last executing test programs: 4.468961268s ago: executing program 2 (id=2541): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x3000410, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f8, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="1c97e85b5b5528f0"}}) 2.724003421s ago: executing program 3 (id=2552): setreuid(0xee01, 0xee01) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x7, 0x4) 2.436963278s ago: executing program 3 (id=2556): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) 2.38829874s ago: executing program 0 (id=2557): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="e29c891ec90ec2d36cafd60d7434ef14e45bb60341f22328fcbbde877b387f5dbaff7c0dcb4ab180ef4f3c", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.353665013s ago: executing program 2 (id=2558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.272466957s ago: executing program 3 (id=2559): syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES16], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4000000000000, 0x101401) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x5, 0x1000, 0xb4, 0x8001, 0x6, 0x5}) 2.062950709s ago: executing program 0 (id=2560): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 1.857204102s ago: executing program 0 (id=2561): unshare(0x2a020400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r0, 0x0) 1.759010247s ago: executing program 4 (id=2562): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.677614652s ago: executing program 0 (id=2564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) 1.419595697s ago: executing program 0 (id=2567): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IQ/+AHrhy48SJSDYSqCcGjfd54tnNbteu45215/WS7JnPPDP2M37v7A/vzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDtVZE3Ph5WrAS8X/RiWhHLJX1akQsra7k9bsR8VzsNcezEdFbiCi33/v2dMSrEfHx2Yid3c31cvHlA/bju3/82+9+eOatv/6hd/E/f7rXeW3Sevfv/+rff35wtH0GAACApimKomill/nn0uv7dt2dAgBmIj/+F0lefurrX//jrb/MU3/UarVarZ5BXVWM96BaRMRWdZvyOYO34wHghNmKT+ruAjWSf6N1I+JM3Z0A5lqr7g5wLHZ2N9dbKd9W9fFgddCezwUZyn+r9ej6jknTaUbPMZnV7Ws7OvHMhP4szagP8yTn3x7N/8agvZ/WO+78Z2VS/v3BpU+Nk/PvjOY/4vTk3x6bf1Pl/LuHyr8jfwAAAAAAmGP5//8rNb//u3D0XTmQT3v/d3VGfQAAAAAAAACAJ+2o4/89Yvw/AAAAmFvla/XSb87uL5v0WWzl8uutiKdG1gca5qPBZLnufgAAAAAAAAAAAABAk3QH5/Beb0X0IuKp5eWiKMqvqtH6sI66/UnX9P2HJqv7Th4AAAY+PjtyLX8rYjEirkd777P+esvLy0WxuLRcLBdLC/n5bH9hsViqvK7N03LZQv8AT4i7/aL8YYuV7aqmvV6e1j7688rf1S86B+jYE9JLf80JzTWFDQDJ4NFoxyPSKVMUT0968gFDHP+n0Eqs1H27Yv7VfTMFAAAAjl9RFEUrDfN3Lo3v1667UwDATOTH/9H3BQ5UR4xvbx9yfbVarVar1TOpq4rxHlSLiNiqblM+ZzAcPwCcMFvxSd1doEbyb7RuRDxXdyeAudaquwMci53dzfVWyrdVfTxYHbTnc0GG8t9q7W2Xtx83nWb0HJNZ3b62oxPPTOjPszPqwzzJ+bdH878xaO+n9Y47/1mZlH9/75K55sn5d0bzH3F68m+Pzb+pcv7dQ+XfkT8AAAAAAMyx/P//Fe//5l0GAAAAAAAAgBNnZ3dzPV/3mt///9yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy//LIep3K/MM394//f+1urv/+3j//P08Pmv9CnmmlW1Yr3SJa6Te1uml6lL173Hav0y9/U6/V7nTTOT9F7524FbdjIy4NrdtOf4/99rWh9rKnvaH2y0Pt3cfarwy199LnDhRLuf1CrMdP4na8vddeti1M2f/FKe3FlPacf8f9fyPl/LuVrzL/5dTeGpmWHn7Yfuy4r07H/Z43bn3+l5eOf3em2o7Oo32rKvfvfA392fubnOnHz+5u3Llw/+a9e3fWIk2Gll6ONHnCcv69va+F/fv/Fwbt+X6/erw+/LB/6PznxXZ0J+b/QmW+3N+XZty3OuT8++kr5/92ah9//J/k/Ccf/y/X0B8AAAAAAAAAAAAAAAD4NEVR7F0i+kZEXE3X/9R1bSYAMFv58b9I8nK1Wq1Wz0sdK3vf56Y/6pNcVxXjvV4tIuKj6jblc4ZfjPthAMA8+29E/L3uTlAb+TdY/ry/cvpi3Z0BZuru+x/86Obt2xt37tbdEwAAAAAAAADgs8rjf65Wxn9+MSJWRtYbGv/1zVg96vif3TzzaIDRJzzQ9wTb7X6nXRlu/PnYG5/7wqTxv8/H4+N/5zFxO9X9mKA3pb0/pX1hSvvi2KX7aY290KMi5/98ZbzzMv9zI8OvN2H819Ex75sg53++cnsu8//SyHrV/Ivfzl3+WwddcTvaQ/lfvPfeTy/eff+DV269d/PdjXc3fnxlbe3SlatXr127dvGdW7c3Lg2+H0+v50DOP4997TzQZsn558zl3yw5/y+kWv7NkvP/Yqrl3yw5//x8T/7NkvPPr33k3yw5/5dSLf9myfl/JdXyb5ad3c2FMv+XUy3/ZsnH/1dTLf9myfm/kmr5N0vO/0Kq5d8sOf+LqT5A/j4e/hTJ+ed3uBz/zZLzX0v1lPyXZtUvZiPnfznVjv9myflfSbX8myXn/2qq5d8sOf+vpVr+zZLzv5pq+TdLzv/rqZZ/s+T8r6Va/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y/7n/5sxY+aUzfTjM29e9z0TAAAAAAAAAAAAADBqFich172PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOwgRCc1MDaMcY4S3Z9iS+0LiYQLgFKgYRCL9iud20WfMNrl0CRbBookTAqqqiafmgLKGojVRVWxQdapTQfql4+kfYD/VJRVUJqVJkooCK1Fc1WM+d9X8/Mzs6MveP12XN+Pyl5dmfOmfPOmfecnWfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTa/dfaLtSzL6v81/rchy15S/3rtxIbGbW+61SMEAAAAluv/Gv9/YX264VAfKzUt8/ev+e63FhYWFrIPD//e6FcXFtIdE1k2uibLGvdFV/79I7XmZYLHsvHaUNP3Qz02P9zj/pEe94/2uH+sx/1retw/3uP+RTtgkbX572MaD7a18eWGfJdmd2Sjjfu2dljrsdqaoaH4u5yGWmOdhdHj2Vx2MpvNpluWz5etNZZ/enN9W+/M4raGmra1qT5DfvTZY3EMtbCPt7Zs69pjRj98Szbx4x999tifnL96V6facze0PF4+zu1b6uP8fLglH2stW5P2SRznUNM4N3V4TYZbxllrrFf/un2cL/Q5zuFrw1xR7a/5eDbU+PrZxn4aaf61XtpPm8Jt/31PlmWXrg27fZlF28qGsnUttwxde33G8xlZf4z6VHp5NnJd83RzH/O0Xme2ts7T9mMivv6bw3ojS4yh+WX64efGFr3u1ztPo/qzXupYaZ+Dgz5WijIH47x4tvGkH+84B7eG5//ZbUvPwY5zp8McTM+7aQ5u6TUHh8aGG2NOL0Ktsc61ObizZfnhxpZqjfrctu5zcOr8qbNT85/+zBvnTh09MXti9vTunTund+/du3///qnjcydnp/P/3+DeLr512VA6BraEfRePgde3Lds8VRe+PrjjcLzLcbihbdlBH4cj7U+utjIH5OI5nR8bD9d3+vjloWyJY6zx+uxY/nGYnnfTcTjSdBx2/JnS4Tgc6eM4rC9zdkd/71lGmv7rNIab9bNgQ9McbH8/0j4HB/1+pChzcDzMi3/dsfTPgk1hvI9PXu/7keFFczA93XDuqd+S3u+P72+UTvPy7vodt41lF+Znz9336NHz58/tzEJZEa9omivt83Vd03PKFs3Xoeuer4fmXvP43R1u3xD21fgb6/8bX/K1qi+z577ur1Xjp1vn/dly664slAFb6f3Z6ad5fX+mXrLL/qwv8/mp5b8XT31p0/l3dInzb+z7X8y3lx7qseHRkfz4HU57Z7TlfNz6Uo00zl21xrZfmOrvfDwa/lvp8/EdXc7HG9uWHfT5eLT9ycXzca3XbzuWp/31HA/z5OR09/NxfZmNu653To50PR/fE2ot7P83hE4h9UVNc2epeZu2NTIyGp7XSNxC6zzd3bL8aOjN6tt6ateNzdPt9+SPNZye3TUrNU8n2pYd9DxN56ul5mmt12/fbkz76zke5sUdu7vP0/oyz+xZ/rlzbfyy6dw51msOjg6P1cc8miZhfr5fWBvn4H3ZsexMdjKbadw71phPtca2Ju/vbw6Ohf9W+ly5scsc3N627KDnYPo5ttTcq40sfvID0P56jod58cT93edgfZm37Rvse9ft4Za0TNN71/bfry31O6+723bTzfydV32cf7uv++9m68uc3H+9fWb3/XRvuOW2Dvup/fhd6piayVZmP20M47y6f+n9VB9PfZmvHuhzPh3KsuziJx9o/L43/H3lLy5871stf3fp9Dedi5984Pnbj//d9YwfgNXvxbysy3/WNf1lqp+//wMAAACrQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/Gt12de/FilpL5C0G8P+2Gh/LlYsZ1Onw/sXBN/fYHnpz9yV9d7G/bQ1mW/fSh3+y4/MaH4rhyE2GcVx5svX3xihf72v6RR64t15xf/1p4/Ph8+p0GnSK401mWPb3+y43tTHzkcqM+89CRRv3Apccfqy/zwoH8+7j+c6/Il//DEP49dPxoy/rPhf3wg1Cn3915f8T1vnn5DZv2feja9uJ6tS0vbTztJz6aP278nJyvPJYvH/fzUuP/6y899c368o++rvP4Lw51Hv9T4XGffPDqXH3G/c+r8+WbX4P693G9L4Txx+09Gda/7xvf6Tj+K1/Mlz/79ny5I6HG7W8P3299+9W55v31aO1oy/PK3pEvF7c//b3fadwfHy8+fvv4xw9fbtkf7fPjmX/OH2eqbfl4e9xO9Jdt268/TvP8jNt/6rePtOznXtu/8oHnXl1/3Pbt39u23HDb+u2f2PRHX/hyx+3F8Rz687Mtz+fQ+8NxHLb/xEfDfAz3/++VL7dsNzry/tbzT1z+axsutjyf6J0/zrd/5c0nGvU/Jn7yB7e95PaXXnptfd9l2bMfzB+v1/ZP/PGZlvF//c4djdcj3h8z+u3bX0rc/rlPTZ4+M39hbqZprzY+O+c9+XjWjK9dVx/v+nBubf/+8JnzH5s9NzE9MZ1lE+X9CL0b9o1Qn8/Lpetdf8cj4fW8+/efXrftn74Ub/+Xh/PbL787/7n1+rDcV8LtG/LXb6G2zO0/sfnOxvFdeyb/viXHPgCbtv7n/r4WDM+//X1BnO9nX/mxxn6o39f4uRGP62WO//sz+eN8O+zXhfDJzFvuvLa95uXjZyNc/mB+vC97/4XTXHxd/zS83u/9Qf74cVzx+X4/vI/5zsbW812cH9++ONT++I1P8bgUzifZpfz+uFTc35dfuLPj8OLnkGSX7mp8/7vpce66rqe5lPlPz0+dnDt94dGp87Pz56fmP/2Zw6fOXDh9/nDjszwPf7zX+tfOT+sa56eZ2b17sum1WZadyaZX4IR1c8Zf/6q/8Z995NjMvultM7PHj144fv6Rs7PnThybnz82OzO/7ejx47Of6rX+3MzBnbsO7N63a/LE3MzB/QcO7D4wOXf6TH0Y+aB62Dv9icnT5w43Vpk/uOfAzvvv3zM9eerMzOzBfdPTkxd6rd/42TRZX/s3Js/Nnjx6fu7U7OT83GdmD+48sHfvrp6fBnjq7PH5ialzF05PXZifPTeVP5eJ842b6z/7eq1POc3/W/5+tl0t/yC+7H337k2fz1r35OeWfKh8kbYPEL0aPovmH192dn8/38e+fzTUpCL9PwAAAFRB7PvHQk30/wAAAFAase9fE2qi/wcAAIDSiH3/eKhJRfp/+X/5//7y//n9g8z/d8rPZ33l/0fl/1co/3/2k3mudLXn/2N+Xv6/Gm5x/n/Z25f/l/8vX/6///z8ah+//L/8P4sVLf8f+/61WVbJ/h8AAACqIPb960JN9P8AAABQGrHvvy3URP8PAAAApRH7/peEmlSk/5f/7yv/v6tX4Kr8+f/BX///xvP/rv8v/5/rK/8fXxz5/8q47vz9hx5u+Vb+P5D/l/+X/5f/l/9n2UaXvOdW5f9j3397qElF+n8AAACogtj3vzTURP8PAAAApRH7/vWhJvp/AAAAKI3Y928INalI/y//7/r/8v/y/6XO/y/3+v9Ng5H/Xx1c/787+f8ebjj/Pz64/P/6pYcn/z/g8Y8OdvzFzv/3HL78PzdF0a7/H/v+l4WaVKT/BwAAgCqIff/LQ030/wAAAFAase9/RaiJ/h8AAABKI/b9d4SaVKT/X07+P2au5f/l/+X/c/L/uVLl/7te/z//Sv6/WOT/uyt//j9/P+P6/zemcvn/AY+/2Pn/QV//f/TB9vXl/+mkaPn/2Pe/MtSkIv0/AAAAVEHs++8MNdH/AwAAQGnEvv9VoSb6fwAAACiN2PdvDDWpSP/v+v/y//L/8v/y/5233zv/n5P/Lxb5/+7Kn/+/Vdf/l//P5P+rlf/v8OZX/p9Oipb/j33/XaEmFen/AQAAoApi3393qIn+HwAAAEoj9v0/E2qi/wcAAIDSiH3/plCTivT/8v/y//L/1cr/3zsm/y//X27y/93J//cg/y//L//f5/X/F7ue/P+aXg9GaRQt/x/7/leHmlSk/wcAAIAqiH3/a0JN9P8AAABQGrHvf22oif4fAAAASiP2/ROhJhXp/+X/y5X//7O/eeK1mfy//H+P7Zc0/x+ngfx/xcn/dyf/34P8v/z/Ks3/v+u7eV0t+X+qo2j5/9j3bw41qUj/DwAAAFUQ+/4toSb6fwAAACiN2PffE2qi/wcAAIDSiH3/1lCTivT/8v/lyv9H8v/y/922X9L8fyL/X23y/x00HaTy/z3I/8v/r9L8fzaw6//Hd7/y/wxG0fL/se9/XahJl8ZvsJ/EAwAAANxsse/fFmpSkb//AwAAQBXEvv/1oSb6fwAAACiN2PdvDzWpSP8v/y//L/8v/y//33n78v+r0+rK/69ZdEvRrv8/Jv8v/y//X7H8v+v/M1hFy//Hvv8NoSYV6f8BAACgCmLfvyPURP8PAAAApRH/5V3+7171/wAAAFBGse+fDDWpSP8v/y//X6X8f03+X/5f/r/0Vlf+f7Gi5f9d/1/+X/5f/l/+n+UoWv4/9v1vDDWpSP8PAAAAVRD7/vtCTfT/AAAAUBqx758KNdH/AwAAQGnEvn861KQi/b/8v/x/lfL/rv8v/y//X37y/93J//cg/1+q/H+Wyf/XBy//z61UtPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/x/5+3L/69O8v/dyf/3IP+/Mvn/Tm+cVtP4l1DI/L/r/3OLFS3/H/v++0NNKtL/AwAAQBXEvn9vqIn+HwAAAEoj9v37Qk1C/3+T/nkSAAAAsIJi378/1KQif/+X/y9J/v+3/qFl2/L/8v/dtj+Y/P9a+f9Q5f+LpaT5//bD4obJ//cg/3/T8vPZ0ECGeMvGL/8v/8+NKVr+P/b9B0JNKtL/AwAAQBXEvv9NoSb6fwAAACiN2Pf/bKiJ/h8AAABKI/b9PxdqUpH+X/6/JPn/NvL/8v/dtu/6//L/ZVbS/P/AlCr/PyT/v5ry//3k51f7+OX/5f9Z7Obn/+NX/eX/Y99/MNSkIv0/AAAAVEHs+38+1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt9/KNSkIv3/DeT/G3fK/7eS/28dv/x/5/lRrfz/m7N2Rcz/1yeP/H+5FDj/P9rP9uX/Xf9f/n9Fxt/+o2Yg45f/l/9nsaJd/z/2/W8JNalI/w8AAABVEPv+B0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/+/6//L/8v/y/67/33n78v+rU4Hz/32R/5f/l/9fveOX/5f/Z7Gi5f9j3/9gqElF+n8AAACogtj3vz3URP8PAAAApRH7/neEmuj/AQAAoDRi3//OUJOK9P/y//L/8v/y//L/nbcv/786yf93J//fg/y//L/8v/w/A1W0/H/s+98ValKR/h8AAACqIPb9D4Wa6P8BAACgNGLf/+5QE/0/AAAAlEbs+98TalKR/l/+X/5f/l/+X/6/8/bl/1cn+f/uVib/P5oeRv5f/l/+X/5f/r/aipb/j33/e0NNKtL/AwAAQBXEvv8XQk30/wAAAFAase9/X6iJ/h8AAABKI/b9vxhqUpH+X/5f/r9Y+f+Fi83ryf/L/2eDyv/XV5L/rwT5/+5c/7+HDvn/NfL/8v/y//L/3LCi5f9j3//+UJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwAAQGnEvv/hUJOK9P/y/5XM/6enXLz8v+v/95P/H1kv/5+5/r/8/xLk/7uT/+/B9f/l/+X/5f8ZqKLl/2Pf/0ioSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+Xwo10f8DAABAacS+/8OhJhXp/+X/K5n/L/D1/8uW/x9pmR9Vuv7/eNPrmeal/L/8/wqQ/+9O/r8H+X/5/yLn/8NsXrvE+vL/FFHR8v+x7/9IqElF+n8AAACogtj3/3Koif4fAAAASiP2/b8SaqL/BwAAgNKIff+vhppUpP8vYf7/Uib/L/9fmPx/6/yoUv7f9f8Xk/9fGfL/3cn/9yD/L/9f5Px/D/L/FFHR8v+x7/+1UJMlG7/n/6uPpwkAAAAUSOz7PxpqUpG//wMAAEAVxL7/cKiJ/h8AAABKI/b9R0JNKtL/lzD/v8zr/8crqvbK/7deeVX+v3X88v9Zh/kxJP8v/y//vwIGl/9/1e1ZJv8v/y//L/8v/y//z3IULf8f+/6joSYV6f8BAACgCmLf/+uhJvp/AAAAKI3Y9x8LNdH/AwAAQOGNpERwd7Hvnwk1qUj/fwvz/6PFzP+X7fr/tfDYNz///1P5f9f/D+T/O5P/Xxmu/9+d/H8P8v/y//L/8v8MVNHy/7Hvnw01qUj/DwAAACWWfh0c+/7joSb6fwAAACiN2PefCDXR/wMAAEBpxL7/Y6EmFen/Xf+/7Pl/1/8vZv5/pGV5+f+c/L/8/yDI/3c3wPz/WByf/L/8fyT/L/8v/0+7ouX/Y98/F2pSkf4fAAAAqiD2/R8PNdH/AwAAQGnEvv8ToSb6fwAAACiN2Pf/P3v30WTXVfVx+NhYaQQfgbFHDGFkPgJTZlQxxUSTgyRyBpNzMBmTMybYYHLOOZicozHBUCXK0lpLat3b57bUR33P2ft5JgurLPeV3fit/6v6se8Xt3Sy//X/+v/e+//LhuGE9//1/+u+vv5/mfT/47z/v4H+X/+v/9f/M6m59f+5+6+OWzrZ/wAAANCD3P33j1vsfwAAAGhG7v4HxC32PwAAADQjd/8D45ZO9r/+X//fe/8/bOX9/51/vv7/DP2//n8KK/39Fev/vN2i8F37/7vd/Zr76P/1//r/Ufp//b/+n/PNrf/P3f+guKWT/Q8AAAA9yN3/4LjF/gcAAIBm5O5/SNxi/wMAAEAzcvdfE7d0sv/1//p//f8i+v/L8q9xyfv/m/T/+v9l8/7/OP3/Bvp//b/+X//PpObW/+fuf2jc0sn+BwAAgB7k7n9Y3GL/AwAAQDNy9z88brH/AQAAoBm5+x8Rt3Sy//X/+n/9/yL6/9tuOH7Y+//n/Xr0//r/dfT/4/T/G+j/9f/6f/0/k5pb/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/6//1/xP2/yeHYbhk/f+g/z/v16P/1/+vc91w9t8J+v9V+v8NNvT/w6D/H7Pnfn79L285n38X+n/9P6vm1v/n7n9s3HLPYTh8sb9IAAAAYFZy9z8ubunk9/8BAACgB7n7j8ct9j8AAAA0I3f/ibilk/2v/9f/6/+X8v6//l//r//fC+//j9t//3/lXa6+b7/9v/f/x3n/f+r+/47vDP0/yza3/j93/8m4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7n9C3GL/AwAAQDNy9z8xbulk/+v/W+v/77Tj553T/5+uXfT/+v+L6f8P1V9J/6//nz/9/zjv/29w+l9zx+oP9f/6f+//6//Zn7n1/7n7nxS3dLL/AQAAoAe5+58ct9j/AAAA0Izc/U+JW+x/AAAAaEbu/qfGLZ3sf/1/a/3/zp/n/X/9/7qv7/1//X/LLq6/v7L+Zy70/6Hr/r+B9/8v8rtm2/38fm378+v/9f+smlv/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r/5fR/+dX0P/r/y99/5/0/8vk/f9x+v8NWun/L9K2+/mlf379v/6fVXPr/3P3Pytu6WT/AwAAQA9y9z87brH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ//p//f8y+n/v/+v/vf+v/98b/f84/f8G+n/9v/5f/8+k5tb/5+6/Nm7pZP8DAABAD3L3Py9usf8BAACgGbn7nx+3XMj+PzT1pwIAAACmlLv/BXFLJ7//r//X/+v/9f/6//VfX/+/TPr/cfr/DTrv/4cT+n/9v/6fac2o/z/nZx0dXhi3dLL/AQAAoAe5+18Ut9j/AAAA0Izc/S+OW+x/AAAAaEbu/pfELZ3s//b6/yNL7f9P53xt9f/HhmHQ/w+d9v/HzvnnWd+X+n/9/wHQ/4/T/2/Qef+/7X5+6Z9f/6//Z9WM+v/Tf5y7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/m+v//f+/zCb/t/7/+d/f/TU/3v/f5X+/2Do/8fp/zfQ/+v/9f/6fyY1t/4/d/8r46bDhy76lwgAAADMTO7+V8Utnfz+PwAAAPQgd/+r4xb7HwAAABbq2pUfyd3/mrilk/2v/5+2/z98zo/p//X/539/6P/1//r/S29Tf7/pb5n+P+j/9f/6f/2//p8JzK3/z93/2rilk/0PAAAAPcjdf13cYv8DAABAM3L3vy5usf8BAACgGbn7Xx+3dLL/9f/e/9f/6/839f9nn0PV/+v/58/7/+MW0f/frP/X/y/z80/Q/x85+x/1/7ThAvr/U6dOHb/k/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+b4hb7HwAAAJqRu//NcUsn+1//32n/n9/qy+r/TwyD/t/7//p//f84/f+4RfT/3v/X/y/083v/X//Pqrm9/5+7/y1xSyf7HwAAAHqQu/+tcYv9DwAAAM3I3X993GL/AwAAQDNy978tbulk/+v/O+3/vf+v/9f/H3T/f/ug/z8Qi+j/j+3+9efe/5/U/+v/R3TX/9/rHjv+UP+v/2fV3Pr/3P1vj1s62f8AAADQg9z974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KmKzrZ//p//b/+X/+v/1//9Q/4/f/DwzDo/yewiP5/xNz7/2ne/z//v+Vn6f/1/0v+/Pp//T+r5tb/5+5/d9zSyf4HAACAHuTuf0/cdMT+BwAAgGbk7n9v3GL/AwAAQDNy978vbulk/+v/9f/6f/1/8/3/yUX0/97/n4j+f9w8+v/d6f/1/0v+/Pp//T97t63+P3f/++OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/19I/5+fU//fVv9/ZHb9/9Edf71O3v/X/09E/z9O/7+B/l//r/+/Vv/PlOb2/n/u/g/HLZ3sfwAAAOhB7v4b4tb/69b+BwAAgGbk7v9I3GL/AwAAQDNy9380bulk/+v/9f/e/9f/N//+v/6/K/r/cfr/DfT/+n/9v/f/mdTc+v/c/R+LWzrZ/wAAANCD3P0fj1vsfwAAAGhG7v4b4xb7HwAAAJqRu/+muKWT/a//1//r//X/+v8z/wz1/23Q/487mP7/mP5f/1/9/GXx3wL9v/5/08+nTXPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+2+OW+x/AAAAWKQr1vxY7v5PxS2d7H/9v/5f/6//1/+v//r6/2XaSv+f3xT6f+//h376/7vu+KOlvf9//v/90v/r/5ne3Pr/3P2fjls62f8AAADQg9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/1399/f8yef9/nP5/A/3/Vt/PX/rn1//r/1k1t/4/d//n45ZO9j8AAAD0IHf/F+IW+x8AAACakbv/i3GL/Q8AAADNOL37My7rcP/r//X/+n/9v/5//dfX/y+T/n+c/n8D/b/+X/+v/2dSc+v/v3T6Zx0dvhy3dLL/AQAAoAe5+78St9j/AAAA0Izc/V+NW+x/AAAAaEbu/q/FLZ3s/733/6cG/f/u9P87P//0/f+pU6eO6//1/zt/PWf7/1v0/xT9/zj9/wb6f/2//l//z6Tm1v/n7v963NLJ/gcAAIAe5O7/Rtxi/wMAAEAzcvd/M26x/wEAAKAZufu/Fbd0sv+9/z+D/v+o/t/7//r/wfv/q/3/5Wf+paz/vzD6/3H6/w1a7P+P7v2Xv+1+fr+2/fn1//p/Vs2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/D67/v+PvXS/v/x8b1n9+/b/+X//v/f9LTf8/Tv+/QYv9/wXYdj+/9M+v/9f/s2pu/X/u/u/HLTuH36EL+1UCAAAAc5K7/wdxSye//w8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/8/g/f8G+3/v/6///tD/z7r/v1z/3wb9/zj9/wb6f/2//n+i/j+/m/X/vZtb/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbjln/69ru1uh/9f/6//1//r/9V9f/79M+v9xe+3/jwz76/+T/l//r//vtf/3/j9nzK3/z93/s7jF7/8DAADA4hza5cdz9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MW269fFsf6UDp//X/+n/9v/5//dfX/y+T/n/cLN//v/7G+o/6/yb6/6v0/230/8Og/2f/5tb/5+7/Vdzi9/8BAACgGbn7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex//b/+f5/9/+k0U/9/hv7/DP3/evr/g6H/HzfL/v8c+v8m+n/v/zfS/3v/nynMrf/P3f+7uKWT/Q8AAAA9yN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvf/MW7pZP9vrf+Pv9X6/8X3/97/1//r//X/s6L/H6f/30D/r//X/+v/mdTc+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v6/xC32PwAAADQjd/9f45ZO9r/3//X/+n/9v/5//dfX/y+T/n+c/n+9+gel/9f/6//1/0xqbv1/7v6/xS2d7H8AAADoQe7+v8ct9j8AAAA0I3f/rXGL/Q8AAADNyN3/j7ilk/2v/9f/6//1//r/9V9f/79M+v9x2+z/733nzV/W+/9b7//zI+j/9f/6fyYxt/4/d/9tcUsn+x8AAAB6kLv/n3GL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7f0P8fqT9R/z9K/7/z8+v/139/NNz/7whc9f/r6f8Phv5/3HLe/4+fr//fwfv/8/78+n/9P6vm1v/n7v9P3NLJ/gcAAIAe5O6/PW6x/wEAAKAZufv/G7fY/wAAANCM3P3/i1s62f/e/19S/3+V/l//P9f+fwf9/3r6/4Oh/x+3nP7f+//r6P/n/fn1//p/Vs2t/8/d//8AAAD//ym6NlQ=") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 1.37834806s ago: executing program 2 (id=2568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, 0x6) 1.2040485s ago: executing program 4 (id=2570): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001440), 0x80041, 0x0) r1 = dup(r0) write$sndseq(r1, 0x0, 0xffffff2d) 1.142275683s ago: executing program 2 (id=2571): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x52, 0x51cfa, 0x0, 0x8000008, 0x0, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) 1.060471959s ago: executing program 1 (id=2572): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 1.050586159s ago: executing program 4 (id=2573): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000014c0)="b085ce004521218ebcb25a3aa471", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 992.673172ms ago: executing program 2 (id=2574): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a0000000800060001"], 0x44}, 0x5}, 0x0) 849.029661ms ago: executing program 1 (id=2575): unshare(0x24060400) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x3}, 0x20) 848.566601ms ago: executing program 4 (id=2576): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 803.978133ms ago: executing program 2 (id=2577): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0x2}, 0x90) 735.334337ms ago: executing program 4 (id=2578): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_SET(r1, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) 655.339732ms ago: executing program 1 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4801000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x148}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 