last executing test programs: 11m2.585271482s ago: executing program 0 (id=7358): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 11m2.426329603s ago: executing program 0 (id=7361): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x1}, 0x28) 11m2.259774572s ago: executing program 0 (id=7364): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x8004b706, 0x0) 11m2.038637431s ago: executing program 0 (id=7367): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 11m1.624534735s ago: executing program 0 (id=7371): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xf010000, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=0x0}}) 11m1.352482614s ago: executing program 0 (id=7372): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000006c0)={{0x3, 0x9}, 'port1\x00', 0x5b, 0x8, 0x6, 0x93, 0x619, 0x1, 0x1, 0x0, 0x1, 0x8}) 11m0.911332892s ago: executing program 32 (id=7372): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000006c0)={{0x3, 0x9}, 'port1\x00', 0x5b, 0x8, 0x6, 0x93, 0x619, 0x1, 0x1, 0x0, 0x1, 0x8}) 3.944702228s ago: executing program 4 (id=16071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x4) 3.772151968s ago: executing program 3 (id=16074): r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) 3.72507317s ago: executing program 4 (id=16075): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r1) 3.54851644s ago: executing program 4 (id=16078): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x80, &(0x7f00000003c0)={[{@gid}, {@umask={'umask', 0x3d, 0xe}}, {@barrier}, {@gid={'gid', 0x3d, 0xee01}}, {@barrier}, {@uid}, {@nls={'nls', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x1}}]}, 0x44, 0x6ff, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.209317922s ago: executing program 4 (id=16079): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x810800, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8a6015, 0x0, 0x4, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2.786396779s ago: executing program 3 (id=16082): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f0000000740)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) 2.304425686s ago: executing program 4 (id=16083): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 2.136451497s ago: executing program 3 (id=16086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x2c, r1, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40006) 1.891643695s ago: executing program 3 (id=16087): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xa8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 1.643901343s ago: executing program 1 (id=16090): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") truncate(&(0x7f0000000140)='./file2\x00', 0x63fc) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 1.534873444s ago: executing program 3 (id=16091): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x98}}, 0x0) 1.244413924s ago: executing program 4 (id=16093): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1458c2, 0x1c2) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1.241924324s ago: executing program 3 (id=16094): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="40160400000090b7a7f2"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.185206314s ago: executing program 2 (id=16095): set_mempolicy(0x1, 0x0, 0x4) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x1749ba33, 0xfffffffffffffffd) 958.455475ms ago: executing program 1 (id=16096): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xd, 0xfb, "72f12045ca3048f6cddeff609d506f4526d39deee412aaf208a54e9d07d4f1a5d384ff6174f5ad62c87f3d6318bc84e43e098253c0bcccd1402017d19a7f06", 0x11}, 0x80, 0x0}, 0x8800) 931.24356ms ago: executing program 2 (id=16097): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 748.453429ms ago: executing program 2 (id=16098): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x320) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}, {0x18, 0x110, 0xd, "f8"}], 0x28}, 0x0) 716.936773ms ago: executing program 1 (id=16099): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 643.938181ms ago: executing program 2 (id=16100): r0 = socket(0xa, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0xe, 0x4}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 488.391864ms ago: executing program 2 (id=16101): r0 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r0}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) 488.165114ms ago: executing program 1 (id=16102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000240)=0x4) 363.696883ms ago: executing program 2 (id=16103): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="21000600"}}) 303.626642ms ago: executing program 1 (id=16104): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000022c0)='./file0\x00', 0x0, &(0x7f0000002dc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0xfd, 0x29e, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 0s ago: executing program 1 (id=16105): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000900)={[{@noblock_validity}, {@jqfmt_vfsv1}, {@nobh}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv0}, {@discard}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r0, &(0x7f0000000380)=""/4096, 0x1000) kernel console output (not intermixed with test programs): info (device loop1): force clearing of disk cache [ 1158.518177][T26122] BTRFS info (device loop1): using free space tree [ 1158.755908][T26122] BTRFS info (device loop1): rebuilding free space tree [ 1158.810681][T26122] BTRFS info (device loop1): checking UUID tree [ 1158.990877][T26190] loop4: detected capacity change from 0 to 4096 [ 1159.033517][T26190] __ntfs_warning: 2 callbacks suppressed [ 1159.033533][T26190] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1159.090542][ T5770] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1159.179665][ T28] audit: type=1326 audit(2000000160.164:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.250815][ T28] audit: type=1326 audit(2000000160.184:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.287820][T26190] ntfs: volume version 3.1. [ 1159.358290][ T28] audit: type=1326 audit(2000000160.194:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.457779][ T28] audit: type=1326 audit(2000000160.194:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.518628][T26203] loop2: detected capacity change from 0 to 2048 [ 1159.528692][T16743] hid-generic 0004:00A9:0000.0006: unknown main item tag 0x0 [ 1159.550255][ T28] audit: type=1326 audit(2000000160.194:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.573048][T16743] hid-generic 0004:00A9:0000.0006: unknown main item tag 0x2 [ 1159.604160][T26203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1159.621573][T16743] hid-generic 0004:00A9:0000.0006: unknown main item tag 0xe [ 1159.666898][ T28] audit: type=1326 audit(2000000160.194:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1159.727214][T16743] hid-generic 0004:00A9:0000.0006: hidraw0: HID v1.01 Device [syz1] on syz0 [ 1159.769792][ T28] audit: type=1326 audit(2000000160.194:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26198 comm="syz.2.15243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1559c799 code=0x7ffc0000 [ 1160.020380][T26218] fido_id[26218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1160.447895][T16743] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1160.639326][T16743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.666840][T16743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.690960][T16743] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1160.723594][T16743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.768444][T16743] usb 4-1: config 0 descriptor?? [ 1161.232869][T16743] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 1161.439894][T16743] steelseries 0003:1038:12B6.0007: hid_hw_raw_request() failed with -71 [ 1161.482797][T26304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15264'. [ 1161.498468][T16743] usb 4-1: USB disconnect, device number 89 [ 1161.510441][T26304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1161.532732][T26309] loop4: detected capacity change from 0 to 512 [ 1161.619472][T26309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1161.771306][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.866021][T26330] ALSA: seq fatal error: cannot create timer (-22) [ 1161.952740][T26336] loop4: detected capacity change from 0 to 128 [ 1162.034105][T26336] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1162.074374][T26336] FAT-fs (loop4): Filesystem has been set read-only [ 1162.119717][T26336] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1162.130751][T26280] loop2: detected capacity change from 0 to 32768 [ 1162.786924][ T7825] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1162.824515][T26369] loop3: detected capacity change from 0 to 2048 [ 1162.854746][T26369] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1162.912660][T26373] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1162.977157][ T7825] usb 5-1: Using ep0 maxpacket: 8 [ 1162.996194][ T7825] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1163.015602][ T7825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.046232][ T7825] usb 5-1: config 0 has no interface number 0 [ 1163.066460][ T7825] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1163.111915][ T7825] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 49487, setting to 1024 [ 1163.166606][ T7825] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1163.187403][ T7825] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1163.206964][ T7825] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1163.221188][ T7825] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1163.242265][ T7825] usb 5-1: Product: syz [ 1163.246507][ T7825] usb 5-1: SerialNumber: syz [ 1163.267945][T26342] loop1: detected capacity change from 0 to 32768 [ 1163.274147][ T7825] usb 5-1: config 0 descriptor?? [ 1163.369466][T26342] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1163.523969][ T7825] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input73 [ 1163.605644][T26378] loop3: detected capacity change from 0 to 8192 [ 1163.698784][T26378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1163.760780][T26342] XFS (loop1): Ending clean mount [ 1163.774260][ T9] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 1163.802959][ T9] XFS (loop1): Unmount and run xfs_repair [ 1163.813632][T26378] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1163.839072][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1163.897800][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1163.917639][T26378] REISERFS (device loop3): using journaled data mode [ 1163.936168][ T9] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1163.997969][ T9] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1164.011208][T26378] reiserfs: using flush barriers [ 1164.057598][ T9] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1164.122552][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1164.136868][T26378] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1164.177226][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1164.220834][T16743] usb 5-1: USB disconnect, device number 44 [ 1164.226887][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1164.237483][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1164.247145][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1164.256569][T26342] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 1164.283584][T26378] REISERFS (device loop3): checking transaction log (loop3) [ 1164.293966][T26342] XFS (loop1): Failed to initialize disk quotas. [ 1164.337223][T26378] REISERFS (device loop3): Using r5 hash to sort names [ 1164.352370][T26378] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1164.385721][ T5770] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1164.395611][T26378] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1164.587016][T26378] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1164.658718][T26378] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1164.674624][T26378] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1165.287904][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1165.486874][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1165.518687][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.537212][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.557144][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1165.566183][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1165.579408][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.597702][ T9] usb 3-1: config 0 descriptor?? [ 1165.917517][T26476] loop3: detected capacity change from 0 to 256 [ 1165.979689][T26476] FAT-fs (loop3): Directory bread(block 64) failed [ 1165.986321][T26476] FAT-fs (loop3): Directory bread(block 65) failed [ 1166.017127][T26476] FAT-fs (loop3): Directory bread(block 66) failed [ 1166.023815][T26476] FAT-fs (loop3): Directory bread(block 67) failed [ 1166.043942][ T9] nzxt-smart2 0003:1E71:2009.0008: collection stack underflow [ 1166.055492][T26476] FAT-fs (loop3): Directory bread(block 68) failed [ 1166.086541][ T9] nzxt-smart2 0003:1E71:2009.0008: item 0 2 0 12 parsing failed [ 1166.093743][T26476] FAT-fs (loop3): Directory bread(block 69) failed [ 1166.107983][T26476] FAT-fs (loop3): Directory bread(block 70) failed [ 1166.114585][T26476] FAT-fs (loop3): Directory bread(block 71) failed [ 1166.123721][ T9] nzxt-smart2: probe of 0003:1E71:2009.0008 failed with error -22 [ 1166.147038][T26476] FAT-fs (loop3): Directory bread(block 72) failed [ 1166.153639][T26476] FAT-fs (loop3): Directory bread(block 73) failed [ 1166.249162][T26453] loop1: detected capacity change from 0 to 40427 [ 1166.294098][T26453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1166.332091][ T9] usb 3-1: USB disconnect, device number 88 [ 1166.514675][T26453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1166.765357][ T5770] syz-executor: attempt to access beyond end of device [ 1166.765357][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1166.812531][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1166.978584][ T9] hid-generic 0004:00A9:0000.0009: unknown main item tag 0x0 [ 1166.986107][ T9] hid-generic 0004:00A9:0000.0009: unknown main item tag 0x2 [ 1167.021197][ T9] hid-generic 0004:00A9:0000.0009: unknown main item tag 0xe [ 1167.055791][ T9] hid-generic 0004:00A9:0000.0009: hidraw0: HID v1.01 Device [syz1] on syz0 [ 1167.156350][T26535] loop3: detected capacity change from 0 to 1024 [ 1167.225942][T26529] fido_id[26529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1167.269736][T26539] netlink: 54775 bytes leftover after parsing attributes in process `syz.2.15299'. [ 1167.347815][T26535] hfsplus: invalid length 32517 has been corrected to 255 [ 1168.142800][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15308'. [ 1168.191444][T26583] loop4: detected capacity change from 0 to 256 [ 1168.253327][T26583] exfat: Deprecated parameter 'utf8' [ 1168.313893][T26562] syz.3.15302 (26562): drop_caches: 2 [ 1168.341758][T26571] syz.3.15302 (26571): drop_caches: 2 [ 1168.388094][T26583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1169.038203][ T28] audit: type=1326 audit(2000000170.024:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26625 comm="syz.2.15321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a1559c799 code=0x0 [ 1169.251491][T26638] syz.4.15325 (26638): drop_caches: 2 [ 1169.263622][T26638] syz.4.15325 (26638): drop_caches: 2 [ 1169.786002][T26631] loop3: detected capacity change from 0 to 32768 [ 1169.817707][T26631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.15322 (26631) [ 1169.881190][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15329'. [ 1169.899260][T26631] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1169.957052][T26631] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1169.965776][T26631] BTRFS info (device loop3): using free space tree [ 1170.105719][T26648] loop4: detected capacity change from 0 to 32768 [ 1170.190934][T26631] BTRFS info (device loop3): enabling ssd optimizations [ 1170.226535][T26648] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1170.245920][T26631] BTRFS info (device loop3): auto enabling async discard [ 1170.349289][T26648] XFS (loop4): Ending clean mount [ 1170.379850][T26648] XFS (loop4): Quotacheck needed: Please wait. [ 1170.523489][ T5781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1170.583686][T26648] XFS (loop4): Quotacheck: Done. [ 1170.931098][T30339] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1170.942175][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5763) [ 1171.729743][T26715] loop1: detected capacity change from 0 to 32768 [ 1172.602622][T26762] loop4: detected capacity change from 0 to 2048 [ 1172.643893][T26762] EXT4-fs: Ignoring removed oldalloc option [ 1172.658434][T26753] loop1: detected capacity change from 0 to 32768 [ 1172.721900][T26762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.742808][T26753] JBD2: Ignoring recovery information on journal [ 1172.776261][T26762] EXT4-fs error (device loop4): ext4_ext_precache:627: inode #2: comm syz.4.15338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1172.840640][T26753] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1172.953558][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.027118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1173.117282][ T28] audit: type=1800 audit(2000000174.094:3284): pid=26753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15348" name="file2" dev="loop1" ino=17058 res=0 errno=0 [ 1173.405121][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1173.617440][T26790] loop3: detected capacity change from 0 to 128 [ 1173.690776][T26790] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1173.734428][T26790] hpfs: filesystem error: improperly stopped [ 1173.758050][T26790] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1173.775237][T26790] hpfs: You really don't want any checks? You are crazy... [ 1173.785497][T26795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15356'. [ 1173.809740][T26790] hpfs: hpfs_map_sector(): read error [ 1173.815282][T26790] hpfs: code page support is disabled [ 1173.888851][T26790] hpfs: hpfs_map_4sectors(): unaligned read [ 1173.895660][T26790] hpfs: hpfs_map_4sectors(): unaligned read [ 1173.937523][T26790] hpfs: filesystem error: unable to find root dir [ 1174.030746][T26790] hpfs: hpfs_map_4sectors(): unaligned read [ 1174.067193][T26790] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1174.156331][T26805] loop1: detected capacity change from 0 to 128 [ 1174.232525][T26805] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1174.321044][T26805] syz.1.15358: attempt to access beyond end of device [ 1174.321044][T26805] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 1174.391888][T26805] sysv_free_block: trying to free block not in datazone [ 1174.456371][T26776] loop4: detected capacity change from 0 to 40427 [ 1174.502039][T26776] F2FS-fs (loop4): heap/no_heap options were deprecated [ 1174.527146][T26776] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 1174.536304][T26776] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x77e8c [ 1174.555007][T26776] F2FS-fs (loop4): invalid crc value [ 1174.569149][ T5770] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1174.623191][T26776] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 1174.661841][T26776] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1174.792510][T26838] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1174.826911][T26776] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 1174.878743][T26839] syz.1.15362 (26839): drop_caches: 2 [ 1174.881601][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 1174.934515][T26776] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1174.976348][T26839] syz.1.15362 (26839): drop_caches: 2 [ 1175.135037][T26776] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 1175.325389][T30339] syz-executor: attempt to access beyond end of device [ 1175.325389][T30339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1175.406914][T30339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1175.475913][T26865] loop2: detected capacity change from 0 to 16 [ 1175.500516][T26865] erofs: (device loop2): mounted with root inode @ nid 36. [ 1175.546316][ T28] audit: type=1800 audit(2000000176.524:3285): pid=26865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15370" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1175.698837][T26874] tipc: Enabling not permitted [ 1175.714218][T26874] tipc: Enabling of bearer rejected, failed to enable media [ 1176.196224][T26894] loop3: detected capacity change from 0 to 764 [ 1176.307777][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15376'. [ 1176.321068][ T5763] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1176.461310][T26905] loop2: detected capacity change from 0 to 64 [ 1176.559710][T26910] netlink: 5112 bytes leftover after parsing attributes in process `syz.4.15369'. [ 1176.559851][T26910] netlink: 5112 bytes leftover after parsing attributes in process `syz.4.15369'. [ 1177.378863][T26947] loop3: detected capacity change from 0 to 512 [ 1177.478570][T26947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.552374][T26947] ext4 filesystem being mounted at /3658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.708141][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.853895][T26947] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1178.008592][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.312914][T26995] loop4: detected capacity change from 0 to 512 [ 1178.406802][T26995] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.15396: invalid block [ 1178.432735][T27003] loop2: detected capacity change from 0 to 136 [ 1178.461399][T27003] rock: directory entry would overflow storage [ 1178.478179][T27003] rock: sig=0x5245, size=8, remaining=5 [ 1178.530406][T26995] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.15396: invalid indirect mapped block 10 (level 1) [ 1178.582929][T26995] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.15396: invalid indirect mapped block 8 (level 1) [ 1178.614369][T26995] EXT4-fs (loop4): 1 truncate cleaned up [ 1178.648310][T26995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.898683][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.227420][ T7825] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1179.426098][ T7825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1179.457129][ T7825] usb 2-1: config 0 has no interface number 0 [ 1179.467233][ T7825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.497004][ T7825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.513597][T27057] loop4: detected capacity change from 0 to 164 [ 1179.520621][ T7825] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1179.565661][ T7825] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1179.585928][ T7825] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1179.602863][T27058] loop3: detected capacity change from 0 to 2048 [ 1179.619069][ T7825] usb 2-1: Product: syz [ 1179.623464][T27057] rock: directory entry would overflow storage [ 1179.635461][ T7825] usb 2-1: config 0 descriptor?? [ 1179.642407][T27057] rock: sig=0x66, size=4, remaining=3 [ 1179.653733][T27058] EXT4-fs: Ignoring removed oldalloc option [ 1179.724854][T27057] rock: directory entry would overflow storage [ 1179.746363][T27058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.767671][T27057] rock: sig=0x66, size=4, remaining=3 [ 1179.859370][T27058] EXT4-fs error (device loop3): ext4_ext_precache:627: inode #2: comm syz.3.15411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1179.988744][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.041515][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15415'. [ 1180.159463][ T7825] chicony 0003:04F2:1421.000A: unknown main item tag 0x3 [ 1180.177399][ T7825] chicony 0003:04F2:1421.000A: report_id 2141495278 is invalid [ 1180.185122][ T7825] chicony 0003:04F2:1421.000A: item 0 4 1 8 parsing failed [ 1180.209747][ T7825] chicony 0003:04F2:1421.000A: Chicony hid parse failed: -22 [ 1180.242084][ T7825] chicony: probe of 0003:04F2:1421.000A failed with error -22 [ 1180.413543][ T8] usb 2-1: USB disconnect, device number 82 [ 1180.519705][T27107] nbd: must specify at least one socket [ 1180.639937][T27110] loop3: detected capacity change from 0 to 4096 [ 1180.658242][T27110] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1180.670770][T27115] loop2: detected capacity change from 0 to 16 [ 1180.693822][T27115] erofs: (device loop2): mounted with root inode @ nid 36. [ 1180.857453][T27110] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1180.880974][T27110] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 1180.979212][ T2955] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1180.988913][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1180.995496][ T5781] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1181.033510][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1181.056986][T25977] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1181.179535][T27133] loop1: detected capacity change from 0 to 65 [ 1181.236228][T27133] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 1181.252384][T27138] loop2: detected capacity change from 0 to 512 [ 1181.283841][T27138] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.15430: inode has both inline data and extents flags [ 1181.306594][T27138] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.15430: couldn't read orphan inode 15 (err -117) [ 1181.330381][T27138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.389407][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.594733][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15433'. [ 1181.851926][T27168] loop3: detected capacity change from 0 to 1024 [ 1181.986923][T27168] hfsplus: bad catalog entry type [ 1182.128908][ T2905] hfsplus: b-tree write err: -5, ino 4 [ 1182.440899][T27184] loop4: detected capacity change from 0 to 8192 [ 1182.481858][T27184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1182.497412][T27184] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1182.508009][T27184] REISERFS (device loop4): using ordered data mode [ 1182.514591][T27184] reiserfs: using flush barriers [ 1182.548216][T27184] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1182.567068][ T7825] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1182.652533][T27184] REISERFS (device loop4): checking transaction log (loop4) [ 1182.697672][T27184] REISERFS (device loop4): Using r5 hash to sort names [ 1182.705000][T27184] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1182.737112][T27184] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1182.755401][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1726.tmp-b7:4' failed: Read-only file system [ 1182.784926][ T7825] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1182.796258][ T7825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.825595][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1182.826849][ T7825] usb 4-1: Product: syz [ 1182.861662][ T7825] usb 4-1: Manufacturer: syz [ 1182.864112][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:4' failed: Read-only file system [ 1182.886594][ T7825] usb 4-1: SerialNumber: syz [ 1182.913238][ T7825] usb 4-1: config 0 descriptor?? [ 1182.934642][ T7825] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1182.975754][ T7825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1183.002019][ T7825] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1183.040351][ T7825] usb 4-1: media controller created [ 1183.118506][ T7825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1183.145785][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1726.tmp-b7:4' failed: Read-only file system [ 1183.218269][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1183.254292][ T7825] DVB: Unable to find symbol mt352_attach() [ 1183.261606][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:4' failed: Read-only file system [ 1183.359621][T27206] JBD2: Ignoring recovery information on journal [ 1183.367994][ T7825] DVB: Unable to find symbol nxt6000_attach() [ 1183.374318][ T7825] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1183.393989][ T7825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 1183.409962][ T7825] dvb-usb: schedule remote query interval to 1000 msecs. [ 1183.417213][ T7825] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1183.427648][ T7825] dvb-usb: bulk message failed: -22 (7/0) [ 1183.433435][ T7825] dvb-usb: bulk message failed: -22 (7/0) [ 1183.444939][ T7825] usb 4-1: USB disconnect, device number 90 [ 1183.515345][ T7825] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1183.562831][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1726.tmp-b7:4' failed: Read-only file system [ 1183.612671][T27206] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1183.659138][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1726.tmp-b7:4' failed: Read-only file system [ 1183.682752][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1727.tmp-b7:1' failed: Read-only file system [ 1183.729553][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 1183.841529][T27209] set_capacity_and_notify: 1 callbacks suppressed [ 1183.841546][T27209] loop2: detected capacity change from 0 to 32768 [ 1183.919849][T27209] [ 1183.919849][T27209] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1183.919849][T27209] [ 1184.065219][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1184.109845][ T2955] ERROR: (device loop2): diWrite: ixpxd invalid [ 1184.109845][ T2955] [ 1184.136624][ T2955] ERROR: (device loop2): txCommit: [ 1184.136624][ T2955] [ 1184.178527][ T2955] jfs_write_inode: jfs_commit_inode failed! [ 1184.193057][ T5775] [ 1184.193057][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1184.193057][ T5775] [ 1184.247077][ T5775] [ 1184.247077][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1184.247077][ T5775] [ 1184.686437][T27278] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.15457'. [ 1184.793937][T27281] syz.3.15458 (27281): drop_caches: 2 [ 1184.807748][T27275] loop2: detected capacity change from 0 to 8192 [ 1184.844216][T27281] syz.3.15458 (27281): drop_caches: 2 [ 1184.871952][T27275] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1184.917588][T27275] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1184.941994][T27275] REISERFS (device loop2): using ordered data mode [ 1184.952419][T27275] reiserfs: using flush barriers [ 1184.969623][T27275] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1185.008215][T27275] REISERFS (device loop2): checking transaction log (loop2) [ 1185.221124][T27258] loop4: detected capacity