last executing test programs: 2m48.297868278s ago: executing program 0 (id=604): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 2m48.121933498s ago: executing program 0 (id=606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x23, 0x5, {0x5, 0xa, '\x00\x00 '}}, 0x0, 0x0, 0x0}, 0x0) 2m46.153836724s ago: executing program 0 (id=618): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x480, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m45.69809623s ago: executing program 0 (id=624): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrquota}, {@nodiscard}, {@noinit_itable}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m45.19495709s ago: executing program 0 (id=632): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m44.229796427s ago: executing program 0 (id=641): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) 2m43.871946668s ago: executing program 32 (id=641): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) 54.578659151s ago: executing program 2 (id=1851): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffff"], 0x24}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) 54.365323304s ago: executing program 2 (id=1853): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000002a40)={[{@uid}, {@type={'type', 0x3d, "a5efd8b9"}}, {@nls={'nls', 0x3d, 'cp855'}}, {@uid}, {@part={'part', 0x3d, 0xb}}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x70c, &(0x7f0000003800)="$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") mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x201009, 0x0) mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 54.007456305s ago: executing program 2 (id=1857): syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfa, 0x156, &(0x7f0000000340)="$eJzskL9rGmEch59Xz1NLrRYstIWWQoeKxXqe2K2Dlkod7EGLS6eAXoigURSCW37MGfIHOCRLJnEIGTMkZjJRCObvcAsEshjeu1OyZn+f5e59vh8+749fP6YJYuDH5Wer2e7Y3a5d+/TXKhf/nZyevZI+CIScRLPdkeGamz/Pw4b8ajDfdfVlxAc07G/VVqOmA3lIAAUNqAcwcLMvpIuHWK837IznEp9h9AbHmUung+65rOfea1CIus54gMURfJF9r1n13QG9fsC7WSp5/MGf9xb0+l+Hg6s/k3Eplfxo75vFd84LVGx5XiHnt+lx6iY9HMymk8W2VbamWdP8njUyhpGbWdeTUm7nAO33yy34LyD8pE+XHRXYE9AXMHD65hfLva1QNBgPg28zBkJORATB6PDeagov406qa28DS8PqR6FQKBQKhUKhUCgUiufyGAAA//+qM1mm") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x50000, 0x46) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 53.745152911s ago: executing program 2 (id=1859): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16], 0x6, 0x2ae, &(0x7f0000001180)="$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") mkdir(&(0x7f0000001940)='./file0\x00', 0x40) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 53.253927169s ago: executing program 2 (id=1862): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53a, &(0x7f0000000e00)="$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") readlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)=""/72, 0x48) readlink(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180)=""/186, 0xba) 52.57042685s ago: executing program 2 (id=1869): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) 52.185343022s ago: executing program 33 (id=1869): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) 48.609763841s ago: executing program 3 (id=1902): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x23, &(0x7f0000000200)="74f2d32ef474b7eaa3914e3b6c1a4aa257c6531b6df41a9c74a3202cfc043dce41127e"}], 0x1}) 45.358330402s ago: executing program 3 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 45.22580782s ago: executing program 3 (id=1925): unshare(0x28000600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0643, 0x0) pwritev(r0, 0x0, 0x0, 0xee, 0x4200008) 45.019200192s ago: executing program 3 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 44.866446931s ago: executing program 3 (id=1928): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) write(r0, &(0x7f0000000100)="51c7de00", 0x4) 44.222396699s ago: executing program 3 (id=1935): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) 43.979441563s ago: executing program 34 (id=1935): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) 4.409617371s ago: executing program 7 (id=2287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 4.246194161s ago: executing program 5 (id=2289): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000001f80), 0x34, 0x181002) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000005c0)=""/89) 3.536431333s ago: executing program 5 (id=2294): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa22e}) 2.953232367s ago: executing program 5 (id=2300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.590472088s ago: executing program 5 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) 2.429316538s ago: executing program 4 (id=2305): setresuid(0xee00, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 2.251595838s ago: executing program 1 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.153897253s ago: executing program 5 (id=2307): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IQ/+AHrhy48SJSDYSqCcGjfd54tnNbteu45215/WS7JnPPDP2M37v7A/vzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDtVZE3Ph5WrAS8X/RiWhHLJX1akQsra7k9bsR8VzsNcezEdFbiCi33/v2dMSrEfHx2Yid3c31cvHlA/bju3/82+9+eOatv/6hd/E/f7rXeW3Sevfv/+rff35wtH0GAACApimKomill/nn0uv7dt2dAgBmIj/+F0lefurrX//jrb/MU3/UarVarZ5BXVWM96BaRMRWdZvyOYO34wHghNmKT+ruAjWSf6N1I+JM3Z0A5lqr7g5wLHZ2N9dbKd9W9fFgddCezwUZyn+r9ej6jknTaUbPMZnV7Ws7OvHMhP4szagP8yTn3x7N/8agvZ/WO+78Z2VS/v3BpU+Nk/PvjOY/4vTk3x6bf1Pl/LuHyr8jfwAAAAAAmGP5//8rNb//u3D0XTmQT3v/d3VGfQAAAAAAAACAJ+2o4/89Yvw/AAAAmFvla/XSb87uL5v0WWzl8uutiKdG1gca5qPBZLnufgAAAAAAAAAAAABAk3QH5/Beb0X0IuKp5eWiKMqvqtH6sI66/UnX9P2HJqv7Th4AAAY+PjtyLX8rYjEirkd777P+esvLy0WxuLRcLBdLC/n5bH9hsViqvK7N03LZQv8AT4i7/aL8YYuV7aqmvV6e1j7688rf1S86B+jYE9JLf80JzTWFDQDJ4NFoxyPSKVMUT0968gFDHP+n0Eqs1H27Yv7VfTMFAAAAjl9RFEUrDfN3Lo3v1667UwDATOTH/9H3BQ5UR4xvbx9yfbVarVar1TOpq4rxHlSLiNiqblM+ZzAcPwCcMFvxSd1doEbyb7RuRDxXdyeAudaquwMci53dzfVWyrdVfTxYHbTnc0GG8t9q7W2Xtx83nWb0HJNZ3b62oxPPTOjPszPqwzzJ+bdH878xaO+n9Y47/1mZlH9/75K55sn5d0bzH3F68m+Pzb+pcv7dQ+XfkT8AAAAAAMyx/P//Fe//5l0GAAAAAAAAgBNnZ3dzPV/3mt///9yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy//LIep3K/MM394//f+1urv/+3j//P08Pmv9CnmmlW1Yr3SJa6Te1uml6lL173Hav0y9/U6/V7nTTOT9F7524FbdjIy4NrdtOf4/99rWh9rKnvaH2y0Pt3cfarwy199LnDhRLuf1CrMdP4na8vddeti1M2f/FKe3FlPacf8f9fyPl/LuVrzL/5dTeGpmWHn7Yfuy4r07H/Z43bn3+l5eOf3em2o7Oo32rKvfvfA392fubnOnHz+5u3Llw/+a9e3fWIk2Gll6ONHnCcv69va+F/fv/Fwbt+X6/erw+/LB/6PznxXZ0J+b/QmW+3N+XZty3OuT8++kr5/92ah9//J/k/Ccf/y/X0B8AAAAAAAAAAAAAAAD4NEVR7F0i+kZEXE3X/9R1bSYAMFv58b9I8nK1Wq1Wz0sdK3vf56Y/6pNcVxXjvV4tIuKj6jblc4ZfjPthAMA8+29E/L3uTlAb+TdY/ry/cvpi3Z0BZuru+x/86Obt2xt37tbdEwAAAAAAAADgs8rjf65Wxn9+MSJWRtYbGv/1zVg96vif3TzzaIDRJzzQ9wTb7X6nXRlu/PnYG5/7wqTxv8/H4+N/5zFxO9X9mKA3pb0/pX1hSvvi2KX7aY290KMi5/98ZbzzMv9zI8OvN2H819Ex75sg53++cnsu8//SyHrV/Ivfzl3+WwddcTvaQ/lfvPfeTy/eff+DV269d/PdjXc3fnxlbe3SlatXr127dvGdW7c3Lg2+H0+v50DOP4997TzQZsn558zl3yw5/y+kWv7NkvP/Yqrl3yw5//x8T/7NkvPPr33k3yw5/5dSLf9myfl/JdXyb5ad3c2FMv+XUy3/ZsnH/1dTLf9myfm/kmr5N0vO/0Kq5d8sOf+LqT5A/j4e/hTJ+ed3uBz/zZLzX0v1lPyXZtUvZiPnfznVjv9myflfSbX8myXn/2qq5d8sOf+vpVr+zZLzv5pq+TdLzv/rqZZ/s+T8r6Va/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y/7n/5sxY+aUzfTjM29e9z0TAAAAAAAAAAAAADBqFich172PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOwgRCc1MDaMcY4S3Z9iS+0LiYQLgFKgYRCL9iud20WfMNrl0CRbBookTAqqqiafmgLKGojVRVWxQdapTQfql4+kfYD/VJRVUJqVJkooCK1Fc1WM+d9X8/Mzs6MveP12XN+Pyl5dmfOmfPOmfecnWfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTa/dfaLtSzL6v81/rchy15S/3rtxIbGbW+61SMEAAAAluv/Gv9/YX264VAfKzUt8/ev+e63FhYWFrIPD//e6FcXFtIdE1k2uibLGvdFV/79I7XmZYLHsvHaUNP3Qz02P9zj/pEe94/2uH+sx/1retw/3uP+RTtgkbX572MaD7a18eWGfJdmd2Sjjfu2dljrsdqaoaH4u5yGWmOdhdHj2Vx2MpvNpluWz5etNZZ/enN9W+/M4raGmra1qT5DfvTZY3EMtbCPt7Zs69pjRj98Szbx4x999tifnL96V6facze0PF4+zu1b6uP8fLglH2stW5P2SRznUNM4N3V4TYZbxllrrFf/un2cL/Q5zuFrw1xR7a/5eDbU+PrZxn4aaf61XtpPm8Jt/31PlmWXrg27fZlF28qGsnUttwxde33G8xlZf4z6VHp5NnJd83RzH/O0Xme2ts7T9mMivv6bw3ojS4yh+WX64efGFr3u1ztPo/qzXupYaZ+Dgz5WijIH47x4tvGkH+84B7eG5//ZbUvPwY5zp8McTM+7aQ5u6TUHh8aGG2NOL0Ktsc61ObizZfnhxpZqjfrctu5zcOr8qbNT85/+zBvnTh09MXti9vTunTund+/du3///qnjcydnp/P/3+DeLr512VA6BraEfRePgde3Lds8VRe+PrjjcLzLcbihbdlBH4cj7U+utjIH5OI5nR8bD9d3+vjloWyJY6zx+uxY/nGYnnfTcTjSdBx2/JnS4Tgc6eM4rC9zdkd/71lGmv7rNIab9bNgQ9McbH8/0j4HB/1+pChzcDzMi3/dsfTPgk1hvI9PXu/7keFFczA93XDuqd+S3u+P72+UTvPy7vodt41lF+Znz9336NHz58/tzEJZEa9omivt83Vd03PKFs3Xoeuer4fmXvP43R1u3xD21fgb6/8bX/K1qi+z577ur1Xjp1vn/dly664slAFb6f3Z6ad5fX+mXrLL/qwv8/mp5b8XT31p0/l3dInzb+z7X8y3lx7qseHRkfz4HU57Z7TlfNz6Uo00zl21xrZfmOrvfDwa/lvp8/EdXc7HG9uWHfT5eLT9ycXzca3XbzuWp/31HA/z5OR09/NxfZmNu653To50PR/fE2ot7P83hE4h9UVNc2epeZu2NTIyGp7XSNxC6zzd3bL8aOjN6tt6ateNzdPt9+SPNZye3TUrNU8n2pYd9DxN56ul5mmt12/fbkz76zke5sUdu7vP0/oyz+xZ/rlzbfyy6dw51msOjg6P1cc8miZhfr5fWBvn4H3ZsexMdjKbadw71phPtca2Ju/vbw6Ohf9W+ly5scsc3N627KDnYPo5ttTcq40sfvID0P56jod58cT93edgfZm37Rvse9ft4Za0TNN71/bfry31O6+723bTzfydV32cf7uv++9m68uc3H+9fWb3/XRvuOW2Dvup/fhd6piayVZmP20M47y6f+n9VB9PfZmvHuhzPh3KsuziJx9o/L43/H3lLy5871stf3fp9Dedi5984Pnbj//d9YwfgNXvxbysy3/WNf1lqp+//wMAAACrQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/Gt12de/FilpL5C0G8P+2Gh/LlYsZ1Onw/sXBN/fYHnpz9yV9d7G/bQ1mW/fSh3+y4/MaH4rhyE2GcVx5svX3xihf72v6RR64t15xf/1p4/Ph8+p0GnSK401mWPb3+y43tTHzkcqM+89CRRv3Apccfqy/zwoH8+7j+c6/Il//DEP49dPxoy/rPhf3wg1Cn3915f8T1vnn5DZv2feja9uJ6tS0vbTztJz6aP278nJyvPJYvH/fzUuP/6y899c368o++rvP4Lw51Hv9T4XGffPDqXH3G/c+r8+WbX4P693G9L4Txx+09Gda/7xvf6Tj+K1/Mlz/79ny5I6HG7W8P3299+9W55v31aO1oy/PK3pEvF7c//b3fadwfHy8+fvv4xw9fbtkf7fPjmX/OH2eqbfl4e9xO9Jdt268/TvP8jNt/6rePtOznXtu/8oHnXl1/3Pbt39u23HDb+u2f2PRHX/hyx+3F8Rz687Mtz+fQ+8NxHLb/xEfDfAz3/++VL7dsNzry/tbzT1z+axsutjyf6J0/zrd/5c0nGvU/Jn7yB7e95PaXXnptfd9l2bMfzB+v1/ZP/PGZlvF//c4djdcj3h8z+u3bX0rc/rlPTZ4+M39hbqZprzY+O+c9+XjWjK9dVx/v+nBubf/+8JnzH5s9NzE9MZ1lE+X9CL0b9o1Qn8/Lpetdf8cj4fW8+/efXrftn74Ub/+Xh/PbL787/7n1+rDcV8LtG/LXb6G2zO0/sfnOxvFdeyb/viXHPgCbtv7n/r4WDM+//X1BnO9nX/mxxn6o39f4uRGP62WO//sz+eN8O+zXhfDJzFvuvLa95uXjZyNc/mB+vC97/4XTXHxd/zS83u/9Qf74cVzx+X4/vI/5zsbW812cH9++ONT++I1P8bgUzifZpfz+uFTc35dfuLPj8OLnkGSX7mp8/7vpce66rqe5lPlPz0+dnDt94dGp87Pz56fmP/2Zw6fOXDh9/nDjszwPf7zX+tfOT+sa56eZ2b17sum1WZadyaZX4IR1c8Zf/6q/8Z995NjMvultM7PHj144fv6Rs7PnThybnz82OzO/7ejx47Of6rX+3MzBnbsO7N63a/LE3MzB/QcO7D4wOXf6TH0Y+aB62Dv9icnT5w43Vpk/uOfAzvvv3zM9eerMzOzBfdPTkxd6rd/42TRZX/s3Js/Nnjx6fu7U7OT83GdmD+48sHfvrp6fBnjq7PH5ialzF05PXZifPTeVP5eJ842b6z/7eq1POc3/W/5+tl0t/yC+7H337k2fz1r35OeWfKh8kbYPEL0aPovmH192dn8/38e+fzTUpCL9PwAAAFRB7PvHQk30/wAAAFAase9fE2qi/wcAAIDSiH3/eKhJRfp/+X/5//7y//n9g8z/d8rPZ33l/0fl/1co/3/2k3mudLXn/2N+Xv6/Gm5x/n/Z25f/l/8vX/6///z8ah+//L/8P4sVLf8f+/61WVbJ/h8AAACqIPb960JN9P8AAABQGrHvvy3URP8PAAAApRH7/peEmlSk/5f/7yv/v6tX4Kr8+f/BX///xvP/rv8v/5/rK/8fXxz5/8q47vz9hx5u+Vb+P5D/l/+X/5f/l/9n2UaXvOdW5f9j3397qElF+n8AAACogtj3vzTURP8PAAAApRH7/vWhJvp/AAAAKI3Y928INalI/y//7/r/8v/y/6XO/y/3+v9Ng5H/Xx1c/787+f8ebjj/Pz64/P/6pYcn/z/g8Y8OdvzFzv/3HL78PzdF0a7/H/v+l4WaVKT/BwAAgCqIff/LQ030/wAAAFAase9/RaiJ/h8AAABKI/b9d4SaVKT/X07+P2au5f/l/+X/c/L/uVLl/7te/z//Sv6/WOT/uyt//j9/P+P6/zemcvn/AY+/2Pn/QV//f/TB9vXl/+mkaPn/2Pe/MtSkIv0/AAAAVEHs++8MNdH/AwAAQGnEvv9VoSb6fwAAACiN2PdvDDWpSP/v+v/y//L/8v/y/5233zv/n5P/Lxb5/+7Kn/+/Vdf/l//P5P+rlf/v8OZX/p9Oipb/j33/XaEmFen/AQAAoApi3393qIn+HwAAAEoj9v0/E2qi/wcAAIDSiH3/plCTivT/8v/y//L/1cr/3zsm/y//X27y/93J//cg/y//L//f5/X/F7ue/P+aXg9GaRQt/x/7/leHmlSk/wcAAIAqiH3/a0JN9P8AAABQGrHvf22oif4fAAAASiP2/ROhJhXp/+