654.290802ms ago: executing program 3 (id=2580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 500.155931ms ago: executing program 4 (id=2581): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x51, 0x5fbc, &(0x7f0000003100)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 454.888794ms ago: executing program 0 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000380003800800030000000000080001000000000008000500e00000021400020070696d36726567080000000000000000060007003f"], 0x4c}}, 0x0) 453.869224ms ago: executing program 1 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 372.535809ms ago: executing program 3 (id=2584): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200013) 251.871336ms ago: executing program 1 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0xffffffffffffff4b, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) 124.989603ms ago: executing program 1 (id=2586): timerfd_create(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54) 0s ago: executing program 3 (id=2587): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x8000000000000000, &(0x7f0000000000/0x400000)=nil, 0x3) kernel console output (not intermixed with test programs): p0): Directory bread(block 70) failed [ 165.112498][ T7274] FAT-fs (loop0): Directory bread(block 71) failed [ 165.113892][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.126984][ T7274] FAT-fs (loop0): Directory bread(block 72) failed [ 165.151665][ T7274] FAT-fs (loop0): Directory bread(block 73) failed [ 165.152447][ T4321] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 165.202495][ T4321] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 165.229934][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.268824][ T4321] usb 5-1: config 0 descriptor?? [ 165.615030][ T7286] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 165.669372][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.819940][ T7288] device syz_tun entered promiscuous mode [ 165.833428][ T7288] device macvtap1 entered promiscuous mode [ 165.856336][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.874873][ T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 165.889401][ T4321] Bluetooth: Can't get version to change to load ram patch err [ 165.911685][ T4321] Bluetooth: Loading sysconfig file failed [ 165.929550][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.938146][ T4321] ath3k: probe of 5-1:0.0 failed with error -71 [ 165.938820][ T7288] device syz_tun left promiscuous mode [ 165.944541][ T7] usb 3-1: Product: syz [ 165.968353][ T4321] usb 5-1: USB disconnect, device number 13 [ 165.982774][ T7] usb 3-1: Manufacturer: syz [ 165.987413][ T7] usb 3-1: SerialNumber: syz [ 166.028051][ T7] usb 3-1: config 0 descriptor?? [ 166.513490][ T7] usb 3-1: USB disconnect, device number 15 [ 166.520782][ T7] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 166.544530][ T7] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 166.578146][ T7306] loop1: detected capacity change from 0 to 512 [ 166.611712][ T7306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.660851][ T7306] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1206: inode has both inline data and extents flags [ 166.714342][ T7306] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1206: couldn't read orphan inode 15 (err -117) [ 166.728684][ T7306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.774254][ T7317] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 166.784214][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 166.892762][ T7319] sp0: Synchronizing with TNC [ 166.975301][ T7323] loop4: detected capacity change from 0 to 4096 [ 167.023689][ T7326] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.513087][ T7338] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1220'. [ 167.669809][ T7345] loop0: detected capacity change from 0 to 1024 [ 167.829544][ T4299] hfsplus: b-tree write err: -5, ino 4 [ 168.029244][ T7354] loop2: detected capacity change from 0 to 4096 [ 168.165047][ T7368] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.762145][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 169.074042][ T7397] device syz_tun entered promiscuous mode [ 169.080066][ T7397] device macvtap1 entered promiscuous mode [ 169.116157][ T7397] device syz_tun left promiscuous mode [ 169.827028][ T7409] loop3: detected capacity change from 0 to 32768 [ 169.849908][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1253 (7409) [ 169.907702][ T7409] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.919008][ T7409] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.929400][ T7409] BTRFS info (device loop3): force clearing of disk cache [ 169.937052][ T7409] BTRFS info (device loop3): metadata ratio 0 [ 169.958125][ T7409] BTRFS info (device loop3): enabling ssd optimizations [ 169.979937][ T7409] BTRFS info (device loop3): using spread ssd allocation scheme [ 170.006781][ T7409] BTRFS info (device loop3): using free space tree [ 170.120781][ T7431] loop2: detected capacity change from 0 to 512 [ 170.156289][ T7431] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.222553][ T7431] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1262: inode has both inline data and extents flags [ 170.296036][ T7431] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1262: couldn't read orphan inode 15 (err -117) [ 170.371138][ T7431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.383801][ T7409] BTRFS info (device loop3): rebuilding free space tree [ 170.507251][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 170.666238][ T7452] device syz_tun entered promiscuous mode [ 170.672156][ T7452] device macvtap1 entered promiscuous mode [ 170.679525][ T4270] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.921691][ T7452] device syz_tun left promiscuous mode [ 171.302449][ T4257] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.429838][ T7474] loop4: detected capacity change from 0 to 512 [ 171.448651][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 171.472578][ T7474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.486093][ T7478] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1278'. [ 171.509360][ T4257] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.526543][ T7474] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1276: inode has both inline data and extents flags [ 171.527786][ T4257] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 171.592187][ T7474] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1276: couldn't read orphan inode 15 (err -117) [ 171.602293][ T4257] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 171.613320][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.624070][ T4257] usb 4-1: config 0 descriptor?? [ 171.649342][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.795925][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 172.239251][ T4257] Bluetooth: Can't get version to change to load ram patch err [ 172.249242][ T4257] Bluetooth: Loading sysconfig file failed [ 172.256364][ T4257] ath3k: probe of 4-1:0.0 failed with error -71 [ 172.296211][ T4257] usb 4-1: USB disconnect, device number 13 [ 172.992604][ T5609] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.075331][ T4257] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 173.189357][ T5609] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 173.207772][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.218509][ T5609] usb 2-1: Product: syz [ 173.234891][ T5609] usb 2-1: Manufacturer: syz [ 173.247637][ T5609] usb 2-1: SerialNumber: syz [ 173.259925][ T5609] usb 2-1: config 0 descriptor?? [ 173.274641][ T4257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.297312][ T4257] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.336883][ T4257] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 173.363009][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.379359][ T4257] usb 3-1: config 0 descriptor?? [ 173.394970][ T4257] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 173.407272][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 173.434914][ T4257] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 173.458038][ T4257] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 173.477019][ T4257] usb 3-1: media controller created [ 173.488107][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.518009][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 173.529206][ T4257] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 173.539051][ T4257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 173.552057][ T4257] dvb-usb: schedule remote query interval to 150 msecs. [ 173.566911][ T4257] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 173.599759][ T7527] dvb-usb: bulk message failed: -22 (2/0) [ 173.626749][ T5608] usb 3-1: USB disconnect, device number 16 [ 173.659217][ T5608] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 173.679002][ T5609] mos7840 2-1:0.0: required endpoints missing [ 173.711313][ T5609] usb 2-1: USB disconnect, device number 12 [ 174.201793][ T7582] loop4: detected capacity change from 0 to 256 [ 174.311524][ T7582] FAT-fs (loop4): Directory bread(block 64) failed [ 174.322802][ T7582] FAT-fs (loop4): Directory bread(block 65) failed [ 174.349276][ T7582] FAT-fs (loop4): Directory bread(block 66) failed [ 174.372993][ T7582] FAT-fs (loop4): Directory bread(block 67) failed [ 174.403683][ T7582] FAT-fs (loop4): Directory bread(block 68) failed [ 174.424004][ T7582] FAT-fs (loop4): Directory bread(block 69) failed [ 174.444382][ T7582] FAT-fs (loop4): Directory bread(block 70) failed [ 174.472902][ T7582] FAT-fs (loop4): Directory bread(block 71) failed [ 174.491946][ T7582] FAT-fs (loop4): Directory bread(block 72) failed [ 174.507881][ T7582] FAT-fs (loop4): Directory bread(block 73) failed [ 175.217925][ T7621] loop3: detected capacity change from 0 to 256 [ 175.269706][ T7621] FAT-fs (loop3): Directory bread(block 64) failed [ 175.296888][ T7621] FAT-fs (loop3): Directory bread(block 65) failed [ 175.335916][ T7621] FAT-fs (loop3): Directory bread(block 66) failed [ 175.349405][ T7621] FAT-fs (loop3): Directory bread(block 67) failed [ 175.362453][ T5609] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.368786][ T7621] FAT-fs (loop3): Directory bread(block 68) failed [ 175.396457][ T7628] loop4: detected capacity change from 0 to 256 [ 175.406325][ T7621] FAT-fs (loop3): Directory bread(block 69) failed [ 175.421400][ T7621] FAT-fs (loop3): Directory bread(block 70) failed [ 175.429577][ T7621] FAT-fs (loop3): Directory bread(block 71) failed [ 175.443325][ T7621] FAT-fs (loop3): Directory bread(block 72) failed [ 175.450385][ T7621] FAT-fs (loop3): Directory bread(block 73) failed [ 175.457523][ T7628] exfat: Deprecated parameter 'namecase' [ 175.488913][ T7628] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 175.564402][ T5609] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.582412][ T5609] usb 2-1: config 0 has no interface number 0 [ 175.600904][ T5609] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 175.619895][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.638525][ T5609] usb 2-1: Product: syz [ 175.643542][ T5609] usb 2-1: Manufacturer: syz [ 175.648354][ T5609] usb 2-1: SerialNumber: syz [ 175.659253][ T5609] usb 2-1: config 0 descriptor?? [ 175.880839][ T5609] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 175.905828][ T7640] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1354'. [ 175.923760][ T5609] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.958788][ T5609] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 175.977747][ T5609] usb 2-1: media controller created [ 176.041556][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.116765][ T5609] usb 2-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 176.159262][ T7650] loop4: detected capacity change from 0 to 1024 [ 176.177049][ T5609] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 176.229113][ T7650] EXT4-fs: Ignoring removed oldalloc option [ 176.257677][ T7650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.306623][ T7650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 176.500821][ T5609] DVB: Unable to find symbol mxl5005s_attach() [ 176.632576][ T5609] usb 2-1: USB disconnect, device number 13 [ 176.762217][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 176.807488][ T7666] loop2: detected capacity change from 0 to 256 [ 176.850056][ T7666] FAT-fs (loop2): Directory bread(block 64) failed [ 176.878198][ T7666] FAT-fs (loop2): Directory bread(block 65) failed [ 176.896481][ T7666] FAT-fs (loop2): Directory bread(block 66) failed [ 176.916642][ T7666] FAT-fs (loop2): Directory bread(block 67) failed [ 176.938696][ T7666] FAT-fs (loop2): Directory bread(block 68) failed [ 176.969435][ T7666] FAT-fs (loop2): Directory bread(block 69) failed [ 176.983163][ T7666] FAT-fs (loop2): Directory bread(block 70) failed [ 176.998692][ T7666] FAT-fs (loop2): Directory bread(block 71) failed [ 177.012578][ T7666] FAT-fs (loop2): Directory bread(block 72) failed [ 177.029026][ T7666] FAT-fs (loop2): Directory bread(block 73) failed [ 177.378471][ T7685] loop1: detected capacity change from 0 to 1024 [ 177.413994][ T7685] EXT4-fs: Ignoring removed oldalloc option [ 177.425918][ T7685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.477922][ T7690] loop3: detected capacity change from 0 to 1764 [ 177.492844][ T7685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.502609][ T5166] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 177.677699][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 177.697680][ T5166] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 177.719817][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.752523][ T5166] usb 1-1: Product: syz [ 177.782843][ T5166] usb 1-1: Manufacturer: syz [ 177.787604][ T5166] usb 1-1: SerialNumber: syz [ 177.805635][ T5166] usb 1-1: config 0 descriptor?? [ 178.232494][ T5166] mos7840 1-1:0.0: required endpoints missing [ 178.246402][ T5166] usb 1-1: USB disconnect, device number 15 [ 178.276587][ T7712] loop2: detected capacity change from 0 to 4096 [ 179.059976][ T7742] loop3: detected capacity change from 0 to 256 [ 179.093634][ T7742] exfat: Deprecated parameter 'namecase' [ 179.159653][ T7742] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 179.189751][ T7720] loop1: detected capacity change from 0 to 32768 [ 179.401601][ T7720] XFS (loop1): Mounting V5 Filesystem [ 179.477475][ T7762] loop4: detected capacity change from 0 to 128 [ 179.509849][ T7720] XFS (loop1): Ending clean mount [ 179.549944][ T7762] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.578119][ T7720] XFS (loop1): Quotacheck needed: Please wait. [ 179.633930][ T7720] XFS (loop1): Quotacheck: Done. [ 179.663980][ T7762] hpfs: filesystem error: improperly stopped [ 179.670121][ T7762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.692704][ T7762] hpfs: You really don't want any checks? You are crazy... [ 179.710945][ T7762] hpfs: hpfs_map_sector(): read error [ 179.730506][ T7762] hpfs: code page support is disabled [ 179.745592][ T7762] hpfs: hpfs_map_4sectors(): unaligned read [ 179.764610][ T7762] hpfs: hpfs_map_4sectors(): unaligned read [ 179.770936][ T7762] hpfs: filesystem error: unable to find root dir [ 179.779998][ T4283] XFS (loop1): Unmounting Filesystem [ 179.902442][ T5608] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 180.104644][ T5608] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.125066][ T5608] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 180.165534][ T5608] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 180.195874][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.235605][ T5608] usb 4-1: config 0 descriptor?? [ 180.264997][ T5608] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 180.271656][ T5608] dvb-usb: bulk message failed: -22 (3/0) [ 180.301590][ T5608] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 180.357720][ T5608] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 180.386056][ T5608] usb 4-1: media controller created [ 180.396612][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.417999][ T5608] dvb-usb: bulk message failed: -22 (6/0) [ 180.425800][ T5608] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 180.459775][ T5608] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 180.476494][ T7765] dvb-usb: bulk message failed: -22 (2/0) [ 180.529040][ T5608] dvb-usb: schedule remote query interval to 150 msecs. [ 180.555928][ T5608] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 180.608232][ T5608] usb 4-1: USB disconnect, device number 14 [ 180.632102][ T5608] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 180.640770][ T7769] loop2: detected capacity change from 0 to 32768 [ 180.769750][ T7769] XFS (loop2): Mounting V5 Filesystem [ 180.830065][ T7769] XFS (loop2): Ending clean mount [ 180.851275][ T7769] XFS (loop2): Quotacheck needed: Please wait. [ 