last executing test programs: 2m30.83023584s ago: executing program 3 (id=4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) writev(r0, &(0x7f0000002fc0)=[{0x0}, {&(0x7f0000001600)="d640", 0x2}], 0x2) 2m30.655065397s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="361503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m27.978414683s ago: executing program 3 (id=43): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m27.009144177s ago: executing program 3 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xf, 0x35, 0x0, 0x0, @str='/proc/keys\x00'}]}, 0x30}], 0x1}, 0x0) 2m11.213813939s ago: executing program 32 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xf, 0x35, 0x0, 0x0, @str='/proc/keys\x00'}]}, 0x30}], 0x1}, 0x0) 2m9.157034964s ago: executing program 0 (id=185): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(0x4) 2m9.094660743s ago: executing program 0 (id=186): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0xe6, 0xdffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m8.647418207s ago: executing program 0 (id=189): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000440)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x53fffffe) 2m8.126320417s ago: executing program 0 (id=191): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80000) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) 2m8.03807889s ago: executing program 0 (id=192): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m5.394305883s ago: executing program 0 (id=203): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x9, 'DE'}, @main=@item_4={0x3, 0x0, 0xb, '8Vb7'}, @global=@item_012={0x2, 0x1, 0x2, "1059"}]}}, 0x0}, 0x0) 1m49.820399807s ago: executing program 33 (id=203): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x9, 'DE'}, @main=@item_4={0x3, 0x0, 0xb, '8Vb7'}, @global=@item_012={0x2, 0x1, 0x2, "1059"}]}}, 0x0}, 0x0) 36.884661502s ago: executing program 5 (id=803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x0) 36.668204351s ago: executing program 5 (id=807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) close(0x4) 36.520321423s ago: executing program 5 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 36.376568895s ago: executing program 5 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 36.184507688s ago: executing program 5 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 35.728475621s ago: executing program 5 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r1, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 35.509978379s ago: executing program 34 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r1, @ANYBLOB="df4800000000fddbdf250c0000000c0003800800038004000180180001801400020064756d6d79300000000000000000000098020380c6000400de2c3645fb5604118f9f23e4a35aecffd463b3451bd614aca14e01fe7abaf793196e21ac423b44230782d24e36691a0441a0273e942679e9a4690a31d9366bfd281eab6641ec951c085bc96df66b2ef54ca7e327e0bd9bed4d95c75847dce58391b019d688ee54465d5010193016e9a4156198faea0760bcd9cf66e3d4df5c5985c2ac4dd50e06b71be959451744c077679db78ca0961b15ca276d4055292970802c36563ce1597776c7201c54b59ae1817355dd9f03fcc5a0e93a8d05af7518230e00000800020001800000b60004006437a181719e09509d18a6fa0629d518e916218c219781006283d0d28901fca799fe8fa155decbad70ca4f49487e77eb249b8c137cd215bad947d48fed5630f0aebf62c86924df30cd0a7e15707ec9308d6c9b5d4273035f3fdf760fe02d93ef7630d80fe2483c02089ccf77f215f75db8dce1dffba1c084bd4ad94198b32e9204b96fef2164b985547f35f78a192402d20f4719045859663de05895e70d5593b718214e519009fa8f02c70e199c9c4ca4660000080002000300000008000200be0e000088000500580b33040da263c614a56bf3476907f7489ea23c9ec9bd15a60767991f667c80c2332120291271790fcdf0b17487a76b42de82c6548d64b6fe305bd816e17e71bf0efab5794b3d8a2e9d58b8e3ef45f401db1b6bcc6d00ca00e38fb985e29003c95ab82c0e71b37c26d6a2e07b53dbd0a00eda25a6822dffe449ebf9fd1f31061f2b0de16c000380040001802400018008000100aa0d00000800010004000000040003000b00020064756d6d79300000400001800b00020064756d6d793000000800010027000000060002005e0000000c000200657468746f6f6c0008000100f3ffffff0b00020064756d6d7930000008000200ff07000064000380080002000200000057000400877cb4a0d4e2a5b9f7322c86cbb34d57dae83482206101f301baa0b0e4ddcb2f52567452ab6aec64b7a939969369674982b824fc78d9cca6c017585b86c79b634472a16272bdb64b45325cf8c2313676976c05000001038021000400715b48a123aae123785957d9a137469eabdc2b81eb11b678ec778c1b090000000800020006000000060002"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 7.633169784s ago: executing program 1 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 7.181194007s ago: executing program 1 (id=1038): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x486, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.117423311s ago: executing program 1 (id=1072): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 4.159680728s ago: executing program 1 (id=1074): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fd00000002"], 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414aa08000700e000000108000a"], 0x48}}, 0x0) 3.799782069s ago: executing program 1 (id=1080): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 3.527871777s ago: executing program 6 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c000000180005800c000280040004003c00000008000100756470"], 0x2c}, 0x1, 0x0, 0x0, 0x20000061}, 0x8094) 3.397615102s ago: executing program 6 (id=1086): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 3.262046306s ago: executing program 1 (id=1089): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 3.207919035s ago: executing program 6 (id=1091): r0 = syz_io_uring_setup(0x16d3, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x5f92, 0x0, 0x0, 0x0, 0x0) 3.02259666s ago: executing program 6 (id=1095): setuid(0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) 2.775010072s ago: executing program 6 (id=1097): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0x19) 2.589170407s ago: executing program 6 (id=1100): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="361503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.419452815s ago: executing program 4 (id=1104): syz_io_uring_setup(0x9ed, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, 0x0, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) 2.275750497s ago: executing program 4 (id=1109): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4110, &(0x7f0000000000)=0x100e) 1.780839921s ago: executing program 4 (id=1110): unshare(0x400) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, @broadcast}}, 0x24) 1.733160332s ago: executing program 4 (id=1111): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0x24, 0xffffffffffffffff, &(0x7f00000000c0)) 1.673731911s ago: executing program 2 (id=1112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000808) 1.655067347s ago: executing program 4 (id=1113): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 1.572661542s ago: executing program 2 (id=1114): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x32600) 1.530395104s ago: executing program 4 (id=1115): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) 1.360924641s ago: executing program 7 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.174099205s ago: executing program 7 (id=1118): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x504, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [@dstopts={0x29}]}}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x3c, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 1.09427033s ago: executing program 7 (id=1119): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa0000019}) 1.09251893s ago: executing program 2 (id=1130): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000006c0)={[{@errors_remount}]}, 0x1, 0x524, &(0x7f0000000b00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) 979.057528ms ago: executing program 7 (id=1120): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd1, 0x0, 0x0) 920.368137ms ago: executing program 7 (id=1122): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 555.816767ms ago: executing program 7 (id=1123): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 474.131461ms ago: executing program 2 (id=1124): syz_read_part_table(0x59e, &(0x7f0000000000)="$eJzs0r1Lq2cYB+AnLz2EQg85iOBgB6HiFBXioEMyiMSQxYhYcXArCA46CA4OEonOfvwDil8gLuIeOokKUiGdJEtBnAsWl0xvqXmXOvVL23Kua0h47vt+uHn4vYH/tSj8HMdxKoTw5V+4/e1ZcbzcMzk6NR1CKsyFEIpff/XSSSUTcbr9f5GcK8m5nM41Dm7Hfjn79MM3P173HkVJvx6FsB5CWHw4zvzNp/EZOC9cZTY2l0tbq4WF+9La49B8f7F7u7i0O3yYr8505WeTD6se/e7aTyHEb7K/tzFychdXnvY+Dny4brRyN8lcNvWPrOM/5nX++521Zq010Xe6MpjtaF5Wd5Lcn+UPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sfPCVWZjc7m0tVpYuC+tPQ7N9xe7t4tLu8OH+epMV342as/Vo/fZ39sYObmLK097Hwc+XDdauZtkLpt6m/38u17nv99Za9ZaE32nK4PZjuZldSfJ/Vn+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfVBwv90yOTk2HkApzIYSx6NPxb/U43e6nkrmLl9/vpitJvZzONQ5ux77/on08mkzq9SiE9RDC4sNx5r3fwp/3awAAAP//0A2FTA==") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 122.832034ms ago: executing program 2 (id=1125): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2000001, 0x0, 0x9504, 0x10e06, 0x7, "3f3c5e7dabdd9c123d8761ffff00", 0x5, 0xdf}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 0s ago: executing program 2 (id=1126): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000300)={[{@mblk_io_submit}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') kernel console output (not intermixed with test programs): usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.672810][ T4781] usb 5-1: config 0 interface 29 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 138.691737][ T4542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.741983][ T4542] usb 6-1: config 0 descriptor?? [ 138.788543][ T4781] usb 5-1: config 0 interface 29 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 138.811926][ T4542] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.824256][ T4781] usb 5-1: config 0 interface 29 has no altsetting 0 [ 138.865756][ T4542] dvb-usb: bulk message failed: -22 (3/0) [ 138.935876][ T4542] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.988219][ T4542] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 139.018800][ T4542] usb 6-1: media controller created [ 139.053207][ T4542] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.097859][ T4542] dvb-usb: bulk message failed: -22 (6/0) [ 139.099703][ T4781] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=44.da [ 139.130654][ T4542] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 139.139766][ T4781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.157682][ T4781] usb 5-1: Product: syz [ 139.164828][ T4781] usb 5-1: Manufacturer: syz [ 139.170848][ T4781] usb 5-1: SerialNumber: syz [ 139.195687][ T4781] usb 5-1: config 0 descriptor?? [ 139.209371][ T4542] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 139.232031][ T5171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.255822][ T4542] dvb-usb: schedule remote query interval to 150 msecs. [ 139.272213][ T4542] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 139.295210][ T4542] usb 6-1: USB disconnect, device number 2 [ 139.304036][ T4781] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 139.415084][ T4542] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.473518][ T4533] usb 5-1: USB disconnect, device number 5 [ 139.489582][ T154] usb 5-1: Failed to submit usb control message: -71 [ 139.500398][ T154] usb 5-1: unable to send the bmi data to the device: -71 [ 139.513781][ T154] usb 5-1: unable to get target info from device [ 139.525331][ T154] usb 5-1: could not get target info (-71) [ 139.535654][ T154] usb 5-1: could not probe fw (-71) [ 139.680155][ T5199] loop2: detected capacity change from 0 to 128 [ 139.727152][ T5195] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.810299][ T5199] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 139.870647][ T5199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.962526][ T5199] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 139.978794][ T5202] loop5: detected capacity change from 0 to 4096 [ 139.997694][ T5199] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 140.044024][ T5202] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 140.151682][ T5212] loop4: detected capacity change from 0 to 16 [ 140.209734][ T4187] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 140.239563][ T5212] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 140.251150][ T4187] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 140.392196][ T5213] loop1: detected capacity change from 0 to 4096 [ 140.452827][ T5213] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.711399][ T5213] ntfs: volume version 3.1. [ 140.767566][ T5213] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 140.898739][ T5213] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 140.948091][ T4187] syz-executor (4187) used greatest stack depth: 20304 bytes left [ 140.994812][ T5215] loop4: detected capacity change from 0 to 4096 [ 141.181395][ T4661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.326361][ T5215] overlayfs: upper fs does not support tmpfile. [ 141.380732][ T5215] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.406428][ T4661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.434806][ T5209] loop6: detected capacity change from 0 to 32768 [ 141.506955][ T5209] ======================================================= [ 141.506955][ T5209] WARNING: The mand mount option has been deprecated and [ 141.506955][ T5209] and is ignored by this kernel. Remove the mand [ 141.506955][ T5209] option from the mount to silence this warning. [ 141.506955][ T5209] ======================================================= [ 141.582072][ T4661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.738116][ T4661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.772649][ T5226] loop4: detected capacity change from 0 to 512 [ 141.954017][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 142.094853][ T5226] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.130471][ T5209] JBD2: Ignoring recovery information on journal [ 142.336122][ T5241] program syz.1.