] [ 146.733472][ T4805] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.742585][ T4805] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.849305][ T4805] usb 4-1: Product: syz [ 146.875136][ T4805] usb 4-1: Manufacturer: syz [ 146.879816][ T4805] usb 4-1: SerialNumber: syz [ 146.960624][ T4805] usb 4-1: config 0 descriptor?? [ 147.010372][ T6177] loop1: detected capacity change from 0 to 256 [ 147.017971][ T4805] hub 4-1:0.0: bad descriptor, ignoring hub [ 147.034902][ T4805] hub: probe of 4-1:0.0 failed with error -5 [ 147.072623][ T4805] usb 4-1: selecting invalid altsetting 0 [ 147.113764][ T6177] exfat: Deprecated parameter 'namecase' [ 147.119489][ T6177] exfat: Deprecated parameter 'utf8' [ 147.170505][ T6177] exfat: Deprecated parameter 'namecase' [ 147.213702][ T6177] exfat: Deprecated parameter 'namecase' [ 147.224631][ T6180] loop0: detected capacity change from 0 to 1024 [ 147.272532][ T6180] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 147.326668][ T4805] usb 4-1: USB disconnect, device number 5 [ 147.347422][ T6177] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 147.449178][ T1110] kernel write not supported for file /snd/seq (pid: 1110 comm: kworker/1:2) [ 147.795936][ T4389] udevd[4389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.016461][ T6211] loop1: detected capacity change from 0 to 256 [ 148.126560][ T6211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 148.212122][ T6211] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 148.248738][ T6207] loop3: detected capacity change from 0 to 4096 [ 148.277268][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.763'. [ 148.551934][ T6227] ntfs3: loop3: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 148.765815][ T6234] loop0: detected capacity change from 0 to 128 [ 148.843657][ T6234] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 148.917737][ T6234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.055355][ T6236] loop2: detected capacity change from 0 to 4096 [ 149.203815][ T6236] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 149.373841][ T6251] comedi comedi3: mpc624: I/O port conflict (0x1f,16) [ 149.677810][ T6261] exfat: Deprecated parameter 'utf8' [ 150.067972][ T4724] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.132564][ T6261] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 150.208377][ T6221] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.761 (6221) [ 150.340486][ T6280] device wlan0 entered promiscuous mode [ 150.361696][ T6221] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 150.382999][ T6280] batman_adv: batadv0: Adding interface: wlan0 [ 150.404405][ T6221] BTRFS info (device loop4): using free space tree [ 150.411402][ T6280] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.438833][ T6221] BTRFS info (device loop4): has skinny extents [ 150.448765][ T6280] batman_adv: batadv0: Interface activated: wlan0 [ 150.473062][ T4724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.551941][ T4724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.583046][ T4724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.613196][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 150.615059][ T4724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.631830][ T4724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.642137][ T4724] usb 2-1: config 0 descriptor?? [ 150.681048][ T6299] set_capacity_and_notify: 2 callbacks suppressed [ 150.681066][ T6299] loop3: detected capacity change from 0 to 16 [ 150.744539][ T6299] erofs: (device loop3): mounted with root inode @ nid 36. [ 150.761894][ T6221] BTRFS info (device loop4): enabling ssd optimizations [ 150.879722][ T6305] loop0: detected capacity change from 0 to 1024 [ 151.103432][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.153596][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 151.161129][ T4724] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description [ 151.192224][ T4724] plantronics 0003:047F:FFFF.000A: parse failed [ 151.202393][ T4724] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 151.235352][ T13] usb 3-1: config 1 has an invalid interface number: 81 but max is 0 [ 151.260963][ T13] usb 3-1: config 1 has no interface number 0 [ 151.271478][ T13] usb 3-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0 [ 151.290154][ T13] usb 3-1: config 1 interface 81 has no altsetting 0 [ 151.398438][ T23] usb 2-1: USB disconnect, device number 4 [ 151.498762][ T13] usb 3-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 151.528411][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.556915][ T13] usb 3-1: Product: syz [ 151.579086][ T13] usb 3-1: Manufacturer: syz [ 151.597496][ T13] usb 3-1: SerialNumber: syz [ 151.770588][ T6325] loop3: detected capacity change from 0 to 4096 [ 151.829179][ T6325] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 151.859049][ T6325] EXT4-fs (loop3): inline encryption not supported [ 151.881638][ T6328] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.797'. [ 151.889959][ T6325] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.949460][ T6325] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 151.968981][ T6325] System zones: 0-5 [ 151.974591][ T6328] netlink: del zone limit has 8 unknown bytes [ 152.019073][ T6325] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 152.159164][ T13] usb 3-1: USB disconnect, device number 5 [ 152.200582][ T5281] udevd[5281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.81/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.327261][ T6336] loop1: detected capacity change from 0 to 4096 [ 152.517994][ T6343] loop3: detected capacity change from 0 to 8 [ 152.578324][ T6326] loop0: detected capacity change from 0 to 32768 [ 152.590576][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 152.608388][ T6347] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.638423][ T6343] unable to read id index table [ 152.887427][ T6326] XFS (loop0): Mounting V5 Filesystem [ 153.030006][ T6326] XFS (loop0): Ending clean mount [ 153.221344][ T4185] XFS (loop0): Unmounting Filesystem [ 153.773672][ T6390] loop3: detected capacity change from 0 to 256 [ 153.796274][ T6391] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 153.933325][ T6362] loop4: detected capacity change from 0 to 32768 [ 153.991041][ T6393] loop2: detected capacity change from 0 to 4096 [ 154.161964][ T6393] NILFS (loop2): invalid segment: Checksum error in segment payload [ 154.179463][ T6393] NILFS (loop2): trying rollback from an earlier position [ 154.231906][ T6393] NILFS (loop2): recovery complete [ 154.329797][ T6403] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.329970][ T6362] XFS (loop4): Mounting V5 Filesystem [ 154.413919][ T6393] IPv6: addrconf: prefix option has invalid lifetime [ 154.457036][ T6393] IPv6: addrconf: prefix option has invalid lifetime [ 154.473408][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.556705][ T6410] loop0: detected capacity change from 0 to 256 [ 154.574865][ T6362] XFS (loop4): Ending clean mount [ 154.661746][ T6410] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcb51127, utbl_chksum : 0xe619d30d) [ 154.708251][ T4189] XFS (loop4): Unmounting Filesystem [ 154.754929][ T6412] netlink: 'syz.2.828': attribute type 16 has an invalid length. [ 154.796668][ T6412] netlink: 'syz.2.828': attribute type 16 has an invalid length. [ 155.072290][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.096998][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.116929][ T13] usb 4-1: Product: syz [ 155.121187][ T13] usb 4-1: Manufacturer: syz [ 155.153242][ T13] usb 4-1: SerialNumber: syz [ 155.198953][ T6401] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 155.209085][ T6401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.263405][ T4736] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.287769][ T6401] F2FS-fs (loop1): invalid crc value [ 155.307050][ T6401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.402763][ T6401] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.420434][ T6401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.449301][ T6423] nvme_fabrics: missing parameter 'transport=%s' [ 155.473184][ T6423] nvme_fabrics: missing parameter 'nqn=%s' [ 155.643455][ T4736] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 155.663469][ T4736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.683156][ T4736] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.692340][ T4736] usb 1-1: config 1 has no interface number 0 [ 155.722661][ T4736] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.743453][ T4736] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.801237][ T6433] set_capacity_and_notify: 1 callbacks suppressed [ 155.801254][ T6433] loop4: detected capacity change from 0 to 256 [ 155.857099][ T6433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 155.898965][ T6433] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 155.933399][ T4736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.963679][ T13] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.973249][ T4736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.981382][ T4736] usb 1-1: Product: syz [ 155.986070][ T4736] usb 1-1: Manufacturer: syz [ 155.990799][ T4736] usb 1-1: SerialNumber: syz [ 156.064383][ T4736] cdc_wdm 1-1:1.128: skipping garbage [ 156.093000][ T4736] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 156.108727][ T4736] cdc_wdm 1-1:1.128: Unknown control protocol [ 156.275332][ T6441] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.298249][ T4736] usb 1-1: USB disconnect, device number 6 [ 156.305755][ T6441] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 156.312323][ T6441] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 156.377666][ T6441] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 156.393076][ T5569] usb 4-1: USB disconnect, device number 6 [ 156.404191][ T6441] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 156.429237][ T6441] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.443349][ T6441] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 156.460872][ T6441] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 156.481107][ T6441] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 156.491220][ T6441] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 156.511536][ T6441] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 156.523476][ T6441] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 156.764502][ T6439] loop4: detected capacity change from 0 to 32768 [ 156.798073][ T6439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.838 (6439) [ 156.855755][ T6439] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.872693][ T6439] BTRFS info (device loop4): using free space tree [ 156.890842][ T6439] BTRFS info (device loop4): has skinny extents [ 157.196709][ T6443] loop1: detected capacity change from 0 to 32768 [ 157.244916][ T6439] BTRFS info (device loop4): enabling ssd optimizations [ 157.273163][ T13] usb 4-1: Service connection timeout for: 256 [ 157.280282][ T13] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 157.300727][ T13] ath9k_htc: Failed to initialize the device [ 157.310087][ T6443] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 157.322604][ T5569] usb 4-1: ath9k_htc: USB layer deinitialized [ 157.347341][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 157.369158][ T6443] JBD2: Ignoring recovery information on journal [ 157.376936][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.586740][ T6443] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.643323][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 157.821209][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 157.843234][ T5569] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.958679][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 157.977537][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.989972][ T23] usb 3-1: Product: syz [ 158.002629][ T23] usb 3-1: Manufacturer: syz [ 158.039349][ T23] usb 3-1: SerialNumber: syz [ 158.070441][ T23] usb 3-1: config 0 descriptor?? [ 158.083387][ T5569] usb 1-1: Using ep0 maxpacket: 16 [ 158.146494][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 158.223703][ T5569] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.255351][ T5569] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.262317][ T5569] usb 1-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 158.278346][ T5569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.301431][ T5569] usb 1-1: config 0 descriptor?? [ 158.652717][ T6518] device vlan2 entered promiscuous mode [ 158.669028][ T6518] device bridge0 entered promiscuous mode [ 158.818318][ T5569] input: HID 04b3:3105 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04B3:3105.000B/input/input11 [ 158.843187][ T23] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 158.849130][ T23] sq930x: probe of 3-1:0.0 failed with error -71 [ 158.870791][ T23] usb 3-1: USB