last executing test programs: 18.706670578s ago: executing program 0 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008100}, 0x4800) 18.64945598s ago: executing program 0 (id=1193): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, 0x0) 17.995883693s ago: executing program 0 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a010800000000000000000a0000010900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 17.603788642s ago: executing program 0 (id=1203): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x20, 0x0, {0x2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, 'GPL\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 17.408558006s ago: executing program 0 (id=1207): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, r0, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x8, 0x0) 17.300929678s ago: executing program 0 (id=1208): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ext4\x00', 0x1208000, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0xffffffffffffffff, 0x0) 16.596368724s ago: executing program 3 (id=1212): recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000700)=@x25, 0x80, 0x0}, 0x6}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x3}], 0x2, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 16.065131265s ago: executing program 3 (id=1221): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xfffffc01) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 15.866307179s ago: executing program 3 (id=1225): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15.588337995s ago: executing program 3 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000c00}, 0x8008) 15.446722608s ago: executing program 3 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008100}, 0x4800) 15.298703732s ago: executing program 3 (id=1234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200018, &(0x7f0000000bc0), 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2.476743797s ago: executing program 4 (id=1263): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fstat(r1, 0x0) 2.388599549s ago: executing program 4 (id=1266): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x89f0, &(0x7f0000000040)) 2.227569842s ago: executing program 32 (id=1208): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ext4\x00', 0x1208000, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs(0xffffffffffffffff, 0x0) 2.190522333s ago: executing program 2 (id=1269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4010) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) 2.174319723s ago: executing program 4 (id=1271): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010000108"], 0x30}}, 0x40020) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 2.106664745s ago: executing program 1 (id=1272): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x440, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x41) 2.084487605s ago: executing program 4 (id=1273): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000400)=ANY=[@ANYBLOB="726f6469722c836f6e756d7461696c3d302c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d6c6f7765722c696f636861727365743d63703933362c696f636861727365743d6575622d6a702c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835302c73686f72746e616d653d77696e39352c696f636861727365743d63703836332c756e695f786c6174653d302c757466383d302c757466383d302c6e6f6e756d7461696c3d302c00"], 0x3, 0x278, &(0x7f0000000640)="$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") syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x1, @struct, 0x0, 0x10, 0x0, 0x7fffffffffd, 0x4, 0x993, 0x0, @usage=0x40, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000000000]}, {0x2, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xb6}, {0x0, @struct={0x100001, 0x7ff}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x9]}, {0x81}}) 2.047629556s ago: executing program 2 (id=1274): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@host, 0x5}, {@hyper, 0x800000}, 0x400, "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"}, 0x418, 0x400}) 1.952106938s ago: executing program 2 (id=1275): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa8f, &(0x7f0000001400)="$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") syz_mount_image$hpfs(&(0x7f0000000140), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e16, &(0x7f000001c580)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 1.940100748s ago: executing program 1 (id=1276): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0xb1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) 1.497909808s ago: executing program 1 (id=1277): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x1, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 904.087261ms ago: executing program 1 (id=1278): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r0, &(0x7f0000002b40)=""/244, 0xf4, 0x4eb) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) 902.62425ms ago: executing program 2 (id=1279): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x32) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) rmdir(&(0x7f00000004c0)='./file1\x00') 902.16527ms ago: executing program 4 (id=1280): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603a059e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb7d2270bb75c8a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616feb8ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b55", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x1, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 207.898166ms ago: executing program 1 (id=1281): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 198.297146ms ago: executing program 2 (id=1282): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0) 174.303477ms ago: executing program 33 (id=1234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200018, &(0x7f0000000bc0), 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 168.874487ms ago: executing program 4 (id=1290): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000002400)=ANY=[@ANYBLOB="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"/306], 0x1, 0x27e, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvNkmT6CJZuBKhF3ThqrQ+QYtUEAuCkoW60GJbkCYULASqYuzKJ/AJfAPfw80wLzAPMMPspoth7pDcmz8dbtppJ23KzO+36cd3znfPd3sPyeqe/PRR72j/+OTw7I9H0WgksbIVW3GeRDtWYuyvKPXwSXkeALjnzrMsnma5ep46vTijNqeyunLrzQEAt2L2+3/ZvQAAd+Pb777/ant3d+ebNG1E9P7ud5LI/+bj24fxS3TjIDaiFc8jsok8/uLL3Z2opkPt+KQ36HeGlb0f/y+uv/04YlS/Ga1ol9dvprmZ+kG/U4v3ivW3unHw9b/Rig/K6z8rqY/Oanz68Uz/69GKBz/HcXRjv+htXP/nZpp+nv3z7PcfhtlhfTLod+qTecXsyp0+GAAAAAAAAAAAAAAAAAAAAAAA3mrr6UT74vk744P/Lxm/5Hygwcz5PBtpmmZJPn9aX40Pq1Fd5r0DAAAAAAAAAAAAAAAAAADAfXFy+tvRXrd78OtCg/Fr/SVD8eJiph4RN19r7bpVUSla6yYR11urFvVR5dWTK0Xw32teuRkRtXFfC3oEySTTnB1aG62RZ5p5MJN54w3QiFEw3l1He8lVD7dRtkkWEGQl268yt2r11UyzuIOSyc1LVl99/0Y9Z605Q8nMzrjqOrXF/g/v5vMHAAAAAAAAAAAAAAAAAACYmr70WzJ4toSGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAJpr//f41gUBTPm5NVhkE1isySbxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB3wMsAAAD//yWPZig=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2004482, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 39.932229ms ago: executing program 2 (id=1292): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x1ff, 0x80802) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f07000009040200000102200009040201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1293): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0) kernel console output (not intermixed with test programs): I2c Bus Busy Wait 00 [ 79.831608][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831618][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831627][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831637][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831647][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831657][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.831673][ T4233] gspca_vc032x: Unknown sensor... [ 79.831728][ T4233] vc032x: probe of 3-1:0.0 failed with error -22 [ 79.839724][ T4233] usb 3-1: USB disconnect, device number 4 [ 79.894802][ T4569] loop4: detected capacity change from 0 to 512 [ 79.944768][ T4569] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.961936][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.975866][ T4569] EXT4-fs (loop4): 1 orphan inode deleted [ 80.107156][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.249266][ T4572] loop3: detected capacity change from 0 to 512 [ 80.274388][ T4572] EXT4-fs (loop3): Ignoring removed orlov option [ 80.367089][ T13] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 80.381386][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 80.395920][ T4572] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.433260][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.453910][ T4583] loop4: detected capacity change from 0 to 64 [ 80.473156][ T13] usb 2-1: config 0 descriptor?? [ 80.513055][ T13] cp210x 2-1:0.0: cp210x converter detected [ 80.634921][ T4589] cgroup: Need name or subsystem set [ 80.941768][ T13] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 81.014277][ T13] usb 2-1: cp210x converter now attached to ttyUSB0 [ 81.208445][ T4619] EXT4-fs (loop0): filesystem is read-only [ 81.220449][ T13] usb 2-1: USB disconnect, device number 2 [ 81.235997][ T4619] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 81.247676][ T4438] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.260746][ T4619] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 81.276863][ T4619] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: comm syz.0.127: inode #1: comm syz.0.127: iget: illegal inode # [ 81.296985][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 81.336479][ T4619] EXT4-fs (loop0): no journal found [ 81.338343][ T13] cp210x 2-1:0.0: device disconnected [ 81.351987][ T4619] EXT4-fs (loop0): can't get journal size [ 81.392885][ T4619] EXT4-fs error (device loop0): ext4_fill_super:4872: inode #2: comm syz.0.127: iget: bad extra_isize 65535 (inode size 1024) [ 81.408337][ T4619] EXT4-fs (loop0): get root inode failed [ 81.420694][ T4619] EXT4-fs (loop0): mount failed [ 81.501201][ T4629] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 81.517011][ T4438] usb 3-1: Using ep0 maxpacket: 8 [ 81.642906][ T4438] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 81.658033][ T4438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.682217][ T4438] usb 3-1: config 0 descriptor?? [ 81.729529][ T4438] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 81.739821][ T4438] gm12u320: probe of 3-1:0.0 failed with error -5 [ 81.750854][ T4438] usb-storage 3-1:0.0: USB Mass Storage device detected [ 81.788033][ T4438] usb-storage 3-1:0.0: device ignored [ 81.893302][ T4639] FAT-fs (loop1): Directory bread(block 64) failed [ 81.900311][ T4639] FAT-fs (loop1): Directory bread(block 65) failed [ 81.902473][ T4439] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.908862][ T4639] FAT-fs (loop1): Directory bread(block 66) failed [ 81.924025][ T4639] FAT-fs (loop1): Directory bread(block 67) failed [ 81.931657][ T4639] FAT-fs (loop1): Directory bread(block 68) failed [ 81.938418][ T4639] FAT-fs (loop1): Directory bread(block 69) failed [ 81.961742][ T4639] FAT-fs (loop1): Directory bread(block 70) failed [ 81.968317][ T4639] FAT-fs (loop1): Directory bread(block 71) failed [ 81.976865][ T13] usb 3-1: USB disconnect, device number 5 [ 82.042082][ T4639] FAT-fs (loop1): Directory bread(block 72) failed [ 82.069497][ T4639] FAT-fs (loop1): Directory bread(block 73) failed [ 82.302714][ T4439] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 82.320542][ T4439] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 82.330247][ T4439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.403841][ T4439] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 82.572464][ T4438] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.725944][ T4666] set_capacity_and_notify: 3 callbacks suppressed [ 82.725960][ T4666] loop4: detected capacity change from 0 to 16 [ 82.813977][ T4438] usb 4-1: Using ep0 maxpacket: 32 [ 82.864128][ T4666] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.896269][ T4666] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 82.951806][ T4666] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 82.971697][ T4438] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.979828][ T4669] loop2: detected capacity change from 0 to 4096 [ 83.009947][ T4669] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 83.036038][ T4666] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 83.112174][ T4669] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 83.223629][ T4438] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 83.246973][ T4447] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 83.255127][ T4438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.276390][ T4438] usb 4-1: Product: syz [ 83.282067][ T4438] usb 4-1: Manufacturer: syz [ 83.286828][ T4438] usb 4-1: SerialNumber: syz [ 83.394425][ T4689] loop4: detected capacity change from 0 to 1024 [ 83.484194][ T4689] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 83.525000][ T4694] loop2: detected capacity change from 0 to 256 [ 83.571781][ T4439] stv0680 1-1:4.0: Could not get descriptor 0200 [ 83.615766][ T4694] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 83.631617][ T4447] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 83.640131][ T4447] usb 2-1: config 127 has no interface number 0 [ 83.646929][ T4447] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 83.743017][ T4699] loop4: detected capacity change from 0 to 1024 [ 83.789481][ T4438] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 83.796798][ T4439] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 83.807144][ T4439] stv0680 1-1:4.0: last error: 34, command = 0xf [ 83.843540][ T4447] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 83.891676][ T4447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.902422][ T4439] usb 1-1: USB disconnect, device number 2 [ 83.918461][ T4447] usb 2-1: Product: syz [ 83.928458][ T4699] MPI: mpi too large (187712 bits) [ 83.935160][ T4447] usb 2-1: Manufacturer: syz [ 83.939791][ T4447] usb 2-1: SerialNumber: syz [ 83.972827][ T4676] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 83.992411][ T4438] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 84.018929][ T4708] loop2: detected capacity change from 0 to 512 [ 84.041655][ T9] hfsplus: b-tree write err: -5, ino 25 [ 84.047933][ T9] hfsplus: b-tree write err: -5, ino 4 [ 84.060133][ T4708] EXT4-fs (loop2): Ignoring removed nobh option [ 84.078775][ T4708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.092943][ T9] hfsplus: b-tree write err: -5, ino 2 [ 84.115236][ T4708] EXT4-fs (loop2): 1 truncate cleaned up [ 84.131667][ T4708] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 84.337863][ T4716] nbd0: detected capacity change from 0 to 549764202496 [ 84.383173][ T4202] block nbd0: Receive control failed (result -104) [ 84.396472][ T4438] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 84.433301][ T4676] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 84.502296][ T4438] usb 4-1: USB disconnect, device number 3 [ 84.533921][ T4723] loop4: detected capacity change from 0 to 128 [ 84.588406][ T4723] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.600722][ T4723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.671552][ T4447] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 84.782695][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.891674][ T4447] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 84.904569][ T4447] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 84.918628][ T4447] asix: probe of 2-1:127.57 failed with error -71 [ 84.926033][ T4737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.959715][ T4447] usb 2-1: USB disconnect, device number 3 [ 85.395529][ T4764] loop2: detected capacity change from 0 to 128 [ 85.555618][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 86.061712][ T4793] program syz.0.