180.938040][ T7769] XFS (loop2): Quotacheck: Done. [ 181.100663][ T4268] XFS (loop2): Unmounting Filesystem [ 181.288052][ T7810] loop0: detected capacity change from 0 to 4096 [ 181.437066][ T7818] loop3: detected capacity change from 0 to 4096 [ 181.539827][ T7818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.836003][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 182.927175][ T7851] loop4: detected capacity change from 0 to 4096 [ 183.125685][ T7838] loop3: detected capacity change from 0 to 32768 [ 183.239828][ T7867] loop2: detected capacity change from 0 to 128 [ 183.292131][ T7867] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 183.320421][ T7838] XFS (loop3): Mounting V5 Filesystem [ 183.348894][ T7872] loop1: detected capacity change from 0 to 8192 [ 183.397249][ T7872] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.411376][ T7872] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 183.421111][ T7872] REISERFS (device loop1): using ordered data mode [ 183.427803][ T7872] reiserfs: using flush barriers [ 183.436715][ T7872] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.437590][ T7867] hpfs: filesystem error: improperly stopped [ 183.459852][ T7867] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 183.468246][ T7867] hpfs: You really don't want any checks? You are crazy... [ 183.477369][ T7867] hpfs: hpfs_map_sector(): read error [ 183.483284][ T7867] hpfs: code page support is disabled [ 183.488769][ T7867] hpfs: hpfs_map_4sectors(): unaligned read [ 183.494243][ T7838] XFS (loop3): Ending clean mount [ 183.495922][ T7876] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1454'. [ 183.509395][ T7867] hpfs: hpfs_map_4sectors(): unaligned read [ 183.519668][ T7872] REISERFS (device loop1): checking transaction log (loop1) [ 183.525391][ T7838] XFS (loop3): Quotacheck needed: Please wait. [ 183.550694][ T7867] hpfs: filesystem error: unable to find root dir [ 183.681066][ T7838] XFS (loop3): Quotacheck: Done. [ 183.776090][ T7872] REISERFS (device loop1): Using tea hash to sort names [ 183.833862][ T7872] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 183.881371][ T4270] XFS (loop3): Unmounting Filesystem [ 183.887085][ T7872] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 184.662026][ T7901] loop0: detected capacity change from 0 to 128 [ 184.696413][ T7901] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 184.753354][ T7901] hpfs: filesystem error: improperly stopped [ 184.759657][ T7901] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 184.788561][ T7901] hpfs: You really don't want any checks? You are crazy... [ 184.807831][ T7901] hpfs: hpfs_map_sector(): read error [ 184.821884][ T7901] hpfs: code page support is disabled [ 184.874509][ T7901] hpfs: hpfs_map_4sectors(): unaligned read [ 184.880581][ T7901] hpfs: hpfs_map_4sectors(): unaligned read [ 184.889715][ T7901] hpfs: filesystem error: unable to find root dir [ 185.140781][ T7913] loop0: detected capacity change from 0 to 16 [ 185.196970][ T7913] erofs: (device loop0): mounted with root inode @ nid 36. [ 185.283882][ T7913] xt_hashlimit: max too large, truncated to 1048576 [ 185.399454][ T7915] loop4: detected capacity change from 0 to 8192 [ 185.430138][ T7915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.459690][ T7915] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 185.470476][ T7915] REISERFS (device loop4): using ordered data mode [ 185.477554][ T7915] reiserfs: using flush barriers [ 185.484440][ T7915] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.501343][ T7915] REISERFS (device loop4): checking transaction log (loop4) [ 185.654166][ T7926] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1478'. [ 185.688656][ T7915] REISERFS (device loop4): Using tea hash to sort names [ 185.701005][ T7915] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 185.753033][ T7915] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 185.992941][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 185.999051][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 186.005250][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 186.071476][ T7938] netlink: 'syz.0.1483': attribute type 9 has an invalid length. [ 186.178633][ T7936] loop2: detected capacity change from 0 to 8192 [ 186.546616][ T7919] loop1: detected capacity change from 0 to 40427 [ 186.592919][ T7919] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 186.602101][ T7919] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 186.657714][ T7919] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 186.684997][ T7919] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 186.715262][ T7919] F2FS-fs (loop1): invalid crc value [ 186.777221][ T7919] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.855226][ T7960] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1492'. [ 186.925805][ T7919] F2FS-fs (loop1): Start checkpoint disabled! [ 186.976317][ T7919] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 186.992422][ T7919] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 187.031829][ T7959] loop0: detected capacity change from 0 to 8192 [ 187.216401][ T7919] F2FS-fs (loop1): Skipping Checkpoint. Checkpoints currently disabled. [ 187.372499][ T4257] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 187.373324][ T7970] loop3: detected capacity change from 0 to 8192 [ 187.459785][ T7970] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.486893][ T7952] loop4: detected capacity change from 0 to 32768 [ 187.492424][ T7970] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 187.499068][ T4297] kworker/u4:5: attempt to access beyond end of device [ 187.499068][ T4297] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.555578][ T7952] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1489 (7952) [ 187.586887][ T4257] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.592047][ T7970] REISERFS (device loop3): using ordered data mode [ 187.598636][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.632381][ T4257] usb 3-1: Product: syz [ 187.637668][ T4257] usb 3-1: Manufacturer: syz [ 187.654399][ T4257] usb 3-1: SerialNumber: syz [ 187.663234][ T7970] reiserfs: using flush barriers [ 187.679566][ T7952] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 187.682589][ T4257] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.693171][ T7952] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 187.712434][ T7970] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.743803][ T7952] BTRFS info (device loop4): using free space tree [ 187.786160][ T7970] REISERFS (device loop3): checking transaction log (loop3) [ 187.827019][ T4257] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.899066][ T7952] BTRFS info (device loop4): enabling ssd optimizations [ 188.002582][ T4276] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 188.021183][ T7995] loop0: detected capacity change from 0 to 764 [ 188.071155][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.090034][ T7995] rock: directory entry would overflow storage [ 188.133721][ T7995] rock: sig=0x4654, size=5, remaining=4 [ 188.134835][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.339088][ T7970] REISERFS (device loop3): Using tea hash to sort names [ 188.356833][ T7970] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 188.420959][ T7970] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 188.448441][ T5608] usb 3-1: USB disconnect, device number 17 [ 189.101470][ T8012] loop1: detected capacity change from 0 to 8192 [ 189.135784][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 189.272427][ T4257] usb 3-1: Service connection timeout for: 256 [ 189.278658][ T4257] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 189.326332][ T4257] ath9k_htc: Failed to initialize the device [ 189.374543][ T5608] usb 3-1: ath9k_htc: USB layer deinitialized [ 189.736278][ T8035] loop1: detected capacity change from 0 to 64 [ 189.846350][ T8038] loop4: detected capacity change from 0 to 1024 [ 190.081240][ T8016] loop0: detected capacity change from 0 to 40427 [ 190.155866][ T8016] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 190.196911][ T8016] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 190.218261][ T8016] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 190.251814][ T8016] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 190.307199][ T8016] F2FS-fs (loop0): invalid crc value [ 190.349723][ T8016] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.355826][ T8059] ALSA: seq fatal error: cannot create timer (-22) [ 190.470616][ T8016] F2FS-fs (loop0): Start checkpoint disabled! [ 190.528746][ T8016] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 190.554684][ T8016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 190.558893][ T8062] loop4: detected capacity change from 0 to 2048 [ 190.616201][ T8062] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 190.620000][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 190.704567][ T8062] cifs: Unknown parameter 'anchor' [ 190.748483][ T8016] F2FS-fs (loop0): Skipping Checkpoint. Checkpoints currently disabled. [ 190.935242][ T4257] kernel write not supported for file /media6 (pid: 4257 comm: kworker/1:3) [ 191.034835][ T33] kworker/u4:2: attempt to access beyond end of device [ 191.034835][ T33] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.115417][ T8082] loop1: detected capacity change from 0 to 128 [ 191.134076][ T8082] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.176444][ T8082] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.420058][ T4297] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.442278][ T8092] ALSA: seq fatal error: cannot create timer (-22) [ 191.860123][ T8110] loop3: detected capacity change from 0 to 64 [ 191.900625][ T8112] loop2: detected capacity change from 0 to 128 [ 191.948344][ T8112] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.028184][ T8112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.220497][ T8121] loop4: detected capacity change from 0 to 256 [ 192.226220][ T8122] loop3: detected capacity change from 0 to 1024 [ 192.253152][ T8121] exfat: Deprecated parameter 'utf8' [ 192.272469][ T4299] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.382907][ T8121] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 192.505164][ T8127] ALSA: seq fatal error: cannot create timer (-22) [ 192.573297][ T8100] loop0: detected capacity change from 0 to 32768 [ 192.599171][ T8100] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1540 (8100) [ 192.651195][ T8100] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 192.700550][ T8100] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 192.728876][ T8100] BTRFS info (device loop0): using free space tree [ 192.899480][ T8100] BTRFS info (device loop0): enabling ssd optimizations [ 193.136298][ T4269] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 193.202627][ T5606] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 193.396031][ T8165] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 193.410354][ T5606] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.439875][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.479699][ T8165] cifs: Unknown parameter 'anchor' [ 193.485743][ T5606] usb 4-1: Product: syz [ 193.489945][ T5606] usb 4-1: Manufacturer: syz [ 193.542458][ T5606] usb 4-1: SerialNumber: syz [ 193.573035][ T5606] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.644448][ T5606] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.925216][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.961488][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.162233][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.168609][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.198573][ T22] usb 4-1: USB disconnect, device number 15 [ 194.478893][ T8199] device vlan2 entered promiscuous mode [ 194.485045][ T8199] device macvtap0 entered promiscuous mode [ 194.681057][ T8176] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.735739][ T8176] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.852115][ T8176] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.938503][ T8216] set_capacity_and_notify: 3 callbacks suppressed [ 194.938518][ T8216] loop1: detected capacity change from 0 to 736 [ 194.969054][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 194.984598][ T8176] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 195.002760][ T8176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.032475][ T5606] usb 4-1: Service connection timeout for: 256 [ 195.038724][ T5606] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 195.080291][ T5606] ath9k_htc: Failed to initialize the device [ 195.119070][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 195.857345][ T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 195.987827][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 196.012287][ T8248] device vlan2 entered promiscuous mode [ 196.019058][ T8248] device macvtap0 entered promiscuous mode [ 196.064571][ T8228] loop0: detected capacity change from 0 to 40427 [ 196.077247][ T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.086861][ T8228] F2FS-fs (loop0): invalid crc value [ 196.115390][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.125592][ T22] usb 2-1: Product: syz [ 196.131565][ T8251] loop4: detected capacity change from 0 to 16 [ 196.138618][ T22] usb 2-1: Manufacturer: syz [ 196.143548][ T22] usb 2-1: SerialNumber: syz [ 196.160236][ T8228] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.162944][ T8251] erofs: (device loop4): mounted with root inode @ nid 36. [ 196.178735][ T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.267079][ T22] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 196.321533][ T8251] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 196.352909][ T8251] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 196.361985][ T8251] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 196.391125][ T8228] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 196.419550][ T8251] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 196.428588][ T8228] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 196.440442][ T8257] loop2: detected capacity change from 0 to 2048 [ 196.441178][ T8251] syz.4.1613: attempt to access beyond end of device [ 196.441178][ T8251] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 196.441284][ T8251] syz.4.1613: attempt to access beyond end of device [ 196.441284][ T8251] loop4: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 196.454396][ T8257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.535531][ T8228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.538789][ T8261] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.573374][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.593158][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.838819][ T5603] usb 2-1: USB disconnect, device number 14 [ 197.535273][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 197.574753][ T8263] loop4: detected capacity change from 0 to 40427 [ 197.616684][ T8263] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 197.642426][ T8263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 197.672649][ T22] usb 2-1: Service connection timeout for: 256 [ 197.678862][ T22] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 197.718572][ T22] ath9k_htc: Failed to initialize the device [ 197.730210][ T8263] F2FS-fs (loop4): Found nat_bits in checkpoint [ 197.763808][ T5603] usb 2-1: ath9k_htc: USB layer deinitialized [ 197.840134][ T8287] device vlan2 entered promiscuous mode [ 197.877002][ T8263] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 197.885434][ T8287] device macvtap0 entered promiscuous mode [ 197.894250][ T8263] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 197.904503][ T8292] loop0: detected capacity change from 0 to 16 [ 197.939074][ T8292] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.019861][ T8292] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 198.054632][ T8292] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 198.085497][ T8292] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 198.115048][ T8292] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 198.140733][ T8292] syz.0.1628: attempt to access beyond end of device [ 198.140733][ T8292] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 198.171564][ T8292] syz.0.1628: attempt to access beyond end of device [ 198.171564][ T8292] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 198.411049][ T8276] loop3: detected capacity change from 0 to 32768 [ 198.621423][ T8276] XFS (loop3): Mounting V5 Filesystem [ 198.728207][ T8276] XFS (loop3): Ending clean mount [ 198.792685][ T8276] XFS (loop3): Quotacheck needed: Please wait. [ 198.806864][ T8296] loop1: detected capacity change from 0 to 40427 [ 198.836734][ T8296] F2FS-fs (loop1): invalid crc value [ 198.863931][ T8276] XFS (loop3): Quotacheck: Done. [ 198.919866][ T8296] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.044347][ T8296] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 199.059628][ T4270] XFS (loop3): Unmounting Filesystem [ 199.059751][ T8296] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 199.130656][ T8296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.234772][ T8323] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 199.244443][ T8326] sp0: Synchronizing with TNC [ 199.257168][ T8325] loop4: detected capacity change from 0 to 736 [ 200.737383][ T8338] loop3: detected capacity change from 0 to 32768 [ 200.846312][ T8340] loop0: detected capacity change from 0 to 32768 [ 201.077387][ T8359] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0xf [ 201.097403][ T8340] XFS (loop0): Mounting V5 Filesystem [ 201.191710][ T8348] loop2: detected capacity change from 0 to 32768 [ 201.260851][ T8344] loop1: detected capacity change from 0 to 40427 [ 201.286915][ T8344] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 201.315152][ T8344] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 201.316487][ T8340] XFS (loop0): Ending clean mount [ 201.363041][ T8350] loop4: detected capacity change from 0 to 40427 [ 201.375889][ T8344] F2FS-fs (loop1): Found nat_bits in checkpoint [ 201.430146][ T8350] F2FS-fs (loop4): invalid crc value [ 201.487131][ T8348] XFS (loop2): Mounting V5 Filesystem [ 201.614255][ T8344] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 201.621352][ T8344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.648941][ T8350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.690735][ T8350] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 201.700421][ T4269] XFS (loop0): Unmounting Filesystem [ 201.727481][ T8348] XFS (loop2): Ending clean mount [ 201.782827][ T8350] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 201.800107][ T8350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.808288][ T8348] XFS (loop2): Quotacheck needed: Please wait. [ 201.889792][ T8348] XFS (loop2): Quotacheck: Done. [ 201.932444][ T4257] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.122847][ T4257] usb 4-1: Using ep0 maxpacket: 16 [ 202.146912][ T4268] XFS (loop2): Unmounting Filesystem [ 202.173203][ T4257] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.222383][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.272178][ T4257] usb 4-1: Product: syz [ 202.286817][ T4257] usb 4-1: Manufacturer: syz [ 202.291479][ T4257] usb 4-1: SerialNumber: syz [ 202.354161][ T4257] r8152-cfgselector 4-1: config 0 descriptor?? [ 202.568038][ T4257] r8152-cfgselector 4-1: Unknown version 0x0000 [ 202.593947][ T4257] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 202.803129][ T4257] usb 4-1: USB disconnect, device number 16 [ 202.966781][ T8400] loop0: detected capacity change from 0 to 128 [ 203.056469][ T8402] trusted_key: encrypted_key: key user:syz not found [ 203.238562][ T8408] sp0: Synchronizing with TNC [ 203.381846][ T8391] loop1: detected capacity change from 0 to 32768 [ 203.587453][ T8419] tipc: Started in network mode [ 203.627845][ T8419] tipc: Node identity 4246, cluster identity 4711 [ 203.671051][ T8419] tipc: Node number set to 16966 [ 203.877202][ T8431] trusted_key: encrypted_key: key user:syz not found [ 204.051620][ T8435] loop4: detected capacity change from 0 to 128 [ 204.452440][ T4257] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 204.481282][ T8423] loop1: detected capacity change from 0 to 40427 [ 204.494467][ T8423] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 204.515855][ T8423] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 204.533246][ T8423] F2FS-fs (loop1): invalid crc value [ 204.570726][ T8423] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.650960][ T8423] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 204.660598][ T8423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.662425][ T4257] usb 1-1: Using ep0 maxpacket: 16 [ 204.706230][ T4257] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.732462][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.740498][ T4257] usb 1-1: Product: syz [ 204.766253][ T4257] usb 1-1: Manufacturer: syz [ 204.770916][ T4257] usb 1-1: SerialNumber: syz [ 204.823058][ T4257] r8152-cfgselector 1-1: config 0 descriptor?? [ 204.922353][ T8449] mkiss: ax0: crc mode is auto. [ 204.926050][ T8443] loop4: detected capacity change from 0 to 32768 [ 205.041746][ T4257] r8152-cfgselector 1-1: Unknown version 0x0000 [ 205.063747][ T4257] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 205.296126][ T5603] usb 1-1: USB disconnect, device number 16 [ 205.399541][ T8425] XFS (loop2): Mounting V5 Filesystem [ 205.478224][ T8425] XFS (loop2): Ending clean mount [ 205.524219][ T8425] XFS (loop2): Quotacheck needed: Please wait. [ 205.601692][ T8425] XFS (loop2): Quotacheck: Done. [ 205.711017][ T8469] trusted_key: encrypted_key: key user:syz not found [ 205.761781][ T8471] IPVS: Error joining to the multicast group [ 205.860158][ T4268] XFS (loop2): Unmounting Filesystem [ 205.901909][ T8451] set_capacity_and_notify: 1 callbacks suppressed [ 205.901924][ T8451] loop1: detected capacity change from 0 to 32768 [ 206.048123][ T8451] XFS (loop1): Mounting V5 Filesystem [ 206.197199][ T8451] XFS (loop1): Ending clean mount [ 206.222708][ T8478] loop4: detected capacity change from 0 to 32768 [ 206.255697][ T8451] XFS (loop1): Quotacheck needed: Please wait. [ 206.348351][ T8478] JBD2: Ignoring recovery information on journal [ 206.459182][ T8478] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 206.484997][ T8451] XFS (loop1): Quotacheck: Done. [ 206.562527][ T5603] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.618076][ T4283] XFS (loop1): Unmounting Filesystem [ 206.700596][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 206.776903][ T5603] usb 4-1: Using ep0 maxpacket: 8 [ 206.800721][ T5603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.823086][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 206.866661][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.902593][ T5603] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.943046][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.997164][ T5603] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.017172][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.058247][ T5603] usb 4-1: config 0 descriptor?? [ 207.116579][ T8499] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 207.172502][ T8499] CIFS: Unable to determine destination address [ 207.315385][ T5603] usb 4-1: USB disconnect, device number 17 [ 207.390248][ T8495] loop2: detected capacity change from 0 to 40427 [ 207.415200][ T8495] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 207.429131][ T8495] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 207.480129][ T8495] F2FS-fs (loop2): invalid crc value [ 207.514210][ T8495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.653661][ T8495] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 207.660906][ T8495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.563122][ T8549] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.809635][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 209.062391][ T5609] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.282532][ T5609] usb 4-1: Using ep0 maxpacket: 16 [ 209.299107][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.337691][ T5609] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 209.349685][ T8551] loop1: detected capacity change from 0 to 40427 [ 209.376521][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.387927][ T8551] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 209.404069][ T5609] usb 4-1: config 0 descriptor?? [ 209.409219][ T8551] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 209.437672][ T8551] F2FS-fs (loop1): invalid crc value [ 209.481712][ T8551] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.672643][ T8551] F2FS-fs (loop1): Start checkpoint disabled! [ 209.698279][ T8551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 209.809156][ T8586] device geneve0 entered promiscuous mode [ 209.832634][ T8586] device vlan2 entered promiscuous mode [ 209.843896][ T5609] wacom 0003:056A:0020.0014: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 209.892691][ T5609] wacom 0003:056A:0020.0014: hidraw0: USB HID v12.03 Device [HID 056a:0020] on usb-dummy_hcd.3-1/input0 [ 209.923243][ T5609] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0020.0014/input/input21 [ 210.010269][ T8591] netlink: 'syz.1.1745': attribute type 2 has an invalid length. [ 210.053880][ T5609] usb 4-1: USB disconnect, device number 18 [ 210.330600][ T8595] fido_id[8595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 210.716347][ T8605] loop1: detected capacity change from 0 to 8192 [ 210.769975][ T8605] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 210.837035][ T8618] loop4: detected capacity change from 0 to 1024 [ 210.847212][ T8605] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 210.857071][ T8605] REISERFS (device loop1): using ordered data mode [ 210.865536][ T8605] reiserfs: using flush barriers [ 210.889454][ T8620] loop2: detected capacity change from 0 to 512 [ 210.900048][ T8605] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 210.981925][ T8605] REISERFS (device loop1): checking transaction log (loop1) [ 211.023866][ T8620] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1758: invalid indirect mapped block 10 (level 1) [ 211.039112][ T8605] REISERFS (device loop1): Using r5 hash to sort names [ 211.054259][ T8618] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 211.080928][ T8605] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 211.101004][ T8627] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 211.108012][ T8620] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1758: invalid indirect mapped block 8 (level 1) [ 211.151858][ T8605] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 211.164045][ T8627] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 211.192812][ T8618] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 211.214043][ T8620] EXT4-fs (loop2): 1 truncate cleaned up [ 211.219754][ T8620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.354494][ T46] hfsplus: b-tree write err: -5, ino 4 [ 211.397441][ T46] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 211.464632][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 211.659087][ T8641] netlink: 'syz.2.1767': attribute type 2 has an invalid length. [ 211.732421][ T8646] netlink: 'syz.2.1767': attribute type 2 has an invalid length. [ 211.852530][ T5160] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.039013][ T5160] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.053460][ T5160] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.074529][ T5160] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.097993][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.114145][ T5160] usb 5-1: Product: syz [ 212.121710][ T5160] usb 5-1: Manufacturer: syz [ 212.130839][ T5160] usb 5-1: SerialNumber: syz [ 212.149820][ T5160] usb 5-1: config 0 descriptor?? [ 212.169476][ T5160] usb 5-1: selecting invalid altsetting 0 [ 212.310002][ T8656] loop1: detected capacity change from 0 to 32768 [ 212.377576][ T5160] usb 5-1: USB disconnect, device number 14 [ 212.398077][ T8656] XFS (loop1): Mounting V5 Filesystem [ 212.507875][ T8656] XFS (loop1): Ending clean mount [ 212.531227][ T8656] XFS (loop1): Quotacheck needed: Please wait. [ 212.596189][ T8656] XFS (loop1): Quotacheck: Done. [ 212.777284][ T4283] XFS (loop1): Unmounting Filesystem [ 213.102777][ T5609] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 213.292622][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 213.298894][ T8690] loop1: detected capacity change from 0 to 512 [ 213.301336][ T5609] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 213.322764][ T5609] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 213.338780][ T5609] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.364837][ T8690] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.1784: corrupted in-inode xattr [ 213.380320][ T5609] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 213.387187][ T8690] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1784: couldn't read orphan inode 15 (err -117) [ 213.405682][ T5609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.421526][ T8690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 213.427267][ T5609] usb 1-1: config 0 descriptor?? [ 213.518093][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 213.884456][ T5609] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.0015/input/input24 [ 213.990000][ T5609] uclogic 0003:28BD:1903.0015: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 214.092507][ T5609] usb 1-1: USB disconnect, device number 17 [ 214.346459][ T8716] fido_id[8716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 214.575531][ T8735] program syz.4.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.699714][ T8739] loop3: detected capacity change from 0 to 256 [ 214.759526][ T8739] FAT-fs (loop3): Directory bread(block 64) failed [ 214.793670][ T8739] FAT-fs (loop3): Directory bread(block 65) failed [ 214.817602][ T8739] FAT-fs (loop3): Directory bread(block 66) failed [ 214.844857][ T8739] FAT-fs (loop3): Directory bread(block 67) failed [ 214.851544][ T8739] FAT-fs (loop3): Directory bread(block 68) failed [ 214.884412][ T8739] FAT-fs (loop3): Directory bread(block 69) failed [ 214.906851][ T8739] FAT-fs (loop3): Directory bread(block 70) failed [ 214.940672][ T8739] FAT-fs (loop3): Directory bread(block 71) failed [ 214.963090][ T8739] FAT-fs (loop3): Directory bread(block 72) failed [ 214.985351][ T8739] FAT-fs (loop3): Directory bread(block 73) failed [ 215.095893][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 215.372025][ T8765] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1819'. [ 216.472500][ T5603] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 216.590788][ T8779] loop1: detected capacity change from 0 to 40427 [ 216.619979][ T8779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.639951][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 216.663615][ T8779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.680708][ T8817] device macvlan2 entered promiscuous mode [ 216.683981][ T8779] F2FS-fs (loop1): invalid crc value [ 216.684171][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.733872][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.745524][ T5603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.762249][ T8779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.783136][ T5603] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.841525][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.864399][ T4257] kernel write not supported for file /sg0 (pid: 4257 comm: kworker/1:3) [ 216.874895][ T5603] usb 1-1: config 0 descriptor?? [ 216.902691][ T8779] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.909791][ T8779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.184515][ T8833] loop2: detected capacity change from 0 to 1024 [ 217.291989][ T5603] plantronics 0003:047F:FFFF.0016: item fetching failed at offset 12/15 [ 217.335433][ T5603] plantronics 0003:047F:FFFF.0016: parse failed [ 217.342055][ T5603] plantronics: probe of 0003:047F:FFFF.0016 failed with error -22 [ 217.518444][ T5608] usb 1-1: USB disconnect, device number 18 [ 217.748519][ T5603] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 217.767652][ T5603] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.872978][ T8856] fido_id[8856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.714077][ T8897] loop1: detected capacity change from 0 to 128 [ 218.751288][ T8897] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 218.838532][ T8901] loop3: detected capacity change from 0 to 1024 [ 218.858650][ T8903] loop2: detected capacity change from 0 to 1024 [ 219.398951][ T8922] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 220.168743][ T8946] binder: BINDER_SET_CONTEXT_MGR already set [ 220.186446][ T8946] binder: 8945:8946 ioctl 40046207 0 returned -16 [ 220.198574][ T8932] loop0: detected capacity change from 0 to 32768 [ 220.207931][ T8926] loop1: detected capacity change from 0 to 32768 [ 220.227541][ T8932] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1897 (8932) [ 220.257107][ T8932] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 220.257215][ T8932] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 220.257265][ T8932] BTRFS info (device loop0): using free space tree [ 220.647915][ T8932] BTRFS info (device loop0): enabling ssd optimizations [ 220.797811][ T4269] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.756712][ T9006] loop3: detected capacity change from 0 to 256 [ 221.829296][ T9006] FAT-fs (loop3): Directory bread(block 64) failed [ 221.851938][ T9006] FAT-fs (loop3): Directory bread(block 