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.456741][ T5243] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.306: invalid size [ 142.571218][ T5209] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 142.691710][ T5243] EXT4-fs (loop4): Remounting filesystem read-only [ 142.936951][ T5248] loop1: detected capacity change from 0 to 4096 [ 143.149965][ T5248] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 143.218706][ T4996] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.360528][ T5258] loop4: detected capacity change from 0 to 4096 [ 143.608370][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 143.610473][ T4996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.641995][ T4925] ocfs2: Unmounting device (7,6) on (node local) [ 143.691358][ T4996] usb 6-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 143.727072][ T5258] overlayfs: upper fs does not support tmpfile. [ 143.735404][ T4996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.768991][ T5258] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.811276][ T4996] usb 6-1: config 0 descriptor?? [ 143.915275][ T5271] loop1: detected capacity change from 0 to 1024 [ 144.131096][ T5279] capability: warning: `syz.4.322' uses 32-bit capabilities (legacy support in use) [ 144.142450][ T4692] Bluetooth: hci3: command 0x0409 tx timeout [ 144.294086][ T4996] logitech 0003:046D:C20A.0008: hidraw0: USB HID v0.02 Device [HID 046d:c20a] on usb-dummy_hcd.5-1/input0 [ 144.311978][ T4996] logitech 0003:046D:C20A.0008: no inputs found [ 144.382655][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 144.429067][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.474285][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.528785][ T5237] device bridge_slave_0 entered promiscuous mode [ 144.602183][ T4996] usb 6-1: USB disconnect, device number 3 [ 144.617722][ T5290] loop1: detected capacity change from 0 to 1024 [ 144.699149][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.708234][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.738100][ T5286] fido_id[5286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 144.776407][ T5237] device bridge_slave_1 entered promiscuous mode [ 144.828887][ T5293] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 144.883557][ T5293] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.019026][ T5293] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.328: invalid size [ 145.086472][ T5293] EXT4-fs (loop6): Remounting filesystem read-only [ 145.160804][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.287238][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.527402][ T5298] set_capacity_and_notify: 1 callbacks suppressed [ 145.527424][ T5298] loop5: detected capacity change from 0 to 4096 [ 145.683628][ T5291] loop4: detected capacity change from 0 to 32768 [ 145.722410][ T5298] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 145.781925][ T5237] team0: Port device team_slave_0 added [ 145.810588][ T5298] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 145.836320][ T5291] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.327 (5291) [ 145.863361][ T5237] team0: Port device team_slave_1 added [ 145.877731][ T5306] loop6: detected capacity change from 0 to 4096 [ 145.948808][ T5298] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 145.971134][ T5291] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.007548][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.024449][ T5306] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 146.061534][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.117482][ T5291] BTRFS info (device loop4): enabling auto defrag [ 146.133308][ T5298] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 146.170901][ T5291] BTRFS info (device loop4): use no compression [ 146.207190][ T5291] BTRFS info (device loop4): max_inline at 4096 [ 146.219868][ T4996] Bluetooth: hci3: command 0x041b tx timeout [ 146.232098][ T5298] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 146.258592][ T5291] BTRFS info (device loop4): using free space tree [ 146.284620][ T5298] ntfs: volume version 3.1. [ 146.295030][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.327969][ T5291] BTRFS info (device loop4): has skinny extents [ 146.343125][ T5298] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 146.432591][ T5298] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 146.508317][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.538586][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.587929][ T5298] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 146.637773][ T5298] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 146.672454][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.697891][ T5298] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 146.727067][ T5290] loop1: detected capacity change from 0 to 32768 [ 146.968273][ T5291] BTRFS info (device loop4): enabling ssd optimizations [ 146.992113][ T5290] XFS (loop1): Mounting V5 Filesystem [ 147.116233][ T5337] loop6: detected capacity change from 0 to 4096 [ 147.123274][ T4661] device hsr_slave_0 left promiscuous mode [ 147.244956][ T4661] device hsr_slave_1 left promiscuous mode [ 147.294896][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.355413][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.368126][ T5290] XFS (loop1): Ending clean mount [ 147.460456][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.549592][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.560446][ T4185] XFS (loop1): Unmounting Filesystem [ 147.594504][ T5349] overlayfs: upper fs does not support tmpfile. [ 147.658024][ T5349] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.668839][ T4661] device bridge_slave_1 left promiscuous mode [ 147.677633][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.873771][ T4661] device bridge_slave_0 left promiscuous mode [ 147.911881][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.324309][ T4998] Bluetooth: hci3: command 0x040f tx timeout [ 148.507940][ T4661] device veth1_macvtap left promiscuous mode [ 148.575250][ T4661] device veth0_macvtap left promiscuous mode [ 148.594850][ T4661] device veth1_vlan left promiscuous mode [ 148.614081][ T4661] device veth0_vlan left promiscuous mode [ 148.661676][ T5351] loop5: detected capacity change from 0 to 32768 [ 149.116548][ T5364] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 149.398713][ T5371] loop1: detected capacity change from 0 to 512 [ 149.494623][ T5371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.548611][ T5371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.698808][ T5379] loop4: detected capacity change from 0 to 16 [ 149.731346][ T5371] EXT4-fs (loop1): 1 orphan inode deleted [ 149.793055][ T5379] erofs: (device loop4): mounted with root inode @ nid 36. [ 149.848974][ T5371] EXT4-fs (loop1): 1 truncate cleaned up [ 149.857031][ T5371] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 150.078449][ T5371] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.335: path /87/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 150.118816][ T5382] loop6: detected capacity change from 0 to 4096 [ 150.173714][ T5371] EXT4-fs (loop1): Remounting filesystem read-only [ 150.261784][ T5384] loop5: detected capacity change from 0 to 4096 [ 150.348546][ T5384] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 150.385190][ T5382] overlayfs: upper fs does not support tmpfile. [ 150.449265][ T4996] Bluetooth: hci3: command 0x0419 tx timeout [ 150.487315][ T5382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 150.570334][ T5388] loop4: detected capacity change from 0 to 1024 [ 150.787877][ T5388] hfsplus: bad catalog entry type [ 151.023640][ T9] hfsplus: b-tree write err: -5, ino 4 [ 151.040885][ T4661] team0 (unregistering): Port device team_slave_1 removed [ 151.264253][ T4661] team0 (unregistering): Port device team_slave_0 removed [ 151.394145][ T5400] overlayfs: failed to set xattr on upper [ 151.405203][ T4661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.420973][ T5400] overlayfs: ...falling back to index=off,metacopy=off. [ 151.440945][ T5400] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 151.466109][ T4661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.704334][ T4661] bond0 (unregistering): Released all slaves [ 151.722165][ T4533] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.859477][ T5237] device hsr_slave_0 entered promiscuous mode [ 151.876588][ T5237] device hsr_slave_1 entered promiscuous mode [ 152.096047][ T5418] loop6: detected capacity change from 0 to 1024 [ 152.109085][ T4533] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 152.218665][ T4533] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 152.309079][ T4533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.401826][ T4533] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 152.420629][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 152.455739][ T5423] loop1: detected capacity change from 0 to 1764 [ 152.527125][ T5420] loop5: detected capacity change from 0 to 4096 [ 152.658633][ T5420] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 152.959898][ T5435] udc-core: couldn't find an available UDC or it's busy [ 153.001794][ T5435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.528777][ T4533] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 153.538224][ T4533] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 153.591949][ T5455] loop5: detected capacity change from 0 to 8 [ 153.600644][ T4533] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 153.618974][ T4533] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 153.645178][ T4533] usb 5-1: USB disconnect, device number 6 [ 154.158704][ T4786] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 154.171619][ T5473] loop1: detected capacity change from 0 to 64 [ 154.180202][ T5470] comedi comedi3: rti800: I/O port conflict (0xf7,16) [ 154.225168][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.306127][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.371222][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.449751][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.598657][ T4786] usb 7-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 154.598715][ T4786] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.598745][ T4786] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 154.598775][ T4786] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.598810][ T4786] usb 7-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 154.598836][ T4786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.601277][ T4786] usb 7-1: config 0 descriptor?? [ 154.619198][ T5462] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.848755][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.112004][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.168263][ T4786] wacom 0003:056A:0325.0009: unknown main item tag 0x0 [ 155.197757][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.221526][ T4786] wacom 0003:056A:0325.0009: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.6-1/input0 [ 155.258134][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.315481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.362827][ T4542] usb 7-1: USB disconnect, device number 2 [ 155.421254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.469814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.481644][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.555609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.597732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.629630][ T4781] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.650362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.682833][ T5498] fido_id[5498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 155.701629][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.704690][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.724691][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.840419][ T5476] loop5: detected capacity change from 0 to 32768 [ 155.873924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.903645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.960120][ T4781] usb 2-1: Using ep0 maxpacket: 32 [ 155.974808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.033963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.050997][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 156.051016][ T26] audit: type=1800 audit(1772106717.700:9): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.382" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 156.097915][ T5476] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 156.097915][ T5476] [ 156.118209][ T5484] loop4: detected capacity change from 0 to 32768 [ 156.129266][ T4781] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 156.160288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.173441][ T4781] usb 2-1: config 0 has no interface number 0 [ 156.239178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.271216][ T5476] ERROR: (device loop5): remounting filesystem as read-only [ 156.314954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.399518][ T4781] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.419491][ T5476] ialloc: diAlloc returned -5! [ 156.429013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.452943][ T4781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.469831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.492718][ T4781] usb 2-1: Product: syz [ 156.497326][ T4781] usb 2-1: Manufacturer: syz [ 156.508720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.552014][ T4781] usb 2-1: SerialNumber: syz [ 156.561312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.608696][ T5512] loop6: detected capacity change from 0 to 256 [ 156.622934][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.633181][ T4781] usb 2-1: config 0 descriptor?? [ 156.646296][ T5512] exfat: Deprecated parameter 'namecase' [ 156.719112][ T4781] smsc95xx v2.0.0 [ 156.767005][ T5512] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 157.349617][ T4781] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 157.448110][ T4781] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 157.511191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.548705][ T4781] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 157.554797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.677112][ T4781] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 157.757449][ T4781] usb 2-1: USB disconnect, device number 6 [ 157.769681][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.919283][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.960071][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.080339][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.113070][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.157547][ T5557] loop1: detected capacity change from 0 to 1024 [ 158.181276][ T5237] device veth0_vlan entered promiscuous mode [ 158.250612][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.291283][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.391305][ T5237] device veth1_vlan entered promiscuous mode [ 158.442679][ T5557] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 158.519257][ T5557] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.404: iget: special inode unallocated [ 158.537484][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.620436][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.674776][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.767802][ T5237] device veth0_macvtap entered promiscuous mode [ 158.837195][ T5557] EXT4-fs (loop1): no journal found [ 158.845762][ T5237] device veth1_macvtap entered promiscuous mode [ 158.878619][ T5557] EXT4-fs (loop1): can't get journal size [ 158.938879][ T5557] EXT4-fs (loop1): filesystem is read-only [ 158.945211][ T5557] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 158.980920][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.046237][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.062670][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.076688][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.098221][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.114659][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.125070][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.140673][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.155132][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.167575][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.189672][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.214970][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.277729][ T4786] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.321175][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.399203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.439881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.471324][ T5589] loop5: detected capacity change from 0 to 1024 [ 159.498987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.524120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.542377][ T4786] usb 5-1: Using ep0 maxpacket: 16 [ 