change from 0 to 32768 [ 1185.261845][T27258] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1185.309191][T27275] REISERFS (device loop2): Using tea hash to sort names [ 1185.318269][T27275] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1185.560916][T27258] XFS (loop4): Ending clean mount [ 1185.614177][ T7825] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 1185.650005][ T7825] XFS (loop4): Unmount and run xfs_repair [ 1185.655809][ T7825] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1185.705967][ T7825] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1185.726991][ T7825] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1185.757878][ T7825] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1185.786824][ T7825] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1185.795848][ T7825] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1185.815474][T27317] netlink: 'syz.3.15465': attribute type 6 has an invalid length. [ 1185.838118][ T7825] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1185.868528][ T7825] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1185.887280][ T7825] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1185.906860][T27258] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 1185.929818][T27325] loop1: detected capacity change from 0 to 64 [ 1185.938971][T27258] XFS (loop4): Failed to initialize disk quotas. [ 1186.157602][T30339] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1186.294481][T27341] loop2: detected capacity change from 0 to 512 [ 1186.305086][T27341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1186.379327][T27346] loop3: detected capacity change from 0 to 256 [ 1186.398329][T27341] EXT4-fs error (device loop2): __ext4_iget:5071: inode #11: block 1: comm syz.2.15473: invalid block [ 1186.452760][T27341] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.15473: couldn't read orphan inode 11 (err -117) [ 1186.492564][T27346] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1186.517787][T27341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.766937][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1186.814879][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.845789][T27363] binder: 27362:27363 ioctl c0306201 0 returned -14 [ 1186.867572][T27363] binder: 27362:27363 ioctl c00c6211 0 returned -14 [ 1186.980506][ T9] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1186.990239][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.021906][ T9] usb 2-1: config 0 descriptor?? [ 1187.045344][ T9] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 1187.083445][ T9] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1187.186952][ T7825] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1187.311040][ T9] usb 2-1: USB disconnect, device number 83 [ 1187.401416][ T7825] usb 5-1: Using ep0 maxpacket: 32 [ 1187.423425][ T7825] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1187.432248][ T7825] usb 5-1: config 0 has no interface number 0 [ 1187.441470][ T7825] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.452865][ T7825] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.463871][ T7825] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1187.473352][ T7825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.496514][ T7825] usb 5-1: config 0 descriptor?? [ 1187.506173][T27407] netlink: 'syz.2.15484': attribute type 9 has an invalid length. [ 1187.516971][T27407] netlink: 399 bytes leftover after parsing attributes in process `syz.2.15484'. [ 1187.839618][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1740.tmp-b7:3' failed: Read-only file system [ 1187.886292][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1741.tmp-b7:2' failed: Read-only file system [ 1187.969254][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1736.tmp-b7:1' failed: Read-only file system [ 1188.120668][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1740.tmp-b7:3' failed: Read-only file system [ 1188.182974][ T7825] usb 5-1: USB disconnect, device number 45 [ 1188.504576][T27434] loop1: detected capacity change from 0 to 32768 [ 1188.536362][T27434] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1188.636565][T27434] XFS (loop1): Ending clean mount [ 1188.715602][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1742.tmp-b7:1' failed: Read-only file system [ 1188.728812][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 1188.743884][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1188.833740][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1742.tmp-b7:1' failed: Read-only file system [ 1188.855130][T27437] loop3: detected capacity change from 0 to 40427 [ 1188.879216][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 1188.895594][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1741.tmp-b7:2' failed: Read-only file system [ 1188.966024][T27437] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1188.992683][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1742.tmp-b7:1' failed: Read-only file system [ 1189.016917][T27437] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1189.076406][T27437] F2FS-fs (loop3): invalid crc value [ 1189.121069][T27437] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1189.281741][T27474] loop4: detected capacity change from 0 to 128 [ 1189.361491][T27437] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1189.386968][T27437] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1189.611553][ T28] audit: type=1800 audit(2000000190.594:3286): pid=27437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15491" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1189.770309][ C1] sd 0:0:1:0: [sda] tag#5382 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1189.780810][ C1] sd 0:0:1:0: [sda] tag#5382 CDB: Write(6) 0a 00 4e 23 00 00 00 06 fe 80 00 00 [ 1189.876482][T27498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15502'. [ 1189.896881][T27498] tipc: Started in network mode [ 1189.913809][T27498] tipc: Node identity 68b, cluster identity 4711 [ 1189.952289][T27498] tipc: Node number set to 1675 [ 1190.618225][T27526] loop2: detected capacity change from 0 to 4096 [ 1190.654036][T27526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.697622][T27526] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.15511: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1190.726094][T27526] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.15511: directory missing '..' [ 1190.795442][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.957602][ T7823] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1191.147954][T27548] loop2: detected capacity change from 0 to 256 [ 1191.166936][ T7823] usb 4-1: Using ep0 maxpacket: 32 [ 1191.194959][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.219002][T27548] FAT-fs (loop2): Directory bread(block 64) failed [ 1191.225644][T27548] FAT-fs (loop2): Directory bread(block 65) failed [ 1191.246118][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.266940][T27548] FAT-fs (loop2): Directory bread(block 66) failed [ 1191.287203][ T7823] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1191.288988][T27548] FAT-fs (loop2): Directory bread(block 67) failed [ 1191.296295][ T7823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.314404][ T7823] usb 4-1: config 0 descriptor?? [ 1191.344492][T27548] FAT-fs (loop2): Directory bread(block 68) failed [ 1191.356540][ T7823] hub 4-1:0.0: USB hub found [ 1191.386249][T27548] FAT-fs (loop2): Directory bread(block 69) failed [ 1191.419955][T27548] FAT-fs (loop2): Directory bread(block 70) failed [ 1191.430155][T27548] FAT-fs (loop2): Directory bread(block 71) failed [ 1191.463250][T27548] FAT-fs (loop2): Directory bread(block 72) failed [ 1191.477050][T27548] FAT-fs (loop2): Directory bread(block 73) failed [ 1191.486313][T27524] loop1: detected capacity change from 0 to 32768 [ 1191.574269][ T7823] hub 4-1:0.0: 29 ports detected [ 1191.592203][ T7823] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1192.021326][ T7823] usb 4-1: USB disconnect, device number 91 [ 1192.366281][T27599] loop1: detected capacity change from 0 to 512 [ 1192.417889][T27599] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1192.448480][T27599] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1192.466821][T27599] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15524: Failed to acquire dquot type 1 [ 1192.490190][T27599] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1192.504055][T27606] netlink: 'syz.2.15526': attribute type 3 has an invalid length. [ 1192.512270][T27606] netlink: 666 bytes leftover after parsing attributes in process `syz.2.15526'. [ 1192.557589][T27599] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1192.593387][T27599] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15524: Failed to acquire dquot type 1 [ 1192.633679][T27599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.15524: bg 0: block 248: padding at end of block bitmap is not set [ 1192.669758][T27599] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1192.707743][T27599] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1192.724800][T27599] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1192.751009][T27599] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15524: Failed to acquire dquot type 1 [ 1192.776622][T27599] EXT4-fs (loop1): 1 orphan inode deleted [ 1192.816118][T27599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.867046][T27599] ext4 filesystem being mounted at /3757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.893044][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1752.tmp-b7:2' failed: Read-only file system [ 1192.981048][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1747.tmp-b7:3' failed: Read-only file system [ 1192.993270][T27599] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1193.022285][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1754.tmp-b7:1' failed: Read-only file system [ 1193.080808][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1746.tmp-b7:4' failed: Read-only file system [ 1193.107047][T27599] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1193.118563][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1193.169573][T27599] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15524: Failed to acquire dquot type 1 [ 1193.170052][T27627] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1193.197746][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1752.tmp-b7:2' failed: Read-only file system [ 1193.265202][T27627] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15524: Failed to acquire dquot type 1 [ 1193.313915][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1747.tmp-b7:3' failed: Read-only file system [ 1193.390106][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1746.tmp-b7:4' failed: Read-only file system [ 1193.453153][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.555757][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1747.tmp-b7:3' failed: Read-only file system [ 1193.590111][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1754.tmp-b7:1' failed: Read-only file system [ 1194.057418][T27665] loop1: detected capacity change from 0 to 256 [ 1194.087914][T27665] exfat: Deprecated parameter 'utf8' [ 1194.187562][T27665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1194.304327][T27635] loop2: detected capacity change from 0 to 32768 [ 1194.395126][T27635] JBD2: Ignoring recovery information on journal [ 1194.583526][T27635] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1194.676850][ T7823] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1194.921699][ T7823] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.924182][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1194.943613][ T7823] usb 5-1: config 0 has no interface number 0 [ 1194.981457][ T7823] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1195.010019][ T7823] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1195.036849][ T7823] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1195.045963][ T7823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.070287][ T7823] usb 5-1: config 0 descriptor?? [ 1195.076214][T27680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1195.105970][ T7823] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1195.358790][ T7823] usb 5-1: USB disconnect, device number 46 [ 1195.584774][T27738] loop3: detected capacity change from 0 to 1024 [ 1195.822910][T27749] loop2: detected capacity change from 0 to 1024 [ 1195.855177][T27749] EXT4-fs: Ignoring removed orlov option [ 1195.873632][T27749] EXT4-fs: inline encryption not supported [ 1195.957324][T27749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.172618][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.182848][T27770] loop4: detected capacity change from 0 to 256 [ 1196.327552][T27770] FAT-fs (loop4): Directory bread(block 64) failed [ 1196.334250][T27770] FAT-fs (loop4): Directory bread(block 65) failed [ 1196.348941][T27770] FAT-fs (loop4): Directory bread(block 66) failed [ 1196.390983][T27770] FAT-fs (loop4): Directory bread(block 67) failed [ 1196.401220][T27770] FAT-fs (loop4): Directory bread(block 68) failed [ 1196.417101][T27770] FAT-fs (loop4): Directory bread(block 69) failed [ 1196.438845][T27770] FAT-fs (loop4): Directory bread(block 70) failed [ 1196.455725][T27770] FAT-fs (loop4): Directory bread(block 71) failed [ 1196.475207][T27770] FAT-fs (loop4): Directory bread(block 72) failed [ 1196.486870][T27770] FAT-fs (loop4): Directory bread(block 73) failed [ 1196.630189][T27784] loop2: detected capacity change from 0 to 128 [ 1196.677511][T27784] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1196.718634][T27784] ext4 filesystem being mounted at /4393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.779202][T27791] loop3: detected capacity change from 0 to 512 [ 1196.801573][T27791] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1196.851848][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1196.907704][T27791] EXT4-fs (loop3): 1 truncate cleaned up [ 1196.915444][T27791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.986941][T27791] EXT4-fs warning (device loop3): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 1197.158574][T27766] loop1: detected capacity change from 0 to 32768 [ 1197.183839][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.920921][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1771.tmp-b7:1' failed: Read-only file system [ 1197.961763][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1770.tmp-b7:3' failed: Read-only file system [ 1198.035435][T27807] loop4: detected capacity change from 0 to 32768 [ 1198.081788][T27807] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1198.106375][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1771.tmp-b7:1' failed: Read-only file system [ 1198.139535][T27804] loop2: detected capacity change from 0 to 32768 [ 1198.153010][T27804] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.15568 (27804) [ 1198.210474][T27807] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1198.226603][T27804] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1198.237328][T27804] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1198.252781][T27804] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1198.270678][T27804] BTRFS info (device loop2): force clearing of disk cache [ 1198.304896][T27804] BTRFS info (device loop2): use zlib compression, level 