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.073190][ T4749] loop3: detected capacity change from 0 to 32768 [ 86.259910][ T4749] JBD2: Ignoring recovery information on journal [ 86.377930][ T4806] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 86.406234][ T4806] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 86.440977][ T4799] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 86.440977][ T4799] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 86.440977][ T4799] [ 86.477503][ T4749] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.494079][ T1108] cfg80211: failed to load regulatory.db [ 86.553006][ T4799] EXT4-fs (loop2): Ignoring removed orlov option [ 86.663000][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 87.004967][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 88.069062][ T154] hfsplus: b-tree write err: -5, ino 25 [ 88.075153][ T154] hfsplus: b-tree write err: -5, ino 4 [ 88.110617][ T154] hfsplus: b-tree write err: -5, ino 2 [ 88.139272][ T154] hfsplus: b-tree write err: -5, ino 20 [ 88.482428][ T4878] set_capacity_and_notify: 5 callbacks suppressed [ 88.482444][ T4878] loop0: detected capacity change from 0 to 256 [ 88.529176][ T4881] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.593090][ T4881] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.627581][ T4881] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.641407][ T4881] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.678546][ T4881] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 88.754658][ T4881] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 88.789827][ T4881] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 88.846964][ T4881] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 89.438134][ T4908] loop4: detected capacity change from 0 to 8 [ 89.590102][ T4889] loop1: detected capacity change from 0 to 32768 [ 89.740102][ T4889] XFS (loop1): Mounting V5 Filesystem [ 89.806553][ T4893] loop3: detected capacity change from 0 to 32768 [ 89.898194][ T4893] XFS (loop3): Mounting V5 Filesystem [ 90.001931][ T4439] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.016750][ T4889] XFS (loop1): Ending clean mount [ 90.039838][ T4889] XFS (loop1): Quotacheck needed: Please wait. [ 90.079141][ T4889] XFS (loop1): Quotacheck: Done. [ 90.106648][ T4893] XFS (loop3): Ending clean mount [ 90.128401][ T4893] XFS (loop3): Quotacheck needed: Please wait. [ 90.184994][ T4893] XFS (loop3): Quotacheck: Done. [ 90.241405][ T4439] usb 3-1: Using ep0 maxpacket: 32 [ 90.270068][ T4187] XFS (loop1): Unmounting Filesystem [ 90.361651][ T4439] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 90.369937][ T4439] usb 3-1: config 0 has no interface number 0 [ 90.397758][ T4200] XFS (loop3): Unmounting Filesystem [ 90.401892][ T4445] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.571691][ T4439] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.595401][ T4439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.613887][ T4439] usb 3-1: Product: syz [ 90.618129][ T4439] usb 3-1: Manufacturer: syz [ 90.629588][ T4439] usb 3-1: SerialNumber: syz [ 90.651427][ T4445] usb 1-1: Using ep0 maxpacket: 32 [ 90.670700][ T4439] usb 3-1: config 0 descriptor?? [ 90.719861][ T4439] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.771619][ T4445] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 90.795014][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.833067][ T4445] usb 1-1: config 0 descriptor?? [ 90.949337][ T4439] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.971247][ T4439] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 91.069377][ T4957] loop3: detected capacity change from 0 to 256 [ 91.091485][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.111540][ T4445] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 91.137076][ T4445] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.162086][ T4445] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 91.169373][ T4445] usb 1-1: media controller created [ 91.174875][ T4957] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 91.209034][ T4445] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.239916][ T26] audit: type=1800 audit(1783342539.227:2): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file2" dev="loop3" ino=1048595 res=0 errno=0 [ 91.331639][ T4445] az6027: usb out operation failed. (-71) [ 91.361831][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 91.362468][ T4445] az6027: usb out operation failed. (-71) [ 91.385458][ T4445] stb0899_attach: Driver disabled by Kconfig [ 91.395088][ T4445] az6027: no front-end attached [ 91.395088][ T4445] [ 91.411325][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.421093][ T4439] usb 3-1: USB disconnect, device number 6 [ 91.431563][ T4445] az6027: usb out operation failed. (-71) [ 91.437355][ T4445] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 91.445398][ T4439] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.468968][ T4445] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 91.482325][ T4439] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.496728][ T4439] quatech2 3-1:0.51: device disconnected [ 91.503159][ T4445] dvb-usb: schedule remote query interval to 400 msecs. [ 91.510930][ T4445] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 91.518794][ T13] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.537278][ T4445] usb 1-1: USB disconnect, device number 3 [ 91.544468][ T13] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.663267][ T4445] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 91.683923][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 91.703510][ T13] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 91.722432][ T13] usb 2-1: Product: syz [ 91.729650][ T13] usb 2-1: Manufacturer: syz [ 91.783332][ T13] hub 2-1:4.0: USB hub found [ 92.002992][ T13] hub 2-1:4.0: 2 ports detected [ 92.064548][ T4978] program syz.0.254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.159151][ T4982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.256'. [ 92.210407][ T4984] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 92.264720][ T13] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 92.272006][ T13] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 92.327824][ T4989] netlink: 124 bytes leftover after parsing attributes in process `syz.0.260'. [ 92.342182][ T13] usb 2-1: USB disconnect, device number 4 [ 92.571993][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 92.591511][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 93.160687][ T4996] loop0: detected capacity change from 0 to 32768 [ 93.180869][ T5024] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.227363][ T4996] [ 93.227363][ T4996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.227363][ T4996] [ 93.242246][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.277521][ T4996] ERROR: (device loop0): diWrite: ixpxd invalid [ 93.277521][ T4996] [ 93.331699][ T4996] ERROR: (device loop0): txCommit: [ 93.331699][ T4996] [ 93.352188][ T4996] [ 93.352188][ T4996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.352188][ T4996] [ 93.373133][ T4996] [ 93.373133][ T4996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.373133][ T4996] [ 93.403797][ T4195] [ 93.403797][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.403797][ T4195] [ 93.429104][ T4195] [ 93.429104][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.429104][ T4195] [ 93.545994][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready [ 93.651630][ T4233] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 93.686964][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.718798][ T4233] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.770112][ T5037] loop0: detected capacity change from 0 to 512 [ 93.891608][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.900706][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 93.921662][ T4233] usb 4-1: Product: syz [ 93.925984][ T4233] usb 4-1: SerialNumber: syz [ 93.997774][ T4233] cdc_ncm 4-1:1.0: skipping garbage [ 94.012389][ T4233] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 94.019320][ T4233] cdc_ncm 4-1:1.0: bind() failure [ 94.193391][ T5046] loop1: detected capacity change from 0 to 2048 [ 94.354080][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.396864][ T5059] loop2: detected capacity change from 0 to 736 [ 94.447922][ T5046] EXT4-fs error (device loop1): __ext4_new_inode:1082: comm syz.1.285: reserved inode found cleared - inode=1 [ 94.649946][ T5063] 9pnet: p9_fd_create_unix (5063): problem connecting socket: ./file0: -30 [ 94.668966][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 94.681372][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 94.858867][ T4233] usb 4-1: USB disconnect, device number 4 [ 95.281848][ T5075] sctp: [Deprecated]: syz.1.297 (pid 5075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.281848][ T5075] Use struct sctp_sack_info instead [ 95.447257][ T5081] loop0: detected capacity change from 0 to 512 [ 95.583514][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 95.634001][ T5081] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.706367][ T5088] netlink: 2044 bytes leftover after parsing attributes in process `syz.3.303'. [ 95.744549][ T5088] netlink: 73 bytes leftover after parsing attributes in process `syz.3.303'. [ 95.824200][ T5081] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.300: Directory hole found for htree leaf block 0 [ 96.088623][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 96.313773][ T5115] netlink: 'syz.0.313': attribute type 14 has an invalid length. [ 96.695936][ T4198] block nbd1: Receive control failed (result -32) [ 96.729256][ T4178] udevd[4178]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 96.744738][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 96.840892][ T4320] udevd[4320]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 96.943011][ T5143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.328'. [ 97.231437][ T4445] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.262885][ T5157] netlink: 642 bytes leftover after parsing attributes in process `syz.3.334'. [ 97.471537][ T4445] usb 1-1: Using ep0 maxpacket: 16 [ 97.591532][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.614707][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.640603][ T4445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.668368][ T4445] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.691574][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.719221][ T4445] usb 1-1: config 0 descriptor?? [ 97.809467][ T5176] loop2: detected capacity change from 0 to 4096 [ 98.041814][ T5176] ntfs3: loop2: MFT: r=1b, expect seq=1 instead of 0! [ 98.092028][ T5056] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 98.214476][ T4445] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 98.246895][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.278400][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.291020][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.298990][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.306413][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.316050][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.323448][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.332911][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.348700][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.379148][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.386537][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.423035][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.461656][ T4445] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 98.530244][ T4445] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 98.565359][ T4445] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 98.587541][ T4445] microsoft 0003:045E:07DA.0002: no inputs found [ 98.621400][ T4445] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 98.699107][ T5203] loop2: detected capacity change from 0 to 1024 [ 98.802191][ T4445] usb 1-1: USB disconnect, device number 4 [ 98.829881][ T5204] fido_id[5204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.986704][ T5203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.008017][ T5206] loop3: detected capacity change from 0 to 8192 [ 99.113860][ T5206] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 99.141985][ T5206] REISERFS (device loop3): using ordered data mode [ 99.176545][ T5206] reiserfs: using flush barriers [ 99.234677][ T5206] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.265120][ T5206] REISERFS (device loop3): checking transaction log (loop3) [ 99.275665][ T5206] REISERFS (device loop3): Using r5 hash to sort names [ 99.283693][ T5206] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 99.301144][ T5206] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.344517][ T5206] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 99.412921][ T5206] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 