X/y5X//7O/eeK1mfy//H+P7Zc0/x+ngfx/xcn/dyf/34P8v/z/Ks3/v+u7eV0t+X+qo2j5/9j3bw41qUj/DwAAAFUQ+/4toSb6fwAAACiN2PffE2qi/wcAAIDSiH3/1lCTivT/8v/lyv9H8v/y/922X9L8fyL/X23y/x00HaTy/z3I/8v/r9L8fzaw6//Hd7/y/wxG0fL/se9/XahJl8ZvsJ/EAwAAANxsse/fFmpSkb//AwAAQBXEvv/1oSb6fwAAACiN2PdvDzWpSP8v/y//L/8v/y//33n78v+r0+rK/69ZdEvRrv8/Jv8v/y//X7H8v+v/M1hFy//Hvv8NoSYV6f8BAACgCmLfvyPURP8PAAAApRH/5V3+7171/wAAAFBGse+fDDWpSP8v/y//X6X8f03+X/5f/r/0Vlf+f7Gi5f9d/1/+X/5f/l/+n+UoWv4/9v1vDDWpSP8PAAAAVRD7/vtCTfT/AAAAUBqx758KNdH/AwAAQGnEvn861KQi/b/8v/x/lfL/rv8v/y//X37y/93J//cg/1+q/H+Wyf/XBy//z61UtPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/x/5+3L/69O8v/dyf/3IP+/Mvn/Tm+cVtP4l1DI/L/r/3OLFS3/H/v++0NNKtL/AwAAQBXEvn9vqIn+HwAAAEoj9v37Qk1C/3+T/nkSAAAAsIJi378/1KQif/+X/y9J/v+3/qFl2/L/8v/dtj+Y/P9a+f9Q5f+LpaT5//bD4obJ//cg/3/T8vPZ0ECGeMvGL/8v/8+NKVr+P/b9B0JNKtL/AwAAQBXEvv9NoSb6fwAAACiN2Pf/bKiJ/h8AAABKI/b9PxdqUpH+X/6/JPn/NvL/8v/dtu/6//L/ZVbS/P/AlCr/PyT/v5ry//3k51f7+OX/5f9Z7Obn/+NX/eX/Y99/MNSkIv0/AAAAVEHs+38+1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt9/KNSkIv3/DeT/G3fK/7eS/28dv/x/5/lRrfz/m7N2Rcz/1yeP/H+5FDj/P9rP9uX/Xf9f/n9Fxt/+o2Yg45f/l/9nsaJd/z/2/W8JNalI/w8AAABVEPv+B0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/+/6//L/8v/y/67/33n78v+rU4Hz/32R/5f/l/9fveOX/5f/Z7Gi5f9j3/9gqElF+n8AAACogtj3vz3URP8PAAAApRH7/neEmuj/AQAAoDRi3//OUJOK9P/y//L/8v/y//L/nbcv/786yf93J//fg/y//L/8v/w/A1W0/H/s+98ValKR/h8AAACqIPb9D4Wa6P8BAACgNGLf/+5QE/0/AAAAlEbs+98TalKR/l/+X/5f/l/+X/6/8/bl/1cn+f/uVib/P5oeRv5f/l/+X/5f/r/aipb/j33/e0NNKtL/AwAAQBXEvv8XQk30/wAAAFAase9/X6iJ/h8AAABKI/b9vxhqUpH+X/5f/r9Y+f+Fi83ryf/L/2eDyv/XV5L/rwT5/+5c/7+HDvn/NfL/8v/y//L/3LCi5f9j3//+UJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwAAQGnEvv/hUJOK9P/y/5XM/6enXLz8v+v/95P/H1kv/5+5/r/8/xLk/7uT/+/B9f/l/+X/5f8ZqKLl/2Pf/0ioSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+Xwo10f8DAABAacS+/8OhJhXp/+X/K5n/L/D1/8uW/x9pmR9Vuv7/eNPrmeal/L/8/wqQ/+9O/r8H+X/5/yLn/8NsXrvE+vL/FFHR8v+x7/9IqElF+n8AAACogtj3/3Koif4fAAAASiP2/b8SaqL/BwAAgNKIff+vhppUpP8vYf7/Uib/L/9fmPx/6/yoUv7f9f8Xk/9fGfL/3cn/9yD/L/9f5Px/D/L/FFHR8v+x7/+1UJMlG7/n/6uPpwkAAAAUSOz7PxpqUpG//wMAAEAVxL7/cKiJ/h8AAABKI/b9R0JNKtL/lzD/v8zr/8crqvbK/7deeVX+v3X88v9Zh/kxJP8v/y//vwIGl/9/1e1ZJv8v/y//L/8v/y//z3IULf8f+/6joSYV6f8BAACgCmLf/+uhJvp/AAAAKI3Y9x8LNdH/AwAAQOGNpERwd7Hvnwk1qUj/fwvz/6PFzP+X7fr/tfDYNz///1P5f9f/D+T/O5P/Xxmu/9+d/H8P8v/y//L/8v8MVNHy/7Hvnw01qUj/DwAAACWWfh0c+/7joSb6fwAAACiN2PefCDXR/wMAAEBpxL7/Y6EmFen/Xf+/7Pl/1/8vZv5/pGV5+f+c/L/8/yDI/3c3wPz/WByf/L/8fyT/L/8v/0+7ouX/Y98/F2pSkf4fAAAAqiD2/R8PNdH/AwAAQGnEvv8ToSb6fwAAACiN2Pf/P3v30WTXVfVx+NhYaQQfgbFHDGFkPgJTZlQxxUSTgyRyBpNzMBmTMybYYHLOOZicozHBUCXK0lpLat3b57bUR33P2ft5JgurLPeV3fit/6v6se8Xt3Sy//X/+v/e+//LhuGE9//1/+u+vv5/mfT/47z/v4H+X/+v/9f/M6m59f+5+6+OWzrZ/wAAANCD3P33j1vsfwAAAGhG7v4HxC32PwAAADQjd/8D45ZO9r/+X//fe/8/bOX9/51/vv7/DP2//n8KK/39Fev/vN2i8F37/7vd/Zr76P/1//r/Ufp//b/+n/PNrf/P3f+guKWT/Q8AAAA9yN3/4LjF/gcAAIBm5O5/SNxi/wMAAEAzcvdfE7d0sv/1//p//f8i+v/L8q9xyfv/m/T/+v9l8/7/OP3/Bvp//b/+X//PpObW/+fuf2jc0sn+BwAAgB7k7n9Y3GL/AwAAQDNy9z88brH/AQAAoBm5+x8Rt3Sy//X/+n/9/yL6/9tuOH7Y+//n/Xr0//r/dfT/4/T/G+j/9f/6f/0/k5pb/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/6//1/xP2/yeHYbhk/f+g/z/v16P/1/+vc91w9t8J+v9V+v8NNvT/w6D/H7Pnfn79L285n38X+n/9P6vm1v/n7n9s3HLPYTh8sb9IAAAAYFZy9z8ubunk9/8BAACgB7n7j8ct9j8AAAA0I3f/ibilk/2v/9f/6/+X8v6//l//r//fC+//j9t//3/lXa6+b7/9v/f/x3n/f+r+/47vDP0/yza3/j93/8m4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7n9C3GL/AwAAQDNy9z8xbulk/+v/W+v/77Tj553T/5+uXfT/+v+L6f8P1V9J/6//nz/9/zjv/29w+l9zx+oP9f/6f+//6//Zn7n1/7n7nxS3dLL/AQAAoAe5+58ct9j/AAAA0Izc/U+JW+x/AAAAaEbu/qfGLZ3sf/1/a/3/zp/n/X/9/7qv7/1//X/LLq6/v7L+Zy70/6Hr/r+B9/8v8rtm2/38fm378+v/9f+smlv/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r/5fR/+dX0P/r/y99/5/0/8vk/f9x+v8NWun/L9K2+/mlf379v/6fVXPr/3P3Pytu6WT/AwAAQA9y9z87brH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ//p//f8y+n/v/+v/vf+v/98b/f84/f8G+n/9v/5f/8+k5tb/5+6/Nm7pZP8DAABAD3L3Py9usf8BAACgGbn7nx+3XMj+PzT1pwIAAACmlLv/BXFLJ7//r//X/+v/9f/6//VfX/+/TPr/cfr/DTrv/4cT+n/9v/6fac2o/z/nZx0dXhi3dLL/AQAAoAe5+18Ut9j/AAAA0Izc/S+OW+x/AAAAaEbu/pfELZ3s//b6/yNL7f9P53xt9f/HhmHQ/w+d9v/HzvnnWd+X+n/9/wHQ/4/T/2/Qef+/7X5+6Z9f/6//Z9WM+v/Tf5y7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/m+v//f+/zCb/t/7/+d/f/TU/3v/f5X+/2Do/8fp/zfQ/+v/9f/6fyY1t/4/d/8r46bDhy76lwgAAADMTO7+V8Utnfz+PwAAAPQgd/+r4xb7HwAAABbq2pUfyd3/mrilk/2v/5+2/z98zo/p//X/539/6P/1//r/S29Tf7/pb5n+P+j/9f/6f/2//p8JzK3/z93/2rilk/0PAAAAPcjdf13cYv8DAABAM3L3vy5usf8BAACgGbn7Xx+3dLL/9f/e/9f/6/839f9nn0PV/+v/58/7/+MW0f/frP/X/y/z80/Q/x85+x/1/7ThAvr/U6dOHb/k/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+b4hb7HwAAAJqRu//NcUsn+1//32n/n9/qy+r/TwyD/t/7//p//f84/f+4RfT/3v/X/y/083v/X//Pqrm9/5+7/y1xSyf7HwAAAHqQu/+tcYv9DwAAAM3I3X993GL/AwAAQDNy978tbulk/+v/O+3/vf+v/9f/H3T/f/ug/z8Qi+j/j+3+9efe/5/U/+v/R3TX/9/rHjv+UP+v/2fV3Pr/3P1vj1s62f8AAADQg9z974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KmKzrZ//p//b/+X/+v/1//9Q/4/f/DwzDo/yewiP5/xNz7/2ne/z//v+Vn6f/1/0v+/Pp//T+r5tb/5+5/d9zSyf4HAACAHuTuf0/cdMT+BwAAgGbk7n9v3GL/AwAAQDNy978vbulk/+v/9f/6f/1/8/3/yUX0/97/n4j+f9w8+v/d6f/1/0v+/Pp//T97t63+P3f/++OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/19I/5+fU//fVv9/ZHb9/9Edf71O3v/X/09E/z9O/7+B/l//r/+/Vv/PlOb2/n/u/g/HLZ3sfwAAAOhB7v4b4tb/69b+BwAAgGbk7v9I3GL/AwAAQDNy9380bulk/+v/9f/e/9f/N//+v/6/K/r/cfr/DfT/+n/9v/f/mdTc+v/c/R+LWzrZ/wAAANCD3P0fj1vsfwAAAGhG7v4b4xb7HwAAAJqRu/+muKWT/a//1//r//X/+v8z/wz1/23Q/487mP7/mP5f/1/9/GXx3wL9v/5/08+nTXPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+2+OW+x/AAAAWKQr1vxY7v5PxS2d7H/9v/5f/6//1/+v//r6/2XaSv+f3xT6f+//h376/7vu+KOlvf9//v/90v/r/5ne3Pr/3P2fjls62f8AAADQg9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/1399/f8yef9/nP5/A/3/Vt/PX/rn1//r/1k1t/4/d//n45ZO9j8AAAD0IHf/F+IW+x8AAACakbv/i3GL/Q8AAADNOL37My7rcP/r//X/+n/9v/5//dfX/y+T/n+c/n8D/b/+X/+v/2dSc+v/v3T6Zx0dvhy3dLL/AQAAoAe5+78St9j/AAAA0Izc/V+NW+x/AAAAaEbu/q/FLZ3s/733/6cG/f/u9P87P//0/f+pU6eO6//1/zt/PWf7/1v0/xT9/zj9/wb6f/2//l//z6Tm1v/n7v963NLJ/gcAAIAe5O7/Rtxi/wMAAEAzcvd/M26x/wEAAKAZufu/Fbd0sv+9/z+D/v+o/t/7//r/wfv/q/3/5Wf+paz/vzD6/3H6/w1a7P+P7v2Xv+1+fr+2/fn1//p/Vs2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/D67/v+PvXS/v/x8b1n9+/b/+X//v/f9LTf8/Tv+/QYv9/wXYdj+/9M+v/9f/s2pu/X/u/u/HLTuH36EL+1UCAAAAc5K7/wdxSye//w8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/8/g/f8G+3/v/6///tD/z7r/v1z/3wb9/zj9/wb6f/2//n+i/j+/m/X/vZtb/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbjln/69ru1uh/9f/6//1//r/9V9f/79M+v9xe+3/jwz76/+T/l//r//vtf/3/j9nzK3/z93/s7jF7/8DAADA4hza5cdz9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MW269fFsf6UDp//X/+n/9v/5//dfX/y+T/n/cLN//v/7G+o/6/yb6/6v0/230/8Og/2f/5tb/5+7/Vdzi9/8BAACgGbn7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex//b/+f5/9/+k0U/9/hv7/DP3/evr/g6H/HzfL/v8c+v8m+n/v/zfS/3v/nynMrf/P3f+7uKWT/Q8AAAA9yN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvf/MW7pZP9vrf+Pv9X6/8X3/97/1//r//X/s6L/H6f/30D/r//X/+v/mdTc+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v6/xC32PwAAADQjd/9f45ZO9r/3//X/+n/9v/5//dfX/y+T/n+c/n+9+gel/9f/6//1/0xqbv1/7v6/xS2d7H8AAADoQe7+v8ct9j8AAAA0I3f/rXGL/Q8AAADNyN3/j7ilk/2v/9f/6//1//r/9V9f/79M+v9x2+z/733nzV/W+/9b7//zI+j/9f/6fyYxt/4/d/9tcUsn+x8AAAB6kLv/n3GL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7f0P8fqT9R/z9K/7/z8+v/139/NNz/7whc9f/r6f8Phv5/3HLe/4+fr//fwfv/8/78+n/9P6vm1v/n7v9P3NLJ/gcAAIAe5O6/PW6x/wEAAKAZufv/G7fY/wAAANCM3P3/i1s62f/e/19S/3+V/l//P9f+fwf9/3r6/4Oh/x+3nP7f+//r6P/n/fn1//p/Vs2t/8/d//8AAAD//ym6NlQ=") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 2.147156224s ago: executing program 7 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd6600ffdbdf251a000000070021006262000005009207000000000800228004"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x2400c000) 2.080778788s ago: executing program 6 (id=2309): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dd1b1f0fa2c6e6c733d6d6163726f6d616e69616e2c756d61736b3d30303030303030303030303030303030303030303033372c6e6f626172726965722c00"], 0x3, 0x6be, &(0x7f0000001640)="$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") truncate(&(0x7f0000000180)='./file1\x00', 0x121) truncate(0x0, 0x42d9) 1.71132563s ago: executing program 4 (id=2310): r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x4e20, @private=0xa010101}, 0x10) 1.665257092s ago: executing program 6 (id=2311): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0x80}}, 0x48) 1.640163284s ago: executing program 1 (id=2312): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 1.543979319s ago: executing program 7 (id=2313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.386216669s ago: executing program 4 (id=2314): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES64], 0x8, 0x2ed, &(0x7f00000004c0)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.328867062s ago: executing program 6 (id=2315): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.326033362s ago: executing program 1 (id=2316): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 1.208282079s ago: executing program 7 (id=2317): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x11}, 0x38) 1.081870786s ago: executing program 4 (id=2318): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 1.001699831s ago: executing program 6 (id=2319): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1}) 954.822094ms ago: executing program 7 (id=2320): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20000000) 751.112566ms ago: executing program 7 (id=2321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f804090581034000040000d449f67efee299fb1637a0"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 650.066772ms ago: executing program 1 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44) 607.472484ms ago: executing program 6 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a74000000060a010400000000000000000a0000010900010073797a310000000048000480440001800c0001007061796c6f6164003400028008000840000000000800054000000009080006400080000208000440000000a3080002400000000208000340000000520900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 434.793914ms ago: executing program 4 (id=2324): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 382.261817ms ago: executing program 5 (id=2325): memfd_create(&(0x7f0000000300)='[5\xdbX\xae\x03\x82\x00\x00\x00\x00\x00\x00\xd1md\xe7\xe2\x7f\x9b\xb7\xfbSR\x10\xf3\xfc\x00\x97\xba9\xd8\x14o\xd4`\xd9,\x00\x00\x00\x00\xe8\xf1||\xa0\xfd\xd2{~\xbd4_\xf0os\x8ez\xadT\xc8\f\xe5\x89\xbfA:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\x17QH\xd1\xca\x97\b\x00\x1e\x80\xd6\xd5%N&\xf8#\x80z88L\xd4_\xe8\xd1\x9f\n\xd6o\xa3T(\xc1X\xf7\xed\x1f%{\f\xdb2\xdf=g\x9f\\UbT\x98\x05\x18\xf4\xc0\xd1L\xae\x18\x05T\xca\x1d\x88\xc0\xefw\xa9\f\xf0M\xfd\xb3\x86U\x1d)\xd6\xb5iSUg\xda\xba\x00\xde\x99\f\xb0\x13\xa3\xbeS\xaaK\x84\x8a\xf3\x9d\v\xd8\xc7\xa3\x05\xae|{\x99|\x95,\x1e\xbd\xd4Z}\xcd\xdfpc\x9eH\xe6\xb5T\xf9\x0f<\x88\xe7C\xdd\x94?