159.557051][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.589578][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.601678][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.616106][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.643182][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.671929][ T5589] hfsplus: bad catalog entry type [ 159.677364][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.698556][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.712222][ T4786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.735757][ T4786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.746826][ T4691] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.770173][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.781708][ T4786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.798731][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.819512][ T4786] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.838772][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.852620][ T4786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.868601][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.895183][ T4786] usb 5-1: config 0 descriptor?? [ 159.914114][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.941259][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.944782][ T144] hfsplus: b-tree write err: -5, ino 4 [ 159.987739][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.019018][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.040168][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.058791][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.075707][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.096737][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.199147][ T4691] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.233327][ T4691] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 160.257668][ T4691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.371760][ T4691] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 160.402048][ T4786] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 160.439963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.459372][ T4786] microsoft 0003:045E:07DA.000A: report is too long [ 160.466967][ T4786] microsoft 0003:045E:07DA.000A: item 0 4 0 11 parsing failed [ 160.493630][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.540411][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.551610][ T4786] microsoft 0003:045E:07DA.000A: parse failed [ 160.558853][ T4786] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 160.610357][ T4786] usb 5-1: USB disconnect, device number 7 [ 160.642816][ T5613] netlink: 224 bytes leftover after parsing attributes in process `syz.6.421'. [ 160.670247][ T5616] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 160.684588][ T5613] tipc: Started in network mode [ 160.708937][ T5613] tipc: Node identity 7f000001, cluster identity 4711 [ 160.716371][ T5616] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 160.730280][ T5613] tipc: Enabling of bearer rejected, failed to enable media [ 160.754189][ T5616] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 160.774035][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.818916][ T5616] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 160.838634][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.868683][ T5616] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 160.884947][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.960526][ T5616] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 160.989441][ T5616] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 161.032726][ T5616] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 161.069412][ T5616] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 161.091771][ T5627] openvswitch: netlink: Duplicate or invalid key (type 0). [ 161.105178][ T5627] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.550267][ T5637] loop2: detected capacity change from 0 to 4096 [ 161.570878][ T5641] loop4: detected capacity change from 0 to 256 [ 161.638157][ T5637] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 161.729467][ T4691] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 161.745128][ T4691] stv0680 2-1:4.0: Could not get descriptor 0200 [ 161.808995][ T4691] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 161.848660][ T4691] stv0680 2-1:4.0: last error: 11, command = 0x22 [ 161.913169][ T4691] usb 2-1: USB disconnect, device number 7 [ 162.028925][ T4542] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.390147][ T4542] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 162.418601][ T4542] usb 6-1: config 1 has no interface number 0 [ 162.435824][ T4542] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 162.480248][ T4542] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.575852][ T5674] loop6: detected capacity change from 0 to 1764 [ 162.656214][ T5676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 162.698813][ T4542] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 162.719171][ T4542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.743152][ T4542] usb 6-1: Product: syz [ 162.763072][ T4542] usb 6-1: Manufacturer: syz [ 162.773236][ T4542] usb 6-1: SerialNumber: syz [ 162.849270][ T5646] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.870054][ T4542] usb 6-1: Expected 3 endpoints, found: 2 [ 163.067595][ T5674] loop6: detected capacity change from 0 to 8192 [ 163.152031][ T5674] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 163.193827][ T5674] REISERFS (device loop6): using ordered data mode [ 163.206698][ T5674] reiserfs: using flush barriers [ 163.220960][ T5674] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.252997][ T5674] REISERFS (device loop6): checking transaction log (loop6) [ 163.273810][ T5674] REISERFS (device loop6): Using r5 hash to sort names [ 163.292343][ T5674] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 163.309136][ T5687] loop4: detected capacity change from 0 to 2048 [ 163.462993][ T5687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.585994][ T5687] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 163.691824][ T5666] loop2: detected capacity change from 0 to 32768 [ 163.977944][ T5696] loop1: detected capacity change from 0 to 4096 [ 164.308695][ T5696] ntfs3: loop1: ino=1f, "file3" failed to undo rename [ 164.713854][ T5710] loop6: detected capacity change from 0 to 8192 [ 164.732591][ T5720] loop1: detected capacity change from 0 to 8 [ 164.769789][ T5720] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.790320][ T5710] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 164.820202][ T23] usb 6-1: USB disconnect, device number 4 [ 164.895176][ T5710] REISERFS (device loop6): using ordered data mode [ 164.904185][ T5720] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.915055][ T5720] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.922214][ T5710] reiserfs: using flush barriers [ 164.926290][ T5720] SQUASHFS error: Unable to read inode 0x127 [ 164.969330][ T5710] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.069202][ T5710] REISERFS (device loop6): checking transaction log (loop6) [ 165.285707][ T5736] loop2: detected capacity change from 0 to 256 [ 165.438593][ T5710] REISERFS (device loop6): Using tea hash to sort names [ 165.500021][ T5710] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 166.049766][ T5743] gfs2: quota_quantum mount option requires a positive numeric argument [ 166.426544][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 166.454878][ T5732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.470 (5732) [ 166.558833][ T4542] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.576164][ T5732] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 166.616036][ T5732] BTRFS info (device loop4): enabling auto defrag [ 166.632195][ T5755] set_capacity_and_notify: 2 callbacks suppressed [ 166.632214][ T5755] loop1: detected capacity change from 0 to 4096 [ 166.707497][ T5732] BTRFS info (device loop4): use no compression [ 166.749626][ T5732] BTRFS info (device loop4): force clearing of disk cache [ 166.784647][ T5755] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 166.835298][ T5732] BTRFS info (device loop4): max_inline at 4096 [ 166.882084][ T5732] BTRFS info (device loop4): disabling free space tree [ 166.951516][ T5732] BTRFS info (device loop4): has skinny extents [ 166.988938][ T4542] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.001330][ T4542] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 167.078411][ T4542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.134157][ T4542] usb 3-1: config 0 descriptor?? [ 167.217070][ T5779] loop5: detected capacity change from 0 to 256 [ 167.258857][ T5777] loop6: detected capacity change from 0 to 256 [ 167.388682][ T4542] (null): keene_cmd_main failed (-71) [ 167.445669][ T5779] FAT-fs (loop5): Directory bread(block 64) failed [ 167.454759][ T4542] video4linux radio48: keene_cmd_main failed (-71) [ 167.471676][ T5777] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 167.513519][ T5779] FAT-fs (loop5): Directory bread(block 65) failed [ 167.525161][ T5779] FAT-fs (loop5): Directory bread(block 66) failed [ 167.535241][ T4542] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 167.535720][ T5779] FAT-fs (loop5): Directory bread(block 67) failed [ 167.556892][ T5779] FAT-fs (loop5): Directory bread(block 68) failed [ 167.583524][ T5777] exFAT-fs (loop6): failed to load alloc-bitmap [ 167.603662][ T4542] usb 3-1: USB disconnect, device number 4 [ 167.647825][ T5777] exFAT-fs (loop6): failed to recognize exfat type [ 167.650785][ T5779] FAT-fs (loop5): Directory bread(block 69) failed [ 167.667721][ T5779] FAT-fs (loop5): Directory bread(block 70) failed [ 167.679796][ T5779] FAT-fs (loop5): Directory bread(block 71) failed [ 167.693340][ T5779] FAT-fs (loop5): Directory bread(block 72) failed [ 167.716894][ T5779] FAT-fs (loop5): Directory bread(block 73) failed [ 167.738362][ T5732] BTRFS info (device loop4): enabling ssd optimizations [ 167.780443][ T5732] BTRFS info (device loop4): clearing free space tree [ 167.812103][ T5732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.864418][ T5777] loop6: detected capacity change from 0 to 512 [ 167.892356][ T5732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.949109][ T4786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.182037][ T5777] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 168.206253][ T5800] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.299292][ T5777] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.459705][ T4786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.507915][ T4786] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 168.569293][ T4786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.649660][ T4786] usb 2-1: config 0 descriptor?? [ 169.161259][ T5812] loop4: detected capacity change from 0 to 256 [ 169.189581][ T4786] waltop 0003:172F:0501.000B: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 169.305342][ T5812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 169.338065][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 169.353383][ T4691] usb 2-1: USB disconnect, device number 8 [ 169.575235][ T5824] loop2: detected capacity change from 0 to 24 [ 169.613363][ T5819] fido_id[5819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 169.855707][ T5824] romfs: read error for inode 0x8000 [ 169.929879][ T5810] loop5: detected capacity change from 0 to 32768 [ 170.142996][ T5810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.498 (5810) [ 170.309176][ T5810] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 170.373848][ T5810] BTRFS info (device loop5): setting nodatacow, compression disabled [ 170.486263][ T5810] BTRFS info (device loop5): force clearing of disk cache [ 170.510221][ T5810] BTRFS info (device loop5): enabling ssd optimizations [ 170.548518][ T5810] BTRFS info (device loop5): using spread ssd allocation scheme [ 170.573452][ T5810] BTRFS info (device loop5): turning off barriers [ 170.656995][ T5810] BTRFS info (device loop5): disabling free space tree [ 170.690434][ T5810] BTRFS info (device loop5): not using ssd optimizations [ 170.725076][ T5810] BTRFS info (device loop5): not using spread ssd allocation scheme [ 170.745143][ T5848] loop6: detected capacity change from 0 to 512 [ 170.779446][ T5810] BTRFS info (device loop5): has skinny extents [ 170.849109][ T5848] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.513: invalid block [ 170.905768][ T5848] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.513: invalid indirect mapped block 1024 (level 0) [ 170.956080][ T5848] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.513: bg 0: block 35: padding at end of block bitmap is not set [ 171.111619][ T5835] loop1: detected capacity change from 0 to 32768 [ 171.118203][ T5848] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 171.164647][ T5810] BTRFS info (device loop5): clearing free space tree [ 171.180000][ T5848] EXT4-fs (loop6): 1 truncate cleaned up [ 171.231789][ T5835] XFS (loop1): Mounting V5 Filesystem [ 171.242987][ T5848] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.302587][ T5810] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.384198][ T5810] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.660409][ T5838] loop2: detected capacity change from 0 to 32768 [ 171.771307][ T5835] XFS (loop1): Ending clean mount [ 171.918939][ T5838] JBD2: Ignoring recovery information on journal [ 171.988017][ T5835] XFS (loop1): Quotacheck needed: Please wait. [ 172.014032][ T5891] hugetlbfs: Bad value ':' for mount option 'size' [ 172.014032][ T5891] [ 172.063970][ T5838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.440990][ T5900] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 172.710396][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 172.748548][ T5835] XFS (loop1): Quotacheck: Done. [ 172.827359][ T5237] ocfs2: Unmounting device (7,2) on (node local) [ 172.934976][ T4185] XFS (loop1): Unmounting Filesystem [ 173.925043][ T4781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.938800][ T4541] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 174.153260][ T5917] loop4: detected capacity change from 0 to 32768 [ 174.240793][ T5917] XFS (loop4): Mounting V5 Filesystem [ 174.298984][ T4541] usb 7-1: config 0 has an invalid interface number: 221 but max is 0 [ 174.305396][ T5917] XFS (loop4): Ending clean mount [ 174.335875][ T5917] XFS (loop4): Quotacheck needed: Please wait. [ 174.349265][ T4781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.353270][ T4541] usb 7-1: config 0 has no interface number 0 [ 174.379373][ T4781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.393778][ T4781] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.412958][ T4781] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.427581][ T4781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.461049][ T4781] usb 3-1: config 0 descriptor?? [ 174.479270][ T4541] usb 7-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.497980][ T4541] usb 7-1: config 0 interface 221 has no altsetting 0 [ 174.513347][ T4541] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 174.526679][ T4541] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.546161][ T4541] usb 7-1: config 0 descriptor?? [ 174.571169][ T5917] XFS (loop4): Quotacheck: Done. [ 174.693321][ T4200] XFS (loop4): Unmounting Filesystem [ 174.808933][ T5954] netlink: 536 bytes leftover after parsing attributes in process `syz.5.543'. [ 174.822010][ T5954] netlink: 52 bytes leftover after parsing attributes in process `syz.5.543'. [ 174.981125][ T4781] plantronics 0003:047F:FFFF.000C: item fetching failed at offset 12/15 [ 175.032863][ T4781] plantronics 0003:047F:FFFF.000C: parse failed [ 175.046283][ T4541] uclogic 0003:5543:0522.000D: unknown main item tag 0x2 [ 175.056356][ T4781] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 175.081989][ T4541] uclogic 0003:5543:0522.000D: No inputs registered, leaving [ 175.121104][ T5961] sp0: Synchronizing with TNC [ 175.131758][ T4541] uclogic 0003:5543:0522.000D: hidraw0: USB HID v0.02 Device [HID 5543:0522] on usb-dummy_hcd.6-1/input221 [ 175.168301][ T5963] loop5: detected capacity change from 0 to 128 [ 175.204613][ T4781] usb 3-1: USB disconnect, device number 5 [ 175.266655][ T5963] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 175.286277][ T4536] usb 7-1: USB disconnect, device number 3 [ 175.341011][ T4788] Process accounting resumed [ 175.376776][ T4788] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 175.417010][ T4788] FAT-fs (loop5): Filesystem has been set read-only [ 175.509674][ T5965] fido_id[5965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 175.550960][ T4712] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 176.016288][ T5992] loop6: detected capacity change from 0 to 64 [ 176.126817][ T5987] loop4: detected capacity change from 0 to 4096 [ 176.223394][ T5987] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 176.423273][ T6003] loop2: detected capacity change from 0 to 256 [ 176.564316][ T6003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 177.026326][ T6016] loop4: detected capacity change from 0 to 4096 [ 177.060022][ T5982] loop5: detected capacity change from 0 to 32768 [ 177.135118][ T5982] JBD2: Ignoring recovery information on journal [ 177.183933][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.308754][ T4536] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 177.355058][ T5982] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 177.459129][ T5982] (syz.5.553,5982,0):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize. [ 177.533629][ T4712] ocfs2: Unmounting device (7,5) on (node local) [ 177.755884][ T4536] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 177.799263][ T4536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.814364][ T4536] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 177.832422][ T4536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.856541][ T4536] usb 2-1: config 0 descriptor?? [ 177.879496][ T6024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.975312][ T6049] loop6: detected capacity change from 0 to 512 [ 178.089482][ T6049] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.584: inode #1: comm syz.6.584: iget: illegal inode # [ 178.109839][ T6052] loop4: detected capacity change from 0 to 4096 [ 178.165932][ T6051] loop2: detected capacity change from 0 to 4096 [ 178.175339][ T6052] ntfs3: loop4: ino=3, Correct links count -> 2. [ 178.248555][ T6049] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.584: error while reading EA inode 1 err=-117 [ 178.277323][ T6051] ntfs: volume version 3.1. [ 178.305080][ T6049] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.361768][ T6052] ntfs3: loop4: failed to convert "0080" to cp874 [ 178.361813][ T4536] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 178.379357][ T6049] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.584: inode #1: comm syz.6.584: iget: illegal inode # [ 178.400084][ T6052] ntfs3: loop4: failed to convert name for inode 1e. [ 178.416163][ T4536] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 178.436740][ T6049] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.584: error while reading EA inode 1 err=-117 [ 178.469747][ T4536] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 178.498606][ T4536] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 178.518197][ T6049] EXT4-fs (loop6): 1 orphan inode deleted [ 178.560356][ T4536] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 178.588280][ T6049] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 178.627868][ T4781] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.630480][ T4536] elecom 0003:056E:00E6.000E: hidraw0: USB HID v0.06 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 178.807208][ T4536] usb 2-1: USB disconnect, device number 9 [ 178.953813][ T6064] fido_id[6064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 179.069527][ T4781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 179.111488][ T4781] usb 6-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 179.142275][ T4781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.213086][ T4781] usb 6-1: config 0 descriptor?? [ 179.391837][ T4536] kernel write not supported for file /vcsa1 (pid: 4536 comm: kworker/1:12) [ 179.693404][ T4781] wacom 0003:056A:0018.000F: unbalanced collection at end of report description [ 179.736750][ T4781] wacom 0003:056A:0018.000F: parse failed [ 179.750545][ T4781] wacom: probe of 0003:056A:0018.000F failed with error -22 [ 179.771504][ T4993] udevd[4993]: setting mode of /dev/bus/usb/006/005 to 020664 failed: Read-only file system [ 179.802068][ T4993] udevd[4993]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: Read-only file system [ 179.881451][ T4915] udevd[4915]: symlink '../bus/usb/006/005' '/dev/char/189:644.tmp-c189:644' failed: Read-only file system [ 179.916553][ T4781] usb 6-1: USB disconnect, device number 5 [ 180.005307][ T4915] udevd[4915]: symlink '../bus/usb/006/005' '/dev/char/189:644.tmp-c189:644' failed: Read-only file system [ 180.209825][ T4536] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 180.414736][ T6116] loop2: detected capacity change from 0 to 128 [ 180.477205][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 180.542907][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 180.599015][ T4536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.640180][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system [ 180.668696][ T4536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.722318][ T4536] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 180.745383][ T4536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.775091][ T4536] usb 7-1: config 0 descriptor?? [ 180.953294][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 181.086597][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 181.243048][ T6144] loop4: detected capacity change from 0 to 64 [ 181.263115][ T4536] playstation 0003:054C:0DF2.0010: item fetching failed at offset 1/5 [ 181.263650][ T4536] playstation 0003:054C:0DF2.0010: Parse failed [ 181.263693][ T4536] playstation: probe of 0003:054C:0DF2.0010 failed with error -22 [ 181.331828][ T6144] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 181.410070][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/317.tmp-b7:4' failed: Read-only file system [ 181.470660][ T4536] usb 7-1: USB disconnect, device number 4 [ 181.649326][ T6141] loop5: detected capacity change from 0 to 4096 [ 182.021308][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.626'. [ 182.244508][ T6140] loop2: detected capacity change from 0 to 32768 [ 182.328075][ T6140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.619 (6140) [ 182.454571][ T6140] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 182.528972][ T6140] BTRFS info (device loop2): turning off barriers [ 182.536134][ T6140] BTRFS info (device loop2): setting nodatasum [ 182.640108][ T6140] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.698531][ T6140] BTRFS info (device loop2): use zstd compression, level 3 [ 182.760384][ T6140] BTRFS info (device loop2): using free space tree [ 182.767350][ T6140] BTRFS info (device loop2): has skinny extents [ 183.372863][ T6166] loop1: detected capacity change from 0 to 32768 [ 183.609001][ T6238] loop5: detected capacity change from 0 to 1024 [ 183.701751][ T6166] JBD2: Ignoring recovery information on journal [ 183.855311][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 183.923444][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 183.953673][ T6238] hfsplus: can't free extent [ 183.972163][ T6166] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.988672][ T6246] netlink: 'syz.4.652': attribute type 15 has an invalid length. [ 184.138924][ T6166] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 184.139070][ T6166] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 184.302253][ T6166] OCFS2: Returning error to the calling process. [ 184.404241][ T6255] loop6: detected capacity change from 0 to 512 [ 184.625087][ T6255] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.658: inode has both inline data and extents flags [ 184.656038][ T6255] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.658: couldn't read orphan inode 15 (err -117) [ 184.676727][ T6255] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,prjquota,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: writeback. [ 184.851949][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/325.tmp-b7:6' failed: Read-only file system [ 184.875645][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 184.929011][ T4993] udevd[4993]: symlink '../../loop5' '/dev/disk/by-diskseq/323.tmp-b7:5' failed: Read-only file system [ 184.950128][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 185.013601][ T4993] udevd[4993]: symlink '../../loop5' '/dev/disk/by-diskseq/323.tmp-b7:5' failed: Read-only file system [ 185.100132][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system [ 185.185234][ T4993] udevd[4993]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system [ 185.210623][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/325.tmp-b7:6' failed: Read-only file system [ 185.277162][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system [ 185.311406][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/325.tmp-b7:6' failed: Read-only file system [ 185.384745][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/324.tmp-b7:2' failed: Read-only file system [ 185.586340][ T6269] loop2: detected capacity change from 0 to 1764 [ 185.914713][ T6290] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.671'. [ 186.138232][ T6299] loop2: detected capacity change from 0 to 64 [ 186.204214][ T6299] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 186.275937][ T6304] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 186.500978][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.615927][ T6304] bond0: (slave team0): Enslaving as an active interface with an up link [ 186.924947][ T6322] loop1: detected capacity change from 0 to 2048 [ 186.953542][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 186.980975][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.690'. [ 186.991496][ T6325] delete_channel: no stack [ 187.036147][ T6331] netlink: 'syz.5.689': attribute type 21 has an invalid length. [ 187.057685][ T6322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.071923][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.689'. [ 187.453373][ T6342] loop5: detected capacity change from 0 to 2048 [ 187.502967][ T6346] netlink: 260 bytes leftover after parsing attributes in process `syz.2.698'. [ 187.583430][ T6342] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.608263][ T6348] loop1: detected capacity change from 0 to 128 [ 187.724179][ T6348] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.748908][ T6348] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.792055][ T6354] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.001723][ T6356] loop2: detected capacity change from 0 to 2048 [ 188.082005][ T6356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.184036][ T26] audit: type=1800 audit(1772106749.830:10): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.702" name="control" dev="loop2" ino=1367 res=0 errno=0 [ 188.306604][ T6360] binder: 6359:6360 ioctl 541b 0 returned -22 [ 188.498669][ T4784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.768822][ T4784] usb 2-1: Using ep0 maxpacket: 8 [ 188.898674][ T4784] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 189.129029][ T4784] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 189.168594][ T4784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.201803][ T4784] usb 2-1: Product: syz [ 189.228700][ T4784] usb 2-1: Manufacturer: syz [ 189.237266][ T4784] usb 2-1: SerialNumber: syz [ 189.245547][ T6387] loop2: detected capacity change from 0 to 8192 [ 189.316517][ T4784] usb 2-1: config 0 descriptor?? [ 189.334154][ T6395] loop6: detected capacity change from 0 to 512 [ 189.389897][ T6387] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 189.404564][ T6387] REISERFS (device loop2): using ordered data mode [ 189.415430][ T6387] reiserfs: using flush barriers [ 189.421675][ T4784] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 189.464036][ T6387] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.499346][ T6387] REISERFS (device loop2): checking transaction log (loop2) [ 189.535702][ T6395] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 189.557401][ T6395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 189.565798][ T4784] usb 2-1: setting power ON [ 189.598644][ T6395] System zones: 0-1, 15-15, 18-18, 34-34 [ 189.621379][ T6387] REISERFS (device loop2): Using tea hash to sort names [ 189.656196][ T4784] dvb-usb: bulk message failed: -22 (2/0) [ 189.672794][ T6395] EXT4-fs (loop6): orphan cleanup on readonly fs [ 189.687143][ T6387] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 189.737648][ T6395] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 189.782128][ T4784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.803466][ T6395] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 189.869083][ T4784] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 189.895706][ T4993] udevd[4993]: symlink '../../loop4' '/dev/disk/by-diskseq/319.tmp-b7:4' failed: Read-only file system [ 189.918530][ T4784] usb 2-1: media controller created [ 189.932031][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 189.950639][ T6395] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 189.998162][ T4784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.014731][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 190.033376][ T6395] EXT4-fs (loop6): 1 truncate cleaned up [ 190.076357][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-uuid/00000000-0033-1233-1231-1234134124cd.tmp-b7:2' failed: Read-only file system [ 190.096766][ T6395] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 190.155007][ T4993] udevd[4993]: symlink '../../loop4' '/dev/disk/by-diskseq/319.tmp-b7:4' failed: Read-only file system [ 190.196680][ T6395] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 190.227446][ T6395] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 190.270757][ T4784] usb 2-1: selecting invalid altsetting 6 [ 190.329526][ T4784] usb 2-1: digital interface selection failed (-22) [ 190.399337][ T4784] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 190.438609][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/338.tmp-b7:1' failed: Read-only file system [ 190.475897][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/342.tmp-b7:6' failed: Read-only file system [ 190.516293][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/319.tmp-b7:4' failed: Read-only file system [ 190.539278][ T4784] usb 2-1: setting power OFF [ 190.589645][ T4784] dvb-usb: bulk message failed: -22 (2/0) [ 190.596926][ T4784] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 190.624390][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 190.690850][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 190.708800][ T4784] (NULL device *): no alternate interface [ 190.932286][ T4784] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 191.065485][ T4784] usb 2-1: USB disconnect, device number 10 [ 