disconnect, device number 6 [ 158.937978][ T5569] lenovo 0003:04B3:3105.000B: input,hidraw0: USB HID v0.09 Joystick [HID 04b3:3105] on usb-dummy_hcd.0-1/input0 [ 158.993257][ T4797] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.027190][ T21] usb 1-1: USB disconnect, device number 7 [ 159.137139][ T6527] fido_id[6527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 159.181368][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 159.181384][ T26] audit: type=1800 audit(1700006400.640:102): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.872" name="dbroot" dev="configfs" ino=38677 res=0 errno=0 [ 159.209295][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.229248][ T6517] loop3: detected capacity change from 0 to 32768 [ 159.264757][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.309737][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.360873][ T6517] JBD2: Ignoring recovery information on journal [ 159.393417][ T4797] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.448993][ T6541] binder: 6540:6541 ioctl 4018620d 0 returned -22 [ 159.457567][ T6541] binder: 6540:6541 ioctl c0046209 0 returned -22 [ 159.466573][ T6517] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.483145][ T4797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 159.515103][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 159.533728][ T4797] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 159.583417][ T4797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.633905][ T4797] usb 2-1: config 0 descriptor?? [ 159.669696][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 159.801324][ T6546] loop2: detected capacity change from 0 to 4096 [ 159.831137][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 159.864463][ T6551] loop4: detected capacity change from 0 to 256 [ 159.882950][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 159.897711][ T6517] (syz.3.866,6517,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 159.923281][ T6546] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 159.959209][ T6517] (syz.3.866,6517,1):ocfs2_quota_read:201 ERROR: status = -5 [ 159.971902][ T6546] ntfs3: loop2: mft corrupted [ 159.977102][ T6546] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 159.991300][ T6517] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 160.001810][ T6546] ntfs3: loop2: Failed to load $LogFile. [ 160.011812][ T6517] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 160.064120][ T6517] (syz.3.866,6517,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 160.106720][ T6517] (syz.3.866,6517,1):ocfs2_mknod:315 ERROR: status = -5 [ 160.123438][ T6517] (syz.3.866,6517,1):ocfs2_mknod:509 ERROR: status = -5 [ 160.139322][ T6517] (syz.3.866,6517,1):ocfs2_mkdir:666 ERROR: status = -5 [ 160.163438][ T4797] kye 0003:0458:0087.000C: hidraw0: USB HID v0.08 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 160.240920][ T6558] Bluetooth: hci0: unsupported parameter 5161 [ 160.283355][ T6558] Bluetooth: hci0: unsupported parameter 8192 [ 160.289524][ T6558] Bluetooth: hci0: unsupported parameter 5161 [ 160.314611][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 160.351090][ T6517] (syz.3.866,6517,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 160.388257][ T6558] Bluetooth: hci0: unsupported parameter 8192 [ 160.398753][ T21] usb 2-1: USB disconnect, device number 5 [ 160.432346][ T6559] fido_id[6559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.443558][ T6517] (syz.3.866,6517,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 160.493181][ T6517] (syz.3.866,6517,1):ocfs2_quota_read:201 ERROR: status = -5 [ 160.500665][ T6517] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 160.523811][ T6517] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 160.569454][ T6517] (syz.3.866,6517,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 160.581900][ T6517] (syz.3.866,6517,1):ocfs2_mknod:315 ERROR: status = -5 [ 160.598685][ T6563] loop4: detected capacity change from 0 to 1764 [ 160.613214][ T6517] (syz.3.866,6517,1):ocfs2_mknod:509 ERROR: status = -5 [ 160.623916][ T6517] (syz.3.866,6517,1):ocfs2_mkdir:666 ERROR: status = -5 [ 160.670158][ T6517] syz.3.866 (6517) used greatest stack depth: 18208 bytes left [ 160.772437][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 160.779823][ T6569] loop0: detected capacity change from 0 to 256 [ 160.793594][ T6569] exfat: Deprecated parameter 'utf8' [ 160.799921][ T6569] exfat: Deprecated parameter 'utf8' [ 160.870125][ T6569] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 161.020246][ T6573] device veth0_to_hsr entered promiscuous mode [ 161.287297][ T6586] loop1: detected capacity change from 0 to 256 [ 161.479231][ T6589] loop0: detected capacity change from 0 to 4096 [ 161.571385][ T6589] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 161.622011][ T6589] ntfs3: loop0: mft corrupted [ 161.636184][ T6605] loop2: detected capacity change from 0 to 128 [ 161.663281][ T6589] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 161.674335][ T6589] ntfs3: loop0: Failed to load $LogFile. [ 161.720638][ T6605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 161.771668][ T6605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.431316][ T6620] loop2: detected capacity change from 0 to 8 [ 162.551824][ T6620] SQUASHFS error: Failed to read block 0x636: -5 [ 162.561587][ T6620] SQUASHFS error: Unable to read metadata cache entry [634] [ 162.583564][ T6607] loop3: detected capacity change from 0 to 32768 [ 162.681377][ T6600] loop1: detected capacity change from 0 to 40427 [ 162.750208][ T6600] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 162.772007][ T6632] loop2: detected capacity change from 0 to 1024 [ 162.779263][ T6600] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 162.780786][ T6607] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.812016][ T6600] F2FS-fs (loop1): invalid crc value [ 162.901558][ T6600] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 162.983159][ T13] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 163.062765][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 163.165736][ T144] hfsplus: b-tree write err: -5, ino 25 [ 163.182633][ T144] hfsplus: b-tree write err: -5, ino 4 [ 163.210220][ T144] hfsplus: b-tree write err: -5, ino 2 [ 163.225877][ T144] hfsplus: b-tree write err: -5, ino 20 [ 163.307832][ T6600] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 163.323232][ T6600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.355377][ T4186] Bluetooth: hci4: link tx timeout [ 163.360640][ T4186] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 163.369408][ T4186] Bluetooth: hci4: link tx timeout [ 163.374685][ T4186] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.383589][ T13] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 163.392046][ T13] usb 5-1: config 0 has no interface number 0 [ 163.499209][ T4192] attempt to access beyond end of device [ 163.499209][ T4192] loop1: rw=2049, want=45104, limit=40427 [ 163.663574][ T13] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 163.672936][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.711877][ T13] usb 5-1: Product: syz [ 163.728823][ T13] usb 5-1: Manufacturer: syz [ 163.760024][ T13] usb 5-1: SerialNumber: syz [ 163.781925][ T13] usb 5-1: config 0 descriptor?? [ 164.065643][ T13] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 164.098346][ T13] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 164.130519][ T13] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 164.159639][ T13] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 164.203734][ T13] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 164.363433][ T4795] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.411350][ T6690] loop1: detected capacity change from 0 to 8 [ 164.468490][ T6692] loop2: detected capacity change from 0 to 512 [ 164.520099][ T6692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.584125][ T6692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 164.618812][ T6692] System zones: 1-12 [ 164.636157][ T6692] EXT4-fs (loop2): 1 truncate cleaned up [ 164.643695][ T4795] usb 4-1: Using ep0 maxpacket: 8 [ 164.677340][ T6692] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,debug,nodioread_nolock,auto_da_alloc=0x0000000000000403,max_batch_time=0x0000000000000007,nolazytime,. Quota mode: none. [ 164.706967][ T13] usb 5-1: USB disconnect, device number 11 [ 164.743624][ T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 164.806422][ T13] keyspan 5-1:0.133: device disconnected [ 164.843606][ T4795] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.897257][ T6688] loop0: detected capacity change from 0 to 32768 [ 164.973582][ T4795] usb 4-1: config 4 interface 0 has no altsetting 0 [ 165.188345][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.233375][ T4795] usb 4-1: string descriptor 0 read error: -22 [ 165.240554][ T4795] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.307559][ T4795] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 165.373297][ T5569] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 165.423397][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 165.433542][ T21] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 165.459918][ T4795] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 165.524857][ T4795] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.550691][ T4795] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 165.573272][ T4795] usb 4-1: media controller created [ 165.594663][ T4795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.783749][ T5569] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.791846][ T5569] usb 1-1: config 0 has no interface number 0 [ 165.803359][ T21] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.808308][ T6731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.828505][ T21] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.963552][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 165.972688][ T21] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 165.993619][ T5569] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 166.002731][ T5569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.014258][ T21] usb 2-1: Product: syz [ 166.018478][ T21] usb 2-1: Manufacturer: syz [ 166.023729][ T5569] usb 1-1: Product: syz [ 166.028270][ T5569] usb 1-1: Manufacturer: syz [ 166.033702][ T5569] usb 1-1: SerialNumber: syz [ 166.043718][ T5569] usb 1-1: config 0 descriptor?? [ 166.074472][ T21] hub 2-1:4.0: USB hub found [ 166.087153][ T5569] usb 1-1: selecting invalid altsetting 1 [ 166.105357][ T5569] dvb_ttusb_budget: ttusb_init_controller: error [ 166.112412][ T5569] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 166.240983][ T5569] DVB: Unable to find symbol stv0299_attach() [ 166.321822][ T5569] DVB: Unable to find symbol tda8083_attach() [ 166.328414][ T5569] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 166.337233][ T21] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 166.683418][ T5569] usb 2-1: USB disconnect, device number 6 [ 166.724748][ T4795] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.725528][ T6675] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 166.802550][ T6751] set_capacity_and_notify: 2 callbacks suppressed [ 166.802567][ T6751] loop2: detected capacity change from 0 to 32768 [ 166.827410][ T4795] usb 4-1: USB disconnect, device number 7 [ 166.835662][ T13] usb 1-1: USB disconnect, device number 8 [ 166.894050][ T6751] JBD2: Ignoring recovery information on journal [ 166.992507][ T6751] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 167.316409][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 167.359024][ T6764] loop4: detected capacity change from 0 to 32768 [ 167.656183][ T6777] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 167.730023][ T6773] loop3: detected capacity change from 0 to 8192 [ 167.801520][ T5281] loop3: p1 < > p3 p4 < > [ 167.877320][ T5281] loop3: p3 start 852736 is beyond EOD, truncated [ 167.946929][ T6773] loop3: p1 < > p3 p4 < > [ 167.988907][ T6773] loop3: p3 start 852736 is beyond EOD, truncated [ 168.075820][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.444838][ T5862] udevd[5862]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 168.458348][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 168.482785][ T6814] syz.0.1002 uses obsolete (PF_INET,SOCK_PACKET) [ 168.483489][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.555934][ T5862] udevd[5862]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 168.580476][ T5281] udevd[5281]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 168.590972][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 168.611212][ T13] usb 2-1: can't read configurations, error -71 [ 168.641726][ T6819] loop2: detected capacity change from 0 to 128 [ 168.657609][ T6821] loop4: detected capacity change from 0 to 512 [ 168.663651][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.708000][ T6821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1004: bg 0: block 4: invalid block bitmap [ 168.764202][ T6819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.782744][ T6821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 168.784704][ T6819] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.807246][ T6821] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1004: invalid indirect mapped block 1 (level 1) [ 168.825230][ T6821] EXT4-fs (loop4): 1 truncate cleaned up [ 168.830951][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.967523][ T6830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.043566][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24640, setting to 1024 [ 169.080320][ T6835] loop4: detected capacity change from 0 to 64 [ 169.091025][ T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 169.103436][ T4795] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.283499][ T21] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 169.296041][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.315949][ T21] usb 4-1: Product: syz [ 169.320334][ T21] usb 4-1: Manufacturer: syz [ 169.332579][ T21] usb 4-1: SerialNumber: syz [ 169.363578][ T6808] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 169.384173][ T21] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) driver version 1.00 [ 169.403348][ T4795] usb 1-1: Using ep0 maxpacket: 8 [ 169.440675][ T6848] loop1: detected capacity change from 0 to 8 [ 169.578370][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.593609][ T6848] loop1: detected capacity change from 0 to 2048 [ 169.611459][ T4795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 169.623879][ T21] etas_es58x 4-1:1.0: es58x_get_product_info: Could not read the product info: -EPROTO [ 169.635000][ T4795] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 169.652450][ T21] etas_es58x: probe of 4-1:1.0 failed with error -71 [ 169.663434][ T6848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.683323][ T4795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.701721][ T21] usb 4-1: USB disconnect, device number 8 [ 169.747539][ T4795] usb 1-1: config 0 descriptor?? [ 169.869357][ T6856] loop1: detected capacity change from 0 to 1024 [ 169.951926][ T6856] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.1020: lblock 2 mapped to illegal pblock 2 (length 1) [ 169.975693][ T6856] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 170.023405][ T6856] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.1020: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.123211][ T6856] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 170.132867][ T6856] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1020: Failed to acquire dquot type 0 [ 170.190072][ T6850] loop2: detected capacity change from 0 to 32768 [ 170.197168][ T6856] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 170.215348][ T6856] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.1020: mark_inode_dirty error [ 170.256238][ T6856] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 170.271977][ T4795] logitech-djreceiver 0003:046D:C534.000D: unknown main item tag 0x0 [ 170.274495][ T6856] EXT4-fs (loop1): 1 orphan inode deleted [ 170.293449][ T154] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.313398][ T4795] logitech-djreceiver 0003:046D:C534.000D: unknown main item tag 0x0 [ 170.342517][ T6856] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 170.373784][ T154] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 170.477826][ T6853] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 170.477826][ T6853] [ 170.489397][ T154] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 170.550896][ T21] usb 1-1: USB disconnect, device number 9 [ 170.564380][ T6853] read_mapping_page failed! [ 170.593700][ T6853] ERROR: (device loop4): txCommit: [ 170.593700][ T6853] [ 170.612266][ T1277] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.644342][ T1277] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 170.660642][ T1277] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 170.724372][ T4192] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 170.799044][ T4192] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 170.831617][ T4192] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 171.075554][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.246766][ T4795] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.380636][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 171.544013][ T4795] usb 2-1: Using ep0 maxpacket: 32 [ 171.614211][ T6897] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 171.684809][ T4795] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 171.692875][ T4795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.703631][ T4797] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.764368][ T4795] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 171.795119][ T4795] usb 2-1: config 0 has no interface number 1 [ 171.822455][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 171.832266][ T4795] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.063573][ T4795] usb 2-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 172.079796][ T6911] set_capacity_and_notify: 1 callbacks suppressed [ 172.079813][ T6911] loop3: detected capacity change from 0 to 4096 [ 172.083904][ T4795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.113377][ T4797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.127303][ T6911] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 172.133302][ T4795] usb 2-1: Product: syz [ 172.147479][ T4795] usb 2-1: Manufacturer: syz [ 172.152450][ T4797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.165835][ T4795] usb 2-1: SerialNumber: syz [ 172.171318][ T4797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.192248][ T4795] usb 2-1: config 0 descriptor?? [ 172.197489][ T4797] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.207259][ T4797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.228981][ T4797] usb 5-1: config 0 descriptor?? [ 172.242153][ T4795] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 172.243609][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 172.277417][ T6911] ntfs3: loop3: Failed to load $Extend. [ 172.400837][ T6905] loop2: detected capacity change from 0 to 40427 [ 172.459002][ T6905] F2FS-fs (loop2): invalid crc value [ 172.485762][ T6915] loop3: detected capacity change from 0 to 256 [ 172.494202][ T4795] pwc: Failed to set LED on/off time (-71) [ 172.502074][ T6905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.513255][ T4795] pwc: send_video_command error -71 [ 172.518533][ T4795] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 172.532580][ T4795] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 172.541205][ T6915] exfat: Deprecated parameter 'namecase' [ 172.553414][ T6915] exfat: Deprecated parameter 'namecase' [ 172.570147][ T4795] usb 2-1: USB disconnect, device number 9 [ 172.577061][ T6915] exfat: Deprecated parameter 'namecase' [ 172.626902][ T6915] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 172.643429][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.661810][ T21] usb 1-1: config 0 has no interface number 0 [ 172.719685][ T6905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.756438][ T4797] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description [ 172.797569][ T4797] plantronics 0003:047F:FFFF.000E: parse failed [ 172.815297][ T4797] plantronics: probe of 0003:047F:FFFF.000E failed with error -22 [ 172.853048][ T6905] F2FS-fs (loop2): Can't flush 1023 in 0 for segs_per_sec 1 != 1 [ 172.863588][ T21] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 172.894515][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.902785][ T21] usb 1-1: Product: syz [ 172.913692][ T21] usb 1-1: Manufacturer: syz [ 172.923459][ T21] usb 1-1: SerialNumber: syz [ 172.940109][ T21] usb 1-1: config 0 descriptor?? [ 172.954187][ T4190] attempt to access beyond end of device [ 172.954187][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 172.985437][ T21] usb 1-1: selecting invalid altsetting 1 [ 173.011998][ T4797] usb 5-1: USB disconnect, device number 12 [ 173.013655][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 173.043177][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 173.147463][ T21] DVB: Unable to find symbol stv0299_attach() [ 173.163914][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 173.209532][ T21] DVB: Unable to find symbol tda8083_attach() [ 173.217476][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 173.264926][ T21] usb 1-1: USB disconnect, device number 10 [ 173.498534][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.631216][ T6937] loop4: detected capacity change from 0 to 764 [ 173.750993][ T6937] Symlink component flag not implemented [ 173.782908][ T6937] Symlink component flag not implemented (128) [ 173.811079][ T6944] Symlink component flag not implemented (128) [ 174.294045][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'. [ 174.551978][ T6980] loop1: detected capacity change from 0 to 128 [ 174.722592][ T6980] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.794616][ T6980] hpfs: filesystem error: improperly stopped [ 174.800750][ T6980] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.825418][ T6980] hpfs: You really don't want any checks? You are crazy... [ 174.843441][ T6980] hpfs: Code page index out of array [ 174.848798][ T6980] hpfs: code page support is disabled [ 174.883520][ T6980] hpfs: hpfs_map_4sectors(): unaligned read [ 174.893548][ T6980] hpfs: hpfs_map_4sectors(): unaligned read [ 174.900515][ T6980] hpfs: filesystem error: unable to find root dir [ 175.010631][ T6957] loop3: detected capacity change from 0 to 32768 [ 175.051324][ T6957] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1061 (6957) [ 175.145843][ T6957] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 175.222544][ T6957] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 175.271601][ T6957] BTRFS info (device loop3): use zstd compression, level 3 [ 175.285731][ T6957] BTRFS info (device loop3): using free space tree [ 175.292519][ T6957] BTRFS info (device loop3): has skinny extents [ 175.523161][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.591852][ T6957] BTRFS info (device loop3): enabling ssd optimizations [ 175.611503][ T7023] loop0: detected capacity change from 0 to 512 [ 175.651917][ T6969] loop4: detected capacity change from 0 to 40427 [ 175.727607][ T26] audit: type=1800 audit(1700006417.190:103): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1061" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 175.773611][ T7023] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1085: inode has both inline data and extents flags [ 175.795461][ T6969] F2FS-fs (loop4): invalid crc value [ 175.803444][ T7023] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1085: couldn't read orphan inode 15 (err -117) [ 175.857233][ T7008] loop1: detected capacity change from 0 to 40427 [ 175.883575][ T7008] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.892719][ T7008] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.903005][ T7023] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 175.916433][ T21] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.929225][ T21] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.956025][ T6969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.964079][ T7008] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.030985][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.070101][ T21] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 176.106973][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.144061][ T21] usb 3-1: config 0 descriptor?? [ 176.165404][ T6969] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 176.252194][ T6969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.297414][ T7008] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.320549][ T7008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.584656][ T4189] attempt to access beyond end of device [ 176.584656][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 176.659314][ T21] acrux 0003:1A34:0802.000F: unknown main item tag 0x2 [ 176.689605][ T21] acrux 0003:1A34:0802.000F: No inputs registered, leaving [ 176.724622][ T21] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 176.763287][ T21] acrux 0003:1A34:0802.000F: no inputs found [ 176.769676][ T21] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 176.841475][ T7042] loop3: detected capacity change from 0 to 256 [ 176.890237][ T21] usb 3-1: USB disconnect, device number 7 [ 176.929709][ T7042] FAT-fs (loop3): Directory bread(block 64) failed [ 176.946291][ T7042] FAT-fs (loop3): Directory bread(block 65) failed [ 176.952957][ T7042] FAT-fs (loop3): Directory bread(block 66) failed [ 177.020370][ T7042] FAT-fs (loop3): Directory bread(block 67) failed [ 177.050759][ T7042] FAT-fs (loop3): Directory bread(block 68) failed [ 177.077866][ T7042] FAT-fs (loop3): Directory bread(block 69) failed [ 177.093333][ T7043] fido_id[7043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 177.104332][ T7042] FAT-fs (loop3): Directory bread(block 70) failed [ 177.153193][ T7042] FAT-fs (loop3): Directory bread(block 71) failed [ 177.163892][ T7042] FAT-fs (loop3): Directory bread(block 72) failed [ 177.170500][ T7042] FAT-fs (loop3): Directory bread(block 73) failed [ 177.673257][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.733032][ T7065] loop3: detected capacity change from 0 to 2048 [ 177.887873][ T7065] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.913565][ T7065] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.924369][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 177.948682][ T7074] loop4: detected capacity change from 0 to 256 [ 178.026654][ T7051] loop1: detected capacity change from 0 to 32768 [ 178.045684][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.058424][ T7074] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.071196][ T21] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 178.090852][ T7074] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 178.100016][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.114031][ T21] usb 1-1: config 0 descriptor?? [ 178.123294][ T7074] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.139511][ T7051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1094 (7051) [ 178.258138][ T7051] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.301567][ T7076] raw_sendmsg: syz.3.1103 forgot to set AF_INET. Fix it! [ 178.309638][ T7051] BTRFS info (device loop1): setting nodatasum [ 178.329841][ T7051] BTRFS info (device loop1): force zlib compression, level 3 [ 178.349864][ T7051] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 178.359674][ T7051] BTRFS info (device loop1): use lzo compression, level 0 [ 178.396109][ T7051] BTRFS info (device loop1): turning on flush-on-commit [ 178.426523][ T7051] BTRFS info (device loop1): enabling auto defrag [ 178.456993][ T7051] BTRFS info (device loop1): max_inline at 4096 [ 178.485745][ T7051] BTRFS info (device loop1): using free space tree [ 178.519007][ T7051] BTRFS info (device loop1): has skinny extents [ 178.552968][ T7068] loop2: detected capacity change from 0 to 32768 [ 178.605559][ T21] pantherlord 0003:0810:0001.0010: unknown main item tag 0x3 [ 178.634782][ T7081] loop3: detected capacity change from 0 to 4096 [ 178.653344][ T7081] ntfs3: Invalid value for gid. [ 178.668402][ T21] pantherlord 0003:0810:0001.0010: hidraw0: USB HID vff.ff Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 178.750329][ T21] pantherlord 0003:0810:0001.0010: no output reports found [ 178.784700][ T7051] BTRFS info (device loop1): enabling ssd optimizations [ 178.812175][ T21] usb 1-1: USB disconnect, device number 11 [ 179.066406][ T7102] fido_id[7102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.193682][ T4798] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.351130][ T7114] loop4: detected capacity change from 0 to 512 [ 179.463463][ T4798] usb 4-1: Using ep0 maxpacket: 8 [ 179.570208][ T7114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.586766][ T7114] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.597811][ T4798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.611197][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.673156][ T4798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.705191][ T7125] loop0: detected capacity change from 0 to 128 [ 179.714619][ T7123] loop2: detected capacity change from 0 to 2048 [ 179.725496][ T4798] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.763262][ T4798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.821143][ T4798] usb 4-1: config 0 descriptor?? [ 179.830915][ T7125] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 179.876279][ T7125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.941848][ T7123] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.000797][ T7123] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.153711][ T4798] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.203412][ T1110] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 180.335394][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.356917][ T7105] iowarrior 4-1:0.0: Error -90 while submitting URB [ 180.372354][ T4798] usb 4-1: USB disconnect, device number 9 [ 180.477953][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 180.552911][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 180.583392][ T1110] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 180.602036][ T1110] usb 2-1: config 0 has no interface number 0 [ 180.693126][ T7144] loop0: detected capacity change from 0 to 32768 [ 180.703594][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 180.721639][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.739046][ T21] usb 5-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 180.750591][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.773491][ T1110] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 180.787885][ T21] usb 5-1: config 0 descriptor?? [ 180.795648][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.810776][ T1110] usb 2-1: Product: syz [ 180.816578][ T7144] JBD2: Ignoring recovery information on journal [ 180.826112][ T1110] usb 2-1: Manufacturer: syz [ 180.831525][ T1110] usb 2-1: SerialNumber: syz [ 180.891703][ T7144] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 180.931935][ T1110] usb 2-1: config 0 descriptor?? [ 181.096426][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 181.224631][ T1110] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 181.254020][ T1110] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 181.262011][ T1110] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 181.288606][ T21] input: HID 044f:b300 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:044F:B300.0011/input/input14 [ 181.310772][ T1110] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 181.336047][ T1110] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 181.395694][ T21] thrustmaster 0003:044F:B300.0011: input,hidraw0: USB HID v0.04 Joystick [HID 044f:b300] on usb-dummy_hcd.4-1/input0 [ 181.463330][ T21] thrustmaster 0003:044F:B300.0011: can't find FF field in output reports [ 181.488023][ T7165] netlink: 'syz.0.1128': attribute type 49 has an invalid length. [ 181.530988][ T21] usb 5-1: USB disconnect, device number 13 [ 181.656552][ T7170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1134'. [ 181.707131][ T7166] fido_id[7166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 181.807143][ T7158] loop3: detected capacity change from 0 to 40427 [ 181.835182][ T4798] usb 2-1: USB disconnect, device number 10 [ 181.847179][ T4798] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 181.868710][ T7158] F2FS-fs (loop3): invalid crc value [ 181.876925][ T4798] keyspan 2-1:0.133: device disconnected [ 181.934488][ T7158] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.125987][ T7158] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.247033][ T7158] F2FS-fs (loop3): Can't flush 1023 in 0 for segs_per_sec 1 != 1 [ 182.323260][ T4193] attempt to access beyond end of device [ 182.323260][ T4193] loop3: rw=2049, want=45104, limit=40427 [ 182.836385][ T7185] JBD2: Ignoring recovery information on journal [ 182.880294][ T7203] set_capacity_and_notify: 2 callbacks suppressed [ 182.880311][ T7203] loop0: detected capacity change from 0 to 256 [ 183.018041][ T7203] FAT-fs (loop0): Directory bread(block 64) failed [ 183.039798][ T21] kernel write not supported for file /sg0 (pid: 21 comm: kworker/1:0) [ 183.048569][ T7203] FAT-fs (loop0): Directory bread(block 65) failed [ 183.060427][ T7185] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 183.073280][ T7203] FAT-fs (loop0): Directory bread(block 66) failed [ 183.079880][ T7203] FAT-fs (loop0): Directory bread(block 67) failed [ 183.112430][ T7203] FAT-fs (loop0): Directory bread(block 68) failed [ 183.149053][ T7203] FAT-fs (loop0): Directory bread(block 69) failed [ 183.170099][ T7203] FAT-fs (loop0): Directory bread(block 70) failed [ 183.201953][ T7203] FAT-fs (loop0): Directory bread(block 71) failed [ 183.233319][ T7203] FAT-fs (loop0): Directory bread(block 72) failed [ 183.283709][ T7203] FAT-fs (loop0): Directory bread(block 73) failed [ 183.383007][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 183.405676][ T7191] loop1: detected capacity change from 0 to 32768 [ 183.534200][ T7191] jfs_lookup: iget failed on inum 4 [ 183.714479][ T7217] loop2: detected capacity change from 0 to 256 [ 184.148512][ T7223] loop0: detected capacity change from 0 to 4096 [ 184.184631][ T7227] loop2: detected capacity change from 0 to 64 [ 184.363485][ T7223] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 184.428881][ T7213] loop3: detected capacity change from 0 to 32768 [ 184.542906][ T7213] ERROR: (device loop3): diNewExt: no free extents [ 184.542906][ T7213] [ 184.564828][ T7231] loop2: detected capacity change from 0 to 256 [ 184.594278][ T7213] ERROR: (device loop3): remounting filesystem as read-only [ 184.644228][ T7213] ialloc: diAlloc returned -5! [ 185.198984][ T4797] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 185.208947][ T7221] loop4: detected capacity change from 0 to 40427 [ 185.266640][ T7221] F2FS-fs (loop4): invalid crc value [ 185.325558][ T7221] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.369829][ T7249] loop3: detected capacity change from 0 to 4096 [ 185.507100][ T7221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.603422][ T4797] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.634853][ T4797] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.690619][ T7221] F2FS-fs (loop4): Can't flush 1023 in 0 for segs_per_sec 1 != 1 [ 185.703553][ T4797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.729676][ T4797] usb 2-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 185.759926][ T4797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.811367][ T4797] usb 2-1: config 0 descriptor?? [ 185.827891][ T4189] attempt to access beyond end of device [ 185.827891][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 186.011468][ T7235] loop0: detected capacity change from 0 to 40427 [ 186.111788][ T7235] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 186.133283][ T7235] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.188972][ T7235] F2FS-fs (loop0): invalid crc value [ 186.233949][ T7235] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.307684][ T4797] input: HID 14e1:6000 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:14E1:6000.0012/input/input15 [ 186.436292][ T7235] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 186.450465][ T7235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 186.534518][ T4797] hid-penmount 0003:14E1:6000.0012: input,hidraw0: USB HID v0.00 Joystick [HID 14e1:6000] on usb-dummy_hcd.1-1/input0 [ 186.623887][ T4797] usb 2-1: USB disconnect, device number 11 [ 186.662979][ T7289] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 186.662979][ T7289] The task syz.2.1184 (7289) triggered the difference, watch for misbehavior. [ 186.765964][ T7287] fido_id[7287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 186.953650][ T4796] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.084290][ T7292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.183417][ T7292] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.218495][ T7301] tipc: Started in network mode [ 187.224345][ T7301] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 187.233693][ T7301] tipc: Enabling of bearer rejected, failed to enable media [ 187.393424][ T4796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.417673][ T4796] usb 5-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 187.433524][ T4796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.578490][ T7311] tipc: Started in network mode [ 187.591449][ T7311] tipc: Node identity , cluster identity 4711 [ 187.601776][ T7311] tipc: Failed to set node id, please configure manually [ 187.612221][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 187.643246][ T4795] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.793610][ T7305] (syz.1.1189,7305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.825231][ T4798] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.842586][ T7305] (syz.1.1189,7305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.863902][ T7305] (syz.1.1189,7305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 187.891121][ T7305] JBD2: Ignoring recovery information on journal [ 187.923401][ T4795] usb 1-1: Using ep0 maxpacket: 32 [ 187.934090][ T7305] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 187.945520][ T4796] mxuport 5-1:1.