99.438433][ T5206] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 99.507620][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 99.782041][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 99.797245][ T5231] loop2: detected capacity change from 0 to 4096 [ 99.806523][ T5233] device erspan0 entered promiscuous mode [ 99.883216][ T5231] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 100.246825][ T5251] virtiofs: Unexpected value for 'dax' [ 100.778948][ T5266] loop0: detected capacity change from 0 to 2048 [ 100.825149][ T5266] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.860882][ T5266] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 100.881841][ T5266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.918395][ T26] audit: type=1800 audit(1783342548.907:3): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.381" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 101.111484][ T4450] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.271119][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 101.400291][ T5294] loop2: detected capacity change from 0 to 4096 [ 101.481816][ T4450] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.500634][ T4450] usb 2-1: config 0 has no interface number 0 [ 101.512725][ T4450] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 101.536247][ T4450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.582816][ T4450] usb 2-1: config 0 descriptor?? [ 101.607460][ T1108] kernel read not supported for file /dsp1 (pid: 1108 comm: kworker/0:2) [ 101.627554][ T5294] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 101.643832][ T4450] usb 2-1: selecting invalid altsetting 1 [ 101.670810][ T4450] dvb_ttusb_budget: ttusb_init_controller: error [ 101.686832][ T4450] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 101.744866][ T5294] ntfs3: loop2: failed to convert "0080" to macgaelic [ 101.795315][ T5294] ntfs3: loop2: failed to convert name for inode 1e. [ 101.849209][ T4450] DVB: Unable to find symbol cx22700_attach() [ 101.851626][ T5303] loop3: detected capacity change from 0 to 8 [ 101.989986][ T4450] DVB: Unable to find symbol tda10046_attach() [ 102.025611][ T4450] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 102.067114][ T4450] usb 2-1: USB disconnect, device number 5 [ 102.209344][ T5290] loop0: detected capacity change from 0 to 32768 [ 102.253511][ T5313] loop3: detected capacity change from 0 to 256 [ 102.293601][ T5290] XFS (loop0): Mounting V5 Filesystem [ 102.345976][ T5313] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.408367][ T5313] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 102.425393][ T5313] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.461989][ T5290] XFS (loop0): Ending clean mount [ 102.473525][ T5290] XFS (loop0): Quotacheck needed: Please wait. [ 102.541362][ T4445] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.560819][ T5313] exFAT-fs (loop3): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 260, unilen : 257 > 255 [ 102.595516][ T5290] XFS (loop0): Quotacheck: Done. [ 102.749609][ T4195] XFS (loop0): Unmounting Filesystem [ 102.791359][ T4445] usb 5-1: Using ep0 maxpacket: 32 [ 102.912835][ T4445] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 102.936667][ T5309] loop2: detected capacity change from 0 to 32768 [ 103.004143][ T5309] ERROR: (device loop2): dtReadFirst: stbl[0] out of bound [ 103.004143][ T5309] [ 103.018262][ T5309] ERROR: (device loop2): remounting filesystem as read-only [ 103.111499][ T4445] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 103.127164][ T4445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.156114][ T4445] usb 5-1: Product: syz [ 103.160335][ T4445] usb 5-1: Manufacturer: syz [ 103.181365][ T4445] usb 5-1: SerialNumber: syz [ 103.457789][ T4445] usb 5-1: selecting invalid altsetting 1 [ 103.682238][ T4445] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 103.682347][ T4445] dvb_usb_lmedm04: probe of 5-1:2.0 failed with error -22 [ 103.757429][ T26] audit: type=1326 audit(1783342551.747:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.422" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e9518e59 code=0x0 [ 103.801510][ T4439] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.828585][ T5365] loop2: detected capacity change from 0 to 64 [ 103.841843][ T5363] loop0: detected capacity change from 0 to 2048 [ 103.919702][ T5363] UDF-fs: error (device loop0): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 103.953670][ T5363] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 104.001929][ T4188] hfs: node 4:3 still has 1 user(s)! [ 104.061379][ T4439] usb 2-1: Using ep0 maxpacket: 32 [ 104.181531][ T4439] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 104.194062][ T4439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.214560][ T4439] usb 2-1: config 0 descriptor?? [ 104.487060][ T4439] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 104.500458][ T4439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.541746][ T4439] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 104.548953][ T4439] usb 2-1: media controller created [ 104.595078][ T4439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.706052][ T4439] az6027: usb out operation failed. (-71) [ 104.736405][ T4439] az6027: usb out operation failed. (-71) [ 104.754742][ T4439] stb0899_attach: Driver disabled by Kconfig [ 104.760846][ T4439] az6027: no front-end attached [ 104.760846][ T4439] [ 104.817314][ T4439] az6027: usb out operation failed. (-71) [ 104.824425][ T4439] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 104.848212][ T4439] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 104.907863][ T4439] dvb-usb: schedule remote query interval to 400 msecs. [ 104.915991][ T4439] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 104.948525][ T4439] usb 2-1: USB disconnect, device number 6 [ 105.048364][ T4439] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 105.111765][ T5375] loop3: detected capacity change from 0 to 32768 [ 105.268063][ T26] audit: type=1804 audit(1783342553.257:5): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.426" name="/newroot/75/file1/file1" dev="loop3" ino=7 res=1 errno=0 [ 105.338350][ T4233] usb 5-1: USB disconnect, device number 3 [ 105.510445][ T5383] loop0: detected capacity change from 0 to 32768 [ 105.583374][ T5397] loop4: detected capacity change from 0 to 128 [ 105.639781][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 105.658519][ T5383] XFS (loop0): Mounting V5 Filesystem [ 105.733258][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none. [ 105.775386][ T5397] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.832873][ T5383] XFS (loop0): Ending clean mount [ 105.846597][ T5383] XFS (loop0): Quotacheck needed: Please wait. [ 105.987301][ T5383] XFS (loop0): Quotacheck: Done. [ 106.244551][ T4195] XFS (loop0): Unmounting Filesystem [ 106.360889][ T5440] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 106.374001][ T5440] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 106.529799][ T5444] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 106.641564][ T5444] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 106.791218][ T5451] tap0: tun_chr_ioctl cmd 1074025680 [ 107.467013][ T5476] loop4: detected capacity change from 0 to 2048 [ 107.509212][ T5480] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.549246][ T5476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.739595][ T5484] loop2: detected capacity change from 0 to 2048 [ 107.825609][ T5484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.099412][ T5494] loop2: detected capacity change from 0 to 128 [ 108.108004][ T5498] pim6reg: tun_chr_ioctl cmd 1074025677 [ 108.121736][ T5498] pim6reg: linktype set to 0 [ 108.189487][ T5466] loop0: detected capacity change from 0 to 32768 [ 108.218500][ T5494] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none. [ 108.237942][ T5494] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.289589][ T5501] loop3: detected capacity change from 0 to 512 [ 108.340817][ T5466] XFS (loop0): Mounting V5 Filesystem [ 108.365969][ T5501] EXT4-fs (loop3): inline encryption not supported [ 108.481111][ T5466] XFS (loop0): Ending clean mount [ 108.603039][ T5466] XFS (loop0): User initiated shutdown received. [ 108.614201][ T5501] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.622113][ T5501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.632756][ T5466] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 108.667885][ T5466] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 108.694312][ T5501] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 108.749336][ T4195] XFS (loop0): Unmounting Filesystem [ 108.750694][ T5501] EXT4-fs (loop3): 1 truncate cleaned up [ 108.809513][ T5501] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 109.038929][ T5527] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 109.139674][ T5508] loop4: detected capacity change from 0 to 32768 [ 109.171059][ T5501] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.269692][ T5538] loop2: detected capacity change from 0 to 512 [ 109.452160][ T5538] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.489: bad orphan inode 15 [ 109.572617][ T5538] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nolazytime,usrjquota=,grpquota,stripe=0x0000000000000007,nojournal_checksum,prjquota,quota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 109.671870][ T5538] EXT4-fs error (device loop2): __ext4_new_inode:1082: comm syz.2.489: reserved inode found cleared - inode=18 [ 109.845637][ T5553] process 'syz.0.494' launched './file0' with NULL argv: empty string added [ 109.932884][ T5557] binder: 5554:5557 ioctl c0306201 0 returned -14 [ 110.383481][ T5573] pim6reg: tun_chr_ioctl cmd 1074025677 [ 110.404337][ T5573] pim6reg: linktype set to 0 [ 110.495582][ T5578] program syz.4.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.951518][ T4445] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.989970][ T5565] loop0: detected capacity change from 0 to 40427 [ 111.059871][ T5565] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 111.076386][ T5565] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 111.098493][ T5565] F2FS-fs (loop0): invalid crc value [ 111.133731][ T5565] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.191504][ T4445] usb 4-1: Using ep0 maxpacket: 32 [ 111.209978][ T5565] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 111.240899][ T5565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.353341][ T4445] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.441898][ T4445] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 111.462437][ T4445] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 111.483120][ T4445] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 111.497002][ T5605] loop2: detected capacity change from 0 to 32768 [ 111.502151][ T4445] usb 4-1: config 128 has no interface number 0 [ 111.511726][ T4445] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 111.535006][ T4445] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.559397][ T4445] usb 4-1: config 128 interface 127 has no altsetting 0 [ 111.589119][ T5605] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.516 (5605) [ 111.640405][ T5605] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 111.681715][ T5605] BTRFS info (device loop2): enabling ssd optimizations [ 111.688724][ T5605] BTRFS info (device loop2): not using ssd optimizations [ 111.741727][ T4445] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 111.751011][ T5605] BTRFS info (device loop2): turning off barriers [ 111.761384][ T4445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.769751][ T4445] usb 4-1: Product: syz [ 111.791430][ T5605] BTRFS info (device loop2): using free space tree [ 111.798016][ T5605] BTRFS info (device loop2): has skinny extents [ 111.811061][ T4445] usb 4-1: Manufacturer: syz [ 111.820235][ T4445] usb 4-1: SerialNumber: syz [ 111.916588][ T5626] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.062315][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.291527][ T4445] usb 4-1: USB disconnect, device number 5 [ 112.321378][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 112.456743][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.474127][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.501885][ T4233] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.521450][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.539157][ T5641] loop0: detected capacity change from 0 to 32768 [ 112.554828][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.573028][ T4233] usb 5-1: config 0 descriptor?? [ 112.687527][ T5641] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 112.754397][ T5641] JBD2: Ignoring recovery information on journal [ 112.823877][ T5658] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.833451][ T5658] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.845126][ T5641] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.855462][ T5658] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.871753][ T5658] rtc_cmos 00:00: Alarms can be up to one day in the future [ 112.889383][ T5658] rtc rtc0: __rtc_set_alarm: err=-22 [ 113.043103][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 113.094599][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 113.347336][ T4233] usbhid 5-1:0.0: can't add hid device: -71 [ 113.367999][ T4233] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.381892][ T5687] loop0: detected capacity change from 0 to 512 [ 113.401413][ T4445] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 113.414845][ T4233] usb 5-1: USB disconnect, device number 4 [ 113.420004][ T5687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.496695][ T5687] EXT4-fs (loop0): 1 truncate cleaned up [ 113.505924][ T5687] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.671450][ T4445] usb 3-1: Using ep0 maxpacket: 8 [ 113.811698][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.837090][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.847963][ T4445] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.861689][ T4445] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 113.870849][ T4445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.900247][ T4445] usb 3-1: config 0 descriptor?? [ 114.204648][ T5713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 114.404489][ T4445] dragonrise 0003:0079:0006.0003: unknown main item tag 0x6 [ 114.421196][ T4445] dragonrise 0003:0079:0006.0003: report_id 48829 is invalid [ 114.457313][ T4445] dragonrise 0003:0079:0006.0003: item 0 2 1 8 parsing failed [ 114.485570][ T4445] dragonrise 0003:0079:0006.0003: parse failed [ 114.505717][ T4445] dragonrise: probe of 0003:0079:0006.0003 failed with error -22 [ 114.633381][ T4445] usb 3-1: USB disconnect, device number 7 [ 114.661631][ T150] block nbd0: Possible stuck request ffff8880212c0000: control (read@0,4096B). Runtime 30 seconds [ 115.049892][ T5745] netem: change failed [ 115.158039][ T5730] loop4: detected capacity change from 0 to 32768 [ 115.171686][ T5747] sctp: [Deprecated]: syz.3.560 (pid 5747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.171686][ T5747] Use struct sctp_sack_info instead [ 115.264588][ T5730] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.552 (5730) [ 115.334808][ T5730] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 115.361676][ T5730] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.371114][ T5730] BTRFS info (device loop4): use zstd compression, level 3 [ 115.438644][ T5730] BTRFS info (device loop4): using free space tree [ 115.461649][ T5730] BTRFS info (device loop4): has skinny extents [ 115.783552][ T5730] BTRFS info (device loop4): enabling ssd optimizations [ 115.901522][ T5789] loop3: detected capacity change from 0 to 1024 [ 116.032769][ T5789] EXT4-fs (loop3): Ignoring removed orlov option [ 116.062815][ T5754] loop2: detected capacity change from 0 to 32768 [ 116.112854][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noquota,norecovery,,errors=continue. Quota mode: none. [ 116.205037][ T26] audit: type=1800 audit(1783342564.197:6): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 116.308023][ T26] audit: type=1800 audit(1783342564.247:7): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 116.524589][ T5799] netlink: 'syz.3.574': attribute type 12 has an invalid length. [ 116.623737][ T5803] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.576'. [ 116.827720][ T5813] netlink: 'syz.2.580': attribute type 3 has an invalid length. [ 116.923631][ T5813] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.580'. [ 116.992471][ T5812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.257209][ T5831] loop4: detected capacity change from 0 to 2048 [ 117.351537][ T5831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.894052][ T5828] loop2: detected capacity change from 0 to 32768 [ 117.999592][ T5847] loop4: detected capacity change from 0 to 256 [ 118.160557][ T5847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 118.248450][ T5846] loop3: detected capacity change from 0 to 32768 [ 118.375761][ T5846] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.474841][ T5853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 118.551474][ T5853] netem: unknown loss type 13 [ 118.556677][ T5853] netem: change failed [ 118.594908][ T5854] (syz.3.596,5854,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 118.782763][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 118.872946][ T5860] loop4: detected capacity change from 0 to 1024 [ 118.963648][ T5860] EXT4-fs (loop4): Ignoring removed orlov option [ 119.088256][ T5860] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,. Quota mode: writeback. [ 119.289912][ T5860] EXT4-fs error (device loop4): ext4_check_all_de:667: inode #12: block 7: comm syz.4.600: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 119.332577][ T5860] EXT4-fs (loop4): Remounting filesystem read-only [ 119.511628][ T5856] loop2: detected capacity change from 0 to 32768 [ 119.709761][ T5877] tap0: tun_chr_ioctl cmd 2147767511 [ 119.738780][ T5856] XFS (loop2): Mounting V5 Filesystem [ 120.006542][ T5858] loop0: detected capacity change from 0 to 32768 [ 120.052077][ T5856] XFS (loop2): Ending clean mount [ 120.090769][ T5856] XFS (loop2): Quotacheck needed: Please wait. [ 120.198541][ T5858] XFS (loop0): Mounting V5 Filesystem [ 120.328065][ T5858] XFS (loop0): Ending clean mount [ 120.349240][ T5856] XFS (loop2): Quotacheck: Done. [ 120.521752][ T4195] XFS (loop0): Unmounting Filesystem [ 121.152086][ T4188] XFS (loop2): Unmounting Filesystem [ 121.631521][ T5651] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.999671][ T5974] kvm [5973]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x400003 [ 122.102183][ T5651] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.191824][ T5651] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 122.303845][ T5981] __sock_release: fasync list not empty! [ 122.441702][ T4439] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.483025][ T5651] usb 5-1: string descriptor 0 read error: -22 [ 122.489332][ T5651] usb 5-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40 [ 122.540216][ T5651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.599191][ T5995] loop2: detected capacity change from 0 to 512 [ 122.648173][ T5995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.686764][ T4439] usb 1-1: Using ep0 maxpacket: 32 [ 122.723241][ T5995] EXT4-fs (loop2): 1 truncate cleaned up [ 122.744871][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.811932][ T4439] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.830388][ T4439] usb 1-1: config 0 has no interface number 0 [ 122.857508][ T5651] snd-usb-hiface: probe of 5-1:1.1 failed with error -22 [ 123.021508][ T4439] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.021541][ T4439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.021562][ T4439] usb 1-1: Product: syz [ 123.021578][ T4439] usb 1-1: Manufacturer: syz [ 123.021593][ T4439] usb 1-1: SerialNumber: syz [ 123.023335][ T4439] usb 1-1: config 0 descriptor?? [ 123.069549][ T4439] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.078317][ T6012] __sock_release: fasync list not empty! [ 123.082277][ T5651] snd-usb-hiface: probe of 5-1:1.2 failed with error -22 [ 123.284111][ T4439] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.344093][ T4439] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.521434][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170 [ 123.729434][ T5651] usb 1-1: USB disconnect, device number 5 [ 123.741320][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.769048][ T5651] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.828184][ T5651] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.860570][ T5651] quatech2 1-1:0.51: device disconnected [ 123.932967][ T6035] loop3: detected capacity change from 0 to 512 [ 124.003027][ T6035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.099690][ T6035] EXT4-fs (loop3): 1 truncate cleaned up [ 124.110127][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.220109][ T6029] loop2: detected capacity change from 0 to 32768 [ 124.427190][ T4439] usb 5-1: USB disconnect, device number 5 [ 124.740972][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.672'. [ 125.012353][ T6081] loop0: detected capacity change from 0 to 256 [ 125.194670][ T6091] program syz.1.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.403763][ T6093] netlink: 616 bytes leftover after parsing attributes in process `syz.1.686'. [ 125.430527][ T6098] loop3: detected capacity change from 0 to 22 [ 125.486385][ T6098] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 125.517457][ T6098] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 125.605418][ T6104] loop0: detected capacity change from 0 to 128 [ 125.718021][ T6109] attempt to access beyond end of device [ 125.718021][ T6109] loop0: rw=2049, want=449, limit=128 [ 125.857361][ T1478] attempt to access beyond end of device [ 125.857361][ T1478] loop0: rw=1, want=1041, limit=128 [ 125.997090][ T6116] pimreg1: tun_chr_ioctl cmd 35108 [ 126.345195][ T6136] loop3: detected capacity change from 0 to 512 [ 126.391847][ T6136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.491039][ T6136] EXT4-fs (loop3): 1 truncate cleaned up [ 126.503124][ T6136] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none. [ 126.560395][ T6141] loop0: detected capacity change from 0 to 4096 [ 126.640849][ T6141] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 126.684518][ T6148] loop3: detected capacity change from 0 to 128 [ 126.855760][ T6155] attempt to access beyond end of device [ 126.855760][ T6155] loop3: rw=2049, want=1041, limit=128 [ 126.997992][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 127.001700][ T4445] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.051921][ T5649] Bluetooth: hci2: command 0x040e tx timeout [ 127.301390][ T4445] usb 5-1: Using ep0 maxpacket: 8 [ 127.421647][ T4445] usb 5-1: config 0 has no interfaces? [ 127.450889][ T6182] loop2: detected capacity change from 0 to 256 [ 127.560236][ T6182] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 127.581729][ T4445] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 127.593415][ T6185] FAT-fs (loop0): Directory bread(block 64) failed [ 127.597502][ T4445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.600278][ T6185] FAT-fs (loop0): Directory bread(block 65) failed [ 127.644803][ T4445] usb 5-1: Product: syz [ 127.663544][ T6185] FAT-fs (loop0): Directory bread(block 66) failed [ 127.668796][ T4445] usb 5-1: Manufacturer: syz [ 127.670131][ T6185] FAT-fs (loop0): Directory bread(block 67) failed [ 127.690032][ T4445] usb 5-1: SerialNumber: syz [ 127.708566][ T4445] usb 5-1: config 0 descriptor?? [ 127.733558][ T6185] FAT-fs (loop0): Directory bread(block 68) failed [ 127.744787][ T6185] FAT-fs (loop0): Directory bread(block 69) failed [ 127.752042][ T6185] FAT-fs (loop0): Directory bread(block 70) failed [ 127.758731][ T6185] FAT-fs (loop0): Directory bread(block 71) failed [ 127.765808][ T6185] FAT-fs (loop0): Directory bread(block 72) failed [ 127.804923][ T6185] FAT-fs (loop0): Directory bread(block 73) failed [ 127.924604][ T6194] set_capacity_and_notify: 1 callbacks suppressed [ 127.924620][ T6194] loop2: detected capacity change from 0 to 128 [ 127.997461][ T4445] usb 5-1: USB disconnect, device number 6 [ 128.012657][ T5654] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.033625][ T6195] attempt to access beyond end of device [ 128.033625][ T6195] loop2: rw=2049, want=641, limit=128 [ 128.223745][ T9] attempt to access beyond end of device [ 128.223745][ T9] loop2: rw=1, want=1041, limit=128 [ 128.271368][ T5654] usb 4-1: Using ep0 maxpacket: 16 [ 128.384243][ T6207] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.731'. [ 128.432798][ T5654] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.452516][ T6207] netlink: zone id is out of range [ 128.458307][ T6207] netlink: del zone limit has 8 unknown bytes [ 128.462738][ T5654] usb 4-1: config 0 has no interface number 0 [ 128.470504][ T5654] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.507062][ T5654] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.614179][ T6214] loop2: detected capacity change from 0 to 16 [ 128.671717][ T5654] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 128.683854][ T5654] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 128.692942][ T5654] usb 4-1: Product: syz [ 128.697138][ T5654] usb 4-1: SerialNumber: syz [ 128.704165][ T5654] usb 4-1: config 0 descriptor?? [ 128.721520][ T6214] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.777799][ T6214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.791035][ T5654] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 128.802984][ T5654] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 128.817201][ T6214] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 128.848874][ T6203] loop0: detected capacity change from 0 to 32768 [ 128.896044][ T6203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.729 (6203) [ 128.952205][ T6203] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.979424][ T6203] BTRFS info (device loop0): force clearing of disk cache [ 129.000515][ T6203] BTRFS info (device loop0): metadata ratio 0 [ 129.056960][ T6192] udc-core: couldn't find an available UDC or it's busy [ 129.078897][ T6203] BTRFS info (device loop0): enabling disk space caching [ 129.106540][ T6192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.128727][ T6203] BTRFS info (device loop0): disk space caching is enabled [ 129.166724][ T6203] BTRFS info (device loop0): has skinny extents [ 129.193711][ T5654] usb 4-1: USB disconnect, device number 6 [ 129.212176][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.219647][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 129.279077][ T5654] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 129.611395][ T6203] BTRFS info (device loop0): enabling ssd optimizations [ 129.647396][ T6203] BTRFS info (device loop0): clearing free space tree [ 129.713138][ T6203] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.762917][ T6203] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.828544][ T6272] loop3: detected capacity change from 0 to 256 [ 129.897198][ T6274] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 129.913190][ T6272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 129.944312][ T6274] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 129.969909][ T26] audit: type=1800 audit(1783342577.957:8): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.729" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 130.085590][ T6203] BTRFS info (device loop0): balance: start -sconvert=single,soft,drange=1580..7 [ 130.187277][ T6203] BTRFS info (device loop0): balance: ended with status: 0 [ 130.563799][ T26] audit: type=1326 audit(1783342578.557:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d26234e59 code=0x0 [ 131.197528][ T6329] netlink: 884 bytes leftover after parsing attributes in process `syz.4.766'. [ 131.525753][ T4445] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.577239][ T6350] loop4: detected capacity change from 0 to 128 [ 131.719393][ T6355] attempt to access beyond end of device [ 131.719393][ T6355] loop4: rw=2049, want=409, limit=128 [ 131.791553][ T4445] usb 3-1: Using ep0 maxpacket: 16 [ 131.921743][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.947390][ T4445] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.986309][ T4445] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.012632][ T4445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.045461][ T4445] usb 3-1: config 0 descriptor?? [ 132.080588][ T5333] attempt to access beyond end of device [ 132.080588][ T5333] loop4: rw=1, want=1041, limit=128 [ 132.303309][ T6330] loop3: detected capacity change from 0 to 32768 [ 132.391861][ T6330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.765 (6330) [ 132.444162][ T6330] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 132.472819][ T6330] BTRFS info (device loop3): force clearing of disk cache [ 132.532114][ T6330] BTRFS info (device loop3): metadata ratio 0 [ 132.538739][ T6330] BTRFS info (device loop3): enabling disk space caching [ 132.550937][ T6330] BTRFS info (device loop3): disk space caching is enabled [ 132.574491][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.580825][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.591674][ T6330] BTRFS info (device loop3): has skinny extents [ 132.771911][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 132.867482][ T6330] BTRFS info (device loop3): enabling ssd optimizations [ 132.880378][ T6330] BTRFS info (device loop3): clearing free space tree [ 132.886410][ T6384] loop4: detected capacity change from 0 to 32768 [ 132.906183][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.783'. [ 132.952612][ T6330] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.022748][ T6384] JBD2: Ignoring recovery information on journal [ 133.051436][ T6330] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.166519][ T6384] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.239981][ T26] audit: type=1800 audit(1783342581.227:10): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.765" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 133.300693][ T6330] BTRFS info (device loop3): balance: start -sconvert=single,soft,drange=1580..7 [ 133.351496][ T6330] BTRFS info (device loop3): balance: ended with status: 0 [ 133.403047][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 133.563155][ T4438] kernel read not supported for file /dsp1 (pid: 4438 comm: kworker/1:9) [ 133.876601][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 133.911666][ T6441] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 134.401506][ T4445] usbhid 3-1:0.0: can't add hid device: -71 [ 134.407671][ T4445] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.451621][ T4445] usb 3-1: USB disconnect, device number 8 [ 134.908641][ T6484] loop4: detected capacity change from 0 to 512 [ 135.019607][ T6484] EXT4-fs (loop4): Ignoring removed nobh option [ 135.037537][ T6460] loop0: detected capacity change from 0 to 32768 [ 135.052229][ T6484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.089295][ T6484] EXT4-fs (loop4): 1 truncate cleaned up [ 135.105526][ T6484] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 135.204517][ T26] audit: type=1804 audit(1783342583.197:11): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.791" name="/newroot/155/file1/file1" dev="loop0" ino=7 res=1 errno=0 [ 136.092240][ T6510] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.248077][ T6499] loop3: detected capacity change from 0 to 131072 [ 136.352196][ T6499] F2FS-fs (loop3): invalid crc value [ 136.448603][ T6499] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.519932][ T6499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.265050][ T6545] loop3: detected capacity change from 0 to 128 [ 137.302423][ T6545] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.326945][ T6545] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.436909][ T6549] syz.4.830 (6549) used greatest stack depth: 19088 bytes left [ 138.079292][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 138.120814][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 138.411814][ T6584] tap0: tun_chr_ioctl cmd 2147767517 [ 138.556454][ T6581] loop3: detected capacity change from 0 to 4096 [ 138.688523][ T6581] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 138.755512][ T6581] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 138.775825][ T6581] ntfs3: loop3: Failed to load $Extend. [ 138.950214][ T6563] loop4: detected capacity change from 0 to 40427 [ 139.011660][ T6602] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 139.055241][ T6563] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.070129][ T6563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.145604][ T6563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.308164][ T6563] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.321174][ T6563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.741721][ T6627] netlink: 'syz.2.855': attribute type 8 has an invalid length. [ 139.826359][ T6631] loop3: detected capacity change from 0 to 256 [ 139.934343][ T6631] exfat: Deprecated parameter 'namecase' [ 139.940086][ T6631] exfat: Deprecated parameter 'namecase' [ 140.000902][ T6631] exfat: Deprecated parameter 'namecase' [ 140.057492][ T6631] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 140.119979][ T6631] binder: 6629:6631 ioctl c0306201 0 returned -14 [ 140.774863][ T6644] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.3.859: Invalid inode table block 0 in block_group 0 [ 140.800331][ T6644] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.817750][ T6644] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2035: comm syz.3.859: mark_inode_dirty error [ 140.887051][ T6660] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.865: Invalid inode table block 0 in block_group 0 [ 140.929257][ T6660] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.939404][ T6660] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2039: comm syz.4.865: mark_inode_dirty error [ 140.949864][ T6649] loop2: detected capacity change from 0 to 32768 [ 140.961135][ T6660] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.865: Invalid inode table block 0 in block_group 0 [ 140.976154][ T6644] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.3.859: Invalid inode table block 0 in block_group 0 [ 140.976340][ T6660] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 140.999119][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 141.094676][ T6649] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.861 (6649) [ 141.143472][ T6649] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.160751][ T6665] netem: change failed [ 141.184444][ T6649] BTRFS info (device loop2): enabling disk space caching [ 141.209516][ T6649] BTRFS info (device loop2): force clearing of disk cache [ 141.247532][ T6649] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.283170][ T6649] BTRFS info (device loop2): use zstd compression, level 3 [ 141.302799][ T6649] BTRFS info (device loop2): disk space caching is enabled [ 141.341382][ T6649] BTRFS info (device loop2): has skinny extents [ 141.393418][ T6672] udevd[6672]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 141.534938][ T6649] BTRFS info (device loop2): enabling ssd optimizations [ 141.560224][ T6649] BTRFS info (device loop2): clearing free space tree [ 141.616722][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.626648][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.886347][ T6702] udevd[6702]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 142.385915][ T6667] loop3: detected capacity change from 0 to 40427 [ 142.518617][ T6667] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 142.531165][ T6667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.564752][ T6667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.711543][ T6667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.718670][ T6667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.050888][ T6732] loop2: detected capacity change from 0 to 64 [ 143.109581][ T6709] loop0: detected capacity change from 0 to 40427 [ 143.160487][ T6735] loop4: detected capacity change from 0 to 512 [ 143.235308][ T6735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.254151][ T6709] F2FS-fs (loop0): invalid crc value [ 143.286252][ T6735] EXT4-fs (loop4): 1 truncate cleaned up [ 143.295602][ T6735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.307374][ T6709] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.420748][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.901'. [ 143.456433][ T6709] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 143.542322][ T6709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.759126][ T4195] attempt to access beyond end of device [ 143.759126][ T4195] loop0: rw=2049, want=45104, limit=40427 [ 143.989584][ T6756] device erspan0 entered promiscuous mode [ 144.135197][ T6758] loop2: detected capacity change from 0 to 2048 [ 144.177759][ T6758] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 144.221180][ T6758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.296256][ T6749] loop4: detected capacity change from 0 to 32768 [ 144.385028][ T6749] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.890 (6749) [ 144.439180][ T6749] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 144.483332][ T6749] BTRFS info (device loop4): enabling disk space caching [ 144.502581][ T6749] BTRFS info (device loop4): force clearing of disk cache [ 144.582823][ T6749] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.621726][ T6749] BTRFS info (device loop4): use zstd compression, level 3 [ 144.660765][ T6769] udevd[6769]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 144.674903][ T6749] BTRFS info (device loop4): disk space caching is enabled [ 144.674929][ T6749] BTRFS info (device loop4): has skinny extents [ 144.741629][ T150] block nbd0: Possible stuck request ffff8880212c0000: control (read@0,4096B). Runtime 60 seconds [ 144.964935][ T6760] loop3: detected capacity change from 0 to 32768 [ 145.005608][ T6760] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.894 (6760) [ 145.072342][ T6760] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 145.081043][ T6760] BTRFS info (device loop3): enabling ssd optimizations [ 145.121746][ T6760] BTRFS info (device loop3): not using ssd optimizations [ 145.128222][ T6805] udevd[6805]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 145.168083][ T6760] BTRFS info (device loop3): turning off barriers [ 145.174766][ T6760] BTRFS info (device loop3): using free space tree [ 145.189532][ T6760] BTRFS info (device loop3): has skinny extents [ 145.216507][ T6749] BTRFS info (device loop4): enabling ssd optimizations [ 145.255934][ T6749] BTRFS info (device loop4): clearing free space tree [ 145.325297][ T6749] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.381463][ T6749] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.519095][ T6825] udevd[6825]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 145.568675][ T6804] ODEBUG: Out of memory. ODEBUG disabled [ 145.727619][ T6799] loop2: detected capacity change from 0 to 32768 [ 145.764525][ T6799] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.908 (6799) [ 145.777955][ T6834] udevd[6834]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 145.795965][ T4173] EXT4-fs error: 484 callbacks suppressed [ 145.795982][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 145.805034][ T6835] udevd[6835]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 145.858576][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 145.868450][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2035: comm syz-executor: mark_inode_dirty error [ 145.945841][ T6836] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.0.915: Invalid inode table block 0 in block_group 0 [ 145.963294][ T6799] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 145.999214][ T6799] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.010396][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 146.012397][ T6836] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 146.053826][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 146.073778][ T6837] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 146.092706][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 146.100893][ T6799] BTRFS info (device loop2): use zstd compression, level 3 [ 146.113293][ T6836] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2028: comm syz.0.915: mark_inode_dirty error [ 146.145401][ T6799] BTRFS info (device loop2): using free space tree [ 146.167514][ T6837] udevd[6837]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 146.186860][ T6799] BTRFS info (device loop2): has skinny extents [ 146.409642][ T6804] syz.1.909 (6804): drop_caches: 2 [ 146.743581][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 146.773088][ T6799] BTRFS info (device loop2): enabling ssd optimizations [ 147.056723][ T6885] udevd[6885]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 147.496415][ T6898] loop3: detected capacity change from 0 to 512 [ 147.586819][ T6898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.636328][ T6898] EXT4-fs (loop3): 1 truncate cleaned up [ 147.711305][ T6898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.151946][ T6914] input: syz1 as /devices/virtual/input/input11 [ 148.493376][ T6902] loop0: detected capacity change from 0 to 32768 [ 148.567388][ T6902] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.925 (6902) [ 148.627374][ T6927] netem: change failed [ 148.680798][ T6902] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.732152][ T6902] BTRFS info (device loop0): enabling ssd optimizations [ 148.762833][ T6902] BTRFS info (device loop0): not using ssd optimizations [ 148.780784][ T6932] udevd[6932]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 148.807861][ T6902] BTRFS info (device loop0): turning off barriers [ 148.834962][ T6902] BTRFS info (device loop0): using free space tree [ 148.856721][ T6902] BTRFS info (device loop0): has skinny extents [ 149.211064][ T6929] loop4: detected capacity change from 0 to 40427 [ 149.272440][ T6929] F2FS-fs (loop4): invalid crc value [ 149.363659][ T6929] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.654533][ T4180] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop0 scanned by udevd (4180) [ 149.679331][ T6929] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 149.759140][ T6929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 149.770923][ T6975] udevd[6975]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 149.892125][ T6929] F2FS-fs (loop4): user quota file already specified [ 149.999030][ T6983] loop3: detected capacity change from 0 to 512 [ 150.063257][ T6983] EXT4-fs (loop3): Ignoring removed oldalloc option [ 150.111931][ T6983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.170348][ T6983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 150.249952][ T6983] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.300172][ T6983] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.950: bad orphan inode 267 [ 150.363639][ T6983] EXT4-fs (loop3): Remounting filesystem