191.177482][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 191.520161][ T6442] loop5: detected capacity change from 0 to 1024 [ 191.567709][ T6447] loop2: detected capacity change from 0 to 64 [ 191.681038][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 191.866551][ T6460] loop1: detected capacity change from 0 to 512 [ 192.037324][ T6460] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.255799][ T6460] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.750: Directory block failed checksum [ 192.870260][ T6468] loop5: detected capacity change from 0 to 40427 [ 192.938835][ T4784] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 192.957359][ T6468] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 192.986825][ T6468] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 193.075018][ T6468] F2FS-fs (loop5): invalid crc value [ 193.135834][ T6468] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 193.253924][ T6494] loop1: detected capacity change from 0 to 256 [ 193.301198][ T6468] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 193.318126][ T6468] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 193.422484][ T4784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.446800][ T4784] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 193.478749][ T4784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.512338][ T4784] usb 5-1: config 0 descriptor?? [ 193.536231][ T4712] attempt to access beyond end of device [ 193.536231][ T4712] loop5: rw=2049, want=45104, limit=40427 [ 193.699962][ T6497] tmpfs: Cannot retroactively limit inodes [ 193.957146][ T6487] loop2: detected capacity change from 0 to 32768 [ 193.987670][ T6501] loop1: detected capacity change from 0 to 1024 [ 194.003161][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.070718][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.132386][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.198631][ T6502] ERROR: (device loop2): diRead: i_ino != di_number [ 194.198631][ T6502] [ 194.220195][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.284845][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.318910][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.392957][ T4784] logitech 0003:046D:C287.0011: unknown main item tag 0x0 [ 194.466635][ T6504] loop5: detected capacity change from 0 to 4096 [ 194.503209][ T4784] logitech 0003:046D:C287.0011: hidraw0: USB HID v0.07 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0 [ 194.551800][ T6504] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 194.581877][ T4784] logitech 0003:046D:C287.0011: no inputs found [ 194.696421][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.714207][ T4784] usb 5-1: USB disconnect, device number 8 [ 194.719259][ T6504] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 194.758323][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.796930][ T6515] netlink: 596 bytes leftover after parsing attributes in process `syz.1.772'. [ 194.847213][ T6504] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 194.978732][ T6504] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 195.021544][ T5048] udevd[5048]: symlink '../../loop6' '/dev/disk/by-diskseq/344.tmp-b7:6' failed: Read-only file system [ 195.041936][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/319.tmp-b7:4' failed: Read-only file system [ 195.152626][ T6504] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 195.195343][ T4927] udevd[4927]: symlink '../../loop5' '/dev/disk/by-diskseq/357.tmp-b7:5' failed: Read-only file system [ 195.232294][ T6504] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 195.291259][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/358.tmp-b7:1' failed: Read-only file system [ 195.296095][ T6521] fido_id[6521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.338061][ T6504] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 195.382254][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/319.tmp-b7:4' failed: Read-only file system [ 195.389913][ T4927] udevd[4927]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 195.447453][ T6504] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.490070][ T5048] udevd[5048]: symlink '../../loop6' '/dev/disk/by-diskseq/344.tmp-b7:6' failed: Read-only file system [ 195.505982][ T4927] udevd[4927]: symlink '../../loop5' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:5' failed: Read-only file system [ 195.549172][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/355.tmp-b7:2' failed: Read-only file system [ 195.653599][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/358.tmp-b7:1' failed: Read-only file system [ 195.658811][ T6504] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.682813][ T6538] loop6: detected capacity change from 0 to 64 [ 195.792127][ T6504] ntfs: volume version 3.1. [ 195.861471][ T6504] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 195.996099][ T6547] tipc: Enabled bearer , priority 12 [ 196.188376][ T6556] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.250021][ T6556] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 196.346197][ T6560] loop6: detected capacity change from 0 to 512 [ 196.501131][ T6569] loop4: detected capacity change from 0 to 1024 [ 196.522449][ T6560] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.793: invalid indirect mapped block 4294967295 (level 1) [ 196.585914][ T6566] sp0: Synchronizing with TNC [ 196.586834][ T6560] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.793: invalid indirect mapped block 4294967295 (level 1) [ 196.655356][ T6560] EXT4-fs (loop6): 2 truncates cleaned up [ 196.665915][ T6560] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 196.735368][ T6569] hfsplus: bad catalog entry type [ 196.771122][ T4533] Bluetooth: hci2: command 0x0406 tx timeout [ 196.783814][ T4533] Bluetooth: hci1: command 0x0406 tx timeout [ 196.849151][ T6560] EXT4-fs error (device loop6): ext4_get_parent:1906: inode #11: comm syz.6.793: bad parent inode number: 3 [ 196.889457][ T155] hfsplus: b-tree write err: -5, ino 4 [ 197.016604][ T6576] loop1: detected capacity change from 0 to 4096 [ 197.114455][ T4541] tipc: Node number set to 2130706433 [ 197.348221][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 197.382691][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 197.819351][ T4541] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 197.845674][ T6615] hpfs: bad mount options. [ 198.199152][ T4541] usb 3-1: config 1 has an invalid interface number: 44 but max is 0 [ 198.256365][ T4541] usb 3-1: config 1 has no interface number 0 [ 198.287705][ T4541] usb 3-1: config 1 interface 44 has no altsetting 0 [ 198.299856][ T6621] comedi comedi3: board detection failed [ 198.325840][ T4255] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.443026][ T4255] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.488813][ T4541] usb 3-1: New USB device found, idVendor=12d1, idProduct=314b, bcdDevice=e7.3c [ 198.526565][ T4541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.546712][ T4255] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.560673][ T4541] usb 3-1: Product: syz [ 198.565601][ T4541] usb 3-1: Manufacturer: syz [ 198.595968][ T4541] usb 3-1: SerialNumber: syz [ 198.676609][ T4255] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.940006][ T4541] huawei_cdc_ncm 3-1:1.44: CDC Union missing and no IAD found [ 198.978703][ T4541] huawei_cdc_ncm 3-1:1.44: bind() failure [ 199.043222][ T6643] loop6: detected capacity change from 0 to 512 [ 199.055631][ T4541] usb 3-1: USB disconnect, device number 6 [ 199.196604][ T6643] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.215915][ T6643] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.260221][ T6643] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.834: corrupted inode contents [ 199.296318][ T6643] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.834: mark_inode_dirty error [ 199.335275][ T6643] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.834: corrupted inode contents [ 199.377946][ T6651] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.834: corrupted inode contents [ 199.424516][ T6653] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.485499][ T6656] loop4: detected capacity change from 0 to 512 [ 199.497454][ T6653] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 199.532136][ T6653] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 199.556105][ T6651] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.834: mark_inode_dirty error [ 199.577557][ T6651] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.834: corrupted inode contents [ 199.584501][ T6653] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 199.612815][ T6651] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.834: mark_inode_dirty error [ 199.654645][ T6656] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 199.725125][ T6651] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.834: corrupted inode contents [ 199.744709][ T6653] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.778334][ T6651] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.834: mark_inode_dirty error [ 199.786303][ T6656] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.864748][ T6653] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 199.910136][ T6653] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.952118][ T6653] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 200.002883][ T6653] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 200.014397][ T6656] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.838: Block bitmap for bg 0 marked uninitialized [ 200.037779][ T6653] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 200.061137][ T6653] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 200.159111][ T6653] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 200.231723][ T6653] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 200.246448][ T6656] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 200.263618][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/369.tmp-b7:6' failed: Read-only file system [ 200.301823][ T6656] EXT4-fs (loop4): 1 orphan inode deleted [ 200.318655][ T6653] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 200.366976][ T6662] loop6: detected capacity change from 0 to 256 [ 200.384657][ T5050] udevd[5050]: symlink '../../loop1' '/dev/disk/by-diskseq/368.tmp-b7:1' failed: Read-only file system [ 200.415078][ T6656] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.442109][ T6653] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 200.469136][ T4927] udevd[4927]: symlink '../../loop2' '/dev/disk/by-diskseq/359.tmp-b7:2' failed: Read-only file system [ 200.489704][ T6653] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 200.509588][ T6653] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 200.525638][ T6656] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 200.547362][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/368.tmp-b7:1' failed: Read-only file system [ 200.556486][ T6653] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 200.590654][ T6656] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 200.622350][ T4898] udevd[4898]: symlink '../../loop4' '/dev/disk/by-diskseq/366.tmp-b7:4' failed: Read-only file system [ 200.668058][ T6656] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.838: Block bitmap for bg 0 marked uninitialized [ 200.697296][ T6662] FAT-fs (loop6): Directory bread(block 64) failed [ 200.710785][ T6662] FAT-fs (loop6): Directory bread(block 65) failed [ 200.724668][ T6662] FAT-fs (loop6): Directory bread(block 66) failed [ 200.735033][ T6662] FAT-fs (loop6): Directory bread(block 67) failed [ 200.739259][ T6653] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 200.745830][ T6662] FAT-fs (loop6): Directory bread(block 68) failed [ 200.767330][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/369.tmp-b7:6' failed: Read-only file system [ 200.785858][ T6662] FAT-fs (loop6): Directory bread(block 69) failed [ 200.803426][ T6656] EXT4-fs error (device loop4): ext4_xattr_block_set:2195: inode #15: comm syz.4.838: bad block 0 [ 200.817566][ T5048] udevd[5048]: symlink '../../loop2' '/dev/disk/by-diskseq/359.tmp-b7:2' failed: Read-only file system [ 200.827420][ T4898] udevd[4898]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 200.868641][ T6662] FAT-fs (loop6): Directory bread(block 70) failed [ 200.870621][ T6653] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 200.886980][ T6662] FAT-fs (loop6): Directory bread(block 71) failed [ 200.918744][ T6662] FAT-fs (loop6): Directory bread(block 72) failed [ 200.967164][ T6653] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 200.998817][ T6662] FAT-fs (loop6): Directory bread(block 73) failed [ 201.047335][ T4993] udevd[4993]: symlink '../../loop4' '/dev/disk/by-diskseq/370.tmp-b7:4' failed: Read-only file system [ 201.065731][ T6653] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 201.083959][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/369.tmp-b7:6' failed: Read-only file system [ 201.168640][ T4692] Bluetooth: hci5: command 0x0409 tx timeout [ 201.182049][ T6639] chnl_net:caif_netlink_parms(): no params data found [ 201.459054][ T4533] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 201.525551][ T6678] loop6: detected capacity change from 0 to 512 [ 201.640697][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.651806][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.656513][ T6678] EXT4-fs (loop6): Ignoring removed bh option [ 201.669313][ T6639] device bridge_slave_0 entered promiscuous mode [ 201.718640][ T4533] usb 5-1: Using ep0 maxpacket: 8 [ 201.941169][ T6678] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 202.009376][ T4533] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 202.024514][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.045776][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.102277][ T6678] EXT4-fs (loop6): 1 truncate cleaned up [ 202.114016][ T6678] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 202.131877][ T4533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.189489][ T6639] device bridge_slave_1 entered promiscuous mode [ 202.284430][ T4533] usb 5-1: Product: syz [ 202.314225][ T4533] usb 5-1: Manufacturer: syz [ 202.332967][ T4533] usb 5-1: SerialNumber: syz [ 202.382986][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.423950][ T4533] usb 5-1: config 0 descriptor?? [ 202.436339][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.717792][ T6639] team0: Port device team_slave_0 added [ 202.720442][ T4533] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.853387][ T6639] team0: Port device team_slave_1 added [ 202.982773][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.021878][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.106229][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.202767][ T4255] device hsr_slave_0 left promiscuous mode [ 203.219193][ T4533] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 203.268995][ T4784] Bluetooth: hci5: command 0x041b tx timeout [ 203.269035][ T4533] usb 5-1: USB disconnect, device number 9 [ 203.299051][ T4255] device hsr_slave_1 left promiscuous mode [ 203.323439][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.342484][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.358374][ T4255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.375214][ T4255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.420331][ T4255] device bridge_slave_1 left promiscuous mode [ 203.439325][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.473512][ T6735] loop2: detected capacity change from 0 to 256 [ 203.501563][ T4255] device bridge_slave_0 