3 [ 1198.339349][ T5765] udevd[5765]: symlink '../../loop3' '/dev/disk/by-diskseq/1770.tmp-b7:3' failed: Read-only file system [ 1198.345276][T27804] BTRFS info (device loop2): turning off barriers [ 1198.389256][T27804] BTRFS info (device loop2): turning on flush-on-commit [ 1198.396337][T27804] BTRFS info (device loop2): metadata ratio 15 [ 1198.440901][T27804] BTRFS info (device loop2): using free space tree [ 1198.482548][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1772.tmp-b7:4' failed: Read-only file system [ 1198.497344][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 1198.503668][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1771.tmp-b7:1' failed: Read-only file system [ 1198.623732][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1770.tmp-b7:3' failed: Read-only file system [ 1198.683156][T30339] ocfs2: Unmounting device (7,4) on (node local) [ 1198.752468][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1772.tmp-b7:4' failed: Read-only file system [ 1198.770765][ T5761] udevd[5761]: symlink '../../loop2' '/dev/disk/by-diskseq/1773.tmp-b7:2' failed: Read-only file system [ 1198.830634][T27804] BTRFS info (device loop2): auto enabling async discard [ 1198.853252][T27804] BTRFS info (device loop2): rebuilding free space tree [ 1199.100254][T27858] loop3: detected capacity change from 0 to 32768 [ 1199.119038][T27875] loop1: detected capacity change from 0 to 64 [ 1199.134468][ T5775] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1199.159110][T27858] (syz.3.15582,27858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1199.204617][T27858] (syz.3.15582,27858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1199.376423][T27858] JBD2: Ignoring recovery information on journal [ 1199.531183][T27858] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1199.716845][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1199.818099][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.825661][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.845215][T27905] loop1: detected capacity change from 0 to 1024 [ 1199.878796][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.904833][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.921066][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.947722][ T8] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1199.982071][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1199.991741][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1199.999554][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.008381][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.016571][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.025464][ T8] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1200.036042][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.043656][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.070465][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.086881][ T8] usb 5-1: Product: syz [ 1200.091272][ T8] usb 5-1: Manufacturer: syz [ 1200.096088][ T9] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 1200.109517][ T8] usb 5-1: SerialNumber: syz [ 1200.153846][ T8] usb 5-1: config 0 descriptor?? [ 1200.163879][ T9] hid-generic 0103:0004:0000.000C: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1200.439611][T27912] fido_id[27912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1200.619497][ T8] mos7840 5-1:0.0: required endpoints missing [ 1200.645398][ T8] usb 5-1: USB disconnect, device number 47 [ 1200.668492][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 1200.833660][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15595'. [ 1200.857901][T27944] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1201.072410][T27953] loop3: detected capacity change from 0 to 64 [ 1201.431052][T27974] loop4: detected capacity change from 0 to 256 [ 1201.952321][T28004] loop3: detected capacity change from 0 to 128 [ 1202.085377][T28004] syz.3.15612: attempt to access beyond end of device [ 1202.085377][T28004] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 1202.398164][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1202.596877][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1202.625248][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.642204][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1202.673371][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1202.691625][T28041] loop2: detected capacity change from 0 to 4096 [ 1202.705552][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1202.743665][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.774859][T28041] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1202.797050][T28041] NILFS (loop2): trying rollback from an earlier position [ 1202.805641][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1202.825511][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1202.847980][ T8] usb 2-1: Manufacturer: syz [ 1202.852976][T28041] NILFS (loop2): recovery complete [ 1202.866084][T28054] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1202.879354][ T8] usb 2-1: config 0 descriptor?? [ 1202.984828][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1788.tmp-b7:2' failed: Read-only file system [ 1203.001649][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1785.tmp-b7:4' failed: Read-only file system [ 1203.023247][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:2' failed: Read-only file system [ 1203.195017][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1788.tmp-b7:2' failed: Read-only file system [ 1203.233549][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1785.tmp-b7:4' failed: Read-only file system [ 1203.247011][ T8] rc_core: IR keymap rc-hauppauge not found [ 1203.249163][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:2' failed: Read-only file system [ 1203.263710][ T8] Registered IR keymap rc-empty [ 1203.284713][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.325662][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1788.tmp-b7:2' failed: Read-only file system [ 1203.337429][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.359406][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1788.tmp-b7:2' failed: Read-only file system [ 1203.374521][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1203.394717][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 1203.411424][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.447002][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.476949][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1203.486133][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.521353][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1787.tmp-b7:3' failed: Read-only file system [ 1203.536952][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.576916][T16743] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1203.577913][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.624704][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1787.tmp-b7:3' failed: Read-only file system [ 1203.636864][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.676915][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.699786][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.711168][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1203.720547][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.737126][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.760356][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1203.766984][T16743] usb 5-1: Using ep0 maxpacket: 16 [ 1203.772522][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.803220][T16743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.803769][T28091] 9p: Unknown Cache mode or invalid value m [ 1203.820640][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1203.842298][T16743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.852732][T16743] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1203.862597][T16743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.863566][ T8] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1203.877410][T16743] usb 5-1: config 0 descriptor?? [ 1203.913185][ T8] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1203.946497][ T8] usb 2-1: USB disconnect, device number 84 [ 1204.315750][T16743] hid (null): bogus close delimiter [ 1204.340609][T16743] wacom 0003:056A:0084.000D: bogus close delimiter [ 1204.351076][T16743] wacom 0003:056A:0084.000D: item 0 4 2 10 parsing failed [ 1204.367701][T16743] wacom 0003:056A:0084.000D: parse failed [ 1204.383903][T16743] wacom: probe of 0003:056A:0084.000D failed with error -22 [ 1204.571938][ T7823] usb 5-1: USB disconnect, device number 48 [ 1205.020716][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1205.039912][ T9] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 1205.059218][ T9] usb 3-1: USB disconnect, device number 89 [ 1205.251361][T28177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15648'. [ 1205.559186][T28159] loop3: detected capacity change from 0 to 32768 [ 1206.098168][T16743] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 1206.311746][T16743] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1206.332053][T16743] usb 2-1: config 0 has no interface number 0 [ 1206.342171][T16743] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1206.353802][T16743] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1206.369919][T16743] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1206.379498][T16743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.412240][T16743] usb 2-1: config 0 descriptor?? [ 1206.424260][T28202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1206.453182][T16743] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1206.482476][T28227] loop3: detected capacity change from 0 to 4096 [ 1206.546589][T28227] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1206.575225][T28227] NILFS (loop3): trying rollback from an earlier position [ 1206.619318][T28227] NILFS (loop3): recovery complete [ 1206.649491][T28239] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1206.743974][ T9] usb 2-1: USB disconnect, device number 85 [ 1207.988770][T28259] loop4: detected capacity change from 0 to 40427 [ 1208.027160][T28259] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1208.057443][T28259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1208.093293][T28259] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1208.148401][T28259] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1208.212219][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1789.tmp-b7:2' failed: Read-only file system [ 1208.275326][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1794.tmp-b7:4' failed: Read-only file system [ 1208.312201][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 1208.357160][T28259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1208.364458][T28259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1208.495094][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1789.tmp-b7:2' failed: Read-only file system [ 1208.627571][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1789.tmp-b7:2' failed: Read-only file system [ 1208.639474][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1794.tmp-b7:4' failed: Read-only file system [ 1208.672176][T28282] loop1: detected capacity change from 0 to 32768 [ 1208.686437][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 1208.722728][T28282] (syz.1.15674,28282,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1208.785971][T28282] (syz.1.15674,28282,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1208.863315][T28282] JBD2: Ignoring recovery information on journal [ 1208.882949][T28288] loop3: detected capacity change from 0 to 32768 [ 1208.978300][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1789.tmp-b7:2' failed: Read-only file system [ 1209.008918][T28282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1209.032976][T28288] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1209.067828][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1795.tmp-b7:1' failed: Read-only file system [ 1209.124884][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:1' failed: Read-only file system [ 1209.278719][T28288] XFS (loop3): Ending clean mount [ 1209.545487][ T5781] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1209.837882][T28328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15681'. [ 1209.866879][T28328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15681'. [ 1209.881123][T28328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15681'. [ 1210.033396][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1210.532936][T28350] Bluetooth: MGMT ver 1.22 [ 1210.656214][T28356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15689'. [ 1210.690082][T28356] netlink: 'syz.2.15689': attribute type 6 has an invalid length. [ 1210.725761][T28356] netlink: 'syz.2.15689': attribute type 5 has an invalid length. [ 1210.734326][T28356] netlink: 'syz.2.15689': attribute type 4 has an invalid length. [ 1210.790044][T28360] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1211.305147][T28395] loop2: detected capacity change from 0 to 512 [ 1211.354961][T28395] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.15701: inode has both inline data and extents flags [ 1211.401218][T28395] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.15701: couldn't read orphan inode 15 (err -117) [ 1211.457669][T28395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.497216][ T7823] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1211.626459][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.661403][T28411] loop4: detected capacity change from 0 to 128 [ 1211.696945][ T7823] usb 4-1: Using ep0 maxpacket: 16 [ 1211.704655][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.747708][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.757742][T28411] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1211.773067][ T7823] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1211.788440][ T7823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.801312][ T7823] usb 4-1: config 0 descriptor?? [ 1211.813640][T28411] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1211.897052][T28411] ext2 filesystem being mounted at /1974/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.083820][T28429] loop2: detected capacity change from 0 to 512 [ 1212.153349][T28429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.177562][T28429] ext4 filesystem being mounted at /4434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.207114][T30339] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1212.227393][T28435] loop1: detected capacity change from 0 to 128 [ 1212.252274][ T7823] corsair 0003:1B1C:1B02.000E: unbalanced delimiter at end of report description [ 1212.267364][T28435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1212.317601][ T7823] corsair 0003:1B1C:1B02.000E: parse failed [ 1212.344123][ T7823] corsair: probe of 0003:1B1C:1B02.000E failed with error -22 [ 1212.369231][T28435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1212.471669][ T9] usb 4-1: USB disconnect, device number 92 [ 1212.685126][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.854389][T28468] loop2: detected capacity change from 0 to 512 [ 