read-only [ 150.370252][ T6983] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 150.514959][ T6983] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.950: dx entry: limit 0 != root limit 125 [ 150.581990][ T6983] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.950: Corrupt directory, running e2fsck is recommended [ 150.652660][ T7010] loop4: detected capacity change from 0 to 512 [ 150.689309][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 150.791454][ T6443] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 150.800925][ T7017] loop2: detected capacity change from 0 to 16 [ 150.831485][ T7014] EXT4-fs error: 530 callbacks suppressed [ 150.831502][ T7014] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2028: comm syz.0.966: mark_inode_dirty error [ 150.873300][ T7014] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.0.966: Invalid inode table block 0 in block_group 0 [ 150.886499][ T7017] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 150.904847][ T7019] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.3.967: Invalid inode table block 0 in block_group 0 [ 150.917699][ T7014] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 150.927808][ T7019] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 150.946940][ T7014] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2028: comm syz.0.966: mark_inode_dirty error [ 150.965510][ T7016] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.965: Invalid inode table block 0 in block_group 0 [ 150.978267][ T7019] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2035: comm syz.3.967: mark_inode_dirty error [ 151.008507][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 151.022327][ T7016] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 151.219134][ T6443] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 151.234769][ T7020] loop3: detected capacity change from 0 to 4096 [ 151.252574][ T6443] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 151.291319][ T6443] usb 2-1: config 246 has no interface number 0 [ 151.301537][ T6443] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.350755][ T6443] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.370046][ T6443] usb 2-1: config 246 interface 166 has no altsetting 0 [ 151.431118][ T7035] loop0: detected capacity change from 0 to 2048 [ 151.479270][ T7035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.521322][ T4438] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.550256][ T6443] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 151.571368][ T6443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.585100][ T6443] usb 2-1: Product: syz [ 151.589312][ T6443] usb 2-1: Manufacturer: syz [ 151.595696][ T6443] usb 2-1: SerialNumber: syz [ 151.778160][ T4438] usb 3-1: Using ep0 maxpacket: 16 [ 151.901591][ T4438] usb 3-1: config 0 has no interfaces? [ 152.062301][ T4438] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 152.081350][ T4438] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 152.099920][ T4438] usb 3-1: Product: syz [ 152.125538][ T4438] usb 3-1: Manufacturer: syz [ 152.125561][ T4438] usb 3-1: SerialNumber: syz [ 152.127306][ T4438] usb 3-1: config 0 descriptor?? [ 152.137881][ T7066] loop3: detected capacity change from 0 to 256 [ 152.229603][ T26] audit: type=1800 audit(1783342600.217:12): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.989" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 152.321644][ T6443] usb 2-1: Limiting number of CPorts to U8_MAX [ 152.334205][ T6443] usb 2-1: Not enough endpoints found in device, aborting! [ 152.474983][ T7071] loop4: detected capacity change from 0 to 2048 [ 152.485855][ T4447] usb 3-1: USB disconnect, device number 9 [ 152.548351][ T5661] usb 2-1: USB disconnect, device number 7 [ 152.577888][ T7071] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 152.610349][ T7059] loop0: detected capacity change from 0 to 32768 [ 152.621474][ T7071] System zones: 0-7 [ 152.638474][ T7071] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 152.666605][ T7071] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.992: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.688122][ T7071] EXT4-fs (loop4): Remounting filesystem read-only [ 152.704118][ T7071] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.992: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.734261][ T7071] EXT4-fs (loop4): Remounting filesystem read-only [ 152.779141][ T7059] XFS (loop0): Mounting V5 Filesystem [ 152.861109][ T7059] XFS (loop0): Ending clean mount [ 152.960338][ T4195] XFS (loop0): Unmounting Filesystem [ 153.221326][ T4447] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.476614][ T4447] usb 5-1: Using ep0 maxpacket: 8 [ 153.481932][ T4445] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.546245][ T7110] vivid-000: disconnect [ 153.560978][ T7112] loop3: detected capacity change from 0 to 512 [ 153.587639][ T7112] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.601455][ T4447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.613244][ T7109] vivid-000: reconnect [ 153.628422][ T4447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.647797][ T4447] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 153.681097][ T4447] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 153.700771][ T7112] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.1006: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 129, max 4(4), depth 0(0) [ 153.701806][ T4447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.731402][ T4445] usb 2-1: Using ep0 maxpacket: 8 [ 153.737254][ T7112] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1006: couldn't read orphan inode 13 (err -117) [ 153.763479][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.807425][ T4447] usb 5-1: config 0 descriptor?? [ 153.851655][ T4445] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.011964][ T4445] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 154.031067][ T4445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.039721][ T4445] usb 2-1: Product: syz [ 154.050178][ T4445] usb 2-1: Manufacturer: syz [ 154.051949][ T5661] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.057340][ T4445] usb 2-1: SerialNumber: syz [ 154.078322][ T4445] usb 2-1: config 0 descriptor?? [ 154.127624][ T4445] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 154.159964][ T7125] syz.2.1011[7125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.160132][ T7125] syz.2.1011[7125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.293231][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x3 [ 154.321532][ T5661] usb 1-1: Using ep0 maxpacket: 16 [ 154.331922][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.349634][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.378909][ T4445] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 154.388430][ T4445] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 154.396200][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.408176][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.427381][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.443461][ T4447] elecom 0003:056E:00FE.0004: unknown main item tag 0x0 [ 154.457226][ T5661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.459994][ T4447] elecom 0003:056E:00FE.0004: collection stack underflow [ 154.477893][ T5661] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.498091][ T4447] elecom 0003:056E:00FE.0004: item 0 2 0 12 parsing failed [ 154.516761][ T4447] elecom: probe of 0003:056E:00FE.0004 failed with error -22 [ 154.556045][ T4447] usb 5-1: USB disconnect, device number 7 [ 154.605384][ T4445] usb 2-1: USB disconnect, device number 8 [ 154.695798][ T7127] loop2: detected capacity change from 0 to 32768 [ 154.702683][ T5661] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.732150][ T4256] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1023 with max blocks 1 with error 117 [ 154.746419][ T5661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.757173][ T7127] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 154.776143][ T7127] JBD2: Ignoring recovery information on journal [ 154.805533][ T4256] EXT4-fs (sda1): This should not happen!! Data will be lost [ 154.805533][ T4256] [ 154.812476][ T5661] usb 1-1: Product: syz [ 154.820746][ T4256] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1493 with max blocks 17 with error 117 [ 154.835458][ T4256] EXT4-fs (sda1): This should not happen!! Data will be lost [ 154.835458][ T4256] [ 154.847388][ T5661] usb 1-1: Manufacturer: syz [ 154.852302][ T4256] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1023 with max blocks 1 with error 117 [ 154.865166][ T4256] EXT4-fs (sda1): This should not happen!! Data will be lost [ 154.865166][ T4256] [ 154.875462][ T7127] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 154.889771][ T4256] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 10 with max blocks 5 with error 117 [ 154.909215][ T4256] EXT4-fs (sda1): This should not happen!! Data will be lost [ 154.909215][ T4256] [ 154.925892][ T5661] usb 1-1: SerialNumber: syz [ 155.047725][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 155.122475][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 155.184839][ T7140] x_tables: duplicate underflow at hook 3 [ 155.221164][ T7140] xt_TCPMSS: Only works on TCP SYN packets [ 155.301873][ T5661] usb 1-1: 0:2 : does not exist [ 155.330801][ T5661] usb 1-1: USB disconnect, device number 6 [ 155.477500][ T7153] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1023'. [ 155.508914][ T7153] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1023'. [ 155.602447][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.857945][ T7164] EXT4-fs error: 598 callbacks suppressed [ 155.857963][ T7164] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.3.1029: Invalid inode table block 0 in block_group 0 [ 155.869750][ T7171] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.0.1032: Invalid inode table block 0 in block_group 0 [ 155.897749][ T7167] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.1030: Invalid inode table block 0 in block_group 0 [ 155.924606][ T7167] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 155.934240][ T7164] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 155.944053][ T7167] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2039: comm syz.4.1030: mark_inode_dirty error [ 155.960647][ T7167] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.1030: Invalid inode table block 0 in block_group 0 [ 155.971821][ T7171] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 156.008751][ T7164] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2035: comm syz.3.1029: mark_inode_dirty error [ 156.013381][ T7171] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2028: comm syz.0.1032: mark_inode_dirty error [ 156.265353][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 156.340435][ T6870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.512202][ T7194] loop0: detected capacity change from 0 to 256 [ 156.585827][ T7194] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.601497][ T6870] usb 3-1: Using ep0 maxpacket: 8 [ 156.618033][ T7194] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 156.650389][ T7194] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 156.674147][ T7198] loop3: detected capacity change from 0 to 512 [ 156.738317][ T6870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 156.770569][ T6870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.786326][ T7198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.812381][ T6870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.822385][ T6443] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 156.841102][ T6870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.875810][ T6870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 156.887151][ T7198] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1044: bad orphan inode 131083 [ 156.931297][ T6870] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.940473][ T6870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.951825][ T7198] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 156.954029][ T6870] usb 3-1: config 0 descriptor?? [ 156.992526][ T7203] loop0: detected capacity change from 0 to 128 [ 157.013049][ T7203] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.034286][ T4202] Bluetooth: hci5: urb ffff888072266300 submission failed (90) [ 157.055836][ T7203] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.231645][ T6443] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 157.239958][ T6443] usb 5-1: config 127 has no interface number 0 [ 157.268966][ T6443] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 157.297863][ T6870] usb 3-1: USB disconnect, device number 10 [ 157.311868][ T144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.501865][ T6443] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 157.521338][ T6443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.531629][ T6443] usb 5-1: Product: syz [ 157.535865][ T6443] usb 5-1: Manufacturer: syz [ 157.550801][ T6443] usb 5-1: SerialNumber: syz [ 157.592180][ T7196] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.989738][ T7214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.042297][ T7196] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 158.055707][ T7214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.137416][ T7219] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.199613][ T7219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.291412][ T6443] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.312204][ T6443] asix: probe of 5-1:127.57 failed with error -71 [ 158.339863][ T6443] usb 5-1: USB disconnect, device number 8 [ 158.530298][ T7234] loop3: detected capacity change from 0 to 512 [ 158.568988][ T7234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.634666][ T7234] EXT4-fs (loop3): 1 truncate cleaned up [ 158.647109][ T7234] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,inode_readahead_blks=0x0000000000000010,,errors=continue. Quota mode: none. [ 158.685085][ T7234] EXT4-fs (loop3): shut down requested (1) Jul 6 12:56:46 syzkaller kern.alert kernel: [ 158.685085][ T7234] EXT4-fs (loop3): shut down requested (1) [ 159.251388][ T4445] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.308905][ T7263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1072'. [ 159.417582][ T7267] overlayfs: upper fs does not support tmpfile. [ 159.426493][ T7259] loop0: detected