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 187.974642][ T4796] mxuport: probe of 5-1:1.0 failed with error -5 [ 188.063661][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 188.103839][ T4795] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.123412][ T4798] usb 4-1: Using ep0 maxpacket: 16 [ 188.148222][ T21] usb 5-1: USB disconnect, device number 14 [ 188.173248][ T1110] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.213674][ T4795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.233299][ T4795] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.263543][ T4798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.282117][ T4798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.295970][ T4798] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.305937][ T4798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.321472][ T7323] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 188.329873][ T4798] usb 4-1: config 0 descriptor?? [ 188.335641][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1197'. [ 188.347523][ T7323] device dummy0 entered promiscuous mode [ 188.355639][ T7323] bridge0: port 3(dummy0) entered blocking state [ 188.362426][ T7323] bridge0: port 3(dummy0) entered disabled state [ 188.372281][ T7323] bridge0: port 3(dummy0) entered blocking state [ 188.379363][ T7323] bridge0: port 3(dummy0) entered forwarding state [ 188.426789][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 188.433771][ T4795] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 188.442956][ T4795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.466545][ T4795] usb 1-1: Product: syz [ 188.472853][ T4795] usb 1-1: Manufacturer: syz [ 188.474963][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 188.489854][ T4795] usb 1-1: SerialNumber: syz [ 188.604569][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.626814][ T7331] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1201'. [ 188.669291][ T7333] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 188.704554][ T1110] usb 3-1: config 4 interface 0 has no altsetting 0 [ 188.840467][ T4798] microsoft 0003:045E:07DA.0013: unbalanced delimiter at end of report description [ 188.851847][ T4798] microsoft 0003:045E:07DA.0013: parse failed [ 188.858735][ T4798] microsoft: probe of 0003:045E:07DA.0013 failed with error -22 [ 188.867906][ T7339] set_capacity_and_notify: 2 callbacks suppressed [ 188.867922][ T7339] loop4: detected capacity change from 0 to 4096 [ 188.892691][ T7339] ntfs3: Unknown parameter 't' [ 188.948549][ T1110] usb 3-1: string descriptor 0 read error: -22 [ 188.959634][ T1110] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 188.973755][ T4795] usb 1-1: cannot find UAC_HEADER [ 188.996420][ T1110] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 189.030522][ T4795] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 189.064249][ T4795] usb 4-1: USB disconnect, device number 10 [ 189.085643][ T1110] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 189.135220][ T1110] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.171004][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.200418][ T1110] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 189.205336][ T4796] usb 1-1: USB disconnect, device number 12 [ 189.239414][ T1110] usb 3-1: media controller created [ 189.281874][ T7319] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 189.300427][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.343710][ T1110] zl10353_read_register: readreg error (reg=127, ret==0) [ 189.401743][ T1110] usb 3-1: USB disconnect, device number 8 [ 189.530342][ T7343] loop4: detected capacity change from 0 to 32768 [ 189.552345][ T7343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1206 (7343) [ 189.604345][ T7343] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 189.627853][ T7343] BTRFS info (device loop4): setting nodatasum [ 189.644100][ T7343] BTRFS info (device loop4): force zlib compression, level 3 [ 189.652426][ T7343] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.673845][ T7343] BTRFS info (device loop4): use lzo compression, level 0 [ 189.682302][ T7343] BTRFS info (device loop4): turning on flush-on-commit [ 189.690740][ T7343] BTRFS info (device loop4): enabling auto defrag [ 189.715562][ T7343] BTRFS info (device loop4): max_inline at 4096 [ 189.738314][ T7343] BTRFS info (device loop4): using free space tree [ 189.763210][ T7343] BTRFS info (device loop4): has skinny extents [ 189.785494][ T7353] loop0: detected capacity change from 0 to 512 [ 189.800874][ T7354] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 189.838454][ T7353] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 189.948195][ T7353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 189.965795][ T7353] System zones: 1-12 [ 189.980027][ T7353] EXT4-fs (loop0): orphan cleanup on readonly fs [ 190.002473][ T7353] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1211: bg 0: block 361: padding at end of block bitmap is not set [ 190.020707][ T7353] EXT4-fs (loop0): Remounting filesystem read-only [ 190.033299][ T7353] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 190.055030][ T7353] EXT4-fs (loop0): Remounting filesystem read-only [ 190.073554][ T7353] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1211: invalid indirect mapped block 12 (level 1) [ 190.165946][ T7353] EXT4-fs (loop0): Remounting filesystem read-only [ 190.174527][ T7353] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1211: invalid indirect mapped block 2 (level 2) [ 190.205649][ T7343] BTRFS info (device loop4): enabling ssd optimizations [ 190.229505][ T7353] EXT4-fs (loop0): Remounting filesystem read-only [ 190.273981][ T7353] EXT4-fs (loop0): 1 truncate cleaned up [ 190.274009][ T7353] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,init_itable. Quota mode: none. [ 190.323307][ T1110] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 190.430139][ T7386] loop3: detected capacity change from 0 to 512 [ 190.592184][ T7391] loop0: detected capacity change from 0 to 256 [ 190.600104][ T7386] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1218: invalid indirect mapped block 10 (level 1) [ 190.608578][ T7386] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1218: invalid indirect mapped block 8 (level 1) [ 190.616521][ T7386] EXT4-fs (loop3): 1 truncate cleaned up [ 190.616550][ T7386] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: none. [ 190.703601][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 190.703639][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.863716][ T1110] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 190.893137][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.902516][ T1110] usb 3-1: Product: syz [ 190.907451][ T1110] usb 3-1: Manufacturer: syz [ 190.912252][ T1110] usb 3-1: SerialNumber: syz [ 190.927986][ T1110] usb 3-1: config 0 descriptor?? [ 190.974170][ T1110] hub 3-1:0.0: bad descriptor, ignoring hub [ 190.990598][ T1110] hub: probe of 3-1:0.0 failed with error -5 [ 191.002804][ T1110] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 191.183428][ T4197] Bluetooth: hci0: command 0x0406 tx timeout [ 191.189942][ T4197] Bluetooth: hci1: command 0x0406 tx timeout [ 191.204039][ T4197] Bluetooth: hci2: command 0x0406 tx timeout [ 191.242355][ T4197] Bluetooth: hci3: command 0x0406 tx timeout [ 191.353334][ T4803] Bluetooth: hci4: command 0x0405 tx timeout [ 191.431506][ T7410] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 191.670687][ T7417] loop1: detected capacity change from 0 to 4096 [ 191.711397][ T7426] tipc: Started in network mode [ 191.733234][ T7426] tipc: Node identity , cluster identity 4711 [ 191.748597][ T7426] tipc: Failed to set node id, please configure manually [ 191.756414][ T7426] tipc: Enabling of bearer rejected, failed to enable media [ 191.851425][ T7417] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 192.027729][ T7430] loop4: detected capacity change from 0 to 2048 [ 192.184452][ T7430] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.213510][ T7430] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 192.274605][ T7430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.479760][ T4197] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.687614][ T7449] loop3: detected capacity change from 0 to 512 [ 192.782690][ T7449] EXT4-fs (loop3): 1 truncate cleaned up [ 192.801469][ T7449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.861746][ T7457] loop4: detected capacity change from 0 to 256 [ 192.877901][ T4197] usb 2-1: config 0 has no interfaces? [ 192.904154][ T7457] exfat: Deprecated parameter 'namecase' [ 192.913850][ T7457] exfat: Deprecated parameter 'namecase' [ 192.996879][ T7457] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 193.032852][ T7463] 9pnet: Insufficient options for proto=fd [ 193.043984][ T4197] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.088191][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.112318][ T4197] usb 2-1: Product: syz [ 193.133154][ T4197] usb 2-1: Manufacturer: syz [ 193.161019][ T4197] usb 2-1: config 0 descriptor?? [ 193.432458][ T26] audit: type=1400 audit(1700006434.890:104): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F260902 pid=7435 comm="syz.1.1239" [ 193.477259][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 193.487478][ T4197] usb 2-1: USB disconnect, device number 12 [ 193.532423][ T7485] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 193.560195][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.598276][ T7485] CIFS: Unable to determine destination address [ 193.681355][ T7491] loop2: detected capacity change from 0 to 64 [ 193.730160][ T7491] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 194.086462][ T7492] loop3: detected capacity change from 0 to 32768 [ 194.186502][ T7498] loop1: detected capacity change from 0 to 1024 [ 194.206381][ T7492] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 194.206381][ T7492] [ 194.236454][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243021][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273539][ T7492] ERROR: (device loop3): remounting filesystem as read-only [ 194.299755][ T7492] ERROR: (device loop3): jfs_rename: [ 194.299755][ T7492] [ 194.318671][ T7498] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 194.510368][ T4193] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 194.510368][ T4193] [ 194.608268][ T7508] loop4: detected capacity change from 0 to 512 [ 194.718715][ T7508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.743755][ T7508] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.131605][ T7517] loop1: detected capacity change from 0 to 4096 [ 195.161270][ T7506] loop2: detected capacity change from 0 to 40427 [ 195.225358][ T7517] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 195.249760][ T7506] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 195.277356][ T7506] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.333404][ T7506] F2FS-fs (loop2): invalid crc value [ 195.444575][ T7506] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.520338][ T7540] loop4: detected capacity change from 0 to 256 [ 195.700392][ T7506] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 195.748744][ T7545] loop0: detected capacity change from 0 to 512 [ 195.753738][ T7506] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.769972][ T4803] usb 3-1: USB disconnect, device number 9 [ 195.871089][ T7545] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.019069][ T7545] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1288: Allocating blocks 41-42 which overlap fs metadata [ 196.152243][ T7545] Quota error (device loop0): write_blk: dquota write failed [ 196.170447][ T7545] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 196.190813][ T7539] loop3: detected capacity change from 0 to 32768 [ 196.220585][ T7545] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 196.242371][ T7545] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1288: Failed to acquire dquot type 1 [ 196.244245][ T7545] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 196.257085][ T7545] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1288: corrupted inode contents [ 196.329113][ T7545] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #12: comm syz.0.1288: mark_inode_dirty error [ 196.329973][ T7545] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1288: corrupted inode contents [ 196.330519][ T7545] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.1288: mark_inode_dirty error [ 196.331317][ T7545] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1288: corrupted inode contents [ 196.338545][ T7545] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 196.339284][ T7545] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1288: corrupted inode contents [ 196.340073][ T7545] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.1288: mark_inode_dirty error [ 196.340478][ T7545] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 196.342189][ T7545] EXT4-fs (loop0): 1 truncate cleaned up [ 196.342216][ T7545] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 196.441641][ T7559] tipc: Enabling of bearer rejected, failed to enable media [ 196.494902][ T7539] ialloc: diAlloc returned -5! [ 196.567977][ T7539] ialloc: diAlloc returned -5! [ 196.853982][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.947691][ T7574] loop1: detected capacity change from 0 to 16 [ 196.973739][ T7574] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 197.418052][ T7585] loop1: detected capacity change from 0 to 256 [ 197.508063][ T7588] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1308'. [ 197.905793][ T7604] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.931633][ T7604] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.937920][ T7598] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 198.007883][ T6635] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.056586][ T7577] XFS (loop3): Mounting V5 Filesystem [ 198.258040][ T7577] XFS (loop3): Ending clean mount [ 198.281805][ T7630] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 198.370121][ T7626] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,max_batch_time=0x0000000000000000,grpjquota=,journal_ioprio=0x0000000000000006,noload,journal_dev=0x000000000000000c,noinit_itable,nogrpid,,errors=continue. Quota mode: none. [ 198.396529][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.406878][ T4193] XFS (loop3): Unmounting Filesystem [ 198.563387][ T7626] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.662291][ T7635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 199.016304][ T26] audit: type=1804 audit(1700006440.420:105): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1329" name="/newroot/244/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 199.143349][ T26] audit: type=1800 audit(1700006440.600:106): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1329" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 199.419497][ T7643] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.463424][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 199.515177][ T7643] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.554439][ T7643] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.561793][ T7643] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.652630][ T4268] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.703262][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 199.719047][ T4268] hfsplus: request for non-existent node 16777216 in B*Tree [ 199.824350][ T21] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.836253][ T21] usb 4-1: config 0 has no interface number 0 [ 199.942746][ T7671] program syz.2.1338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.994151][ T21] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.014903][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.045635][ T21] usb 4-1: Product: syz [ 200.049979][ T21] usb 4-1: Manufacturer: syz [ 200.085468][ T21] usb 4-1: SerialNumber: syz [ 200.090429][ T7650] set_capacity_and_notify: 7 callbacks suppressed [ 200.090445][ T7650] loop1: detected capacity change from 0 to 32768 [ 200.116320][ T21] usb 4-1: config 0 descriptor?? [ 200.156057][ T21] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.231030][ T7650] [ 200.231030][ T7650] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.231030][ T7650] [ 200.339757][ T4192] [ 200.339757][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.339757][ T4192] [ 200.372807][ T21] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.381657][ T4192] [ 200.381657][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.381657][ T4192] [ 200.423949][ T21] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.464286][ T7685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.559807][ T7681] loop0: detected capacity change from 0 to 4096 [ 200.578344][ T7681] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 200.810457][ T4803] usb 4-1: USB disconnect, device number 11 [ 200.823173][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 200.833904][ T4803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.891925][ T4803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.968668][ T4803] quatech2 4-1:0.51: device disconnected [ 201.044880][ T7704] loop1: detected capacity change from 0 to 64 [ 201.064772][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 201.123297][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 201.163339][ T7708] netlink: 'syz.4.1357': attribute type 14 has an invalid length. [ 201.180441][ T7708] netlink: 'syz.4.1357': attribute type 12 has an invalid length. [ 201.842410][ T7735] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 202.004738][ T7745] trusted_key: encrypted_key: insufficient parameters specified [ 202.084435][ T7717] loop0: detected capacity change from 0 to 32768 [ 202.140650][ T7717] (syz.0.1361,7717,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.176966][ T7717] (syz.0.1361,7717,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.203184][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 202.218078][ T7717] (syz.0.1361,7717,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 202.286493][ T7717] JBD2: Ignoring recovery information on journal [ 202.446411][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 202.475861][ T7717] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 202.563526][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.586790][ T21] usb 5-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 202.613221][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.655856][ T21] usb 5-1: config 0 descriptor?? [ 202.689243][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 203.066353][ T7781] loop2: detected capacity change from 0 to 1764 [ 203.135963][ T21] hid_mf 0003:0079:1803.0014: unknown main item tag 0x3 [ 203.156217][ T21] hid_mf 0003:0079:1803.0014: unknown main item tag 0x0 [ 203.183309][ T21] hid_mf 0003:0079:1803.0014: global environment stack underflow [ 203.196922][ T21] hid_mf 0003:0079:1803.0014: item 0 0 1 11 parsing failed [ 203.217585][ T21] hid_mf 0003:0079:1803.0014: HID parse failed. [ 203.243245][ T21] hid_mf: probe of 0003:0079:1803.0014 failed with error -22 [ 203.359272][ T21] usb 5-1: USB disconnect, device number 15 [ 203.600028][ T7790] loop2: detected capacity change from 0 to 8192 [ 203.732953][ T7790] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 203.752978][ T7790] REISERFS (device loop2): using ordered data mode [ 203.767092][ T7790] reiserfs: using flush barriers [ 203.777715][ T7790] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.805616][ T7792] loop1: detected capacity change from 0 to 32768 [ 203.851290][ T7786] loop3: detected capacity change from 0 to 32768 [ 203.858690][ T7790] REISERFS (device loop2): checking transaction log (loop2) [ 203.908148][ T7790] REISERFS (device loop2): Using r5 hash to sort names [ 203.996291][ T7790] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 204.035974][ T7786] JBD2: Ignoring recovery information on journal [ 204.045054][ T7792] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 204.076485][ T7804] loop4: detected capacity change from 0 to 128 [ 204.155045][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 204.209792][ T7786] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 204.461936][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 204.680006][ T7817] loop0: detected capacity change from 0 to 1764 [ 204.781237][ T7824] lo speed is unknown, defaulting to 1000 [ 204.844120][ T7824] lo speed is unknown, defaulting to 1000 [ 204.910041][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 204.923775][ T7824] lo speed is unknown, defaulting to 1000 [ 204.962463][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 204.981454][ T7824] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.028468][ T4795] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.034675][ T7824] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 205.107871][ T4803] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.128084][ T7824] lo speed is unknown, defaulting to 1000 [ 205.135696][ T7824] lo speed is unknown, defaulting to 1000 [ 205.142793][ T7824] lo speed is unknown, defaulting to 1000 [ 205.150335][ T7824] lo speed is unknown, defaulting to 1000 [ 205.164316][ T7824] lo speed is unknown, defaulting to 1000 [ 205.241012][ T7832] loop0: detected capacity change from 0 to 4096 [ 205.401803][ T7840] loop4: detected capacity change from 0 to 4096 [ 205.443473][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.473412][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.494400][ T7841] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.526276][ T4795] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 205.553529][ T4803] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.566959][ T4795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.576182][ T4803] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.585595][ T4803] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 205.596001][ T4795] usb 4-1: config 0 descriptor?? [ 205.601921][ T4803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.639183][ T4803] usb 3-1: config 0 descriptor?? [ 205.951286][ T7858] loop4: detected capacity change from 0 to 736 [ 205.974027][ T7859] ubi0: attaching mtd0 [ 206.085056][ T4795] apple 0003:05AC:024F.0015: unbalanced collection at end of report description [ 206.107461][ T4803] input: HID 1b96:0011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0011.0016/input/input17 [ 206.125163][ T4795] apple 0003:05AC:024F.0015: parse failed [ 206.131489][ T4795] apple: probe of 0003:05AC:024F.0015 failed with error -22 [ 206.279351][ T4803] ntrig 0003:1B96:0011.0016: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 206.318521][ T4795] usb 4-1: USB disconnect, device number 12 [ 206.334854][ T4803] usb 3-1: USB disconnect, device number 10 [ 206.357785][ T7868] loop0: detected capacity change from 0 to 1024 [ 206.538426][ T7869] fido_id[7869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 206.678048][ T7861] loop1: detected capacity change from 0 to 32768 [ 206.753239][ T5567] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.133374][ T5567] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.153202][ T5567] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.202202][ T5567] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.217745][ T5567] usb 5-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 207.227353][ T5567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.239223][ T5567] usb 5-1: config 0 descriptor?? [ 207.493422][ T7908] tipc: Enabling of bearer rejected, failed to enable media [ 207.725581][ T5567] topseed 0003:04F2:0618.0017: unknown main item tag 0x0 [ 207.747814][ T5567] input: HID 04f2:0618 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F2:0618.0017/input/input18 [ 207.763169][ T7923] delete_channel: no stack [ 207.902505][ T7929] loop0: detected capacity change from 0 to 164 [ 207.943609][ T5567] topseed 0003:04F2:0618.0017: input,hidraw0: USB HID v0.40 Device [HID 04f2:0618] on usb-dummy_hcd.4-1/input0 [ 208.016391][ T5567] usb 5-1: USB disconnect, device number 16 [ 208.069628][ T7931] loop3: detected capacity change from 0 to 4096 [ 208.179128][ T7938] usb usb7: usbfs: process 7938 (syz.2.1461) did not claim interface 0 before use [ 208.225705][ T7943] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.262271][ T7936] fido_id[7936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 208.452555][ T7947] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1464'. [ 208.477981][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 208.635560][ T7960] loop1: detected capacity change from 0 to 512 [ 208.655939][ T7961] loop0: detected capacity change from 0 to 256 [ 208.781734][ T7960] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 208.836886][ T7960] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1469: corrupted in-inode xattr [ 208.850700][ T7960] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1469: couldn't read orphan inode 15 (err -117) [ 208.865686][ T7973] device wireguard0 entered promiscuous mode [ 208.893413][ T7960] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 208.919739][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.044884][ T4795] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.324288][ T7982] loop1: detected capacity change from 0 to 4096 [ 209.374528][ T7982] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 209.456454][ T7982] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 209.466341][ T7988] exfat: Deprecated parameter 'namecase' [ 209.475519][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 209.495425][ T4795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 209.496297][ T7988] exfat: Deprecated parameter 'namecase' [ 209.507041][ T4795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 209.521967][ T4795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 209.532440][ T4795] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 209.549832][ T4795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.568648][ T4795] usb 4-1: config 0 descriptor?? [ 209.623471][ T7988] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 209.822350][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 209.884761][ T4795] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 210.093208][ T4795] hdpvr 4-1:0.0: device init failed [ 210.117734][ T4795] hdpvr: probe of 4-1:0.0 failed with error -12 [ 210.160048][ T4795] usb 4-1: USB disconnect, device number 13 [ 210.255739][ T8010] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000007,sysvgroups,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 210.296120][ T8011] set_capacity_and_notify: 2 callbacks suppressed [ 210.296138][ T8011] loop0: detected capacity change from 0 to 4096 [ 210.334695][ T8010] EXT4-fs error (device loop1): ext4_ext_precache:608: inode #2: comm syz.1.1493: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 210.547717][ T8029] loop2: detected capacity change from 0 to 64 [ 210.596600][ T8011] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 210.614696][ T8029] hfs: unable to locate alternate MDB [ 210.622348][ T8029] hfs: continuing without an alternate MDB [ 210.687358][ T8011] ntfs3: loop0: failed to convert "0080" to cp1251 [ 210.741763][ T8011] ntfs3: loop0: failed to convert name for inode 1e. [ 210.793313][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.203399][ T7] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.225331][ T7] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 211.282287][ T7] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.335166][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.342780][ T7] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 211.354148][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.379430][ T7] usb 5-1: config 0 descriptor?? [ 211.413835][ T8026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.426142][ T8056] loop1: detected capacity change from 0 to 4096 [ 211.449468][ T26] audit: type=1800 audit(1700006452.910:107): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1514" name="trace_pipe" dev="tracefs" ino=25780 res=0 errno=0 [ 211.583414][ T4795] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.700180][ T8056] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 211.778885][ T8056] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 211.873498][ T4795] usb 4-1: Using ep0 maxpacket: 32 [ 211.885476][ T7] greenasia 0003:0E8F:0012.0018: unknown main item tag 0x5 [ 211.892890][ T7] greenasia 0003:0E8F:0012.0018: unknown main item tag 0x0 [ 211.917681][ T7] greenasia 0003:0E8F:0012.0018: No inputs registered, leaving [ 211.929793][ T7] greenasia 0003:0E8F:0012.0018: hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 211.942772][ T7] greenasia 0003:0E8F:0012.0018: no inputs found [ 211.992000][ T4192] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 212.001001][ T4192] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 212.043384][ T4795] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 212.055262][ T4795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.077394][ T4795] usb 4-1: config 0 has no interface number 0 [ 212.090448][ T4795] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.098894][ T1110] usb 5-1: USB disconnect, device number 17 [ 212.304661][ T4795] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 212.321254][ T4795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.344384][ T4795] usb 4-1: Product: syz [ 212.352045][ T4795] usb 4-1: Manufacturer: syz [ 212.369560][ T4795] usb 4-1: SerialNumber: syz [ 212.396381][ T4795] usb 4-1: config 0 descriptor?? [ 212.466536][ T4795] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 212.478589][ T4795] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 212.673374][ T4795] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 212.900406][ T4795] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 213.101781][ T4795] usb 4-1: USB disconnect, device number 14 [ 213.109542][ T4795] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 213.394777][ T8123] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 213.455465][ T8084] loop0: detected capacity change from 0 to 40427 [ 213.510815][ T8084] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 213.531084][ T8084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 213.572463][ T8128] loop4: detected capacity change from 0 to 4096 [ 213.589444][ T8084] F2FS-fs (loop0): invalid crc value [ 213.623841][ T8084] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.715250][ T8141] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.743482][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 213.778618][ T8128] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 213.809025][ T8144] loop1: detected capacity change from 0 to 64 [ 213.839440][ T8084] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 213.849006][ T8084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.918239][ T8148] loop2: detected capacity change from 0 to 64 [ 214.078612][ T8151] netlink: 'syz.3.1557': attribute type 3 has an invalid length. [ 214.089312][ T8151] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 214.125316][ T8151] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1557'. [ 214.355607][ T8165] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1563'. [ 214.372609][ T8163] loop1: detected capacity change from 0 to 256 [ 214.403214][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1563'. [ 214.459827][ T8163] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.491847][ T8163] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 214.540041][ T8163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 214.635168][ T26] audit: type=1800 audit(1700006456.100:108): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1564" name="file1" dev="loop1" ino=1048644 res=0 errno=0 [ 214.713163][ T5567] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 214.948800][ T8179] loop0: detected capacity change from 0 to 4096 [ 214.986049][ T8179] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 215.076966][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.107611][ T5567] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 215.137285][ T5567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.149835][ T8185] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 215.166109][ T8179] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 215.191608][ T5567] usb 4-1: config 0 descriptor?? [ 215.210414][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1572'. [ 215.679643][ T8209] loop1: detected capacity change from 0 to 16 [ 215.705392][ T5567] speedlink 0003:1AE7:9001.0019: unbalanced collection at end of report description [ 215.731648][ T8209] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.739942][ T5567] speedlink: probe of 0003:1AE7:9001.0019 failed with error -22 [ 215.932431][ T5567] usb 4-1: USB disconnect, device number 15 [ 216.038155][ T8217] loop4: detected capacity change from 0 to 128 [ 216.071862][ T8189] loop2: detected capacity change from 0 to 32768 [ 216.077889][ T8215] loop0: detected capacity change from 0 to 4096 [ 216.132808][ T8217] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 216.179708][ T8215] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.207516][ T8215] NILFS (loop0): mounting unchecked fs [ 216.214493][ T8215] NILFS (loop0): recovery required for readonly filesystem [ 216.221954][ T8215] NILFS (loop0): write access will be enabled during recovery [ 216.302461][ T8189] XFS (loop2): Mounting V5 Filesystem [ 216.343912][ T8215] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 216.363515][ T5281] udevd[5281]: incorrect nilfs2 checksum on /dev/loop0 [ 216.444655][ T8189] XFS (loop2): Ending clean mount [ 216.522092][ T5862] udevd[5862]: incorrect nilfs2 checksum on /dev/loop0 [ 216.617604][ T4190] XFS (loop2): Unmounting Filesystem [ 216.987717][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'. [ 217.022785][ T8257] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1606'. [ 217.954727][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 217.981540][ T8310] binder: 8309:8310 ioctl c0306201 2000000004c0 returned -14 [ 218.311070][ T8330] tipc: Enabling of bearer rejected, failed to enable media [ 218.382248][ T8327] loop4: detected capacity change from 0 to 4096 [ 218.499743][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1644'. [ 218.523108][ T8342] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.551668][ T8327] NILFS (loop4): error -22 preparing GC: cannot mark copying blocks dirty [ 218.651097][ T8346] loop2: detected capacity change from 0 to 64 [ 218.678463][ T8345] loop3: detected capacity change from 0 to 512 [ 218.699138][ T8348] loop0: detected capacity change from 0 to 1024 [ 218.776447][ T8345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.799676][ T8348] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 218.894264][ T8345] EXT4-fs (loop3): 1 truncate cleaned up [ 218.915430][ T8345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.080479][ T8334] loop1: detected capacity change from 0 to 32768 [ 219.143937][ T8357] loop2: detected capacity change from 0 to 64 [ 219.248805][ T8334] ialloc: diAlloc returned -5! [ 219.321403][ T8364] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.388647][ T277] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 219.388647][ T277] [ 219.441151][ T277] ERROR: (device loop1): remounting filesystem as read-only [ 219.454226][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 219.980950][ T8380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.063216][ T8380] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.093240][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.449121][ T8388] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 220.459443][ T21] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 220.501941][ T8388] REISERFS (device loop1): using ordered data mode [ 220.511730][ T8370] XFS (loop2): Mounting V5 Filesystem [ 220.526480][ T8388] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.569534][ T8388] REISERFS (device loop1): checking transaction log (loop1) [ 220.581832][ T8370] XFS (loop2): Ending clean mount [ 220.599944][ T8370] XFS (loop2): Quotacheck needed: Please wait. [ 220.653262][ T21] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 220.673136][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.691466][ T21] usb 1-1: Product: syz [ 220.695769][ T21] usb 1-1: Manufacturer: syz [ 220.700401][ T21] usb 1-1: SerialNumber: syz [ 220.706190][ T8388] REISERFS (device loop1): Using r5 hash to sort names [ 220.742231][ T8388] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 220.776220][ T21] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 220.805738][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 220.873460][ T8388] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.895127][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.897637][ T8370] XFS (loop2): Quotacheck: Done. [ 220.953456][ T21] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 220.991835][ T8376] dvb-usb: bulk message failed: -22 (2/0) [ 221.009844][ T21] usb 1-1: media controller created [ 221.042051][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.069668][ T4190] XFS (loop2): Unmounting Filesystem [ 221.263832][ T21] DVB: Unable to find symbol mt352_attach() [ 221.269973][ T21] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 221.300732][ T8405] set_capacity_and_notify: 4 callbacks suppressed [ 221.300750][ T8405] loop3: detected capacity change from 0 to 32768 [ 221.346793][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 221.379733][ T21] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 221.417734][ T21] usb 1-1: USB disconnect, device number 13 [ 221.528741][ T8421] loop1: detected capacity change from 0 to 512 [ 221.574196][ T8405] XFS (loop3): Mounting V5 Filesystem [ 221.621949][ T21] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 221.705514][ T8411] loop4: detected capacity change from 0 to 40427 [ 221.748228][ T8421] EXT4-fs (loop1): 1 orphan inode deleted [ 221.756343][ T8405] XFS (loop3): Ending clean mount [ 221.773581][ T8421] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 221.806065][ T8421] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.817100][ T8411] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 221.853516][ T8411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 221.881933][ T8433] loop0: detected capacity change from 0 to 24 [ 221.900945][ T8411] F2FS-fs (loop4): invalid crc value [ 221.937821][ T8421] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full [ 221.960778][ T8411] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 222.041867][ T4193] XFS (loop3): Unmounting Filesystem [ 222.228145][ T8411] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 222.272866][ T8411] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.493314][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.638411][ T4189] attempt to access beyond end of device [ 222.638411][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 222.677217][ T8453] 0x000200000001-0x000277594ace : "" [ 222.712838][ T8453] mtd: partition "" is out of reach -- disabled [ 222.743211][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 222.783641][ T8453] ftl_cs: FTL header not found. [ 222.863651][ T21] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 222.901224][ T21] usb 2-1: config 0 has no interface number 0 [ 222.921526][ T21] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 222.942226][ T21] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.962837][ T21] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.973188][ T21] usb 2-1: config 0 interface 196 has no altsetting 0 [ 223.008934][ T8460] loop2: detected capacity change from 0 to 512 [ 223.035059][ T8460] EXT4-fs (loop2): Test dummy encryption mode enabled [ 223.053423][ T4795] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.126044][ T8460] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1689: inode has both inline data and extents flags [ 223.143341][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 223.163163][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.171238][ T21] usb 2-1: Product: syz [ 223.199145][ T21] usb 2-1: Manufacturer: syz [ 223.203970][ T8460] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1689: couldn't read orphan inode 15 (err -117) [ 223.223198][ T21] usb 2-1: SerialNumber: syz [ 223.227359][ T8460] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 223.243293][ T21] usb 2-1: config 0 descriptor?? [ 223.263641][ T8442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.270904][ T7036] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 223.323367][ T4795] usb 1-1: Using ep0 maxpacket: 16 [ 223.369607][ T8464] loop4: detected capacity change from 0 to 1024 [ 223.447472][ T4795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.473417][ T4795] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.653345][ T7036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.667867][ T7036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.688388][ T7036] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.703372][ T4795] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.713740][ T7036] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.722902][ T4795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.723756][ T21] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 223.736168][ T4795] usb 1-1: Product: syz [ 223.751065][ T4795] usb 1-1: Manufacturer: syz [ 223.756428][ T4795] usb 1-1: SerialNumber: syz [ 223.763143][ T7036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.771602][ T21] ipheth: probe of 2-1:0.196 failed with error -22 [ 223.788821][ T7036] usb 4-1: config 0 descriptor?? [ 223.933466][ T4800] usb 2-1: USB disconnect, device number 13 [ 223.953318][ T21] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 224.113531][ T4795] usb 1-1: 0:2 : does not exist [ 224.132000][ T4795] usb 1-1: USB disconnect, device number 14 [ 224.153197][ T5567] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 224.278326][ T7036] input: HID 047f:ffff as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.001A/input/input21 [ 224.323372][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.333816][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.354562][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.396275][ T7036] plantronics 0003:047F:FFFF.001A: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 224.410074][ T5567] usb 5-1: Using ep0 maxpacket: 32 [ 224.415842][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 224.427739][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.436408][ T21] usb 3-1: SerialNumber: syz [ 224.496420][ T4795] usb 4-1: USB disconnect, device number 16 [ 224.506460][ T21] usb 3-1: 0:2 : does not exist [ 224.544077][ T5567] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 224.552376][ T5567] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 224.609084][ T5567] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 224.639073][ T8474] fido_id[8474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 224.662306][ T5567] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 224.682717][ T5567] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.746353][ T21] usb 3-1: USB disconnect, device number 11 [ 224.788777][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1697'. [ 224.826732][ T8482] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 224.879543][ T5567] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 224.891904][ T5567] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 224.901933][ T5567] usb 5-1: Product: syz [ 224.931027][ T5567] usb 5-1: Manufacturer: syz [ 224.936167][ T5567] usb 5-1: SerialNumber: syz [ 224.954730][ T5567] usb 5-1: config 0 descriptor?? [ 225.009404][ T5567] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 225.039082][ T5567] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 225.295513][ T4795] usb 5-1: USB disconnect, device number 18 [ 225.344097][ T4795] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 225.434654][ T8504] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 225.441300][ T8504] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 225.468327][ T8504] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 225.490494][ T8504] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 225.541022][ T8504] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 225.574389][ T8504] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 225.581834][ T8504] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 225.623374][ T8504] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 225.641617][ T8490] loop0: detected capacity change from 0 to 32768 [ 225.723445][ T8490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1701 (8490) [ 225.809860][ T8490] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 225.850048][ T8521] tipc: Started in network mode [ 225.873547][ T8490] BTRFS info (device loop0): using free space tree [ 225.879545][ T8521] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 225.880123][ T8490] BTRFS info (device loop0): has skinny extents [ 225.910397][ T8521] tipc: Enabled bearer , priority 10 [ 226.030357][ T8490] BTRFS info (device loop0): enabling ssd optimizations [ 226.247874][ T8553] loop2: detected capacity change from 0 to 1024 [ 226.366884][ T8553] hfsplus: invalid length 1033 has been corrected to 255 [ 226.388726][ T8553] hfsplus: invalid length 1033 has been corrected to 255 [ 226.433717][ T8550] loop3: detected capacity change from 0 to 4096 [ 226.462442][ T8553] hfsplus: invalid length 1033 has been corrected to 255 [ 226.559821][ T8557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.605488][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 226.643995][ T8550] NILFS (loop3): error -22 preparing GC: cannot mark copying blocks dirty [ 226.785083][ T1277] hfsplus: b-tree write err: -5, ino 25 [ 226.790903][ T1277] hfsplus: b-tree write err: -5, ino 4 [ 226.823562][ T1277] hfsplus: b-tree write err: -5, ino 2 [ 226.829214][ T1277] hfsplus: b-tree write err: -5, ino 26 [ 226.917141][ T13] tipc: Node number set to 10136234 [ 227.023354][ T8570] loop0: detected capacity change from 0 to 8 [ 227.093169][ T8573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.099689][ T8573] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 227.166218][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 227.192463][ T8573] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 227.208165][ T8573] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 227.287732][ T8573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 227.296418][ T8581] loop0: detected capacity change from 0 to 64 [ 227.306863][ T8573] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 227.332880][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 227.354286][ T8581] hfs: hfs: Invalid key length: 94 [ 227.367085][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 227.384164][ T8573] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 227.402091][ T8573] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 227.419527][ T9] ------------[ cut here ]------------ [ 227.432525][ T9] kernel BUG at fs/hfs/inode.c:447! [ 227.442253][ T8573] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 227.453210][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 227.459380][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 227.466700][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 227.477275][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 227.483328][ T9] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 227.488904][ T9] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 b1 be 8d ff e9 43 fe ff ff e8 f7 8a 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 227.508549][ T9] RSP: 0018:ffffc90000ce73a0 EFLAGS: 00010293 [ 227.514773][ T9] RAX: ffffffff823089a9 RBX: ffff88805e4c3c18 RCX: ffff88813fe90000 [ 227.522782][ T9] RDX: 0000000000000000 RSI: ffffffff8c4e3000 RDI: 0000000000000000 [ 227.530792][ T9] RBP: ffffc90000ce7530 R08: ffff88813fe90000 R09: 0000000000000003 [ 227.538808][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 227.546918][ T9] R13: 1ffff9200019ce78 R14: 0000000000000000 R15: ffff88805e4c3bd8 [ 227.554920][ T9] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 227.563893][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.570826][ T9] CR2: 00007f6363d3a158 CR3: 00000000637cd000 CR4: 00000000003506e0 [ 227.578846][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.586941][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.595054][ T9] Call Trace: [ 227.598359][ T9] [ 227.601318][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 227.606728][ T9] ? __writeback_single_inode+0x46d/0xda0 [ 227.612606][ T9] ? __rwlock_init+0x140/0x140 [ 227.617418][ T9] __writeback_single_inode+0x6c4/0xda0 [ 227.620891][ T8573] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 227.623016][ T9] writeback_sb_inodes+0xaaa/0x1750 [ 227.634670][ T9] ? queue_io+0x530/0x530 [ 227.639040][ T9] ? move_expired_inodes+0x722/0x770 [ 227.644373][ T9] ? rcu_is_watching+0x11/0xa0 [ 227.649182][ T9] ? queue_io+0x3ba/0x530 [ 227.653543][ T9] wb_writeback+0x44a/0xbc0 [ 227.658114][ T9] ? rcu_lock_release+0x20/0x20 [ 227.663516][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.669531][ T9] ? __lock_acquire+0x7b50/0x7b50 [ 227.674615][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 227.679966][ T9] wb_workfn+0x43a/0xf20 [ 227.684260][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 227.690032][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.696062][ T9] ? __lock_acquire+0x7b50/0x7b50 [ 227.701407][ T9] ? read_lock_is_recursive+0x10/0x10 [ 227.706839][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 227.712872][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 227.718107][ T9] process_one_work+0x867/0xff0 [ 227.723126][ T9] ? worker_detach_from_pool+0x240/0x240 [ 227.728901][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 227.734222][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 227.739272][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 227.744856][ T9] ? wq_worker_running+0x97/0x170 [ 227.749904][ T9] worker_thread+0xad7/0x12a0 [ 227.754617][ T9] kthread+0x42e/0x520 [ 227.758713][ T9] ? rcu_lock_release+0x20/0x20 [ 227.763703][ T9] ? kthread_blkcg+0xd0/0xd0 [ 227.768335][ T9] ret_from_fork+0x1f/0x30 [ 227.772808][ T9] [ 227.775858][ T9] Modules linked in: [ 227.853011][ T9] ---[ end trace 6f6bbf6deb0cd0dc ]--- [ 227.860062][ T9] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 227.866593][ T9] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 b1 be 8d ff e9 43 fe ff ff e8 f7 8a 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 227.889194][ T9] RSP: 0018:ffffc90000ce73a0 EFLAGS: 00010293 [ 227.896619][ T9] RAX: ffffffff823089a9 RBX: ffff88805e4c3c18 RCX: ffff88813fe90000 [ 227.908960][ T9] RDX: 0000000000000000 RSI: ffffffff8c4e3000 RDI: 0000000000000000 [ 227.917298][ T9] RBP: ffffc90000ce7530 R08: ffff88813fe90000 R09: 0000000000000003 [ 227.927817][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 227.937694][ T9] R13: 1ffff9200019ce78 R14: 0000000000000000 R15: ffff88805e4c3bd8 [ 227.948174][ T9] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 227.957475][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.966528][ T9] CR2: 00007f6363d3c2f8 CR3: 00000000754a0000 CR4: 00000000003506e0 [ 227.974873][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.985707][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.994076][ T9] Kernel panic - not syncing: Fatal exception [ 228.000606][ T9] Kernel Offset: disabled [ 228.004951][ T9] Rebooting in 86400 seconds..