left promiscuous mode [ 203.524550][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.580306][ T6735] exfat: Deprecated parameter 'namecase' [ 203.590916][ T6735] exfat: Deprecated parameter 'utf8' [ 203.608068][ T6735] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 203.626810][ T6735] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 203.686516][ T4255] device veth1_macvtap left promiscuous mode [ 203.702226][ T4255] device veth0_macvtap left promiscuous mode [ 203.745238][ T4255] device veth1_vlan left promiscuous mode [ 203.778457][ T4255] device veth0_vlan left promiscuous mode [ 203.811614][ T6741] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 203.832159][ T6741] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.871626][ T6739] loop1: detected capacity change from 0 to 4096 [ 204.079979][ T6739] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 204.224370][ T4185] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 204.243440][ T4185] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 204.306414][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 204.508114][ T6752] loop4: detected capacity change from 0 to 1764 [ 204.620763][ T6752] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 204.645060][ T6750] loop1: detected capacity change from 0 to 4096 [ 204.790036][ T6750] __ntfs_warning: 10 callbacks suppressed [ 204.790066][ T6750] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 204.866941][ T6750] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 204.921466][ T6750] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 204.963490][ T4255] team0 (unregistering): Port device team_slave_1 removed [ 205.002703][ T6750] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.038177][ T6750] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 205.058275][ T4255] team0 (unregistering): Port device team_slave_0 removed [ 205.070476][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.098247][ T6750] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.112058][ T6755] loop4: detected capacity change from 0 to 4096 [ 205.136237][ T6750] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 205.168193][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.187991][ T4255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.191880][ T6750] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.212856][ T6750] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 205.252304][ T6755] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 205.293260][ T6750] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 205.316300][ T6750] ntfs: volume version 3.1. [ 205.321381][ T4255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.333188][ T3576] Bluetooth: hci5: command 0x040f tx timeout [ 205.409053][ T6755] ntfs3: loop4: Failed to load $Extend. [ 205.453806][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 205.500310][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/382.tmp-b7:1' failed: Read-only file system [ 205.543718][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 205.574970][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 205.650164][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:1' failed: Read-only file system [ 205.671857][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:4' failed: Read-only file system [ 205.729118][ T4255] bond0 (unregistering): Released all slaves [ 205.827909][ T4915] udevd[4915]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 205.857578][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.881895][ T6761] netlink: 165 bytes leftover after parsing attributes in process `syz.1.875'. [ 205.923298][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.938273][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.993183][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 206.018938][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/382.tmp-b7:1' failed: Read-only file system [ 206.046274][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 206.069481][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.150805][ T6763] loop1: detected capacity change from 0 to 512 [ 206.268460][ T6766] tipc: Started in network mode [ 206.325104][ T6766] tipc: Node identity ac14140f, cluster identity 4711 [ 206.342823][ T6768] Dead loop on virtual device ip6_vti0, fix it urgently! [ 206.382600][ T6766] tipc: Enabled bearer , priority 10 [ 206.456163][ T6639] device hsr_slave_0 entered promiscuous mode [ 206.492421][ T6763] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.876: iget: bad i_size value: 38620345925642 [ 206.569785][ T6763] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.876: couldn't read orphan inode 15 (err -117) [ 206.595045][ T6763] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 206.634219][ T6639] device hsr_slave_1 entered promiscuous mode [ 206.674799][ T6639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.679510][ T6777] overlayfs: bad mount option "redirect_dir=off:/" [ 206.699173][ T6639] Cannot create hsr debugfs directory [ 206.904438][ T6778] loop2: detected capacity change from 0 to 4096 [ 207.039824][ T6784] loop4: detected capacity change from 0 to 512 [ 207.125931][ T6778] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 207.240263][ T6784] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 207.361041][ T6778] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 207.400720][ T6784] EXT4-fs error (device loop4): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 207.429389][ T4784] Bluetooth: hci5: command 0x0419 tx timeout [ 207.531250][ T4784] tipc: Node number set to 2886997007 [ 207.684145][ T6784] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.885: corrupted inode contents [ 207.823631][ T6784] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #11: comm syz.4.885: mark_inode_dirty error [ 207.893291][ T6639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.940046][ T6784] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.885: invalid indirect mapped block 1 (level 1) [ 208.018331][ T6639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.055537][ T6784] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.885: corrupted inode contents [ 208.132920][ T6639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.158293][ T6784] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 208.179616][ T6639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.197828][ T6811] loop1: detected capacity change from 0 to 22 [ 208.219171][ T6784] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.885: corrupted inode contents [ 208.293044][ T6811] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 208.312830][ T6784] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.885: mark_inode_dirty error [ 208.322006][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 208.354841][ T6784] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 208.394993][ T6811] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 208.413591][ T6784] EXT4-fs (loop4): 1 truncate cleaned up [ 208.444888][ T6784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.616157][ T6784] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.885: path /217/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 208.797937][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.923796][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.972982][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.034663][ T6786] loop6: detected capacity change from 0 to 32768 [ 209.060586][ T6639] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.209521][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.237376][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.253380][ T6786] XFS (loop6): Mounting V5 Filesystem [ 209.308843][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.317014][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.389062][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.401746][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.413937][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.422839][ T5381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.488636][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.508726][ T6786] XFS (loop6): Ending clean mount [ 209.589874][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.665685][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.691170][ T4925] XFS (loop6): Unmounting Filesystem [ 209.855986][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.919319][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.969403][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.020432][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.211089][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.284660][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.327480][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.380495][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.462702][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.488924][ T6825] loop1: detected capacity change from 0 to 32768 [ 210.489592][ T4915] udevd[4915]: symlink '../../loop6' '/dev/disk/by-diskseq/394.tmp-b7:6' failed: Read-only file system [ 210.539835][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.574431][ T4993] udevd[4993]: symlink '../../loop4' '/dev/disk/by-diskseq/395.tmp-b7:4' failed: Read-only file system [ 210.615254][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.855127][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/391.tmp-b7:2' failed: Read-only file system [ 210.915388][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/396.tmp-b7:6' failed: Read-only file system [ 210.920283][ T6856] device bridge0 entered promiscuous mode [ 210.957506][ T6825] XFS (loop1): Mounting V5 Filesystem [ 211.034001][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/391.tmp-b7:2' failed: Read-only file system [ 211.188273][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/396.tmp-b7:6' failed: Read-only file system [ 211.221799][ T6825] XFS (loop1): Ending clean mount [ 211.245123][ T4915] udevd[4915]: symlink '../../loop1' '/dev/disk/by-diskseq/397.tmp-b7:1' failed: Read-only file system [ 211.315056][ T4993] udevd[4993]: symlink '../../loop4' '/dev/disk/by-diskseq/395.tmp-b7:4' failed: Read-only file system [ 211.341475][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 211.341496][ T26] audit: type=1800 audit(1772106772.990:11): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.897" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 211.410403][ T4915] udevd[4915]: symlink '../../loop1' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:1' failed: Read-only file system [ 211.529383][ T4185] XFS (loop1): Unmounting Filesystem [ 211.577703][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/396.tmp-b7:6' failed: Read-only file system [ 211.622371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.679269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.750638][ T6639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.778688][ T4533] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 212.190157][ T4533] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 212.234171][ T4533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.312933][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.322182][ T4533] usb 5-1: config 0 descriptor?? [ 212.410100][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.852093][ T4533] kye 0003:0458:0138.0012: item fetching failed at offset 3/7 [ 212.889435][ T4533] kye 0003:0458:0138.0012: parse failed [ 212.937058][ T4533] kye: probe of 0003:0458:0138.0012 failed with error -22 [ 213.039318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.055274][ T4533] usb 5-1: USB disconnect, device number 10 [ 213.087905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.250356][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.306799][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.352308][ T6639] device veth0_vlan entered promiscuous mode [ 213.379340][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.416002][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.433934][ T6897] loop6: detected capacity change from 0 to 32768 [ 213.455460][ T6639] device veth1_vlan entered promiscuous mode [ 213.592926][ T6897] XFS (loop6): Mounting V5 Filesystem [ 213.609715][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.690623][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.733328][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.787434][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.805950][ T6639] device veth0_macvtap entered promiscuous mode [ 213.839691][ T6897] XFS (loop6): Ending clean mount [ 213.855353][ T6897] XFS (loop6): Quotacheck needed: Please wait. [ 213.884538][ T6639] device veth1_macvtap entered promiscuous mode [ 214.019418][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.107389][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.125169][ T6897] XFS (loop6): Quotacheck: Done. [ 214.148539][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.217105][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.239693][ T6906] loop2: detected capacity change from 0 to 40427 [ 214.258504][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.301509][ T6906] F2FS-fs (loop2): build fault injection attr: rate: 7, type: 0x1ffff [ 214.322422][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.349859][ T6906] F2FS-fs (loop2): inline encryption not supported [ 214.357297][ T6906] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2ac [ 214.408499][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.448539][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.473006][ T6906] F2FS-fs (loop2): invalid crc value [ 214.488776][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.542030][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.595384][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.620221][ T6906] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 214.658719][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.695419][ T6906] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.734186][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.778921][ T4925] XFS (loop6): Unmounting Filesystem [ 214.795058][ T6946] loop4: detected capacity change from 0 to 1024 [ 214.825143][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.840522][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.857211][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.897230][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.953452][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.956555][ T6906] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 215.025773][ T6946] hfsplus: trying to free free bnode 0(1) [ 215.090059][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.111638][ T6935] loop1: detected capacity change from 0 to 40427 [ 215.151961][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.196441][ T6906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.216348][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.234446][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.251899][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.276821][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.293184][ T6906] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 215.306158][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.327072][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.345302][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.361455][ T6639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.375408][ T6639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.391212][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.418160][ T4230] hfsplus: b-tree write err: -5, ino 4 [ 215.449628][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.462103][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.561794][ T6639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.694587][ T6935] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 215.727905][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/401.tmp-b7:4' failed: Read-only file system [ 215.783324][ T6639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.798620][ T6935] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 215.809762][ T6639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.812415][ T6639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.882227][ T6935] F2FS-fs (loop1): invalid crc value [ 215.911656][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/401.tmp-b7:4' failed: Read-only file system [ 216.002056][ T6935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.044315][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/401.tmp-b7:4' failed: Read-only file system [ 216.134622][ T5048] udevd[5048]: symlink '../../loop2' '/dev/disk/by-diskseq/400.tmp-b7:2' failed: Read-only file system [ 216.195043][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/402.tmp-b7:1' failed: Read-only file system [ 216.261307][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.299192][ T5048] udevd[5048]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 216.324011][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.396509][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/403.tmp-b7:4' failed: Read-only file system [ 216.424608][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/399.tmp-b7:6' failed: Read-only file system [ 216.492469][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.506059][ T6935] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.558705][ T6935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.572388][ T5381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.674221][ T4915] udevd[4915]: symlink '../../loop1' '/dev/disk/by-diskseq/402.tmp-b7:1' failed: Read-only file system [ 216.711143][ T5381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.720404][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/399.tmp-b7:6' failed: Read-only file system [ 216.800205][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.863413][ T6972] loop2: detected capacity change from 0 to 8 [ 217.364545][ T6986] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 217.552059][ T6996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.585918][ T6997] loop7: detected capacity change from 0 to 512 [ 217.701208][ T6997] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.767693][ T6997] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 217.853857][ T6997] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 217.912611][ T6997] System zones: 0-2, 18-18, 34-35 [ 217.928028][ T6997] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.950319][ T6997] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 218.036642][ T6997] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 218.124624][ T6997] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: none. [ 218.180883][ T7014] loop2: detected capacity change from 0 to 1024 [ 218.230368][ T6997] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 218.273687][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.943'. [ 218.299445][ T7014] EXT4-fs (loop2): inline encryption not supported [ 218.329966][ T7014] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.530151][ T7014] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,user_xattr,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 218.569143][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.262369][ T7054] syz.6.957 uses old SIOCAX25GETINFO [ 219.521861][ T7065] loop1: detected capacity change from 0 to 64 [ 219.616424][ T3576] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.653818][ T7069] loop6: detected capacity change from 0 to 256 [ 219.672268][ T7038] loop7: detected capacity change from 0 to 32768 [ 219.729998][ T7069] exfat: Deprecated parameter 'utf8' [ 219.739492][ T7069] exfat: Deprecated parameter 'utf8' [ 219.796506][ T7069] exfat: Deprecated parameter 'utf8' [ 219.842053][ T7030] loop4: detected capacity change from 0 to 32768 [ 219.853460][ T7069] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 219.873727][ T7038] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 220.068748][ T3576] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.134067][ T3576] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.154742][ T3576] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 220.169410][ T3576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.187572][ T3576] usb 3-1: config 0 descriptor?? [ 220.205530][ T7030] XFS (loop4): Mounting V5 Filesystem [ 220.283229][ T6639] ocfs2: Unmounting device (7,7) on (node local) [ 220.364130][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.488022][ T7030] XFS (loop4): Ending clean mount [ 220.643089][ T7092] loop6: detected capacity change from 0 to 1024 [ 220.683822][ T3576] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 220.702512][ T3576] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 220.717234][ T7090] loop1: detected capacity change from 0 to 8192 [ 220.760492][ T3576] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 220.788120][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/420.tmp-b7:6' failed: Read-only file system [ 220.828757][ T3576] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 220.840847][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/416.tmp-b7:4' failed: Read-only file system [ 220.872593][ T3576] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 220.904248][ T3576] lenovo 0003:17EF:6062.0013: hidraw0: USB HID v88.88 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 220.932619][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 220.956612][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:4' failed: Read-only file system [ 221.029760][ T3576] usb 3-1: USB disconnect, device number 7 [ 221.061126][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:6' failed: Read-only file system [ 221.108120][ T144] hfsplus: b-tree write err: -5, ino 4 [ 221.119446][ T4200] XFS (loop4): Unmounting Filesystem [ 221.155428][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/421.tmp-b7:1' failed: Read-only file system [ 221.263795][ T5050] udevd[5050]: symlink '../../loop7' '/dev/disk/by-diskseq/419.tmp-b7:7' failed: Read-only file system [ 221.280781][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.294987][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 221.347354][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.429736][ T4993] udevd[4993]: symlink '../../loop6' '/dev/disk/by-diskseq/420.tmp-b7:6' failed: Read-only file system [ 221.444015][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-uuid/8AF3-4683.tmp-b7:1' failed: Read-only file system [ 221.524712][ T7112] loop7: detected capacity change from 0 to 512 [ 221.568727][ T7104] fido_id[7104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 221.650836][ T7114] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 221.677015][ T7114] netlink: 224 bytes leftover after parsing attributes in process `syz.2.972'. [ 221.716758][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.845990][ T7112] EXT4-fs (loop7): Ignoring removed bh option [ 222.135818][ T7112] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 222.250681][ T7112] EXT4-fs (loop7): 1 truncate cleaned up [ 222.289193][ T7112] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 222.369406][ T4541] Bluetooth: hci4: command 0x0406 tx timeout [ 222.471583][ T26] audit: type=1800 audit(1772106784.120:12): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.970" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 222.848658][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.917064][ T7156] loop1: detected capacity change from 0 to 256 [ 222.990151][ T7156] exfat: Deprecated parameter 'utf8' [ 222.997603][ T7156] exfat: Deprecated parameter 'utf8' [ 223.050383][ T7156] exfat: Deprecated parameter 'utf8' [ 223.144470][ T7156] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 223.483824][ T7186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.165921][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 224.487418][ T7161] loop6: detected capacity change from 0 to 32768 [ 224.569810][ T4541] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 224.719087][ T7161] XFS (loop6): Mounting V5 Filesystem [ 224.809331][ T7161] XFS (loop6): Ending clean mount [ 224.948782][ T4541] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 224.978780][ T4541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.002363][ T4541] usb 8-1: config 0 descriptor?? [ 225.045872][ T26] audit: type=1800 audit(1772106786.690:13): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.996" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 225.194086][ T4925] XFS (loop6): Unmounting Filesystem [ 225.201382][ T7257] loop1: detected capacity change from 0 to 1024 [ 225.535793][ T7257] hfsplus: trying to free free bnode 0(1) [ 225.554535][ T4541] kye 0003:0458:0138.0014: item fetching failed at offset 3/7 [ 225.591859][ T7270] loop2: detected capacity change from 0 to 22 [ 225.609988][ T4541] kye 0003:0458:0138.0014: parse failed [ 225.634161][ T4541] kye: probe of 0003:0458:0138.0014 failed with error -22 [ 225.659331][ T7270] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 225.695313][ T155] hfsplus: b-tree write err: -5, ino 4 [ 225.730399][ T7270] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 225.741549][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.763400][ T4541] usb 8-1: USB disconnect, device number 2 [ 225.796682][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/431.tmp-b7:2' failed: Read-only file system [ 225.861265][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:2' failed: Read-only file system [ 225.947202][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/425.tmp-b7:4' failed: Read-only file system [ 225.994201][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/430.tmp-b7:1' failed: Read-only file system [ 226.015388][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/431.tmp-b7:2' failed: Read-only file system [ 226.075022][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.089311][ T5050] udevd[5050]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 226.130782][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:2' failed: Read-only file system [ 226.161122][ T4915] udevd[4915]: symlink '../../loop1' '/dev/disk/by-diskseq/430.tmp-b7:1' failed: Read-only file system [ 226.236046][ T5048] udevd[5048]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 226.265535][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/425.tmp-b7:4' failed: Read-only file system [ 226.441727][ T7288] device bridge0 entered promiscuous mode [ 226.630847][ T7297] Dead loop on virtual device ip6_vti0, fix it urgently! [ 226.878239][ T7303] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1048'. [ 226.944977][ T7308] loop1: detected capacity change from 0 to 512 [ 227.063861][ T7308] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 227.172698][ T7318] overlayfs: bad mount option "redirect_dir=off:/" [ 227.248971][ T7308] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 227.270341][ T7325] loop2: detected capacity change from 0 to 512 [ 227.273799][ T7308] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1038: corrupted inode contents [ 227.327427][ T7308] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #11: comm syz.1.1038: mark_inode_dirty error [ 227.386422][ T7308] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1038: invalid indirect mapped block 1 (level 1) [ 227.472546][ T7325] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1046: iget: bad i_size value: 38620345925642 [ 227.493081][ T7308] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1038: corrupted inode contents [ 227.493926][ T7308] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 227.529190][ T7325] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1046: couldn't read orphan inode 15 (err -117) [ 227.565499][ T7334] tipc: Enabled bearer , priority 10 [ 227.599604][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1051'. [ 227.629130][ T7325] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,init_itable,data_err=ignore,nojournal_checksum,data_err=ignore,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 227.629158][ T7308] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1038: corrupted inode contents [ 227.840069][ T7308] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.1038: mark_inode_dirty error [ 227.856700][ T7332] loop4: detected capacity change from 0 to 4096 [ 227.874068][ T7342] Dead loop on virtual device ip6_vti0, fix it urgently! [ 227.943488][ T7308] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 227.972275][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.988064][ T7308] EXT4-fs (loop1): 1 truncate cleaned up [ 228.018641][ T7332] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 228.051570][ T7308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.073869][ T7346] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1056'. [ 228.094180][ T7347] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.155882][ T7347] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.212208][ T7348] loop2: detected capacity change from 0 to 1764 [ 228.253526][ T7332] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 228.334596][ T7348] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 228.386256][ T7308] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.1038: path /236/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 228.418901][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.636038][ T7355] loop7: detected capacity change from 0 to 4096 [ 228.743679][ T7353] loop6: detected capacity change from 0 to 4096 [ 228.776792][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.936368][ T7355] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 229.094761][ T7353] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 229.135018][ T7355] ntfs3: loop7: Failed to load $Extend. [ 229.537648][ T4925] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 229.559956][ T4925] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 229.837843][ T7389] loop2: detected capacity change from 0 to 256 [ 230.083871][ T7389] FAT-fs (loop2): Directory bread(block 64) failed [ 230.131959][ T7389] FAT-fs (loop2): Directory bread(block 65) failed [ 230.170926][ T7389] FAT-fs (loop2): Directory bread(block 66) failed [ 230.205251][ T7389] FAT-fs (loop2): Directory bread(block 67) failed [ 230.268809][ T7389] FAT-fs (loop2): Directory bread(block 68) failed [ 230.276552][ T7389] FAT-fs (loop2): Directory bread(block 69) failed [ 230.359443][ T7389] FAT-fs (loop2): Directory bread(block 70) failed [ 230.371726][ T7409] comedi comedi3: board detection failed [ 230.396033][ T7389] FAT-fs (loop2): Directory bread(block 71) failed [ 230.449472][ T7389] FAT-fs (loop2): Directory bread(block 72) failed [ 230.468246][ T7413] netlink: 'syz.6.1094': attribute type 4 has an invalid length. [ 230.478955][ T7389] FAT-fs (loop2): Directory bread(block 73) failed [ 230.492303][ T7415] hpfs: bad mount options. [ 230.830249][ T4915] udevd[4915]: symlink '../../loop7' '/dev/disk/by-diskseq/445.tmp-b7:7' failed: Read-only file system [ 230.858080][ T5381] Bluetooth: hci7: Frame reassembly failed (-84) [ 230.915658][ T4915] udevd[4915]: symlink '../../loop4' '/dev/disk/by-diskseq/440.tmp-b7:4' failed: Read-only file system [ 230.974519][ T4993] udevd[4993]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system [ 231.006187][ T7432] loop7: detected capacity change from 0 to 2048 [ 231.054335][ T5048] udevd[5048]: symlink '../../loop6' '/dev/disk/by-diskseq/446.tmp-b7:6' failed: Read-only file system [ 231.083838][ T7432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.113241][ T4927] udevd[4927]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system [ 231.137461][ T5050] udevd[5050]: symlink '../../loop4' '/dev/disk/by-diskseq/440.tmp-b7:4' failed: Read-only file system [ 231.158312][ T4993] udevd[4993]: symlink '../../loop1' '/dev/disk/by-diskseq/444.tmp-b7:1' failed: Read-only file system [ 231.213679][ T5048] udevd[5048]: symlink '../../loop6' '/dev/disk/by-diskseq/446.tmp-b7:6' failed: Read-only file system [ 231.245578][ T4927] udevd[4927]: symlink '../../loop2' '/dev/disk/by-diskseq/447.tmp-b7:2' failed: Read-only file system [ 231.272636][ T4915] udevd[4915]: symlink '../../loop7' '/dev/disk/by-diskseq/445.tmp-b7:7' failed: Read-only file system [ 232.536747][ T7481] loop2: detected capacity change from 0 to 8192 [ 232.609695][ T7481] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.670938][ T26] audit: type=1800 audit(1772106794.320:14): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1114" name="file2" dev="loop2" ino=1048660 res=0 errno=0 [ 232.702533][ T7481] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.709953][ T4538] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.747956][ T7481] FAT-fs (loop2): Filesystem has been set read-only [ 232.928923][ T4536] Bluetooth: hci7: command 0x1003 tx timeout [ 232.947779][ T4196] Bluetooth: hci7: sending frame failed (-49) [ 233.039180][ T7494] loop2: detected capacity change from 0 to 512 [ 233.052791][ T7498] loop7: detected capacity change from 0 to 128 [ 233.149804][ T7498] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 233.215699][ T7498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.259123][ T4538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.281880][ T7494] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 233.314240][ T7494] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.315217][ T4538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.395727][ T4538] usb 5-1: Product: syz [ 233.415921][ T4538] usb 5-1: Manufacturer: syz [ 233.426655][ T4538] usb 5-1: SerialNumber: syz [ 233.510299][ T4538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.675710][ T7507] loop2: detected capacity change from 0 to 2048 [ 234.038282][ T7505] loop7: detected capacity change from 0 to 32768 [ 234.042906][ T7514] loop2: detected capacity change from 0 to 512 [ 234.079037][ T7505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1123 (7505) [ 234.110847][ T7505] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 234.128763][ T7505] BTRFS info (device loop7): setting nodatasum [ 234.136941][ T7505] BTRFS info (device loop7): force zlib compression, level 3 [ 234.141243][ T4538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 234.189812][ T7514] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 234.206026][ T7505] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 234.233483][ T7514] EXT4-fs (loop2): Test dummy encryption mode enabled [ 234.237601][ T7505] BTRFS info (device loop7): use lzo compression, level 0 [ 234.314543][ T7514] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000. Quota mode: none. [ 234.382516][ T27] INFO: task syz-executor:4184 blocked for more than 143 seconds. [ 234.401905][ T7505] BTRFS info (device loop7): turning on flush-on-commit [ 234.406644][ T27] Not tainted syzkaller #0 [ 234.431689][ T7514] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1126: Directory hole found for htree leaf block 0 [ 234.467754][ T7505] BTRFS info (device loop7): enabling auto defrag [ 234.485526][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.516368][ T7505] BTRFS info (device loop7): max_inline at 4096 [ 234.521368][ T27] task:syz-executor state:D stack:21072 pid: 4184 ppid: 1 flags:0x00004004 [ 234.539284][ T7514] EXT4-fs (loop2): Remounting filesystem read-only [ 234.552052][ T27] Call Trace: [ 234.556186][ T27] [ 234.560993][ T27] __schedule+0x11ef/0x43c0 [ 234.567252][ T7505] BTRFS info (device loop7): using free space tree [ 234.567469][ T27] ? verify_lock_unused+0x140/0x140 [ 234.589119][ T27] ? mark_lock+0x94/0x320 [ 234.596309][ T27] ? release_firmware_map_entry+0x190/0x190 [ 234.604685][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 234.613407][ T27] ? lock_chain_count+0x20/0x20 [ 234.618923][ T7505] BTRFS info (device loop7): has skinny extents [ 234.629160][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.637346][ T27] schedule+0x11b/0x1e0 [ 234.660182][ T27] io_schedule+0x7c/0xd0 [ 234.676728][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 234.689180][ T27] ? wait_on_page_bit+0x50/0x50 [ 234.707431][ T27] ? rcu_lock_release+0x20/0x20 [ 234.724055][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 234.744616][ T27] ? invalidate_inode_page+0x360/0x360 [ 234.755400][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 234.773176][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 234.784954][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 234.824048][ T4536] usb 5-1: USB disconnect, device number 11 [ 234.858231][ T27] evict+0x4dc/0x8d0 [ 234.873638][ T27] ? proc_nr_inodes+0x320/0x320 [ 234.884977][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 234.894398][ T27] evict_inodes+0x60c/0x6a0 [ 234.901102][ T27] ? __dentry_kill+0x530/0x650 [ 234.909419][ T27] ? clear_inode+0x150/0x150 [ 234.914916][ T27] generic_shutdown_super+0x93/0x300 [ 234.936918][ T7505] BTRFS info (device loop7): enabling ssd optimizations [ 234.941709][ T27] kill_block_super+0x7c/0xe0 [ 234.964415][ T27] deactivate_locked_super+0x93/0xf0 [ 234.975214][ T27] cleanup_mnt+0x42d/0x4e0 [ 234.987986][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 235.000396][ T27] task_work_run+0x125/0x1a0 [ 235.009978][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 235.016527][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 235.016660][ T23] Bluetooth: hci7: command 0x1001 tx timeout [ 235.026567][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 235.040723][ T27] do_syscall_64+0x58/0xa0 [ 235.047170][ T27] ? clear_bhb_loop+0x30/0x80 [ 235.052680][ T27] ? clear_bhb_loop+0x30/0x80 [ 235.060307][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.069804][ T27] RIP: 0033:0x7fe4759279d7 [ 235.076436][ T27] RSP: 002b:00007ffe0ddbae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 235.091010][ T4196] Bluetooth: hci7: sending frame failed (-49) [ 235.091358][ T27] RAX: 0000000000000000 RBX: 00007fe4759bbf90 RCX: 00007fe4759279d7 [ 235.118545][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0ddbaf20 [ 235.132595][ T27] RBP: 00007ffe0ddbaf20 R08: 00007ffe0ddbbf20 R09: 00000000ffffffff [ 235.145960][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0ddbbfb0 [ 235.159004][ T27] R13: 00007fe4759bbf90 R14: 0000000000015341 R15: 00007ffe0ddbbff0 [ 235.171564][ T27] [ 235.176996][ T27] [ 235.176996][ T27] Showing all locks held in the system: [ 235.211901][ T27] 1 lock held by khungtaskd/27: [ 235.234920][ T26] audit: type=1800 audit(1772106796.880:15): pid=7505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1123" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 235.263933][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 235.327415][ T27] 3 locks held by kworker/0:3/3576: [ 235.348323][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 235.406480][ T27] #1: ffffc90002e9fd00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 235.421701][ T4538] usb 5-1: Service connection timeout for: 256 [ 235.436544][ T4538] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 235.447384][ T27] #2: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 235.472715][ T4538] ath9k_htc: Failed to initialize the device [ 235.484603][ T27] 2 locks held by getty/3946: [ 235.498368][ T4536] usb 5-1: ath9k_htc: USB layer deinitialized [ 235.527087][ T27] #0: ffff88802ca0f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 235.542139][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 235.553949][ T27] 1 lock held by syz-executor/4184: [ 235.560889][ T27] #0: ffff88805d5d20e0 (&type->s_umount_key#55){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 235.588090][ T27] 1 lock held by syz-executor/4186: [ 235.594977][ T27] #0: ffff88802b59c0e0 (&type->s_umount_key#55){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 235.621588][ T27] 3 locks held by kworker/u5:5/4201: [ 235.672377][ T27] #0: ffff888147465138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 235.713350][ T27] #1: ffffc9000305fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 235.745094][ T27] #2: ffff88805394cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xa4/0x1270 [ 235.769078][ T27] 2 locks held by kworker/0:10/4691: [ 235.775677][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 235.797941][ T27] #1: ffffc90002f2fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 235.826659][ T27] 2 locks held by kworker/0:11/4692: [ 235.835901][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 235.863552][ T27] #1: ffffc90002f7fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 235.889018][ T27] 1 lock held by kworker/0:15/4781: [ 235.895207][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 235.909890][ T27] 2 locks held by syz-executor/5237: [ 235.920994][ T27] #0: ffff8880207e3d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 235.943167][ T27] #1: ffff888020836468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 235.956606][ T27] 1 lock held by syz-executor/6639: [ 235.963062][ T27] #0: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 235.976010][ T27] 2 locks held by syz.1.1089/7424: [ 235.981834][ T27] #0: ffff8880621ee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb3/0x200 [ 235.995960][ T27] #1: ffff888062570098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xd7/0x200 [ 236.020607][ T27] 1 lock held by sed/7544: [ 236.034347][ T27] [ 236.043301][ T27] ============================================= [ 236.043301][ T27] [ 236.071106][ T27] NMI backtrace for cpu 0 [ 236.077610][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 236.089923][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.108186][ T27] Call Trace: [ 236.114120][ T27] [ 236.118547][ T27] dump_stack_lvl+0x188/0x250 [ 236.129998][ T27] ? show_regs_print_info+0x20/0x20 [ 236.139334][ T27] ? load_image+0x400/0x400 [ 236.148362][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 236.157659][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 236.163938][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 236.171825][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 236.181452][ T27] ? _printk+0xda/0x130 [ 236.186227][ T27] ? load_image+0x400/0x400 [ 236.192478][ T27] ? load_image+0x400/0x400 [ 236.200240][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 236.212086][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 236.220475][ T27] watchdog+0xe0f/0xe50 [ 236.227223][ T27] kthread+0x436/0x520 [ 236.233573][ T27] ? hungtask_pm_notify+0x40/0x40 [ 236.240804][ T27] ? kthread_blkcg+0xd0/0xd0 [ 236.248031][ T27] ret_from_fork+0x1f/0x30 [ 236.254071][ T27] [ 236.258665][ T27] Sending NMI from CPU 0 to CPUs 1: [ 236.265367][ C1] NMI backtrace for cpu 1 [ 236.265395][ C1] CPU: 1 PID: 4172 Comm: syz-executor Not tainted syzkaller #0 [ 236.265417][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.265432][ C1] RIP: 0010:__schedule+0x141/0x43c0 [ 236.265467][ C1] Code: 74 08 48 89 df e8 7f 05 fa f7 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 66 05 fa f7 48 81 3b 9d 6e ac 57 <0f> 85 7d 13 00 00 83 7c 24 60 00 75 42 49 8d 5e 18 48 89 d8 48 c1 [ 236.265483][ C1] RSP: 0018:ffffc90002faf9e0 EFLAGS: 00000246 [ 236.265500][ C1] RAX: 1ffff920005f5000 RBX: ffffc90002fa8000 RCX: 0000000000000000 [ 236.265512][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002fafb50 [ 236.265524][ C1] RBP: ffffc90002fafbc0 R08: ffffc90002fafb4f R09: ffffc90002fafb40 [ 236.265536][ C1] R10: dffffc0000000000 R11: fffff520005f5f6a R12: dffffc0000000000 [ 236.265549][ C1] R13: dffffc0000000000 R14: ffff88807b721dc0 R15: ffff8880b9100000 [ 236.265640][ C1] FS: 000055555ea18500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 236.265657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.265668][ C1] CR2: 0000560def358950 CR3: 000000007d8eb000 CR4: 00000000003506e0 [ 236.265684][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.265694][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.265705][ C1] Call Trace: [ 236.265717][ C1] [ 236.265739][ C1] ? lock_chain_count+0x20/0x20 [ 236.265772][ C1] ? release_firmware_map_entry+0x190/0x190 [ 236.265792][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 236.265811][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 236.265834][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 236.265850][ C1] ? _raw_spin_unlock+0x40/0x40 [ 236.265864][ C1] ? hrtimer_start_range_ns+0xa9a/0xc20 [ 236.265890][ C1] schedule+0x11b/0x1e0 [ 236.265908][ C1] do_nanosleep+0x1f1/0x770 [ 236.265935][ C1] ? usleep_range_state+0x180/0x180 [ 236.265959][ C1] hrtimer_nanosleep+0x33e/0x590 [ 236.265981][ C1] ? nanosleep_copyout+0x110/0x110 [ 236.266001][ C1] ? __remove_hrtimer+0x3a0/0x3a0 [ 236.266017][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 236.266040][ C1] __se_sys_clock_nanosleep+0x30b/0x3a0 [ 236.266062][ C1] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 236.266082][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 236.266101][ C1] do_syscall_64+0x4c/0xa0 [ 236.266118][ C1] ? clear_bhb_loop+0x30/0x80 [ 236.266133][ C1] ? clear_bhb_loop+0x30/0x80 [ 236.266149][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.266167][ C1] RIP: 0033:0x7ff58924d917 [ 236.266184][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 236.266198][ C1] RSP: 002b:00007fffb6fd43c0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 236.266214][ C1] RAX: ffffffffffffffda RBX: 000055555ea18500 RCX: 00007ff58924d917 [ 236.266226][ C1] RDX: 00007fffb6fd4400 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.266236][ C1] RBP: 00007fffb6fd48e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.266246][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 236.266256][ C1] R13: 00007fffb6fd443c R14: 00007fffb6fd44d0 R15: 0000000000000000 [ 236.266275][ C1] [ 236.587347][ T4915] udevd[4915]: symlink '../../loop2' '/dev/disk/by-diskseq/460.tmp-b7:2' failed: Read-only file system [ 236.712120][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 236.721100][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 236.731848][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.743077][ T27] Call Trace: [ 236.746984][ T27] [ 236.750155][ T27] dump_stack_lvl+0x188/0x250 [ 236.754898][ T27] ? show_regs_print_info+0x20/0x20 [ 236.761106][ T27] ? load_image+0x400/0x400 [ 236.767922][ T27] panic+0x2e5/0x810 [ 236.772668][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 236.779266][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 236.784451][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 236.791647][ T27] watchdog+0xe4e/0xe50 [ 236.796654][ T27] kthread+0x436/0x520 [ 236.801055][ T27] ? hungtask_pm_notify+0x40/0x40 [ 236.806240][ T27] ? kthread_blkcg+0xd0/0xd0 [ 236.811404][ T27] ret_from_fork+0x1f/0x30 [ 236.816997][ T27] [ 236.820880][ T27] Kernel Offset: disabled [ 236.825718][ T27] Rebooting in 86400 seconds..