65) failed [ 221.867866][ T9006] FAT-fs (loop3): Directory bread(block 66) failed [ 221.893445][ T9006] FAT-fs (loop3): Directory bread(block 67) failed [ 221.917293][ T9006] FAT-fs (loop3): Directory bread(block 68) failed [ 221.940558][ T9006] FAT-fs (loop3): Directory bread(block 69) failed [ 221.975439][ T9006] FAT-fs (loop3): Directory bread(block 70) failed [ 222.009556][ T9006] FAT-fs (loop3): Directory bread(block 71) failed [ 222.032058][ T9006] FAT-fs (loop3): Directory bread(block 72) failed [ 222.062748][ T9006] FAT-fs (loop3): Directory bread(block 73) failed [ 222.165398][ T8985] loop4: detected capacity change from 0 to 40427 [ 222.208798][ T8985] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 222.270086][ T8985] F2FS-fs (loop4): invalid crc value [ 222.301219][ T8985] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.427634][ T8985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.583936][ T4276] syz-executor: attempt to access beyond end of device [ 222.583936][ T4276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.113746][ T9052] loop1: detected capacity change from 0 to 256 [ 223.167334][ T9052] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 223.239955][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 223.239969][ T26] audit: type=1800 audit(1769556740.582:17): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1944" name="file1" dev="loop1" ino=1048802 res=0 errno=0 [ 223.425339][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.425339][ T9052] loop1: rw=0, sector=184, nr_sectors = 6119 limit=256 [ 223.511559][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.511559][ T9052] loop1: rw=0, sector=6303, nr_sectors = 3160 limit=256 [ 223.610466][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.610466][ T9052] loop1: rw=0, sector=9463, nr_sectors = 3792 limit=256 [ 223.739746][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.739746][ T9052] loop1: rw=0, sector=13255, nr_sectors = 4456 limit=256 [ 223.751578][ T9041] loop2: detected capacity change from 0 to 32768 [ 223.834421][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.834421][ T9052] loop1: rw=0, sector=17711, nr_sectors = 2184 limit=256 [ 223.858332][ T9041] XFS (loop2): Mounting V5 Filesystem [ 223.955205][ T9052] syz.1.1944: attempt to access beyond end of device [ 223.955205][ T9052] loop1: rw=0, sector=19895, nr_sectors = 6064 limit=256 [ 223.979372][ T9041] XFS (loop2): Ending clean mount [ 223.990874][ T9041] XFS (loop2): Quotacheck needed: Please wait. [ 224.093066][ T9041] XFS (loop2): Quotacheck: Done. [ 224.268820][ T4268] XFS (loop2): Unmounting Filesystem [ 224.506233][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 224.834317][ T5608] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 224.950162][ T9121] tipc: Invalid UDP bearer configuration [ 224.950203][ T9121] tipc: Enabling of bearer rejected, failed to enable media [ 225.036286][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.054045][ T5608] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 225.073484][ T5608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.110651][ T5608] usb 1-1: config 0 descriptor?? [ 225.168392][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1970'. [ 225.265862][ T9130] loop2: detected capacity change from 0 to 1024 [ 225.349211][ T46] hfsplus: b-tree write err: -5, ino 4 [ 225.417916][ T26] audit: type=1326 audit(1769556742.762:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.2.1973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff277b9aeb9 code=0x0 [ 225.441186][ T9119] loop3: detected capacity change from 0 to 32768 [ 225.476293][ T9119] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 225.538670][ T5608] hid (null): invalid report_count 24093 [ 225.549422][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 225.555171][ T5608] wacom 0003:056A:0317.0018: invalid report_count 24093 [ 225.562957][ T5608] wacom 0003:056A:0317.0018: item 0 2 1 9 parsing failed [ 225.570752][ T5608] wacom 0003:056A:0317.0018: parse failed [ 225.577509][ T5608] wacom: probe of 0003:056A:0317.0018 failed with error -22 [ 225.689741][ T9142] rdma_op ffff8880540271f0 conn xmit_rdma 0000000000000000 [ 225.785697][ T5609] usb 1-1: USB disconnect, device number 19 [ 225.984079][ T9147] loop3: detected capacity change from 0 to 64 [ 226.047805][ T9143] loop4: detected capacity change from 0 to 32768 [ 226.068900][ T9147] hfs: request for non-existent node 1280 in B*Tree [ 226.075928][ T9147] hfs: request for non-existent node 1280 in B*Tree [ 226.100633][ T9143] XFS (loop4): Mounting V5 Filesystem [ 226.121839][ T46] hfs: request for non-existent node 1280 in B*Tree [ 226.136617][ T46] hfs: request for non-existent node 1280 in B*Tree [ 226.138318][ T9143] XFS (loop4): Ending clean mount [ 226.173311][ T9143] XFS (loop4): Quotacheck needed: Please wait. [ 226.274464][ T9143] XFS (loop4): Quotacheck: Done. [ 226.452381][ T9164] loop0: detected capacity change from 0 to 164 [ 226.511193][ T4276] XFS (loop4): Unmounting Filesystem [ 226.814416][ T9172] loop3: detected capacity change from 0 to 512 [ 226.832408][ T9172] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.864777][ T9172] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 226.951775][ T9172] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1986: inode #15: comm syz.3.1986: iget: illegal inode # [ 227.007912][ T9172] EXT4-fs (loop3): Remounting filesystem read-only [ 227.052099][ T9172] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1986: couldn't read orphan inode 15 (err -117) [ 227.098496][ T9172] EXT4-fs (loop3): Remounting filesystem read-only [ 227.120908][ T9170] loop0: detected capacity change from 0 to 32768 [ 227.127980][ T9172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.182077][ T9170] XFS (loop0): Mounting V5 Filesystem [ 227.424578][ T9170] XFS (loop0): Ending clean mount [ 227.435180][ T9194] loop4: detected capacity change from 0 to 16 [ 227.443337][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 227.453658][ T9170] XFS (loop0): Quotacheck needed: Please wait. [ 227.471176][ T4257] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 227.499171][ T9194] erofs: (device loop4): mounted with root inode @ nid 36. [ 227.584899][ T9170] XFS (loop0): Quotacheck: Done. [ 227.687060][ T4257] usb 3-1: Using ep0 maxpacket: 32 [ 227.688457][ T4269] XFS (loop0): Unmounting Filesystem [ 227.694232][ T4257] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 227.731660][ T4257] usb 3-1: config 4 has no interface number 0 [ 227.762090][ T4257] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.797289][ T4257] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.822596][ T4257] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.852444][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.884812][ T4257] hub 3-1:4.128: USB hub found [ 228.089235][ T4257] hub 3-1:4.128: 2 ports detected [ 228.095942][ T4257] hub 3-1:4.128: Using single TT (err -22) [ 228.122912][ T9192] loop1: detected capacity change from 0 to 32768 [ 228.163168][ T9192] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1991 (9192) [ 228.173574][ T9203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.208844][ T9192] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 228.228090][ T9192] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 228.270259][ T9192] BTRFS info (device loop1): using free space tree [ 228.475292][ T9196] F2FS-fs (loop3): invalid crc value [ 228.501934][ T4257] usb 3-1: USB disconnect, device number 18 [ 228.531867][ T9192] BTRFS info (device loop1): enabling ssd optimizations [ 228.559135][ T9196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.691295][ T9196] F2FS-fs (loop3): Start checkpoint disabled! [ 228.739236][ T9196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 228.773357][ T4283] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 229.242950][ T9] kworker/u4:0: attempt to access beyond end of device [ 229.242950][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 229.387760][ T9251] set_capacity_and_notify: 1 callbacks suppressed [ 229.387777][ T9251] loop1: detected capacity change from 0 to 64 [ 229.732467][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 229.840262][ T9261] netlink: 'syz.3.2002': attribute type 2 has an invalid length. [ 230.048712][ T9271] can0: slcan on ttyS3. [ 230.209267][ T9267] can0 (unregistered): slcan off ttyS3. [ 230.289108][ T9248] loop0: detected capacity change from 0 to 40427 [ 230.355002][ T9248] F2FS-fs (loop0): invalid crc value [ 230.429031][ T9248] F2FS-fs (loop0): Found nat_bits in checkpoint [ 230.469897][ T9285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2021'. [ 230.598555][ T9248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.734482][ T9248] F2FS-fs (loop0): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 230.945539][ T4269] syz-executor: attempt to access beyond end of device [ 230.945539][ T4269] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.571686][ T9327] loop0: detected capacity change from 0 to 64 [ 231.811008][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 232.354747][ T9357] loop2: detected capacity change from 0 to 64 [ 232.410533][ T9354] loop3: detected capacity change from 0 to 1764 [ 232.410857][ T9357] hfs: request for non-existent node 1280 in B*Tree [ 232.452395][ T9357] hfs: request for non-existent node 1280 in B*Tree [ 232.570624][ T9] hfs: request for non-existent node 1280 in B*Tree [ 232.598239][ T9] hfs: request for non-existent node 1280 in B*Tree [ 232.906182][ T9345] loop0: detected capacity change from 0 to 40427 [ 232.930167][ T9345] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 232.958327][ T9345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.989314][ T9345] F2FS-fs (loop0): invalid crc value [ 233.039092][ T9345] F2FS-fs (loop0): Found nat_bits in checkpoint [ 233.156632][ T9345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 233.170293][ T9345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.379665][ T9363] loop1: detected capacity change from 0 to 32768 [ 233.403311][ T9363] XFS: noikeep mount option is deprecated. [ 233.563260][ T9363] XFS (loop1): Mounting V5 Filesystem [ 233.768121][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2054'. [ 233.793550][ T9363] XFS (loop1): Ending clean mount [ 233.801689][ T9363] XFS (loop1): Quotacheck needed: Please wait. [ 233.940795][ T9363] XFS (loop1): Quotacheck: Done. [ 233.987208][ T9396] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 234.148850][ T4283] XFS (loop1): Unmounting Filesystem [ 234.677644][ T9425] loop1: detected capacity change from 0 to 1024 [ 234.751722][ T9425] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 234.769692][ T9429] loop4: detected capacity change from 0 to 512 [ 234.777762][ T9425] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 234.797727][ T9430] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 234.841789][ T9430] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 234.850870][ T9429] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2066: invalid indirect mapped block 10 (level 1) [ 234.917035][ T9429] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2066: invalid indirect mapped block 8 (level 1) [ 234.931314][ T9434] loop3: detected capacity change from 0 to 164 [ 234.978713][ T33] hfsplus: b-tree write err: -5, ino 4 [ 234.994242][ T33] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 235.014575][ T9429] EXT4-fs (loop4): 1 truncate cleaned up [ 235.092740][ T9429] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.293700][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 236.052074][ T9468] loop4: detected capacity change from 0 to 4096 [ 236.083633][ T9468] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 236.125783][ T9479] rdma_op ffff88801e28a1f0 conn xmit_rdma 0000000000000000 [ 236.192070][ T9468] ntfs: volume version 3.1. [ 236.221231][ T9468] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 236.273649][ T9468] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 236.418630][ T9485] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 236.674637][ T9491] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2099'. [ 236.856546][ T9481] loop1: detected capacity change from 0 to 32768 [ 236.929944][ T26] audit: type=1326 audit(1769556754.272:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9496 comm="syz.3.2102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c0579aeb9 code=0x0 [ 236.964919][ T9481] XFS (loop1): Mounting V5 Filesystem [ 237.001919][ T9509] loop2: detected capacity change from 0 to 64 [ 237.058799][ T9481] XFS (loop1): Ending clean mount [ 237.104538][ T9481] XFS (loop1): Quotacheck needed: Please wait. [ 237.143054][ T9481] XFS (loop1): Quotacheck: Done. [ 237.199898][ T4283] XFS (loop1): Unmounting Filesystem [ 237.327695][ T9487] loop0: detected capacity change from 0 to 32768 [ 237.350226][ T9487] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2096 (9487) [ 237.419357][ T9487] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 237.442462][ T9487] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 237.447809][ T5603] kernel write not supported for file /sg0 (pid: 5603 comm: kworker/0:10) [ 237.461202][ T9487] BTRFS info (device loop0): using free space tree [ 237.635854][ T9487] BTRFS info (device loop0): enabling ssd optimizations [ 237.765642][ T9542] loop2: detected capacity change from 0 to 8 [ 237.905361][ T9542] SQUASHFS error: Failed to read block 0x18e: -5 [ 237.934516][ T9542] SQUASHFS error: Unable to read metadata cache entry [18c] [ 237.957755][ T4269] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 238.004900][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 238.602409][ T9557] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 238.822433][ T9557] usb 2-1: Using ep0 maxpacket: 16 [ 238.830403][ T9557] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 238.831186][ T9578] sp0: Synchronizing with TNC [ 238.849995][ T9577] loop4: detected capacity change from 0 to 1024 [ 238.863060][ T9557] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 238.877949][ T9557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.890141][ T9557] usb 2-1: Product: syz [ 238.893730][ T9575] [U] è [ 238.896540][ T9557] usb 2-1: Manufacturer: syz [ 238.907008][ T9557] usb 2-1: SerialNumber: syz [ 238.935067][ T9557] usb 2-1: config 0 descriptor?? [ 238.974293][ T9557] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 238.990700][ T9557] usb 2-1: Detected FT232B [ 239.090982][ T9585] loop2: detected capacity change from 0 to 128 [ 239.104409][ T46] hfsplus: b-tree write err: -5, ino 4 [ 239.109513][ T9585] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 239.128824][ T9585] hpfs: filesystem error: improperly stopped [ 239.136709][ T9585] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.146833][ T9585] hpfs: You really don't want any checks? You are crazy... [ 239.188226][ T9557] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 239.195676][ T9585] hpfs: hpfs_map_sector(): read error [ 239.201081][ T9585] hpfs: code page support is disabled [ 239.219289][ T9557] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 239.240605][ T9585] hpfs: hpfs_map_4sectors(): unaligned read [ 239.250744][ T9585] hpfs: hpfs_map_4sectors(): unaligned read [ 239.260781][ T9585] hpfs: filesystem error: unable to find root dir [ 239.414306][ T9557] usb 2-1: USB disconnect, device number 15 [ 239.445600][ T9557] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 239.493061][ T9557] ftdi_sio 2-1:0.0: device disconnected [ 239.503148][ T9595] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 239.510911][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'. [ 240.107591][ T9597] loop0: detected capacity change from 0 to 32768 [ 240.126863][ T9619] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.136428][ T9619] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.145334][ T9619] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.154142][ T9619] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.164350][ T9597] XFS: ikeep mount option is deprecated. [ 240.248973][ T9623] device geneve0 entered promiscuous mode [ 240.272505][ T9597] XFS (loop0): Mounting V5 Filesystem [ 240.278677][ T9623] device vlan2 entered promiscuous mode [ 240.357213][ T9597] XFS (loop0): Ending clean mount [ 240.388258][ T9597] XFS (loop0): Quotacheck needed: Please wait. [ 240.476356][ T9597] XFS (loop0): Quotacheck: Done. [ 240.562427][ T9557] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.574461][ T4269] XFS (loop0): Unmounting Filesystem [ 240.582206][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 240.744796][ T9639] ALSA: mixer_oss: invalid OSS volume '' [ 240.758831][ T9557] usb 3-1: Using ep0 maxpacket: 8 [ 240.766635][ T9557] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.803553][ T9557] usb 3-1: config index 0 descriptor too short (expected 