capacity change from 0 to 4096 [ 159.464645][ T7259] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 159.501419][ T4445] usb 2-1: Using ep0 maxpacket: 32 [ 159.570284][ T7259] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 159.627286][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1079'. [ 159.662742][ T4445] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.731480][ T4445] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.743386][ T4445] usb 2-1: can't read configurations, error -71 [ 159.936860][ T9] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 10 with max blocks 22 with error 117 [ 159.982097][ T9] EXT4-fs (sda1): This should not happen!! Data will be lost [ 159.982097][ T9] [ 159.990221][ T7291] sctp: [Deprecated]: syz.2.1086 (pid 7291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.990221][ T7291] Use struct sctp_sack_info instead [ 160.196087][ T7300] loop4: detected capacity change from 0 to 512 [ 160.309985][ T7300] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.397432][ T7300] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1090: bad orphan inode 131083 [ 160.548139][ T7300] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 160.651669][ T4445] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.711761][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.719941][ T7317] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.901577][ T7320] EXT4-fs error: 655 callbacks suppressed [ 160.901595][ T7320] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.1100: Invalid inode table block 0 in block_group 0 [ 160.911803][ T4445] usb 2-1: Using ep0 maxpacket: 32 [ 160.939942][ T7320] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 160.955679][ T7320] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2039: comm syz.4.1100: mark_inode_dirty error [ 160.989680][ T7296] loop3: detected capacity change from 0 to 32768 [ 161.051586][ T4445] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 161.072278][ T7296] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1087 (7296) [ 161.195956][ T7296] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 161.221545][ T4445] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 161.231409][ T4447] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.243260][ T7322] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 161.252062][ T4445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.273989][ T7296] BTRFS info (device loop3): enabling disk space caching [ 161.281074][ T7296] BTRFS info (device loop3): force clearing of disk cache [ 161.289024][ T7322] udevd[7322]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 161.291799][ T4445] usb 2-1: Product: syz [ 161.327652][ T4445] usb 2-1: Manufacturer: syz [ 161.337781][ T4445] usb 2-1: SerialNumber: syz [ 161.348050][ T7296] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 161.362558][ T4445] usb 2-1: config 0 descriptor?? [ 161.397269][ T7319] loop2: detected capacity change from 0 to 40427 [ 161.404188][ T4445] hub 2-1:0.0: bad descriptor, ignoring hub [ 161.414799][ T4445] hub: probe of 2-1:0.0 failed with error -5 [ 161.421015][ T7296] BTRFS info (device loop3): use zstd compression, level 3 [ 161.455937][ T4180] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 161.469326][ T7319] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 161.481120][ T7319] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 161.491329][ T7296] BTRFS info (device loop3): disk space caching is enabled [ 161.498566][ T7296] BTRFS info (device loop3): has skinny extents [ 161.521863][ T4180] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 161.534377][ T7319] F2FS-fs (loop2): invalid crc value [ 161.554986][ T4180] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 161.590620][ T7326] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 161.592264][ T4447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.616276][ T7303] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.1.1092: Invalid inode table block 0 in block_group 0 [ 161.633894][ T7319] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 161.651398][ T7303] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 161.666400][ T4447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.677399][ T7326] udevd[7326]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 161.701466][ T4447] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 161.721312][ T4447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.740704][ T4447] usb 5-1: config 0 descriptor?? [ 161.820670][ T7319] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 161.834042][ T7319] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.867765][ T6870] usb 2-1: USB disconnect, device number 10 [ 161.959286][ T7296] BTRFS info (device loop3): enabling ssd optimizations [ 161.978492][ T7296] BTRFS info (device loop3): clearing free space tree [ 162.003794][ T7296] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.031444][ T7296] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.049384][ T4188] attempt to access beyond end of device [ 162.049384][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 162.156414][ T7347] udevd[7347]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 162.269006][ T4447] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 162.445422][ T7350] udevd[7350]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 162.478531][ T4447] usb 5-1: USB disconnect, device number 9 [ 162.741601][ T4202] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 162.763022][ T7357] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1101'. [ 162.960670][ T7365] loop0: detected capacity change from 0 to 128 [ 163.005547][ T7365] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 163.061938][ T7365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.250290][ T7376] loop3: detected capacity change from 0 to 16 [ 163.363547][ T7376] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.469041][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.556974][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.933683][ T7400] loop3: detected capacity change from 0 to 2048 [ 164.211413][ T7400] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 164.254809][ T7400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.377461][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.460786][ T7383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.679052][ T7410] loop0: detected capacity change from 0 to 4096 [ 164.869773][ T7410] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 165.065248][ T7420] loop2: detected capacity change from 0 to 1024 [ 165.087007][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2039 at logical offset 1493 with max blocks 17 with error 117 [ 165.138779][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 165.138779][ T7323] [ 165.243043][ T7420] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 165.266538][ T7436] program syz.3.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.303006][ T7420] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.332189][ T7420] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1132: Freeing blocks not in datazone - block = 0, count = 16 [ 165.352487][ T7420] EXT4-fs (loop2): Remounting filesystem read-only [ 165.745627][ T7454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.806423][ T7456] loop0: detected capacity change from 0 to 256 [ 165.831360][ T4450] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.923734][ T7461] EXT4-fs error: 515 callbacks suppressed [ 165.923750][ T7461] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1148: Invalid inode table block 0 in block_group 0 [ 165.949729][ T7461] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 165.960633][ T7461] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2032: comm syz.2.1148: mark_inode_dirty error [ 165.996842][ T7461] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1148: Invalid inode table block 0 in block_group 0 [ 166.013298][ T7463] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.0.1149: Invalid inode table block 0 in block_group 0 [ 166.022626][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 166.026796][ T7463] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 166.052669][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 166.057060][ T7429] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.1137: Invalid inode table block 0 in block_group 0 [ 166.071996][ T7461] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 166.103007][ T7465] vivid-000: disconnect [ 166.142391][ T7463] vivid-000: reconnect [ 166.201523][ T4450] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.213377][ T4450] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.220554][ T4450] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 166.230373][ T4450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.255030][ T7469] loop4: detected capacity change from 0 to 512 [ 166.257938][ T4450] usb 4-1: config 0 descriptor?? [ 166.391083][ T7469] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.459088][ T7469] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.1152: Bad quota inum: 2, type: 1 [ 166.470747][ T7469] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 166.528931][ T7469] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 166.564755][ T7469] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.1152: Bad quota inum: 2, type: 1 [ 166.579743][ T7469] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 166.624879][ T4450] usbhid 4-1:0.0: can't add hid device: -71 [ 166.638461][ T4450] usbhid: probe of 4-1:0.0 failed with error -71 [ 166.698665][ T4450] usb 4-1: USB disconnect, device number 7 [ 166.820987][ T7487] loop4: detected capacity change from 0 to 256 [ 166.941034][ T7487] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 167.080942][ T7478] loop0: detected capacity change from 0 to 40427 [ 167.146456][ T7494] loop2: detected capacity change from 0 to 256 [ 167.169162][ T7478] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 167.187837][ T7478] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 167.223737][ T7478] F2FS-fs (loop0): invalid crc_offset: 1 [ 167.252181][ T7494] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 167.297440][ T7478] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 167.344112][ T7505] loop3: detected capacity change from 0 to 64 [ 167.414238][ T7478] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 167.438310][ T7478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.476411][ T7505] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 167.507837][ T7510] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 167.545736][ T4450] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 167.565920][ T7510] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 167.619889][ T4195] attempt to access beyond end of device [ 167.619889][ T4195] loop0: rw=2049, want=45104, limit=40427 [ 167.802058][ T4450] usb 5-1: Using ep0 maxpacket: 32 [ 168.041426][ T4450] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.121471][ T4450] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 168.142960][ T4450] usb 5-1: can't read configurations, error -71 [ 168.278494][ T7527] loop3: detected capacity change from 0 to 4096 [ 168.366634][ T7527] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 168.441785][ T7527] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.524118][ T7533] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 168.891158][ T7323] ntfs3: loop2: ino=1b, Internal error [ 168.909085][ T7323] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22. [ 169.292764][ T4450] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.358620][ T7572] set_capacity_and_notify: 1 callbacks suppressed [ 169.358637][ T7572] loop0: detected capacity change from 0 to 2048 [ 169.383894][ T7575] binder: binder_mmap: 7574 200000000000-200000b36000 bad vm_flags failed -1 [ 169.427529][ T7576] loop2: detected capacity change from 0 to 4096 [ 169.449053][ T7572] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.463636][ T7572] NILFS (loop0): mounting unchecked fs [ 169.551350][ T4450] usb 5-1: Using ep0 maxpacket: 32 [ 169.566586][ T7576] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 169.596982][ T4180] udevd[4180]: incorrect nilfs2 checksum on /dev/loop0 [ 169.626194][ T7572] NILFS (loop0): recovery complete [ 169.647784][ T7576] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 169.676344][ T4450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.690677][ T7579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.739846][ T4450] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.791327][ T4450] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 169.826550][ T4450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.895125][ T4450] usb 5-1: config 0 descriptor?? [ 170.097520][ T7585] program syz.3.1200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.110396][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 170.384882][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.401385][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.438296][ T7597] loop3: detected capacity change from 0 to 512 [ 170.445065][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.461423][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.499008][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.508636][ T4450] uclogic 0003:2179:0053.0006: unknown main item tag 0x0 [ 170.516009][ T7596] loop2: detected capacity change from 0 to 1024 [ 170.541827][ T4450] uclogic 0003:2179:0053.0006: No inputs registered, leaving [ 170.617659][ T4450] uclogic 0003:2179:0053.0006: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.4-1/input0 [ 170.708977][ T7597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.774566][ T7597] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.828522][ T4450] usb 5-1: USB disconnect, device number 11 [ 170.923890][ T7606] udevd[7606]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 170.950701][ T7607] EXT4-fs error: 566 callbacks suppressed [ 170.950719][ T7607] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1209: Invalid inode table block 0 in block_group 0 [ 170.975240][ T7594] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.3.1204: Invalid inode table block 0 in block_group 0 [ 171.000672][ T7547] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.4.1184: Invalid inode table block 0 in block_group 0 [ 171.013719][ T7594] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.028212][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 