1212.895077][T28468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1212.922156][T28468] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1212.956900][T28468] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1212.972304][T28468] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1212.994403][T28468] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1213.063773][T28468] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 1213.127189][T28468] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1213.167549][T28468] EXT4-fs (loop2): mount failed [ 1213.196247][T28477] ip6gretap0: entered promiscuous mode [ 1213.229117][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1213.256448][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1808.tmp-b7:2' failed: Read-only file system [ 1213.278744][T28477] macsec0: entered promiscuous mode [ 1213.287350][T28477] macsec0: entered allmulticast mode [ 1213.310904][T28477] ip6gretap0: entered allmulticast mode [ 1213.335756][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1808.tmp-b7:2' failed: Read-only file system [ 1213.371460][T28477] ip6gretap0: left allmulticast mode [ 1213.377556][T28477] ip6gretap0: left promiscuous mode [ 1213.387985][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1805.tmp-b7:4' failed: Read-only file system [ 1213.434117][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1809.tmp-b7:2' failed: Read-only file system [ 1213.468369][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1213.561542][T28495] loop2: detected capacity change from 0 to 512 [ 1213.565162][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1805.tmp-b7:4' failed: Read-only file system [ 1213.604021][T28495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1213.645783][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1810.tmp-b7:2' failed: Read-only file system [ 1213.670456][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1213.682370][T28495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.722102][T28495] ext4 filesystem being mounted at /4436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.779670][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1213.818168][T28495] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.15721: corrupted inode contents [ 1213.898660][T28495] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.15721: mark_inode_dirty error [ 1213.932777][T28495] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.15721: corrupted inode contents [ 1213.983110][T28495] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.15721: mark_inode_dirty error [ 1214.138334][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.285012][T28530] loop1: detected capacity change from 0 to 128 [ 1214.616842][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1214.744998][T28561] loop3: detected capacity change from 0 to 64 [ 1214.806835][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1214.840553][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1214.864167][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1214.876937][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.895465][ T9] usb 3-1: Product: syz [ 1214.903416][ T9] usb 3-1: Manufacturer: syz [ 1214.913651][ T9] usb 3-1: SerialNumber: syz [ 1214.944294][ T9] usb 3-1: config 0 descriptor?? [ 1214.966389][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1214.966452][ T9] usb 3-1: setting power ON [ 1214.978032][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1214.987834][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.008005][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1215.008098][ T9] usb 3-1: media controller created [ 1215.043349][T28576] loop1: detected capacity change from 0 to 1024 [ 1215.100198][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.121888][ T1131] hfsplus: b-tree write err: -5, ino 4 [ 1215.137711][T28576] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1215.168384][ T9] usb 3-1: selecting invalid altsetting 6 [ 1215.168616][ T9] usb 3-1: digital interface selection failed (-22) [ 1215.168637][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1215.182383][ T9] usb 3-1: setting power OFF [ 1215.182702][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1215.182824][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1215.182839][ T9] (NULL device *): no alternate interface [ 1215.243258][T28589] loop4: detected capacity change from 0 to 512 [ 1215.248753][T28589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1215.254195][T28589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 1215.254291][T28589] System zones: 1-2, 4-12, 8-8 [ 1215.299403][T28589] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.15741: iget: bad i_size value: 38620345925642 [ 1215.328601][T28589] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.15741: couldn't read orphan inode 15 (err -117) [ 1215.331303][T28589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.392699][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1215.415310][ T9] usb 3-1: USB disconnect, device number 90 [ 1215.589085][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.663508][T28615] smc: net device bond0 applied user defined pnetid SYZ0 [ 1216.354152][T28653] loop2: detected capacity change from 0 to 512 [ 1216.451424][T28653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1216.527056][T28662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15756'. [ 1216.536168][T28662] netlink: 'syz.4.15756': attribute type 1 has an invalid length. [ 1216.556473][T28653] ext4 filesystem being mounted at /4440/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.838424][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1216.912619][T28641] loop3: detected capacity change from 0 to 40427 [ 1216.975774][T28641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1217.114890][T28641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1217.295979][ T5781] syz-executor: attempt to access beyond end of device [ 1217.295979][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1217.335060][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1217.695233][T28702] tipc: Enabling of bearer rejected, failed to enable media [ 1217.966149][T28693] loop2: detected capacity change from 0 to 32768 [ 1218.008924][T28693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.15763 (28693) [ 1218.081367][T28693] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1218.097304][T28693] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1218.107395][T28693] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1218.118802][T28693] BTRFS info (device loop2): disabling tree log [ 1218.125765][T28693] BTRFS info (device loop2): turning on sync discard [ 1218.132733][T28693] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1218.150586][T28693] BTRFS info (device loop2): force zstd compression, level 3 [ 1218.166001][T28693] BTRFS info (device loop2): using free space tree [ 1218.180493][T28715] loop1: detected capacity change from 0 to 1024 [ 1218.290812][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1825.tmp-b7:1' failed: Read-only file system [ 1218.306112][ T2905] hfsplus: b-tree write err: -5, ino 4 [ 1218.351758][T28693] BTRFS info (device loop2): enabling ssd optimizations [ 1218.368456][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 1218.408706][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system [ 1218.458024][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1823.tmp-b7:3' failed: Read-only file system [ 1218.517297][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1218.530680][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1825.tmp-b7:1' failed: Read-only file system [ 1218.599814][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1825.tmp-b7:1' failed: Read-only file system [ 1218.752270][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1825.tmp-b7:1' failed: Read-only file system [ 1218.771415][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1819.tmp-b7:4' failed: Read-only file system [ 1218.920496][T28754] loop4: detected capacity change from 0 to 8 [ 1218.936360][T28754] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1219.000831][T12275] udevd[12275]: incorrect cramfs checksum on /dev/loop4 [ 1219.003151][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1826.tmp-b7:1' failed: Read-only file system [ 1219.393494][T28768] loop1: detected capacity change from 0 to 4096 [ 1219.416349][T28770] loop4: detected capacity change from 0 to 4096 [ 1219.432619][T28768] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1219.479795][T28770] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1219.514034][T28770] NILFS (loop4): trying rollback from an earlier position [ 1219.545608][T28768] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1219.612087][T28770] NILFS (loop4): recovery complete [ 1219.634277][T28775] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1219.661785][T28744] loop3: detected capacity change from 0 to 32768 [ 1219.757336][ T5770] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 1219.785475][T28744] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1219.805842][ T5770] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1220.139233][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 1220.762998][T28810] loop3: detected capacity change from 0 to 4096 [ 1220.875391][T28810] ntfs3: loop3: failed to convert "0080" to cp775 [ 1220.893121][T28810] ntfs3: loop3: failed to convert name for inode 1e. [ 1221.026914][ T7825] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1221.236913][ T7825] usb 2-1: Using ep0 maxpacket: 16 [ 1221.250439][ T7825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.263042][ T5813] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1221.276340][ T7825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.290250][ T5813] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1221.306408][ T7825] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1221.336270][ T7825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.366475][ T7825] usb 2-1: config 0 descriptor?? [ 1221.453891][T28839] fido_id[28839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1221.794651][T28831] loop3: detected capacity change from 0 to 32768 [ 1221.822644][ T7825] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1221.915113][T28831] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1222.011499][ T7825] usb 2-1: USB disconnect, device number 86 [ 1222.077197][T28872] fido_id[28872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1222.140970][T28831] XFS (loop3): Ending clean mount [ 1222.169085][T28831] XFS (loop3): Quotacheck needed: Please wait. [ 1222.342222][T28831] XFS (loop3): Quotacheck: Done. [ 1222.481004][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1222.565101][T28899] loop2: detected capacity change from 0 to 512 [ 1222.575431][T28899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.586645][T28899] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1222.595306][T28899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1222.604574][T28899] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1222.611862][T28899] __quota_error: 1 callbacks suppressed [ 1222.611876][T28899] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1222.628323][T28899] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1222.643337][T28899] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1222.677184][T28904] loop1: detected capacity change from 0 to 64 [ 1222.685933][T28899] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.15803: bg 0: block 40: padding at end of block bitmap is not set [ 1222.708801][T28899] EXT4-fs (loop2): Remounting filesystem read-only [ 1222.719552][T28899] EXT4-fs (loop2): 1 truncate cleaned up [ 1222.727244][T28899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1222.848654][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.942377][T28879] loop4: detected capacity change from 0 to 32768 [ 1222.981200][T28879] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1223.039685][T28924] loop2: detected capacity change from 0 to 764 [ 1223.056439][T28879] XFS (loop4): Ending clean mount [ 1223.085549][T28924] Symlink component flag not implemented [ 1223.099683][T28924] Symlink component flag not implemented (116) [ 1223.114076][T28879] XFS (loop4): Quotacheck needed: Please wait. [ 1223.281196][T28879] XFS (loop4): Quotacheck: Done. [ 1223.371576][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1842.tmp-b7:1' failed: Read-only file system [ 1223.378967][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1844.tmp-b7:2' failed: Read-only file system [ 1223.455146][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1843.tmp-b7:4' failed: Read-only file system [ 1223.468980][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1844.tmp-b7:2' failed: Read-only file system [ 1223.506472][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 1223.535109][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1844.tmp-b7:2' failed: Read-only file system [ 1223.642083][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1844.tmp-b7:2' failed: Read-only file system [ 1223.657268][T30339] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1223.680843][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1838.tmp-b7:3' failed: Read-only file system [ 1223.733668][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1838.tmp-b7:3' failed: Read-only file system [ 1223.766814][ T5813] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1223.865920][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1846.tmp-b7:3' failed: Read-only file system [ 1223.987163][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 1223.994420][ T5813] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1224.005814][ T5813] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1224.036828][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.044896][ T5813] usb 2-1: Product: syz [ 1224.067072][ T5813] usb 2-1: Manufacturer: syz [ 1224.082431][ T5813] usb 2-1: SerialNumber: syz [ 1224.109589][ T5813] usb 2-1: config 0 descriptor?? [ 1224.122768][ T5813] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1224.153510][T28949] loop3: detected capacity change from 0 to 4096 [ 1224.157150][ T5813] usb 2-1: setting power ON [ 1224.164464][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 1224.175648][T28949] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1224.212338][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1224.234771][T28936] loop2: detected capacity change from 0 to 32768 [ 1224.257806][ T5813] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1224.266346][ T5813] usb 2-1: media controller created [ 1224.326864][T28936] (syz.2.15806,28936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.394260][T28949] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 1224.402091][T28936] (syz.2.15806,28936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.426049][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.489776][ T5813] usb 2-1: selecting invalid altsetting 6 [ 1224.500036][ T5813] usb 2-1: digital interface selection failed (-22) [ 1224.509317][ T5813] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1224.518893][ T5813] usb 2-1: setting power OFF [ 1224.524457][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 1224.536986][ T5813] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1224.548098][ T5813] (NULL device *): no alternate interface [ 1224.575237][T28936] JBD2: Ignoring recovery information on journal [ 1224.633052][ T5813] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1224.648439][ T5813] usb 2-1: USB disconnect, device number 87 [ 1224.664186][T28936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1224.898947][T28987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15810'. [ 1225.137623][T28993] loop3: detected capacity change from 0 to 2048 [ 1225.178057][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1225.239466][T28993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.377457][ T28] audit: type=1326 audit(2000000226.364:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.4.15816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f873939c799 code=0x0 [ 1225.534794][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.614347][T29019] netlink: 'syz.2.15820': attribute type 2 has an invalid length. [ 1225.812717][T29029] loop2: detected capacity change from 0 to 1024 [ 1225.945463][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1226.847792][T29057] loop1: detected capacity change from 0 to 2048 [ 1226.955017][T29057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.151746][T29045] loop4: detected capacity change from 0 to 32768 [ 1227.160727][T29051] loop3: detected capacity change from 0 to 32768 [ 1227.168834][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.191976][T29045] (syz.4.15824,29045,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1227.218764][T29045] (syz.4.15824,29045,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1227.270683][T29051] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1227.302885][T29045] JBD2: Ignoring recovery information on journal [ 1227.418779][T29051] XFS (loop3): Ending clean mount [ 1227.468396][ T5781] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1227.557357][T29045] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1227.601337][T29055] loop2: detected capacity change from 0 to 32768 [ 1227.612707][T29055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.15829 (29055) [ 1227.644060][T29055] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1227.663002][T29055] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1227.702953][T29055] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1227.747634][T29055] BTRFS info (device loop2): force zstd compression, level 3 [ 1227.755109][T29055] BTRFS info (device loop2): turning on sync discard [ 1227.826854][T29055] BTRFS info (device loop2): force clearing of disk cache [ 1227.855261][T29055] BTRFS info (device loop2): enabling disk space caching [ 1227.875487][T29055] BTRFS info (device loop2): turning off discard [ 1227.893172][T29055] BTRFS info (device loop2): disk space caching is enabled [ 1228.098376][T29055] BTRFS info (device loop2): enabling ssd optimizations [ 1228.152021][T29055] BTRFS info (device loop2): rebuilding free space tree [ 1228.205463][T29055] BTRFS info (device loop2): disabling free space tree [ 1228.244678][T29055] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1228.301528][T29055] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1228.377211][ T28] audit: type=1800 audit(2000000229.364:3288): pid=29055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15829" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1228.477495][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1228.543434][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1859.tmp-b7:1' failed: Read-only file system [ 1228.610076][T30339] ocfs2: Unmounting device (7,4) on (node local) [ 1228.745649][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1857.tmp-b7:4' failed: Read-only file system [ 1228.832056][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1859.tmp-b7:1' failed: Read-only file system [ 1228.873233][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1857.tmp-b7:4' failed: Read-only file system [ 1229.136222][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1859.tmp-b7:1' failed: Read-only file system [ 1229.154002][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1860.tmp-b7:2' failed: Read-only file system [ 1229.183935][T29108] loop3: detected capacity change from 0 to 32768 [ 1229.212334][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1860.tmp-b7:2' failed: Read-only file system [ 1229.340350][T29108] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1229.364077][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1862.tmp-b7:4' failed: Read-only file system [ 1229.427643][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1860.tmp-b7:2' failed: Read-only file system [ 1229.440056][ T5761] udevd[5761]: symlink '../../loop1' '/dev/disk/by-diskseq/1859.tmp-b7:1' failed: Read-only file system [ 1229.622681][T29108] XFS (loop3): Ending clean mount [ 1229.695810][T29153] loop2: detected capacity change from 0 to 4096 [ 1229.702986][T29108] XFS (loop3): Quotacheck needed: Please wait. [ 1229.735847][T29158] loop4: detected capacity change from 0 to 512 [ 1229.812135][T29108] XFS (loop3): Quotacheck: Done. [ 1229.851639][T29158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.933539][T29158] ext4 filesystem being mounted at /2009/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.003813][T29153] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1230.077291][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.133380][ T5781] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1230.209253][ T5775] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 1230.657907][T29171] loop1: detected capacity change from 0 to 32768 [ 1230.674105][T29171] (syz.1.15847,29171,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1230.688922][T29171] (syz.1.15847,29171,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1230.714740][T29171] JBD2: Ignoring recovery information on journal [ 1230.761498][T29171] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1230.953149][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1232.076589][T29204] loop1: detected capacity change from 0 to 32768 [ 1232.094662][T29204] BTRFS error: device ./bus already registered with a higher generation, found 8 expect 9 [ 1232.237498][T29241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15866'. [ 1232.831034][T29267] loop3: detected capacity change from 0 to 1024 [ 1232.844223][T29267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1232.873452][T29271] netlink: 'syz.4.15874': attribute type 8 has an invalid length. [ 1232.907028][T28609] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1232.916618][T29267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.013234][T29234] loop2: detected capacity change from 0 to 32768 [ 1233.055822][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.067007][T29234] (syz.2.15864,29234,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1233.131253][T29234] (syz.2.15864,29234,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1233.147463][T28609] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1233.173258][T28609] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.210062][T28609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1233.245245][T29285] loop3: detected capacity change from 0 to 256 [ 1233.256265][T28609] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1233.285804][T29234] JBD2: Ignoring recovery information on journal [ 1233.312941][T28609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.337580][T29285] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1233.390992][T28609] usb 2-1: config 0 descriptor?? [ 1233.420745][T29285] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1233.461424][T29285] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1233.479711][T29285] UDF-fs: Scanning with blocksize 512 failed [ 1233.500568][T29285] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1233.515238][T29234] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1233.546539][T29285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.612836][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1867.tmp-b7:4' failed: Read-only file system [ 1233.650590][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1877.tmp-b7:3' failed: Read-only file system [ 1233.746045][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1877.tmp-b7:3' failed: Read-only file system [ 1233.757852][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1875.tmp-b7:2' failed: Read-only file system [ 1233.803111][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:2' failed: Read-only file system [ 1233.842186][T28609] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 1233.862403][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1877.tmp-b7:3' failed: Read-only file system [ 1233.881890][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1867.tmp-b7:4' failed: Read-only file system [ 1233.897865][T28609] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 1233.916479][T28609] hid-steam 0003:28DE:1102.0011: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 1234.000950][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1867.tmp-b7:4' failed: Read-only file system [ 1234.037554][T28609] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 1234.054306][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1878.tmp-b7:3' failed: Read-only file system [ 1234.091643][T28609] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0011/input/input77 [ 1234.231681][T28609] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 1234.245053][T28609] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 1234.253983][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1234.301244][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1878.tmp-b7:3' failed: Read-only file system [ 1234.394231][T28609] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 1234.499280][T28609] usb 2-1: USB disconnect, device number 88 [ 1234.615145][T29329] fido_id[29329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1234.688840][T28609] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 1234.859086][T29360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15884'. [ 1235.785342][T29365] loop2: detected capacity change from 0 to 40427 [ 1235.819839][T29365] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1235.829641][T29365] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1235.880160][T29365] F2FS-fs (loop2): invalid crc value [ 1236.037215][T16743] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1236.158484][T29365] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1236.165696][T29365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1236.174688][T29373] loop3: detected capacity change from 0 to 32768 [ 1236.193039][T29373] (syz.3.15893,29373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.234895][T29373] (syz.3.15893,29373,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.257576][ T5775] syz-executor: attempt to access beyond end of device [ 1236.257576][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1236.263250][T16743] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1236.287879][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1236.310571][T16743] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.321787][T16743] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1236.333894][T16743] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1236.343620][T16743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.397444][T29373] JBD2: Ignoring recovery information on journal [ 1236.524104][T29408] loop1: detected capacity change from 0 to 256 [ 1236.552123][T29373] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1236.640678][T29408] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1236.815926][T16743] elo 0003:04E7:0009.0013: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 1236.974691][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 1237.005147][ T7823] usb 5-1: USB disconnect, device number 49 [ 1237.106082][T29419] fido_id[29419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1237.374300][T29442] loop1: detected capacity change from 0 to 2048 [ 1237.392061][T29442] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1237.470872][T29445] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1237.719288][T29454] loop4: detected capacity change from 0 to 16 [ 1237.767044][T29454] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1237.863352][ T28] audit: type=1326 audit(2000000238.844:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1237.948757][ T28] audit: type=1326 audit(2000000238.844:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.051673][ T28] audit: type=1326 audit(2000000238.854:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.120407][T29439] loop2: detected capacity change from 0 to 32768 [ 1238.127368][ T28] audit: type=1326 audit(2000000238.854:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.176875][ T28] audit: type=1326 audit(2000000238.864:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.284842][ T28] audit: type=1326 audit(2000000238.864:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.341425][ T28] audit: type=1326 audit(2000000238.864:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.477022][ T28] audit: type=1326 audit(2000000238.864:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29460 comm="syz.1.15907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20f9c799 code=0x7ffc0000 [ 1238.686063][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1889.tmp-b7:4' failed: Read-only file system [ 1238.722243][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1238.906142][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1889.tmp-b7:4' failed: Read-only file system [ 1239.001180][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1239.034787][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1890.tmp-b7:2' failed: Read-only file system [ 1239.141427][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.175482][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1890.tmp-b7:2' failed: Read-only file system [ 1239.233749][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1891.tmp-b7:2' failed: Read-only file system [ 1239.261976][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1889.tmp-b7:4' failed: Read-only file system [ 1239.296455][T29476] loop1: detected capacity change from 0 to 32768 [ 1239.331737][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1891.tmp-b7:2' failed: Read-only file system [ 1239.355013][T29476] (syz.1.15911,29476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1239.415114][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1239.428262][T29476] (syz.1.15911,29476,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1239.511224][T29520] usb usb1: usbfs: process 29520 (syz.3.15924) did not claim interface 0 before use [ 1239.555703][T29476] JBD2: Ignoring recovery information on journal [ 1239.662091][T29476] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1240.119780][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1240.238082][T16743] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1240.439039][T16743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.456881][T16743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.468877][T16743] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1240.478464][T16743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.496338][T16743] usb 5-1: config 0 descriptor?? [ 1240.602001][T29563] hsr0: entered promiscuous mode [ 1240.681540][T29534] loop2: detected capacity change from 0 to 40427 [ 1240.717459][T29534] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1240.741732][T29534] F2FS-fs (loop2): invalid crc value [ 1240.807133][ T7823] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1240.896538][T29534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1240.954391][T16743] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x2 [ 1240.984568][T16743] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1241.006833][ T7823] usb 4-1: Using ep0 maxpacket: 16 [ 1241.040469][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.066829][ T7823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.087492][ T7823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1241.114273][ T7823] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1241.144231][ T7823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.167182][T16743] usb 5-1: USB disconnect, device number 50 [ 1241.188152][ T7823] usb 4-1: config 0 descriptor?? [ 1241.291655][T29577] fido_id[29577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1241.518934][T29569] loop1: detected capacity change from 0 to 32768 [ 1241.575600][T29569] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 1241.575600][T29569] [ 1241.591050][T29569] ERROR: (device loop1): remounting filesystem as read-only [ 1241.608120][T29569] ERROR: (device loop1): dbDiscardAG: -EIO [ 1241.608120][T29569] [ 1241.640240][ T7823] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 1241.675937][ T7823] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1241.711141][T29602] netlink: 'syz.2.15938': attribute type 3 has an invalid length. [ 1241.739336][ T7823] microsoft 0003:045E:07DA.0015: no inputs found [ 1241.745787][ T7823] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 1241.886437][ T7823] usb 4-1: USB disconnect, device number 93 [ 1241.990710][T29603] fido_id[29603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1242.334198][T29633] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.363983][T29633] binder: 29630:29633 ioctl 40046207 0 returned -16 [ 1243.118645][ T7823] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1243.328225][ T7823] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1243.347231][ T7823] usb 2-1: config 0 has no interface number 0 [ 1243.353410][ T7823] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1243.407770][ T7823] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.433115][ T7823] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.464909][ T7823] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1243.507855][ T7823] usb 2-1: config 0 interface 16 has no altsetting 0 [ 1243.514642][ T7823] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1243.529083][ T7823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.538441][T29692] overlayfs: conflicting options: nfs_export=on,index=off [ 1243.568838][T29694] loop4: detected capacity change from 0 to 512 [ 1243.581471][ T7823] usb 2-1: config 0 descriptor?? [ 1243.624635][T29694] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.15960: Directory hole found for htree index block 0 [ 1243.665782][T29694] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1243.702318][T29694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1243.732084][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1243.761608][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1898.tmp-b7:4' failed: Read-only file system [ 1243.810229][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1243.838370][T12275] udevd[12275]: symlink '../../loop2' '/dev/disk/by-diskseq/1895.tmp-b7:2' failed: Read-only file system [ 1243.891091][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1898.tmp-b7:4' failed: Read-only file system [ 1243.919914][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1243.934454][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.951095][T29710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15963'. [ 1244.005630][ T5763] udevd[5763]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1244.060031][ T7823] uclogic 0003:5543:004D.0016: interface is invalid, ignoring [ 1244.068056][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1898.tmp-b7:4' failed: Read-only file system [ 1244.122349][ T5761] udevd[5761]: symlink '../../loop2' '/dev/disk/by-diskseq/1895.tmp-b7:2' failed: Read-only file system [ 1244.145931][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1898.tmp-b7:4' failed: Read-only file system [ 1244.268309][ T7823] usb 2-1: USB disconnect, device number 89 [ 1244.362541][T29740] vivid-007: disconnect [ 1244.368547][T29740] vivid-007: reconnect [ 1244.676637][T29755] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15973'. [ 1245.402616][T29748] loop2: detected capacity change from 0 to 40427 [ 1245.437134][T29748] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1245.457426][T29748] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1245.476337][T29748] F2FS-fs (loop2): invalid crc value [ 1245.525049][T29748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1245.686147][T29748] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1245.706363][T29748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1245.826507][T29759] loop4: detected capacity change from 0 to 32768 [ 1245.920150][T29759] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1246.015574][T29759] XFS (loop4): Ending clean mount [ 1246.041259][T29759] XFS (loop4): Quotacheck needed: Please wait. [ 1246.234166][T29759] XFS (loop4): Quotacheck: Done. [ 1246.384046][T30339] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1246.398518][T29833] loop2: detected capacity change from 0 to 64 [ 1247.068809][T29856] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1247.075345][T29856] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1247.110067][T29856] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.116654][T29856] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1247.144339][T29856] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1247.157589][T29856] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1247.204420][T29856] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.214386][T29856] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.230134][T29856] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1247.240019][T29856] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1247.246640][T29856] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1247.253871][T29856] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1247.376484][T29874] loop2: detected capacity change from 0 to 8 [ 1247.454697][T29874] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1247.463174][T29874] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1247.495561][T29879] loop1: detected capacity change from 0 to 1024 [ 1247.599828][ T28] audit: type=1800 audit(2000000248.584:3297): pid=29879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16002" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 1247.620483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.828553][T29884] loop4: detected capacity change from 0 to 4096 [ 1247.841018][T29884] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1247.954191][T29898] loop1: detected capacity change from 0 to 256 [ 1247.969204][T29898] exfat: Deprecated parameter 'utf8' [ 1248.010553][T29898] exfat: Deprecated parameter 'utf8' [ 1248.026723][T29898] exfat: Deprecated parameter 'utf8' [ 1248.057612][T29898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1248.604658][T29923] loop2: detected capacity change from 0 to 4096 [ 1248.633624][T29923] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1248.739283][T29923] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1248.755763][T29923] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1248.805822][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1913.tmp-b7:1' failed: Read-only file system [ 1248.822586][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1912.tmp-b7:4' failed: Read-only file system [ 1248.890530][T29938] nbd: must specify an index to disconnect [ 1248.956215][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1914.tmp-b7:2' failed: Read-only file system [ 1249.005047][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1913.tmp-b7:1' failed: Read-only file system [ 1249.038415][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:2' failed: Read-only file system [ 1249.039739][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1912.tmp-b7:4' failed: Read-only file system [ 1249.100134][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system [ 1249.111418][T12275] udevd[12275]: symlink '../../loop3' '/dev/disk/by-diskseq/1885.tmp-b7:3' failed: Read-only file system [ 1249.162986][T29942] loop4: detected capacity change from 0 to 512 [ 1249.179174][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1914.tmp-b7:2' failed: Read-only file system [ 1249.201651][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1914.tmp-b7:2' failed: Read-only file system [ 1249.217901][T29942] EXT4-fs: Invalid gid value -1 [ 1249.249302][T28609] Process accounting resumed [ 1249.277618][T12275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1249.329150][T29952] Process accounting resumed [ 1249.821891][T29980] loop4: detected capacity change from 0 to 4096 [ 1249.868453][T29980] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1250.009398][T29980] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1250.418678][T30009] loop4: detected capacity change from 0 to 8 [ 1250.434365][T30009] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1250.712739][T29978] loop1: detected capacity change from 0 to 32768 [ 1250.725244][T30022] loop3: detected capacity change from 0 to 512 [ 1250.749965][T30022] EXT4-fs: Ignoring removed bh option [ 1250.769416][T30022] EXT4-fs: Ignoring removed mblk_io_submit option [ 1250.796278][T29978] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1250.813055][T30022] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1250.842796][T30022] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1250.886992][T30022] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1250.954655][T30022] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 1251.025952][T30022] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1251.051576][T30043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.058838][T29978] XFS (loop1): Ending clean mount [ 1251.070087][T30043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.095182][T30022] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.16039: Failed to acquire dquot type 1 [ 1251.098406][T30043] batadv_slave_1: entered promiscuous mode [ 1251.158629][T30022] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.16039: Invalid block bitmap block 0 in block_group 0 [ 1251.214962][T30022] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.16039: Invalid block bitmap block 0 in block_group 0 [ 1251.270786][T30022] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.16039: Invalid block bitmap block 0 in block_group 0 [ 1251.329825][T30022] Quota error (device loop3): write_blk: dquota write failed [ 1251.343117][T30022] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1251.362956][T30022] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.16039: Failed to acquire dquot type 1 [ 1251.389368][T30022] Quota error (device loop3): write_blk: dquota write failed [ 1251.397110][T30022] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1251.424098][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1251.436940][T30022] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.16039: Failed to acquire dquot type 1 [ 1251.483409][T30022] EXT4-fs (loop3): 1 orphan inode deleted [ 1251.508383][T30022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1251.553785][T30071] tipc: Started in network mode [ 1251.579260][T30071] tipc: Node identity , cluster identity 4711 [ 1251.690751][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.340175][T30113] loop3: detected capacity change from 0 to 512 [ 1252.367355][T30113] EXT4-fs: Ignoring removed mblk_io_submit option [ 1252.373860][T30113] EXT4-fs: inline encryption not supported [ 1252.403007][T30113] EXT4-fs: Ignoring removed mblk_io_submit option [ 1252.452089][T30113] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1252.470128][T30113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1252.518617][T30113] EXT4-fs (loop3): 1 truncate cleaned up [ 1252.573303][T30113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.886055][T30132] loop2: detected capacity change from 0 to 4096 [ 1252.957172][T30132] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1252.998085][T30113] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1253.087210][T30132] ntfs3: loop2: ino=5, "/" directory corrupted [ 1253.169156][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.227267][T30148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16068'. [ 1253.377367][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16069'. [ 1253.786508][T30178] loop1: detected capacity change from 0 to 2048 [ 1253.810826][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1921.tmp-b7:4' failed: Read-only file system [ 1253.843319][T30178] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1253.866485][T30178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1253.890355][T30185] loop4: detected capacity change from 0 to 1024 [ 1253.934506][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-diskseq/1931.tmp-b7:4' failed: Read-only file system [ 1253.960192][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 1253.980386][T30185] hfsplus: bad catalog entry type [ 1253.991919][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1930.tmp-b7:1' failed: Read-only file system [ 1254.015602][ T5763] udevd[5763]: symlink '../../loop4' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:4' failed: Read-only file system [ 1254.031697][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 1254.061955][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 1254.110043][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1254.145011][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1931.tmp-b7:4' failed: Read-only file system [ 1254.222256][ T5763] udevd[5763]: symlink '../../loop1' '/dev/disk/by-diskseq/1930.tmp-b7:1' failed: Read-only file system [ 1254.245397][T12275] udevd[12275]: symlink '../../loop4' '/dev/disk/by-diskseq/1931.tmp-b7:4' failed: Read-only file system [ 1254.335530][T30192] loop4: detected capacity change from 0 to 2048 [ 1254.412326][T30192] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1254.435160][T30192] UDF-fs: Scanning with blocksize 512 failed [ 1254.479837][T30198] loop1: detected capacity change from 0 to 1024 [ 1254.502840][T30192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1254.537190][T30192] overlayfs: upper fs needs to support d_type. [ 1254.549082][T30198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1254.572937][T30192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1254.586917][T30198] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1254.605167][T30192] overlayfs: failed to set xattr on upper [ 1254.622214][T30192] overlayfs: ...falling back to redirect_dir=nofollow. [ 1254.648899][T30192] overlayfs: ...falling back to index=off. [ 1254.672766][T30198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.696858][T30192] overlayfs: ...falling back to uuid=null. [ 1254.785395][T30180] loop2: detected capacity change from 0 to 32768 [ 