51, got 18) [ 240.811697][ T9557] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 240.841967][ T9557] usb 3-1: config 4 has no interface number 0 [ 240.872848][ T9557] usb 3-1: config 4 interface 30 has no altsetting 0 [ 240.884113][ T9557] usb 3-1: string descriptor 0 read error: -22 [ 240.893113][ T9643] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 240.900821][ T9557] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 240.922401][ T9557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.945402][ T9557] dw2102: su3000_identify_state [ 240.950313][ T9557] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 240.978381][ T9557] dw2102: su3000_power_ctrl: 1, initialized 0 [ 241.008729][ T9557] dvb-usb: bulk message failed: -22 (2/0) [ 241.020705][ T9557] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.048662][ T9557] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 241.057045][ T9557] usb 3-1: media controller created [ 241.062630][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.069350][ T9557] dw2102: i2c transfer failed. [ 241.078540][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.118420][ T9557] dw2102: i2c transfer failed. [ 241.142029][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.168143][ T9557] dw2102: i2c transfer failed. [ 241.189068][ T9628] dvb-usb: bulk message failed: -22 (1/0) [ 241.198157][ T9628] dw2102: i2c transfer failed. [ 241.222665][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.233143][ T9557] dw2102: i2c transfer failed. [ 241.237959][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.251664][ T9557] dw2102: i2c transfer failed. [ 241.256892][ T9557] dvb-usb: bulk message failed: -22 (6/0) [ 241.262775][ T9557] dw2102: i2c transfer failed. [ 241.268959][ T9557] dvb-usb: MAC address: 02:02:02:02:02:02 [ 241.298962][ T9557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.335179][ T9659] loop0: detected capacity change from 0 to 2048 [ 241.347107][ T9557] dvb-usb: bulk message failed: -22 (3/0) [ 241.362609][ T5609] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.368524][ T9557] dw2102: command 0x0e transfer failed. [ 241.370722][ T9659] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.381779][ T9557] dvb-usb: bulk message failed: -22 (3/0) [ 241.408541][ T9557] dw2102: command 0x0e transfer failed. [ 241.419812][ T9662] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.561745][ T9666] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2165' sets config #-1505206194 [ 241.586217][ T5609] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 241.613472][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.621691][ T5609] usb 2-1: Product: syz [ 241.642500][ T5609] usb 2-1: Manufacturer: syz [ 241.647286][ T5609] usb 2-1: SerialNumber: syz [ 241.663487][ T5609] usb 2-1: config 0 descriptor?? [ 241.688048][ T5609] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 241.752607][ T9557] dvb-usb: bulk message failed: -22 (3/0) [ 241.758490][ T9557] dw2102: command 0x0e transfer failed. [ 241.776963][ T9557] dvb-usb: bulk message failed: -22 (3/0) [ 241.783510][ T9557] dw2102: command 0x0e transfer failed. [ 241.789099][ T9557] dvb-usb: bulk message failed: -22 (1/0) [ 241.795666][ T9557] dw2102: command 0x51 transfer failed. [ 241.801241][ T9557] dvb-usb: bulk message failed: -22 (5/0) [ 241.807592][ T9557] dw2102: i2c probe for address 0x68 failed. [ 241.813877][ T9557] dvb-usb: bulk message failed: -22 (5/0) [ 241.819621][ T9557] dw2102: i2c probe for address 0x69 failed. [ 241.826088][ T9557] dvb-usb: bulk message failed: -22 (5/0) [ 241.831817][ T9557] dw2102: i2c probe for address 0x6a failed. [ 241.837932][ T9557] dw2102: probing for demodulator failed. Is the external power switched on? [ 241.846844][ T9557] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 241.932810][ T9557] rc_core: IR keymap rc-tt-1500 not found [ 241.938585][ T9557] Registered IR keymap rc-empty [ 241.946078][ T9557] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 241.956729][ T9557] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input25 [ 241.970257][ T9557] dvb-usb: schedule remote query interval to 250 msecs. [ 241.977373][ T9557] dw2102: su3000_power_ctrl: 0, initialized 1 [ 241.982485][ T5608] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.983616][ T9557] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 242.003687][ T9557] usb 3-1: USB disconnect, device number 19 [ 242.015838][ T5167] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.058148][ T9557] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 242.173768][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.185255][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.196427][ T5608] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.209525][ T5608] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.214217][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.218687][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.234297][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.241066][ T5608] usb 4-1: config 0 descriptor?? [ 242.253959][ T5167] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 242.266230][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.284373][ T5167] usb 1-1: config 0 descriptor?? [ 242.301294][ T5609] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 242.311601][ T5609] sq905c: probe of 2-1:0.0 failed with error -71 [ 242.338846][ T5609] usb 2-1: USB disconnect, device number 16 [ 242.662234][ T5608] plantronics 0003:047F:FFFF.0019: item fetching failed at offset 12/15 [ 242.671314][ T5608] plantronics 0003:047F:FFFF.0019: parse failed [ 242.677701][ T5608] plantronics: probe of 0003:047F:FFFF.0019 failed with error -22 [ 242.697323][ T5167] steelseries_srws1 0003:1038:1410.001A: not enough fields in HID_OUTPUT_REPORT 0 [ 242.873313][ T9676] loop2: detected capacity change from 0 to 16 [ 242.901133][ T9557] usb 1-1: USB disconnect, device number 20 [ 242.908108][ T9676] erofs: (device loop2): mounted with root inode @ nid 36. [ 242.914297][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 242.977735][ T5167] usb 4-1: USB disconnect, device number 19 [ 243.334211][ T9694] comedi: No check for data length of config insn id 1003 is implemented [ 243.343449][ T9694] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 243.353577][ T9694] comedi: Assuming n=15 is correct [ 243.615354][ T9704] loop1: detected capacity change from 0 to 2048 [ 243.632039][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 243.720496][ T9712] loop2: detected capacity change from 0 to 2048 [ 243.728485][ T9704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.740959][ T9704] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.800896][ T9714] loop0: detected capacity change from 0 to 16 [ 243.810519][ T9714] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.835219][ T9714] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 243.848947][ T9714] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 243.881760][ T9714] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 243.910603][ T9715] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.943243][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 243.953238][ T9712] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 244.027227][ T9712] Remounting filesystem read-only [ 244.100598][ T5609] kernel write not supported for file [eventfd] (pid: 5609 comm: kworker/0:13) [ 244.361348][ T9731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2192'. [ 244.387407][ T9731] tipc: Invalid UDP bearer configuration [ 244.387451][ T9731] tipc: Enabling of bearer rejected, failed to enable media [ 244.780373][ T9743] loop2: detected capacity change from 0 to 1024 [ 245.035255][ T9730] loop3: detected capacity change from 0 to 32768 [ 245.089229][ T9730] JBD2: Ignoring recovery information on journal [ 245.202343][ T9730] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 245.427677][ T9762] loop1: detected capacity change from 0 to 4096 [ 245.473995][ T9762] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 245.513706][ T9762] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 245.552117][ T9765] loop4: detected capacity change from 0 to 4096 [ 245.558856][ T9762] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 245.590597][ T9762] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 245.662923][ T9762] ntfs: volume version 3.1. [ 245.712985][ T9765] ntfs3: loop4: ino=1f, "file3" ntfs_rename [ 245.733222][ T9762] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-5. You might want to try to use the mount option nls=utf8. [ 245.813620][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 245.872451][ T9762] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 246.071755][ T9771] loop4: detected capacity change from 0 to 1024 [ 246.188833][ T9753] loop2: detected capacity change from 0 to 40427 [ 246.251278][ T9753] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 246.295346][ T9753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.341865][ T9753] F2FS-fs (loop2): invalid crc value [ 246.378038][ T75] hfsplus: b-tree write err: -5, ino 4 [ 246.412916][ T9753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.548468][ T9753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 246.592656][ T9753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.679282][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 246.716410][ T9792] device gretap0 entered promiscuous mode [ 247.148255][ T9782] loop0: detected capacity change from 0 to 32768 [ 247.624841][ T9813] loop4: detected capacity change from 0 to 512 [ 247.685251][ T9813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 247.702968][ T9810] loop1: detected capacity change from 0 to 4096 [ 247.710276][ T9813] EXT4-fs (loop4): invalid journal inode [ 247.751032][ T9813] EXT4-fs (loop4): can't get journal size [ 247.816282][ T9813] EXT4-fs (loop4): 1 truncate cleaned up [ 247.846973][ T9813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.970049][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2233'. [ 247.975545][ T9796] loop3: detected capacity change from 0 to 32768 [ 248.011986][ T9796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2221 (9796) [ 248.060877][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 248.132178][ T9796] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.184780][ T9796] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 248.235876][ T9796] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 248.287011][ T9796] BTRFS info (device loop3): use lzo compression, level 0 [ 248.313810][ T9796] BTRFS info (device loop3): using free space tree [ 248.431174][ T9829] loop0: detected capacity change from 0 to 4096 [ 248.453898][ T9829] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.600037][ T9796] BTRFS info (device loop3): enabling ssd optimizations [ 248.655415][ T9823] loop1: detected capacity change from 0 to 40427 [ 248.723706][ T9823] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 248.724389][ T9829] ntfs: volume version 3.1. [ 248.731299][ T9823] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 248.748867][ T9823] F2FS-fs (loop1): invalid crc value [ 248.800960][ T9823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 248.813705][ T9829] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 248.893906][ T9829] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 248.927138][ T4270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.988901][ T9823] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.022377][ T9823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.547531][ T9859] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 249.595594][ T9859] FAT-fs (loop0): Filesystem has been set read-only [ 249.821708][ T9557] kernel write not supported for file /uhid (pid: 9557 comm: kworker/1:19) [ 249.841321][ T9870] netlink: 'syz.2.2244': attribute type 2 has an invalid length. [ 249.899468][ T9870] netlink: 175020 bytes leftover after parsing attributes in process `syz.2.2244'. [ 250.939655][ T9884] set_capacity_and_notify: 1 callbacks suppressed [ 250.939670][ T9884] loop1: detected capacity change from 0 to 32768 [ 250.947909][ T9905] loop0: detected capacity change from 0 to 16 [ 250.977341][ T9881] loop4: detected capacity change from 0 to 32768 [ 250.990671][ T9905] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 251.010246][ T9884] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2240 (9884) [ 251.065367][ T9881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2250 (9881) [ 251.095023][ T9884] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 251.137048][ T9884] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 251.156157][ T9881] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.180811][ T9884] BTRFS info (device loop1): using free space tree [ 251.215024][ T9881] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 251.232536][ T9881] BTRFS info (device loop4): using free space tree [ 251.395801][ T9887] loop3: detected capacity change from 0 to 40427 [ 251.431714][ T9887] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 251.467435][ T9884] BTRFS info (device loop1): enabling ssd optimizations [ 251.512758][ T9887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 251.512778][ T9881] BTRFS info (device loop4): enabling ssd optimizations [ 251.534439][ T9887] F2FS-fs (loop3): invalid crc value [ 251.584119][ T9887] F2FS-fs (loop3): Found nat_bits in checkpoint [ 251.758800][ T9887] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 251.776790][ T9887] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.809777][ T4276] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.887610][ T4283] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 251.957759][ T9904] loop2: detected capacity change from 0 to 32768 [ 251.976479][ T9951] binder: 9950:9951 ioctl c018620c 200000000000 returned -22 [ 252.480982][ T9955] loop2: detected capacity change from 0 to 1024 [ 252.513425][ T9955] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.533180][ T9955] EXT4-fs (loop2): Test dummy encryption mode enabled [ 252.551361][ T9955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.607804][ T9955] Quota error (device loop2): v2_read_file_info: Block with free entry 2583691269 out of range (1, 6). [ 252.608015][ T9955] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.673333][ T9959] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 252.674525][ T9959] Quota error (device loop2): v2_read_file_info: Block with free entry 2583691269 out of range (1, 6). [ 252.674567][ T9959] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.821706][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 253.013681][ T9968] binder: 9967:9968 unknown command 1953002597 [ 253.013724][ T9968] binder: 9967:9968 ioctl c0306201 200000000080 returned -22 [ 253.810195][ T9992] loop1: detected capacity change from 0 to 8192 [ 254.219466][ T9987] loop3: detected capacity change from 0 to 32768 [ 254.284438][T10000] [U] s„ï [ 254.362612][ T9993] loop0: detected capacity change from 0 to 32768 [ 254.461391][ T9993] XFS (loop0): Mounting V5 Filesystem [ 254.492044][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 254.547131][ T9993] XFS (loop0): Ending clean mount [ 254.607707][ T4269] XFS (loop0): Unmounting Filesystem [ 254.861447][T10019] loop3: detected capacity change from 0 to 64 [ 254.932512][T10021] tipc: Enabled bearer , priority 10 [ 254.973021][T10019] syz.3.2293: attempt to access beyond end of device [ 254.973021][T10019] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 255.009928][T10019] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 255.087376][T10019] syz.3.2293: attempt to access beyond end of device [ 255.087376][T10019] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 255.112184][T10019] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 255.135090][T10019] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 255.158273][T10019] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 255.190880][T10025] syz.0.2295: attempt to access beyond end of device [ 255.190880][T10025] loop0: rw=0, sector=272, nr_sectors = 4 limit=256 [ 255.235212][T10025] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 255.283208][ T4270] syz-executor: attempt to access beyond end of device [ 255.283208][ T4270] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 255.303676][T10025] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 255.348070][ T4270] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 255.379354][ T4270] syz-executor: attempt to access beyond end of device [ 255.379354][ T4270] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 255.447459][ T4270] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 255.511727][ T4270] Trying to free block not in datazone [ 255.594470][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600862][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.050719][T10058] tipc: Enabling of bearer rejected, failed to enable media [ 256.116282][ T4336] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 256.139130][T10061] set_capacity_and_notify: 1 callbacks suppressed [ 256.139145][T10061] loop3: detected capacity change from 0 to 64 [ 256.304885][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 256.333938][ T4336] usb 2-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 256.349612][T10066] loop3: detected capacity change from 0 to 256 [ 256.356598][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.376759][ T4336] usb 2-1: config 0 descriptor?? [ 256.386603][T10049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 256.400791][T10066] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 256.415598][T10066] FAT-fs (loop3): Filesystem has been set read-only [ 256.595742][ T14] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 256.792677][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 256.799482][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.816606][ T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 256.818315][ T4336] wacom 0003:056A:5002.001B: unknown main item tag 0x0 [ 256.838271][ T4336] wacom 0003:056A:5002.001B: unknown main item tag 0x0 [ 256.845512][ T4336] wacom 0003:056A:5002.001B: unknown main item tag 0x0 [ 256.863044][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.866267][ T4336] wacom 0003:056A:5002.001B: unknown main item tag 0x0 [ 256.888317][T10082] loop2: detected capacity change from 0 to 1024 [ 256.889035][T10080] sp0: Synchronizing with TNC [ 256.899565][ T4336] wacom 0003:056A:5002.001B: unknown main item tag 0x0 [ 256.905132][ T14] usb 1-1: config 0 descriptor?? [ 256.924321][T10082] hfsplus: gid requires an argument [ 256.930261][T10082] hfsplus: unable to parse mount options [ 256.947582][ T4336] wacom 0003:056A:5002.001B: hidraw0: USB HID vf.3d Device [HID 056a:5002] on usb-dummy_hcd.1-1/input0 [ 257.165275][ T4337] usb 2-1: USB disconnect, device number 17 [ 257.238832][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 257.258008][T10085] fido_id[10085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 257.328033][ T14] hid (null): unknown global tag 0xd [ 257.535718][ T14] usb 1-1: USB disconnect, device number 21 [ 257.702764][T10107] loop3: detected capacity change from 0 to 256 [ 257.730550][T10107] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 257.779777][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2335'. [ 257.805094][T10107] exFAT-fs (loop3): error, found bogus dentry(15) beyond unused empty group(0) (start_clu : 7, cur_clu : 7) [ 257.817730][T10107] exFAT-fs (loop3): Filesystem has been set read-only [ 257.820076][T10111] loop1: detected capacity change from 0 to 256 [ 257.868517][T10111] exfat: Deprecated parameter 'namecase' [ 257.922383][T10111] exfat: Deprecated parameter 'utf8' [ 257.960439][T10111] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 258.368864][T10124] loop0: detected capacity change from 0 to 4096 [ 258.436486][T10124] ntfs: volume version 3.1. [ 258.681801][T10117] loop3: detected capacity change from 0 to 32768 [ 258.720113][T10117] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.2339 (10117) [ 258.752433][ T4336] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 258.780785][T10117] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 258.823891][T10117] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 258.842135][T10117] BTRFS info (device loop3): using free space tree [ 258.919749][T10144] loop1: detected capacity change from 0 to 256 [ 258.946564][T10144] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 258.954167][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.002222][T10147] [U] R5¡JCÒ°~V6“˜|‡7§¤Á…KXVZZËG—RÙÔ [ 259.020865][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 259.039572][T10117] BTRFS info (device loop3): enabling ssd optimizations [ 259.047564][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 259.060695][ T4336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.070709][ T4336] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 259.079829][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.091392][ T4336] usb 3-1: config 0 descriptor?? [ 259.097124][T10128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.292047][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 259.401696][T10162] loop1: detected capacity change from 0 to 8192 [ 259.468633][T10162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.492452][T10162] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 259.531110][ T4336] nzxt-smart2 0003:1E71:2019.001D: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0 [ 259.553035][T10162] REISERFS (device loop1): using ordered data mode [ 259.559598][T10162] reiserfs: using flush barriers [ 259.583099][T10162] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.642928][T10162] REISERFS (device loop1): checking transaction log (loop1) [ 259.888337][ T41] usb 3-1: USB disconnect, device number 20 [ 259.937249][T10162] REISERFS (device loop1): Using tea hash to sort names [ 259.975642][T10162] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 259.986387][T10170] fido_id[10170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.007418][T10172] loop3: detected capacity change from 0 to 2048 [ 260.058149][T10172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.880921][ T26] audit: type=1326 audit(1769556778.222:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.1.2366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe219aeb9 code=0x0 [ 261.022477][ T41] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.234066][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.282954][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.298598][T10206] set_capacity_and_notify: 2 callbacks suppressed [ 261.298615][T10206] loop0: detected capacity change from 0 to 4096 [ 261.322496][ T41] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 261.362253][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.395303][ T41] usb 3-1: config 0 descriptor?? [ 261.530732][T10212] loop4: detected capacity change from 0 to 256 [ 261.570932][T10214] loop3: detected capacity change from 0 to 256 [ 261.588510][T10212] exfat: Deprecated parameter 'namecase' [ 261.660805][T10212] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 261.686157][T10214] FAT-fs (loop3): Directory bread(block 64) failed [ 261.752584][T10214] FAT-fs (loop3): Directory bread(block 65) failed [ 261.779258][T10214] FAT-fs (loop3): Directory bread(block 66) failed [ 261.808691][ T41] hid (null): unknown global tag 0xd [ 261.817150][ T41] razer 0003:1532:010E.001E: unknown global tag 0xd [ 261.829599][T10214] FAT-fs (loop3): Directory bread(block 67) failed [ 261.872817][ T41] razer 0003:1532:010E.001E: item 0 0 1 13 parsing failed [ 261.886647][T10214] FAT-fs (loop3): Directory bread(block 68) failed [ 261.911564][ T41] razer: probe of 0003:1532:010E.001E failed with error -22 [ 261.930646][T10214] FAT-fs (loop3): Directory bread(block 69) failed [ 261.978183][T10214] FAT-fs (loop3): Directory bread(block 70) failed [ 262.008937][T10214] FAT-fs (loop3): Directory bread(block 71) failed [ 262.026459][T10214] FAT-fs (loop3): Directory bread(block 72) failed [ 262.045641][T10214] FAT-fs (loop3): Directory bread(block 73) failed [ 262.049499][ T41] usb 3-1: USB disconnect, device number 21 [ 262.161868][T10220] loop4: detected capacity change from 0 to 4096 [ 262.334424][T10220] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 262.406241][T10220] ntfs3: loop4: failed to convert name for inode 1e. [ 262.799665][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 263.479615][T10240] loop0: detected capacity change from 0 to 32768 [ 263.518765][T10274] sp0: Synchronizing with TNC [ 263.597447][T10240] XFS (loop0): Mounting V5 Filesystem [ 263.719657][T10240] XFS (loop0): Ending clean mount [ 263.759479][T10240] XFS (loop0): Quotacheck needed: Please wait. [ 263.831531][T10240] XFS (loop0): Quotacheck: Done. [ 263.991522][ T4269] XFS (loop0): Unmounting Filesystem [ 264.237918][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 264.336259][T10297] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 264.418754][T10299] loop1: detected capacity change from 0 to 1024 [ 264.426448][T10299] EXT4-fs: Ignoring removed bh option [ 264.432461][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 264.439683][ T14] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 264.460565][ T14] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 264.470056][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.487532][T10299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 264.508571][ T14] usb 3-1: Product: syz [ 264.521623][ T14] usb 3-1: Manufacturer: syz [ 264.547328][ T14] usb 3-1: SerialNumber: syz [ 264.605989][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 264.792072][ T14] usb 3-1: selecting invalid altsetting 1 [ 264.993358][ T14] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 264.993434][ T14] dvb_usb_lmedm04: probe of 3-1:2.0 failed with error -22 [ 265.023883][T10310] loop0: detected capacity change from 0 to 8192 [ 265.079203][T10310] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 265.102410][T10310] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 265.111830][T10310] REISERFS (device loop0): using ordered data mode [ 265.119167][T10310] reiserfs: using flush barriers [ 265.125539][T10310] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.142502][T10310] REISERFS (device loop0): checking transaction log (loop0) [ 265.150866][T10310] REISERFS (device loop0): Using r5 hash to sort names [ 265.158293][T10310] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 265.204695][ T5163] usb 3-1: USB disconnect, device number 22 [ 265.225450][T10306] loop1: detected capacity change from 0 to 32768 [ 265.241962][T10306] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2412 (10306) [ 265.299841][T10306] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 265.323520][T10306] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 265.346625][T10306] BTRFS info (device loop1): using free space tree [ 265.632464][T10306] BTRFS info (device loop1): enabling ssd optimizations [ 265.902877][ T4283] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 266.155743][T10335] "syz.2.2418" (10335) uses obsolete ecb(arc4) skcipher [ 266.319791][ T4258] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4258) [ 266.652404][T10349] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2422'. [ 267.199267][T10341] loop2: detected capacity change from 0 to 32768 [ 267.255327][T10341] JBD2: Ignoring recovery information on journal [ 267.332475][ T5167] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 267.346951][T10341] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 267.542491][ T5167] usb 2-1: Using ep0 maxpacket: 16 [ 267.549719][ T5167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.600423][ T5167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.661546][ T5167] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 267.691989][ T5167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.717153][T10357] loop4: detected capacity change from 0 to 32768 [ 267.719877][ T5167] usb 2-1: config 0 descriptor?? [ 267.755474][ T4268] ocfs2: Unmounting device (7,2) on (node local) [ 267.932977][T10357] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 267.932977][T10357] [ 267.980769][T10357] ERROR: (device loop4): remounting filesystem as read-only [ 268.153590][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.171319][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.203087][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.250325][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.268285][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.298669][ T5167] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 268.382424][ T5167] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf3 found [ 268.403618][ T5167] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf4 found [ 268.466306][ T5167] usb 2-1: USB disconnect, device number 18 [ 269.049000][T10401] loop4: detected capacity change from 0 to 512 [ 269.081193][T10401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.121071][T10401] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.166254][T10401] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 269.182098][T10401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 269.191653][T10401] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 269.201832][T10401] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 269.210985][T10401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.231568][T10401] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2442: dx entry: limit 65535 != root limit 120 [ 269.246110][T10401] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2442: Corrupt directory, running e2fsck is recommended [ 269.320838][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 269.779759][T10423] loop2: detected capacity change from 0 to 1024 [ 270.217202][T10434] loop1: detected capacity change from 0 to 512 [ 270.266247][T10434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.302705][T10434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.371474][T10434] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2455: invalid indirect mapped block 4294967295 (level 1) [ 270.464688][T10448] loop2: detected capacity change from 0 to 1024 [ 270.516155][T10434] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2455: invalid indirect mapped block 4294967295 (level 1) [ 270.554894][T10448] syz.2.2457: attempt to access beyond end of device [ 270.554894][T10448] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 270.568426][T10434] EXT4-fs (loop1): 2 truncates cleaned up [ 270.629872][T10434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 270.900393][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 271.031510][T10461] loop4: detected capacity change from 0 to 1024 [ 271.366383][T10474] loop1: detected capacity change from 0 to 128 [ 271.380844][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2467'. [ 271.441681][T10474] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 271.523779][T10474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.554965][T10474] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.2468: checksumming directory block 0 [ 271.821223][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 271.841840][T10489] loop2: detected capacity change from 0 to 1024 [ 272.080581][ T4299] hfsplus: b-tree write err: -5, ino 4 [ 272.424167][T10508] loop0: detected capacity change from 0 to 128 [ 272.490213][T10508] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 272.562514][T10508] hpfs: filesystem error: improperly stopped [ 272.568570][T10508] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 272.600092][T10508] hpfs: You really don't want any checks? You are crazy... [ 272.619175][T10508] hpfs: hpfs_map_sector(): read error [ 272.639129][T10508] hpfs: code page support is disabled [ 272.645779][T10508] hpfs: hpfs_map_4sectors(): unaligned read [ 272.683437][T10508] hpfs: hpfs_map_4sectors(): unaligned read [ 272.689422][T10508] hpfs: filesystem error: unable to find root dir [ 272.748094][T10518] loop2: detected capacity change from 0 to 512 [ 272.791367][T10508] hpfs: hpfs_map_4sectors(): unaligned read [ 272.835843][T10508] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 272.922424][T10518] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2487: invalid indirect mapped block 256 (level 2) [ 272.979272][T10522] program syz.4.2488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.025257][T10518] EXT4-fs (loop2): 2 truncates cleaned up [ 273.031071][T10518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 273.121433][T10526] loop0: detected capacity change from 0 to 128 [ 273.213288][T10526] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 273.219431][ T4299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 273.245315][T10526] hpfs: filesystem error: improperly stopped [ 273.269282][ T4299] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.312448][T10526] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 273.317861][ T4299] EXT4-fs (loop2): This should not happen!! Data will be lost [ 273.317861][ T4299] [ 273.333769][T10526] hpfs: You really don't want any checks? You are crazy... [ 273.341325][T10526] hpfs: hpfs_map_sector(): read error [ 273.346388][ T4299] EXT4-fs (loop2): Total free blocks count 0 [ 273.382369][T10526] hpfs: code page support is disabled [ 273.387854][ T4299] EXT4-fs (loop2): Free/Dirty block details [ 273.387906][T10526] hpfs: hpfs_map_4sectors(): unaligned read [ 273.429545][T10526] hpfs: hpfs_map_4sectors(): unaligned read [ 273.432758][ T4299] EXT4-fs (loop2): free_blocks=0 [ 273.443048][T10526] hpfs: filesystem error: unable to find root dir [ 273.470971][ T4299] EXT4-fs (loop2): dirty_blocks=66 [ 273.492429][ T4299] EXT4-fs (loop2): Block reservation details [ 273.498485][ T4299] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 273.528184][ T4299] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 273.895172][T10545] loop3: detected capacity change from 0 to 2048 [ 273.925839][T10545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.019413][T10549] loop2: detected capacity change from 0 to 2048 [ 274.103140][T10549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.167530][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 274.177746][T10556] IPVS: Error connecting to the multicast addr [ 274.235861][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 274.327899][T10560] loop1: detected capacity change from 0 to 128 [ 274.383972][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 274.410283][T10560] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 274.443518][T10536] loop4: detected capacity change from 0 to 32768 [ 274.667323][T10536] XFS (loop4): Mounting V5 Filesystem [ 274.777615][T10583] loop0: detected capacity change from 0 to 512 [ 274.829016][T10583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.851218][T10536] XFS (loop4): Ending clean mount [ 274.873635][T10536] XFS (loop4): Quotacheck needed: Please wait. [ 274.916748][T10583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.954112][T10536] XFS (loop4): Quotacheck: Done. [ 275.001109][T10583] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2512: invalid indirect mapped block 4294967295 (level 1) [ 275.054324][T10583] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2512: invalid indirect mapped block 4294967295 (level 1) [ 275.090357][T10583] EXT4-fs (loop0): 2 truncates cleaned up [ 275.092691][ T4276] XFS (loop4): Unmounting Filesystem [ 275.100670][T10583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.147414][T10591] loop1: detected capacity change from 0 to 2048 [ 275.250849][T10591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.268655][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 275.645686][T10600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 275.652175][T10600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 275.698607][T10600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.717570][T10600] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 275.760188][T10600] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 275.777203][T10600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 275.808654][T10600] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 275.837070][T10600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 275.857388][T10600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.860304][T10608] loop4: detected capacity change from 0 to 1024 [ 275.877181][T10600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.890484][T10600] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 275.919935][T10608] syz.4.2517: attempt to access beyond end of device [ 275.919935][T10608] loop4: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 275.972503][T10608] syz.4.2517: attempt to access beyond end of device [ 275.972503][T10608] loop4: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 276.057394][T10608] syz.4.2517: attempt to access beyond end of device [ 276.057394][T10608] loop4: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 276.152535][T10608] syz.4.2517: attempt to access beyond end of device [ 276.152535][T10608] loop4: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 276.222411][T10608] syz.4.2517: attempt to access beyond end of device [ 276.222411][T10608] loop4: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 276.262415][T10608] syz.4.2517: attempt to access beyond end of device [ 276.262415][T10608] loop4: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 276.312460][T10608] syz.4.2517: attempt to access beyond end of device [ 276.312460][T10608] loop4: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 276.342427][T10608] syz.4.2517: attempt to access beyond end of device [ 276.342427][T10608] loop4: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 276.386126][T10608] syz.4.2517: attempt to access beyond end of device [ 276.386126][T10608] loop4: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 276.414243][T10622] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.442432][T10608] syz.4.2517: attempt to access beyond end of device [ 276.442432][T10608] loop4: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 276.594741][T10602] XFS (loop0): Mounting V5 Filesystem [ 276.853470][T10602] XFS (loop0): Ending clean mount [ 276.871777][T10639] EXT4-fs (loop2): orphan cleanup on readonly fs [ 276.937580][T10639] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.2536: EA inode hash validation failed [ 276.986507][T10639] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 277.065032][T10639] EXT4-fs (loop2): 1 orphan inode deleted [ 277.078526][ T4269] XFS (loop0): Unmounting Filesystem [ 277.093264][T10639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.224574][T10612] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 277.313294][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 277.439918][T10612] (syz.3.2526,10612,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 277.527698][T10612] (syz.3.2526,10612,0):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 277.548807][T10612] (syz.3.2526,10612,0):ocfs2_unlink:990 ERROR: status = -5 [ 277.575314][T10612] (syz.3.2526,10612,0):ocfs2_unlink:1042 ERROR: status = -5 [ 277.747533][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 277.767393][T10657] set_capacity_and_notify: 4 callbacks suppressed [ 277.767409][T10657] loop0: detected capacity change from 0 to 512 [ 277.823156][T10657] EXT4-fs: Ignoring removed bh option [ 277.874484][T10657] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.919747][T10657] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 277.947564][T10657] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 278.068167][T10657] EXT4-fs (loop0): orphan cleanup on readonly fs [ 278.118579][T10657] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 278.136776][T10657] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 278.177631][T10657] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2538: Failed to acquire dquot type 1 [ 278.227480][T10657] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.2538: Invalid block bitmap block 0 in block_group 0 [ 278.283587][T10657] Quota error (device loop0): write_blk: dquota write failed [ 278.309766][T10657] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 278.349108][T10657] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2538: Failed to acquire dquot type 1 [ 278.406148][T10657] Quota error (device loop0): write_blk: dquota write failed [ 278.435185][T10653] loop1: detected capacity change from 0 to 32768 [ 278.454388][T10653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2542 (10653) [ 278.458461][T10657] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 278.468168][T10648] loop4: detected capacity change from 0 to 40427 [ 278.532356][T10657] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2538: Failed to acquire dquot type 1 [ 278.534996][T10653] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.571024][T10648] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 278.603149][T10657] EXT4-fs (loop0): 1 orphan inode deleted [ 278.610036][T10648] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 278.611299][T10657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 278.620998][T10653] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 278.638778][T10648] F2FS-fs (loop4): invalid crc value [ 278.672249][T10653] BTRFS info (device loop1): using free space tree [ 278.679134][T10648] F2FS-fs (loop4): Found nat_bits in checkpoint [ 278.766748][T10655] loop2: detected capacity change from 0 to 40427 [ 278.800102][T10655] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 278.818600][T10655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 278.832803][T10655] F2FS-fs (loop2): invalid crc value [ 278.841061][T10655] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.851281][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 278.956534][T10648] F2FS-fs (loop4): Start checkpoint disabled! [ 278.984183][T10653] BTRFS info (device loop1): enabling ssd optimizations [ 278.993127][T10655] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 279.000280][T10655] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 279.024231][T10648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 279.273878][ T4283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.303255][T10655] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 279.312594][T10655] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 279.912474][ T5613] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.981693][T10712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2554'. [ 280.154461][ T5613] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 280.172971][ T5613] usb 4-1: config 0 has no interface number 0 [ 280.180882][ T5613] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 280.217640][ T5613] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 280.235561][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.262138][ T5613] usb 4-1: config 0 descriptor?? [ 280.299372][ T5613] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input29 [ 280.598487][ T5613] usb 4-1: USB disconnect, device number 20 [ 280.940687][T10744] MPTCP: kernel_bind error, err=-22 [ 281.210941][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 281.238922][T10730] loop0: detected capacity change from 0 to 32768 [ 281.263785][T10755] device vlan2 entered promiscuous mode [ 281.269916][T10755] device dummy0 entered promiscuous mode [ 281.393152][ T4269] non-latin1 character 0x2e66 found in JFS file name [ 281.400555][ T4269] mount with iocharset=utf8 to access [ 281.889030][ T106] ------------[ cut here ]------------ [ 281.894941][ T106] WARNING: CPU: 1 PID: 106 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 281.904029][ T106] Modules linked in: [ 281.907967][ T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 281.915252][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.925945][ T106] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 281.930999][ T106] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 281.950691][ T106] RSP: 0018:ffffc9000254f668 EFLAGS: 00010293 [ 281.956849][ T106] RAX: ffffffff82f04438 RBX: ffff88802a475010 RCX: ffff88801bb69dc0 [ 281.964879][ T106] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 281.972922][ T106] RBP: 0000000000020056 R08: ffffea0000a91d47 R09: 1ffffd40001523a8 [ 281.980924][ T106] R10: dffffc0000000000 R11: fffff940001523a9 R12: ffff88802a475018 [ 281.988983][ T106] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 281.997027][ T106] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 282.006066][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.012703][ T106] CR2: 000000110c290cbd CR3: 000000000c88e000 CR4: 00000000003506e0 [ 282.020705][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.028858][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.036896][ T106] Call Trace: [ 282.040233][ T106] [ 282.043200][ T106] ? lock_page+0x2b0/0x2b0 [ 282.047643][ T106] dbJoin+0x238/0x300 [ 282.051653][ T106] ? PageHeadHuge+0x8f/0x1c0 [ 282.056331][ T106] dbFreeBits+0x4e1/0xda0 [ 282.060699][ T106] dbFree+0x32e/0x640 [ 282.064746][ T106] txFreeMap+0x9e2/0xde0 [ 282.069040][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 282.074297][ T106] xtTruncate+0xcc0/0x2d10 [ 282.078763][ T106] ? xtInitRoot+0x160/0x160 [ 282.083364][ T106] ? mapping_evict_folio+0x520/0x520 [ 282.088683][ T106] ? __lock_acquire+0x7d10/0x7d10 [ 282.093781][ T106] ? do_raw_spin_lock+0x128/0x2f0 [ 282.098837][ T106] ? memset+0x1e/0x40 [ 282.102873][ T106] ? __dquot_initialize+0x213/0xcd0 [ 282.108101][ T106] jfs_free_zero_link+0x358/0x4b0 [ 282.113272][ T106] ? inode_wait_for_writeback+0x1df/0x220 [ 282.119023][ T106] ? jfs_write_failed+0x190/0x190 [ 282.124140][ T106] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 282.129979][ T106] ? do_raw_spin_lock+0x128/0x2f0 [ 282.135101][ T106] ? bit_waitqueue+0x30/0x30 [ 282.139727][ T106] jfs_evict_inode+0x359/0x430 [ 282.144597][ T106] ? evict+0x4c3/0x8d0 [ 282.148710][ T106] ? jfs_write_inode+0x220/0x220 [ 282.153736][ T106] evict+0x4c9/0x8d0 [ 282.157666][ T106] ? proc_nr_inodes+0x2f0/0x2f0 [ 282.162599][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 282.167860][ T106] ? _raw_spin_unlock+0x24/0x40 [ 282.172785][ T106] ? iput+0x768/0x980 [ 282.176818][ T106] jfs_lazycommit+0x425/0xa70 [ 282.181632][ T106] ? txFreelock+0x5a0/0x5a0 [ 282.186228][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 282.192141][ T106] ? do_task_dead+0xd0/0xd0 [ 282.196734][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 282.202684][ T106] ? __kthread_parkme+0x162/0x1c0 [ 282.207781][ T106] kthread+0x29d/0x330 [ 282.211962][ T106] ? txFreelock+0x5a0/0x5a0 [ 282.216557][ T106] ? kthread_blkcg+0xd0/0xd0 [ 282.221195][ T106] ret_from_fork+0x1f/0x30 [ 282.225803][ T106] [ 282.228840][ T106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.236137][ T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 282.243364][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.253520][ T106] Call Trace: [ 282.256805][ T106] [ 282.259740][ T106] dump_stack_lvl+0x188/0x24e [ 282.264441][ T106] ? memcpy+0x3c/0x60 [ 282.268435][ T106] ? show_regs_print_info+0x12/0x12 [ 282.273652][ T106] ? load_image+0x400/0x400 [ 282.278183][ T106] panic+0x2e5/0x730 [ 282.282106][ T106] ? bpf_jit_dump+0xd0/0xd0 [ 282.286629][ T106] ? ret_from_fork+0x1f/0x30 [ 282.291245][ T106] __warn+0x2f8/0x4f0 [ 282.295248][ T106] ? dbAdjTree+0x448/0x4d0 [ 282.299683][ T106] ? dbAdjTree+0x448/0x4d0 [ 282.304112][ T106] report_bug+0x2ba/0x4f0 [ 282.308537][ T106] ? dbAdjTree+0x448/0x4d0 [ 282.312978][ T106] handle_bug+0x3a/0x70 [ 282.317143][ T106] exc_invalid_op+0x16/0x40 [ 282.321677][ T106] asm_exc_invalid_op+0x16/0x20 [ 282.326541][ T106] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 282.331606][ T106] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 282.348104][T10760] loop4: detected capacity change from 0 to 32768 [ 282.357814][ T106] RSP: 0018:ffffc9000254f668 EFLAGS: 00010293 [ 282.363999][ T106] RAX: ffffffff82f04438 RBX: ffff88802a475010 RCX: ffff88801bb69dc0 [ 282.371991][ T106] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 282.380152][ T106] RBP: 0000000000020056 R08: ffffea0000a91d47 R09: 1ffffd40001523a8 [ 282.388147][ T106] R10: dffffc0000000000 R11: fffff940001523a9 R12: ffff88802a475018 [ 282.396141][ T106] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 282.404141][ T106] ? dbAdjTree+0x448/0x4d0 [ 282.408589][ T106] ? dbAdjTree+0x448/0x4d0 [ 282.413027][ T106] ? lock_page+0x2b0/0x2b0 [ 282.417482][ T106] dbJoin+0x238/0x300 [ 282.421489][ T106] ? PageHeadHuge+0x8f/0x1c0 [ 282.426137][ T106] dbFreeBits+0x4e1/0xda0 [ 282.430500][ T106] dbFree+0x32e/0x640 [ 282.434517][ T106] txFreeMap+0x9e2/0xde0 [ 282.438797][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 282.444636][ T106] xtTruncate+0xcc0/0x2d10 [ 282.449103][ T106] ? xtInitRoot+0x160/0x160 [ 282.453651][ T106] ? mapping_evict_folio+0x520/0x520 [ 282.458973][ T106] ? __lock_acquire+0x7d10/0x7d10 [ 282.464047][ T106] ? do_raw_spin_lock+0x128/0x2f0 [ 282.468144][T10779] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 282.481839][ T106] ? memset+0x1e/0x40 [ 282.485849][ T106] ? __dquot_initialize+0x213/0xcd0 [ 282.491089][ T106] jfs_free_zero_link+0x358/0x4b0 [ 282.496149][ T106] ? inode_wait_for_writeback+0x1df/0x220 [ 282.501898][ T106] ? jfs_write_failed+0x190/0x190 [ 282.507477][ T106] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 282.513405][ T106] ? do_raw_spin_lock+0x128/0x2f0 [ 282.518464][ T106] ? bit_waitqueue+0x30/0x30 [ 282.523100][ T106] jfs_evict_inode+0x359/0x430 [ 282.527985][ T106] ? evict+0x4c3/0x8d0 [ 282.532100][ T106] ? jfs_write_inode+0x220/0x220 [ 282.537080][ T106] evict+0x4c9/0x8d0 [ 282.541036][ T106] ? proc_nr_inodes+0x2f0/0x2f0 [ 282.545916][ T106] ? do_raw_spin_unlock+0x11d/0x230 [ 282.551155][ T106] ? _raw_spin_unlock+0x24/0x40 [ 282.556472][ T106] ? iput+0x768/0x980 [ 282.560485][ T106] jfs_lazycommit+0x425/0xa70 [ 282.565193][ T106] ? txFreelock+0x5a0/0x5a0 [ 282.569727][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 282.575650][ T106] ? do_task_dead+0xd0/0xd0 [ 282.580191][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 282.586147][ T106] ? __kthread_parkme+0x162/0x1c0 [ 282.591209][ T106] kthread+0x29d/0x330 [ 282.595304][ T106] ? txFreelock+0x5a0/0x5a0 [ 282.600008][ T106] ? kthread_blkcg+0xd0/0xd0 [ 282.604630][ T106] ret_from_fork+0x1f/0x30 [ 282.609097][ T106] [ 282.612261][ T106] Kernel Offset: disabled [ 282.616691][ T106] Rebooting in 86400 seconds..