171.049478][ T7594] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2035: comm syz.3.1204: mark_inode_dirty error [ 171.068022][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.086373][ T7607] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.099362][ T7547] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.117823][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 171.199801][ T7597] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 171.221611][ T7597] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.242436][ T7597] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1204: Failed to acquire dquot type 0 [ 171.415548][ T7612] loop2: detected capacity change from 0 to 256 [ 171.470922][ T7612] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x1a218ca7, utbl_chksum : 0xe619d30d) [ 171.880600][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1220'. [ 172.002479][ T7641] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 172.029115][ T7639] loop4: detected capacity change from 0 to 1024 [ 172.071525][ T7641] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 172.091913][ T7646] loop7: detected capacity change from 0 to 7 [ 172.105815][ T7646] Dev loop7: unable to read RDB block 7 [ 172.136641][ T7646] loop7: unable to read partition table [ 172.166193][ T7646] loop7: partition table beyond EOD, truncated [ 172.201357][ T7646] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 172.218667][ T4180] Dev loop7: unable to read RDB block 7 [ 172.242434][ T4180] loop7: unable to read partition table [ 172.260864][ T4180] loop7: partition table beyond EOD, truncated [ 172.321437][ T4447] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 172.681491][ T4447] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 172.705036][ T4447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 172.737092][ T7666] loop3: detected capacity change from 0 to 1024 [ 172.742372][ T4447] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 172.790715][ T4447] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 172.810329][ T4447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.831886][ T4447] usb 3-1: config 0 descriptor?? [ 172.851600][ T7643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.910129][ T7666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.144495][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1023 with max blocks 1 with error 117 [ 173.194424][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 173.194424][ T7323] [ 173.229218][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1493 with max blocks 17 with error 117 [ 173.260332][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 173.260332][ T7323] [ 173.284001][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1023 with max blocks 1 with error 117 [ 173.310114][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 173.310114][ T7323] [ 173.322906][ T4447] wacom 0003:056A:00E5.0007: ignoring exceeding usage max [ 173.345974][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 10 with max blocks 22 with error 117 [ 173.346745][ T4447] wacom 0003:056A:00E5.0007: unknown main item tag 0x0 [ 173.383250][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 173.383250][ T7323] [ 173.400653][ T4447] wacom 0003:056A:00E5.0007: unknown main item tag 0x2 [ 173.416938][ T4447] wacom 0003:056A:00E5.0007: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.2-1/input0 [ 173.430089][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 10 with max blocks 22 with error 117 [ 173.456246][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 173.456246][ T7323] [ 173.534500][ T4447] usb 3-1: USB disconnect, device number 11 [ 173.587544][ T7681] udevd[7681]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 173.802197][ T7687] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1241'. [ 174.046890][ T7691] loop4: detected capacity change from 0 to 32768 [ 174.742142][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.749854][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.811679][ T150] block nbd0: Possible stuck request ffff8880212c0000: control (read@0,4096B). Runtime 90 seconds [ 176.033857][ T4173] EXT4-fs error: 470 callbacks suppressed [ 176.033872][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 176.052894][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 176.062375][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 176.074266][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 176.087250][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 176.097353][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 176.109323][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 176.122381][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 176.131967][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 176.144496][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 176.821348][ T5661] Bluetooth: hci5: command 0x1003 tx timeout [ 176.827534][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 178.202240][ T3559] udevd[3559]: worker [4318] /devices/virtual/block/nbd0 is taking a long time [ 178.901423][ T5657] Bluetooth: hci5: command 0x1001 tx timeout [ 178.907627][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 180.981384][ T5657] Bluetooth: hci5: command 0x1009 tx timeout [ 181.216741][ T3559] EXT4-fs error: 38 callbacks suppressed [ 181.216755][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 181.235288][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 181.248099][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 181.540645][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 181.554090][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 181.563872][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 181.576446][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 181.589584][ T4173] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 181.599268][ T4173] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2022: comm syz-executor: mark_inode_dirty error [ 181.611125][ T4173] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 185.618968][ T7741] netlink: 14752 bytes leftover after parsing attributes in process `syz.1.1265'. [ 185.851495][ T4189] Bluetooth: hci1: command 0x0406 tx timeout [ 185.861263][ T4450] Bluetooth: hci2: command 0x0406 tx timeout [ 185.867762][ T4189] Bluetooth: hci3: command 0x0406 tx timeout [ 185.900348][ T4189] Bluetooth: hci0: command 0x0406 tx timeout [ 185.934571][ T7757] loop4: detected capacity change from 0 to 256 [ 186.012466][ T7757] FAT-fs (loop4): Unrecognized mount option "ƒonumtail=0" or missing value [ 186.060372][ T7763] loop2: detected capacity change from 0 to 2048 [ 186.126803][ T7763] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.201322][ T7764] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.225200][ T7760] EXT4-fs error: 231 callbacks suppressed [ 186.225236][ T7760] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1275: Invalid inode table block 0 in block_group 0 [ 186.297143][ T7760] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 186.327386][ T7760] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2032: comm syz.2.1275: mark_inode_dirty error [ 186.346070][ T7760] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1275: Invalid inode table block 0 in block_group 0 [ 186.358975][ T7760] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 186.368504][ T7760] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2032: comm syz.2.1275: mark_inode_dirty error [ 186.380317][ T7760] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1275: Invalid inode table block 0 in block_group 0 [ 186.393579][ T7760] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 186.403274][ T7760] EXT4-fs error (device sda1): ext4_dirty_inode:6077: inode #2032: comm syz.2.1275: mark_inode_dirty error [ 186.415663][ T7760] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm syz.2.1275: Invalid inode table block 0 in block_group 0 [ 186.574139][ T7757] loop4: detected capacity change from 0 to 32768 [ 186.591987][ T7757] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1273 (7757) [ 186.650544][ T7757] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 186.665917][ T7757] BTRFS info (device loop4): use zlib compression, level 3 [ 186.673572][ T7757] BTRFS info (device loop4): using free space tree [ 186.680185][ T7757] BTRFS info (device loop4): has skinny extents [ 186.708113][ T7784] udevd[7784]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 186.724996][ T7757] BTRFS info (device loop4): enabling ssd optimizations [ 186.758408][ T7757] BTRFS error (device loop4): target device ð^=gíSIDÔf7sùyj«½‡ëû is invalid! [ 186.803430][ T7787] udevd[7787]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 186.887559][ T4315] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4315) [ 186.919955][ T7788] udevd[7788]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 187.317416][ T7792] loop2: detected capacity change from 0 to 32768 [ 187.399838][ T7792] JBD2: Ignoring recovery information on journal [ 187.437739][ T7792] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.569468][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 187.785847][ T7805] loop4: detected capacity change from 0 to 256 [ 188.171719][ T4189] usb 3-1: new high-speed USB device number 12 using dummy_hcd SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program [ 188.421437][ T4189] usb 3-1: Using ep0 maxpacket: 32 proc=5 req=1268 state=1 status=67 (errno 9: Bad file descriptor) [ 188.729622][ T4185] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 188.756139][ T7323] EXT4-fs: 10 callbacks suppressed [ 188.756158][ T7323] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1023 with max blocks 1 with error 117 [ 188.756847][ T4185] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 188.772105][ T7323] EXT4-fs (sda1): This should not happen!! Data will be lost [ 188.772105][ T7323] [ 189.076663][ T4189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.102333][ T7809] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 189.119500][ T1478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.140535][ T4187] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 189.150927][ T4189] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 189.160564][ T4189] usb 3-1: can't read configurations, error -71 [ 189.160826][ T7809] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 189.170191][ T4187] EXT4-fs warning (device sda1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 189.212458][ T1478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.287913][ T1478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.347027][ T1478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.196742][ T1478] device hsr_slave_0 left promiscuous mode [ 190.204120][ T1478] device hsr_slave_1 left promiscuous mode [ 190.213328][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.220910][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.238553][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.251064][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.262658][ T1478] device bridge_slave_1 left promiscuous mode [ 190.271478][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.289856][ T1478] device bridge_slave_0 left promiscuous mode [ 190.296171][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.320142][ T1478] device veth1_macvtap left promiscuous mode [ 190.326853][ T1478] device veth0_macvtap left promiscuous mode [ 190.333752][ T1478] device veth1_vlan left promiscuous mode [ 190.339740][ T1478] device veth0_vlan left promiscuous mode [ 190.523709][ T1478] team0 (unregistering): Port device team_slave_1 removed [ 190.537555][ T1478] team0 (unregistering): Port device team_slave_0 removed [ 190.555237][ T1478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.569619][ T1478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.634529][ T1478] bond0 (unregistering): Released all slaves [ 191.886987][ T1478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.929042][ T1478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.999394][ T1478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.058869][ T1478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.115286][ T3559] EXT4-fs error: 261 callbacks suppressed [ 192.115311][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 192.138683][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 192.151801][ T3559] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm udevd: Invalid inode table block 0 in block_group 0 [ 192.196185][ T3852] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.219066][ T7870] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.234429][ T7871] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.269631][ T3852] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.285305][ T7872] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.310483][ T3852] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.339727][ T7873] EXT4-fs error (device sda1): __ext4_get_inode_loc:4334: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 192.922893][ T1478] device hsr_slave_0 left promiscuous mode [ 192.929247][ T1478] device hsr_slave_1 left promiscuous mode [ 192.936885][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.944630][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.953036][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.960453][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.969084][ T1478] device bridge_slave_1 left promiscuous mode [ 192.975641][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.984433][ T1478] device bridge_slave_0 left promiscuous mode [ 192.990662][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.005452][ T1478] device veth1_macvtap left promiscuous mode [ 193.011661][ T1478] device veth0_macvtap left promiscuous mode [ 193.017710][ T1478] device veth1_vlan left promiscuous mode [ 193.023705][ T1478] device veth0_vlan left promiscuous mode [ 193.186800][ T1478] team0 (unregistering): Port device team_slave_1 removed [ 193.199343][ T1478] team0 (unregistering): Port device team_slave_0 removed [ 193.213913][ T1478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.229866][ T1478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.294196][ T1478] bond0 (unregistering): Released all slaves [ 194.016618][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.022996][ T1420] ieee802154 phy1 wpan1: encryption failed: -22