1254.812820][T30198] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.16081: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1254.874447][ T28] audit: type=1800 audit(2000000255.854:3298): pid=30180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16077" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 1254.887815][T30198] EXT4-fs (loop1): Remounting filesystem read-only [ 1254.927460][T30180] ialloc: diAlloc returned -5! [ 1255.129234][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.583135][T30229] loop4: detected capacity change from 0 to 1035 [ 1255.721233][T30229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1255.761486][T30245] loop1: detected capacity change from 0 to 256 [ 1255.777467][T30229] ext4 filesystem being mounted at /2080/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.830471][T30229] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1255.871893][T30245] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1256.143719][T30339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.507076][ T7825] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1256.749715][ T7825] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1256.766859][ T7825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.794282][ T7825] usb 4-1: Product: syz [ 1256.808273][ T7825] usb 4-1: Manufacturer: syz [ 1256.823475][ T7825] usb 4-1: SerialNumber: syz [ 1256.836188][ T7825] usb 4-1: config 0 descriptor?? [ 1256.869980][ T7825] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 094 [ 1257.051638][T30268] loop4: detected capacity change from 0 to 32768 [ 1257.124386][T30303] loop1: detected capacity change from 0 to 64 [ 1257.131192][T30268] JBD2: Ignoring recovery information on journal [ 1257.199277][ T28] audit: type=1800 audit(2000000258.184:3299): pid=30303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16104" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 1257.223737][T30268] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1257.298848][ T28] audit: type=1800 audit(2000000258.284:3300): pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16093" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 1257.324052][T30268] [ 1257.326510][T30268] ====================================================== [ 1257.333557][T30268] WARNING: possible circular locking dependency detected [ 1257.340608][T30268] syzkaller #0 Not tainted [ 1257.345035][T30268] ------------------------------------------------------ [ 1257.352071][T30268] syz.4.16093/30268 is trying to acquire lock: [ 1257.358243][T30268] ffff88805d911818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1257.371514][T30268] [ 1257.371514][T30268] but task is already holding lock: [ 1257.378892][T30268] ffff88807c37ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1257.388402][T30268] [ 1257.388402][T30268] which lock already depends on the new lock. [ 1257.388402][T30268] [ 1257.398817][T30268] [ 1257.398817][T30268] the existing dependency chain (in reverse order) is: [ 1257.408016][T30268] [ 1257.408016][T30268] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1257.415854][T30268] down_read+0x46/0x2e0 [ 1257.420572][T30268] ocfs2_init_acl+0x30a/0x770 [ 1257.425789][T30268] ocfs2_mknod+0x140f/0x2300 [ 1257.430920][T30268] ocfs2_mkdir+0x196/0x430 [ 1257.435882][T30268] vfs_mkdir+0x296/0x440 [ 1257.440666][T30268] do_mkdirat+0x1dc/0x450 [ 1257.445537][T30268] __x64_sys_mkdirat+0x89/0xa0 [ 1257.450838][T30268] do_syscall_64+0x55/0xa0 [ 1257.455807][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.462243][T30268] [ 1257.462243][T30268] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1257.470776][T30268] down_read+0x46/0x2e0 [ 1257.475484][T30268] ocfs2_start_trans+0x3a8/0x6f0 [ 1257.480956][T30268] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 1257.487218][T30268] ocfs2_dismount_volume+0x1e5/0x8a0 [ 1257.493042][T30268] generic_shutdown_super+0x134/0x2b0 [ 1257.498946][T30268] kill_block_super+0x44/0x90 [ 1257.504160][T30268] deactivate_locked_super+0x97/0x100 [ 1257.510091][T30268] cleanup_mnt+0x43b/0x4d0 [ 1257.515039][T30268] task_work_run+0x1d4/0x260 [ 1257.520168][T30268] exit_to_user_mode_loop+0xe6/0x110 [ 1257.526009][T30268] exit_to_user_mode_prepare+0xee/0x180 [ 1257.532099][T30268] syscall_exit_to_user_mode+0x1a/0x50 [ 1257.538123][T30268] do_syscall_64+0x61/0xa0 [ 1257.543099][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.549535][T30268] [ 1257.549535][T30268] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 1257.557070][T30268] ocfs2_start_trans+0x2a9/0x6f0 [ 1257.562543][T30268] ocfs2_symlink+0x114f/0x2700 [ 1257.567846][T30268] vfs_symlink+0x138/0x2b0 [ 1257.572892][T30268] do_symlinkat+0x1ba/0x400 [ 1257.577938][T30268] __x64_sys_symlink+0x7e/0x90 [ 1257.583251][T30268] do_syscall_64+0x55/0xa0 [ 1257.588204][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.594635][T30268] [ 1257.594635][T30268] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 1257.605176][T30268] down_write+0x97/0x200 [ 1257.609969][T30268] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 1257.616662][T30268] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 1257.623548][T30268] ocfs2_mknod+0xebb/0x2300 [ 1257.628682][T30268] ocfs2_create+0x196/0x430 [ 1257.633756][T30268] path_openat+0x12a0/0x3230 [ 1257.638884][T30268] do_filp_open+0x1f5/0x430 [ 1257.643927][T30268] do_sys_openat2+0x134/0x1d0 [ 1257.649252][T30268] __x64_sys_open+0x11f/0x140 [ 1257.654488][T30268] do_syscall_64+0x55/0xa0 [ 1257.659446][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.665880][T30268] [ 1257.665880][T30268] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 1257.676418][T30268] __lock_acquire+0x2df1/0x7d40 [ 1257.681809][T30268] lock_acquire+0x19e/0x420 [ 1257.686860][T30268] down_write+0x97/0x200 [ 1257.691659][T30268] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1257.698100][T30268] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1257.704978][T30268] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1257.711154][T30268] ocfs2_xattr_set+0xc3f/0x13e0 [ 1257.716550][T30268] __vfs_setxattr+0x431/0x470 [ 1257.721788][T30268] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1257.727613][T30268] vfs_setxattr+0x16b/0x2f0 [ 1257.732673][T30268] path_setxattr+0x3f3/0x5d0 [ 1257.737817][T30268] __x64_sys_setxattr+0xbb/0xd0 [ 1257.743208][T30268] do_syscall_64+0x55/0xa0 [ 1257.748253][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.754688][T30268] [ 1257.754688][T30268] other info that might help us debug this: [ 1257.754688][T30268] [ 1257.764944][T30268] Chain exists of: [ 1257.764944][T30268] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1257.764944][T30268] [ 1257.781919][T30268] Possible unsafe locking scenario: [ 1257.781919][T30268] [ 1257.789386][T30268] CPU0 CPU1 [ 1257.794762][T30268] ---- ---- [ 1257.800146][T30268] lock(&oi->ip_xattr_sem); [ 1257.804758][T30268] lock(&journal->j_trans_barrier); [ 1257.812598][T30268] lock(&oi->ip_xattr_sem); [ 1257.819727][T30268] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1257.827030][T30268] [ 1257.827030][T30268] *** DEADLOCK *** [ 1257.827030][T30268] [ 1257.835193][T30268] 3 locks held by syz.4.16093/30268: [ 1257.840493][T30268] #0: ffff88802372a418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1257.849766][T30268] #1: ffff88807c37d118 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 1257.860251][T30268] #2: ffff88807c37ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1257.870201][T30268] [ 1257.870201][T30268] stack backtrace: [ 1257.876100][T30268] CPU: 1 PID: 30268 Comm: syz.4.16093 Not tainted syzkaller #0 [ 1257.883750][T30268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.893821][T30268] Call Trace: [ 1257.897123][T30268] [ 1257.900073][T30268] dump_stack_lvl+0x18c/0x250 [ 1257.904775][T30268] ? load_image+0x400/0x400 [ 1257.909311][T30268] ? show_regs_print_info+0x20/0x20 [ 1257.914544][T30268] ? print_circular_bug+0x12b/0x1a0 [ 1257.919766][T30268] check_noncircular+0x2fc/0x400 [ 1257.924718][T30268] ? print_deadlock_bug+0x5d0/0x5d0 [ 1257.929933][T30268] ? lockdep_lock+0xf5/0x230 [ 1257.934565][T30268] ? _find_first_zero_bit+0xd3/0x100 [ 1257.939871][T30268] __lock_acquire+0x2df1/0x7d40 [ 1257.944757][T30268] ? __lock_acquire+0x7d40/0x7d40 [ 1257.949853][T30268] ? verify_lock_unused+0x140/0x140 [ 1257.955105][T30268] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1257.960763][T30268] ? do_raw_spin_lock+0x11f/0x2c0 [ 1257.965809][T30268] ? mutex_unlock+0x10/0x10 [ 1257.970349][T30268] lock_acquire+0x19e/0x420 [ 1257.974871][T30268] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1257.980965][T30268] ? ocfs2_get_system_file_inode+0x202/0x850 [ 1257.986976][T30268] ? __might_sleep+0xe0/0xe0 [ 1257.991614][T30268] ? read_lock_is_recursive+0x20/0x20 [ 1257.997025][T30268] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1258.003219][T30268] ? verify_lock_unused+0x140/0x140 [ 1258.008460][T30268] down_write+0x97/0x200 [ 1258.012751][T30268] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1258.018855][T30268] ? down_read_killable+0x340/0x340 [ 1258.024087][T30268] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1258.030310][T30268] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1258.036241][T30268] ? mark_lock+0x94/0x320 [ 1258.040614][T30268] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1258.046628][T30268] ? lock_chain_count+0x20/0x20 [ 1258.051509][T30268] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1258.057427][T30268] ? lockdep_hardirqs_on+0x98/0x150 [ 1258.062647][T30268] ? ocfs2_block_group_search+0x470/0x470 [ 1258.068396][T30268] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1258.074319][T30268] ? _raw_spin_unlock+0x40/0x40 [ 1258.079196][T30268] ? stack_trace_save+0xaa/0x100 [ 1258.084160][T30268] ? stack_trace_snprint+0xf0/0xf0 [ 1258.089293][T30268] ? __stack_depot_save+0x560/0x630 [ 1258.094515][T30268] ? kasan_set_track+0x5f/0x70 [ 1258.099301][T30268] ? kasan_set_track+0x4e/0x70 [ 1258.104085][T30268] ? __kasan_kmalloc+0x8f/0xa0 [ 1258.108891][T30268] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1258.115419][T30268] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1258.121273][T30268] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 1258.126359][T30268] ? __vfs_setxattr+0x431/0x470 [ 1258.131239][T30268] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 1258.136729][T30268] ? vfs_setxattr+0x16b/0x2f0 [ 1258.141426][T30268] ? path_setxattr+0x3f3/0x5d0 [ 1258.146208][T30268] ? __x64_sys_setxattr+0xbb/0xd0 [ 1258.151258][T30268] ? do_syscall_64+0x55/0xa0 [ 1258.155876][T30268] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.161982][T30268] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1258.168341][T30268] ? ocfs2_init_steal_slots+0x160/0x160 [ 1258.173928][T30268] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 1258.179580][T30268] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1258.185792][T30268] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1258.191457][T30268] ? ocfs2_xattr_set+0xc05/0x13e0 [ 1258.196505][T30268] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 1258.202601][T30268] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 1258.208874][T30268] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1258.214796][T30268] ? down_write+0x16e/0x200 [ 1258.219331][T30268] ? down_read_killable+0x340/0x340 [ 1258.224557][T30268] ? up_write+0x1c3/0x410 [ 1258.228908][T30268] ocfs2_xattr_set+0xc3f/0x13e0 [ 1258.233803][T30268] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 1258.239585][T30268] ? __lock_acquire+0x1347/0x7d40 [ 1258.244640][T30268] ? verify_lock_unused+0x140/0x140 [ 1258.250024][T30268] ? ____kasan_slab_free+0x126/0x1e0 [ 1258.255346][T30268] ? evm_protected_xattr_common+0x170/0x190 [ 1258.261293][T30268] ? ocfs2_xattr_security_get+0x40/0x40 [ 1258.266877][T30268] __vfs_setxattr+0x431/0x470 [ 1258.271603][T30268] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1258.276960][T30268] vfs_setxattr+0x16b/0x2f0 [ 1258.281505][T30268] ? xattr_permission+0x470/0x470 [ 1258.286566][T30268] ? __mnt_want_write+0x223/0x2a0 [ 1258.291658][T30268] ? path_setxattr+0x3a1/0x5d0 [ 1258.296459][T30268] path_setxattr+0x3f3/0x5d0 [ 1258.301084][T30268] ? simple_xattrs_free+0x150/0x150 [ 1258.306325][T30268] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1258.312346][T30268] ? lock_chain_count+0x20/0x20 [ 1258.317236][T30268] __x64_sys_setxattr+0xbb/0xd0 [ 1258.322139][T30268] do_syscall_64+0x55/0xa0 [ 1258.326605][T30268] ? clear_bhb_loop+0x40/0x90 [ 1258.331324][T30268] ? clear_bhb_loop+0x40/0x90 [ 1258.336039][T30268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.341963][T30268] RIP: 0033:0x7f873939c799 [ 1258.346409][T30268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.366049][T30268] RSP: 002b:00007f873a236028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1258.374495][T30268] RAX: ffffffffffffffda RBX: 00007f8739615fa0 RCX: 00007f873939c799 [ 1258.382501][T30268] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 1258.390505][T30268] RBP: 00007f8739432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1258.398501][T30268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.406497][T30268] R13: 00007f8739616038 R14: 00007f8739615fa0 R15: 00007ffebcdc08f8 [ 1258.414502][T30268] [ 1258.446541][T30311] loop1: detected capacity change from 0 to 512 [ 1258.453937][T30311] EXT4-fs: Ignoring removed nobh option [ 1258.476830][ T7825] i2c i2c-1: failure reading functionality [ 1258.498919][ T7825] i2c i2c-1: connected i2c-tiny-usb device [ 1258.520502][ T7825] usb 4-1: USB disconnect, device number 94 [ 1258.584302][T30311] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1258.672193][T30311] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.16105: invalid indirect mapped block 256 (level 1) [ 1258.708670][T30298] F2FS-fs (loop2): invalid crc value [ 1258.714748][T30311] EXT4-fs (loop1): Remounting filesystem read-only [ 1258.720532][T30339] ocfs2: Unmounting device (7,4) on (node local) [ 1258.722553][T30311] EXT4-fs (loop1): 1 truncate cleaned up [ 1258.747431][T30298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1258.768065][T30311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.830765][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1945.tmp-b7:1' failed: Read-only file system [ 1258.842379][ T5761] udevd[5761]: symlink '../../loop4' '/dev/disk/by-diskseq/1944.tmp-b7:4' failed: Read-only file system [ 1258.845528][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.864409][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1258.932432][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1946.tmp-b7:1' failed: Read-only file system [ 1258.947186][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1258.974235][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1947.tmp-b7:1' failed: Read-only file system [ 1258.989381][T30298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1259.032430][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1947.tmp-b7:1' failed: Read-only file system [ 1259.057187][ T5763] udevd[5763]: symlink '../../loop2' '/dev/disk/by-diskseq/1948.tmp-b7:2' failed: Read-only file system [ 1259.061175][T12275] udevd[12275]: symlink '../../loop1' '/dev/disk/by-diskseq/1947.tmp-b7:1' failed: Read-only file system [ 1259.075685][ T5761] udevd[5761]: symlink '../../loop3' '/dev/disk/by-diskseq/1928.tmp-b7:3' failed: Read-only file system