\xce\xf3\rJ\b\x94m\xae&wb\x94\xc2\x8c$\xd3\x14\xf6h+m\xc1\xce\xa8\x89\xfa\xde\x8f;\x03\xe1\xa4\xceUI\x96\xfd$\x90#\x83\x8c\xbd', 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 353.444639ms ago: executing program 6 (id=2326): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@nombcache}, {@bsdgroups}, {@usrjquota, 0x22}, {@user_xattr}, {@grpquota}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@nouid32}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 344.03199ms ago: executing program 1 (id=2327): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0x20dd9f83, 0x1, 0x71e, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7c, 0x3a, 0xb763599953cb091d, {0x8, 0x6fd8f84a}, 0x3, 0xed}}) 132.101342ms ago: executing program 4 (id=2328): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) 0s ago: executing program 1 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x28, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1.254401][ T8049] Quota error (device loop1): write_blk: dquota write failed [ 211.276318][ T8049] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 211.295420][ T8049] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1421: Failed to acquire dquot type 1 [ 211.314091][ T8049] EXT4-fs (loop1): Remounting filesystem read-only [ 211.321536][ T8049] Quota error (device loop1): write_blk: dquota write failed [ 211.338196][ T8049] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 211.361981][ T8049] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1421: Failed to acquire dquot type 1 [ 211.385087][ T5049] usb 6-1: USB disconnect, device number 5 [ 211.391249][ T5049] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 211.393546][ T8049] EXT4-fs (loop1): Remounting filesystem read-only [ 211.423059][ T8049] Quota error (device loop1): write_blk: dquota write failed [ 211.435706][ T8057] loop2: detected capacity change from 0 to 128 [ 211.444153][ T8049] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 211.455724][ T8049] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1421: Failed to acquire dquot type 1 [ 211.513104][ T8049] EXT4-fs (loop1): Remounting filesystem read-only [ 211.525257][ T8049] EXT4-fs (loop1): 1 orphan inode deleted [ 211.571550][ T8049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.658314][ T8060] rtc_cmos 00:00: Alarms can be up to one day in the future [ 211.802715][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 211.846910][ T5049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 211.865211][ T5049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 211.872906][ T5049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 211.893034][ T8063] loop3: detected capacity change from 0 to 4096 [ 211.901900][ T8063] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 211.919954][ T5049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 211.941693][ T5049] rtc rtc0: __rtc_set_alarm: err=-22 [ 212.078159][ T8069] loop5: detected capacity change from 0 to 256 [ 212.159107][ T8069] FAT-fs (loop5): Directory bread(block 64) failed [ 212.209262][ T8069] FAT-fs (loop5): Directory bread(block 65) failed [ 212.239677][ T8069] FAT-fs (loop5): Directory bread(block 66) failed [ 212.264303][ T8069] FAT-fs (loop5): Directory bread(block 67) failed [ 212.285029][ T8069] FAT-fs (loop5): Directory bread(block 68) failed [ 212.315276][ T8069] FAT-fs (loop5): Directory bread(block 69) failed [ 212.321957][ T8069] FAT-fs (loop5): Directory bread(block 70) failed [ 212.372241][ T8069] FAT-fs (loop5): Directory bread(block 71) failed [ 212.394368][ T8069] FAT-fs (loop5): Directory bread(block 72) failed [ 212.424693][ T8069] FAT-fs (loop5): Directory bread(block 73) failed [ 212.680409][ T8059] loop4: detected capacity change from 0 to 32768 [ 212.859621][ T8059] XFS (loop4): Mounting V5 Filesystem [ 212.969518][ T8059] XFS (loop4): Ending clean mount [ 213.051130][ T8100] device macvlan2 entered promiscuous mode [ 213.060133][ T8095] loop2: detected capacity change from 0 to 2048 [ 213.107825][ T8095] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.152109][ T4280] XFS (loop4): Unmounting Filesystem [ 213.155497][ T8095] NILFS (loop2): mounting unchecked fs [ 213.269681][ T4386] udevd[4386]: incorrect nilfs2 checksum on /dev/loop2 [ 213.299029][ T8095] NILFS (loop2): recovery complete [ 213.353098][ T8105] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.358510][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 213.728918][ T8111] loop3: detected capacity change from 0 to 1024 [ 213.747272][ T8097] loop1: detected capacity change from 0 to 32768 [ 213.845468][ T8111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 213.877789][ T8123] loop5: detected capacity change from 0 to 1024 [ 213.961765][ T8097] XFS (loop1): Mounting V5 Filesystem [ 213.990538][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 214.060271][ T8097] XFS (loop1): Ending clean mount [ 214.075947][ T2967] hfsplus: b-tree write err: -5, ino 4 [ 214.149735][ T8097] XFS (loop1): Quotacheck needed: Please wait. [ 214.213813][ T8097] XFS (loop1): Quotacheck: Done. [ 214.425817][ T4268] XFS (loop1): Unmounting Filesystem [ 214.974679][ T8153] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 215.094967][ T8158] loop1: detected capacity change from 0 to 1024 [ 215.492285][ T8176] tipc: Started in network mode [ 215.500191][ T8176] tipc: Node identity , cluster identity 4711 [ 215.708498][ T4321] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.816101][ T8188] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1476'. [ 215.825352][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1476'. [ 215.894953][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 215.909501][ T4321] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.934054][ T4321] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.974784][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 215.997952][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1480'. [ 215.999095][ T4321] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 216.034845][ T4321] usb 4-1: Product: syz [ 216.042521][ T4321] usb 4-1: Manufacturer: syz [ 216.053656][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.072810][ T4321] hub 4-1:4.0: USB hub found [ 216.081631][ T8194] device bridge_slave_1 left promiscuous mode [ 216.094017][ T8196] nbd: must specify at least one socket [ 216.094899][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.293083][ T4321] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 216.302025][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 216.339578][ T8198] netlink: 'syz.2.1482': attribute type 21 has an invalid length. [ 216.362496][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1482'. [ 216.619397][ T8192] set_capacity_and_notify: 1 callbacks suppressed [ 216.619413][ T8192] loop1: detected capacity change from 0 to 40427 [ 216.633331][ T4321] usb 4-1: USB disconnect, device number 11 [ 216.699535][ T8192] F2FS-fs (loop1): invalid crc value [ 216.709020][ T8208] team0: Device gtp0 is of different type [ 216.723061][ T8192] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.885913][ T8192] F2FS-fs (loop1): Start checkpoint disabled! [ 216.916163][ T8192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 217.134646][ T6282] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.174742][ T46] kworker/u4:3: attempt to access beyond end of device [ 217.174742][ T46] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 217.192057][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1494'. [ 217.338110][ T6282] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 217.384867][ T6282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.392914][ T6282] usb 5-1: Product: syz [ 217.434240][ T6282] usb 5-1: Manufacturer: syz [ 217.438902][ T6282] usb 5-1: SerialNumber: syz [ 217.485803][ T6282] usb 5-1: config 0 descriptor?? [ 217.496724][ T6282] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 217.646595][ T27] audit: type=1326 audit(1770331918.773:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 217.718429][ T27] audit: type=1326 audit(1770331918.793:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 217.796425][ T27] audit: type=1326 audit(1770331918.793:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 217.880197][ T8235] loop1: detected capacity change from 0 to 1024 [ 217.909529][ T27] audit: type=1326 audit(1770331918.803:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 217.935404][ T8235] EXT4-fs: Ignoring removed nobh option [ 217.959339][ T8237] loop5: detected capacity change from 0 to 512 [ 217.966174][ T8235] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.021391][ T8237] EXT4-fs: Ignoring removed nobh option [ 218.054988][ T27] audit: type=1326 audit(1770331918.803:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.101459][ T6282] gspca_sunplus: reg_r err -71 [ 218.110236][ T6282] sunplus: probe of 5-1:0.0 failed with error -71 [ 218.137106][ T8235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.191885][ T27] audit: type=1326 audit(1770331918.803:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.229539][ T6282] usb 5-1: USB disconnect, device number 8 [ 218.323362][ T27] audit: type=1326 audit(1770331918.803:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.382470][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 218.397013][ T8228] loop3: detected capacity change from 0 to 40427 [ 218.414031][ T27] audit: type=1326 audit(1770331918.803:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.445706][ T27] audit: type=1326 audit(1770331918.803:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.469166][ T27] audit: type=1326 audit(1770331918.803:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 218.494851][ T8228] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 218.529209][ T8228] F2FS-fs (loop3): invalid crc value [ 218.571570][ T8228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.643936][ T8237] EXT4-fs (loop5): Test dummy encryption mode enabled [ 218.687895][ T8237] EXT4-fs error (device loop5): __ext4_iget:5095: inode #11: block 1: comm syz.5.1501: invalid block [ 218.741931][ T8228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.776331][ T8254] loop1: detected capacity change from 0 to 1024 [ 218.816440][ T8237] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1501: couldn't read orphan inode 11 (err -117) [ 218.969418][ T8237] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 218.998216][ T4272] syz-executor: attempt to access beyond end of device [ 218.998216][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.015492][ T4364] hfsplus: b-tree write err: -5, ino 4 [ 219.331408][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 219.569831][ T8277] loop3: detected capacity change from 0 to 512 [ 219.576604][ T8276] loop2: detected capacity change from 0 to 512 [ 219.623048][ T8277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.692637][ T8276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.714645][ T8276] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.756118][ T8277] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1509: inode has both inline data and extents flags [ 219.785829][ T8277] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1509: couldn't read orphan inode 15 (err -117) [ 219.821634][ T8277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.958849][ T6282] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 219.989838][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 220.044532][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 220.156829][ T6282] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 220.183956][ T6282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.234888][ T6282] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 220.275059][ T6282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.317554][ T6282] usb 5-1: config 0 descriptor?? [ 220.323160][ T8282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.757755][ T8317] loop3: detected capacity change from 0 to 256 [ 220.769668][ T6282] wacom 0003:056A:00DA.0015: unbalanced delimiter at end of report description [ 220.799508][ T6282] wacom 0003:056A:00DA.0015: parse failed [ 220.835879][ T6282] wacom: probe of 0003:056A:00DA.0015 failed with error -22 [ 220.898978][ T4382] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 220.992618][ T4395] usb 5-1: USB disconnect, device number 9 [ 221.112718][ T4382] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.125636][ T4382] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.134822][ T4382] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 221.143888][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.151050][ T8326] loop5: detected capacity change from 0 to 1024 [ 221.174713][ T4382] usb 3-1: config 0 descriptor?? [ 221.195161][ T4382] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 221.201934][ T8326] EXT4-fs: Ignoring removed orlov option [ 221.202011][ T8326] EXT4-fs: Ignoring removed orlov option [ 221.236382][ T8326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 221.259515][ T4382] dvb-usb: bulk message failed: -22 (3/0) [ 221.298161][ T8326] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 221.340251][ T4382] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 221.419101][ T4382] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 221.454506][ T4382] usb 3-1: media controller created [ 221.473670][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.526755][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 221.552921][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 221.561664][ T4382] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 221.616289][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 221.679939][ T4382] dvb-usb: schedule remote query interval to 150 msecs. [ 221.704560][ T4382] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 221.731311][ T4382] usb 3-1: USB disconnect, device number 10 [ 221.756957][ T8324] loop3: detected capacity change from 0 to 32768 [ 221.810488][ T4382] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 222.245839][ T8356] loop3: detected capacity change from 0 to 16 [ 222.252816][ T8356] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 222.729873][ T8363] loop4: detected capacity change from 0 to 4096 [ 222.780927][ T8363] __ntfs_error: 4 callbacks suppressed [ 222.780968][ T8363] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 222.838210][ T8363] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 222.864402][ T8363] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 222.915634][ T8363] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 222.964488][ T8363] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 223.002873][ T8363] ntfs: volume version 3.1. [ 223.022507][ T8363] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 223.050445][ T8363] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 223.107151][ T8363] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 223.143947][ T8363] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 223.184615][ T8363] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 223.349629][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1566'. [ 223.390413][ T8388] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 224.086293][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'. [ 224.301080][ T8420] loop2: detected capacity change from 0 to 1024 [ 224.359440][ T8421] loop1: detected capacity change from 0 to 2048 [ 224.397993][ T8420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.437161][ T8428] loop4: detected capacity change from 0 to 64 [ 224.457987][ T4437] udevd[4437]: incorrect nilfs2 checksum on /dev/loop1 [ 224.501556][ T4437] udevd[4437]: incorrect nilfs2 checksum on /dev/loop1 [ 224.529829][ T8420] EXT4-fs: Cannot specify journal on remount [ 224.541809][ T8421] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.615484][ T8430] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.721244][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 224.947072][ T8404] loop3: detected capacity change from 0 to 32768 [ 224.957861][ T8432] loop2: detected capacity change from 0 to 1024 [ 225.030527][ T8404] XFS (loop3): Mounting V5 Filesystem [ 225.235892][ T8404] XFS (loop3): Ending clean mount [ 225.249612][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 225.265986][ T8404] XFS (loop3): Quotacheck needed: Please wait. [ 225.336566][ T8404] XFS (loop3): Quotacheck: Done. [ 225.356444][ T8450] loop1: detected capacity change from 0 to 16 [ 225.363420][ T8450] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 225.631142][ T4325] kernel write not supported for file /sg0 (pid: 4325 comm: kworker/0:4) [ 225.679758][ T4272] XFS (loop3): Unmounting Filesystem [ 225.754389][ T6282] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.948869][ T6282] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 225.957858][ T6282] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 225.967087][ T6282] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 225.993280][ T6282] usb 3-1: config 220 has no interface number 2 [ 226.003914][ T6282] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.040603][ T6282] usb 3-1: config 220 interface 0 has no altsetting 0 [ 226.057767][ T6282] usb 3-1: config 220 interface 76 has no altsetting 0 [ 226.077195][ T6282] usb 3-1: config 220 interface 1 has no altsetting 0 [ 226.088704][ T8472] device ip6tnl2 entered promiscuous mode [ 226.111222][ T6282] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.137709][ T6282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.157844][ T6282] usb 3-1: Product: syz [ 226.162053][ T6282] usb 3-1: Manufacturer: syz [ 226.167345][ T6282] usb 3-1: SerialNumber: syz [ 226.268313][ T4382] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.341836][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1603'. [ 226.397160][ T6282] usb 3-1: selecting invalid altsetting 0 [ 226.406742][ T6282] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 226.423337][ T6282] usb 3-1: No valid video chain found. [ 226.461268][ T6282] usb 3-1: selecting invalid altsetting 0 [ 226.474268][ T4382] usb 5-1: Using ep0 maxpacket: 32 [ 226.490213][ T4382] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 226.504126][ T6282] usbtest: probe of 3-1:220.1 failed with error -22 [ 226.515029][ T4382] usb 5-1: config 0 has no interface number 0 [ 226.534352][ T6282] usb 3-1: USB disconnect, device number 11 [ 226.546538][ T4382] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 226.575296][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.590702][ T8482] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1605'. [ 226.595200][ T4382] usb 5-1: Product: syz [ 226.615208][ T4382] usb 5-1: Manufacturer: syz [ 226.619863][ T4382] usb 5-1: SerialNumber: syz [ 226.621672][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 226.643222][ T4382] usb 5-1: config 0 descriptor?? [ 226.661086][ T4382] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 226.794013][ T8486] loop5: detected capacity change from 0 to 64 [ 226.859674][ T4382] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 226.918726][ T4382] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.141772][ T8478] loop1: detected capacity change from 0 to 32768 [ 227.279461][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.288629][ T6282] usb 5-1: USB disconnect, device number 10 [ 227.305533][ T6282] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 227.355002][ T6282] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 227.388598][ T6282] quatech2 5-1:0.51: device disconnected [ 227.409077][ T8494] loop3: detected capacity change from 0 to 512 [ 227.450851][ T8494] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.495913][ T8494] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.1612: corrupted in-inode xattr [ 227.525152][ T8494] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1612: couldn't read orphan inode 15 (err -117) [ 227.549585][ T8494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.679935][ T8492] loop5: detected capacity change from 0 to 32768 [ 227.787010][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 227.792957][ T8492] XFS (loop5): Mounting V5 Filesystem [ 227.827732][ T8503] xt_policy: too many policy elements [ 227.968276][ T8492] XFS (loop5): Ending clean mount [ 228.026384][ T8492] XFS (loop5): Quotacheck needed: Please wait. [ 228.061938][ T8514] loop3: detected capacity change from 0 to 512 [ 228.131567][ T8514] EXT4-fs (loop3): Test dummy encryption mode enabled [ 228.164798][ T8492] XFS (loop5): Quotacheck: Done. [ 228.198488][ T8518] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 228.209001][ T6282] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.221084][ T8514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.253154][ T8519] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 228.296854][ T8514] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1614: bad orphan inode 131083 [ 228.317691][ T5943] XFS (loop5): Unmounting Filesystem [ 228.382516][ T8514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.438866][ T6282] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 228.465294][ T6282] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 228.484173][ T6282] usb 2-1: config 0 has no interface number 0 [ 228.492754][ T6282] usb 2-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.527070][ T8528] netlink: 'syz.4.1622': attribute type 9 has an invalid length. [ 228.552807][ T6282] usb 2-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 228.586615][ T6282] usb 2-1: config 0 interface 240 has no altsetting 0 [ 228.593451][ T6282] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 228.611448][ T6282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.639890][ T6282] usb 2-1: config 0 descriptor?? [ 228.880871][ T8514] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 228.949329][ T8514] overlayfs: upper fs needs to support d_type. [ 229.001525][ T8539] program syz.5.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.063426][ T6282] uclogic 0003:5543:004D.0016: interface is invalid, ignoring [ 229.071867][ T8514] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 229.114589][ T8514] overlayfs: upper fs does not support tmpfile. [ 229.139737][ T8514] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 229.281736][ T6282] usb 2-1: USB disconnect, device number 7 [ 229.309321][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 229.471563][ T8557] loop2: detected capacity change from 0 to 128 [ 229.520254][ T8557] FAT-fs (loop2): Directory bread(block 414) failed [ 229.544529][ T8557] FAT-fs (loop2): Directory bread(block 415) failed [ 229.567447][ T8557] FAT-fs (loop2): Directory bread(block 416) failed [ 229.608721][ T8557] FAT-fs (loop2): Directory bread(block 417) failed [ 229.625007][ T8557] FAT-fs (loop2): Directory bread(block 418) failed [ 229.641894][ T8557] FAT-fs (loop2): Directory bread(block 419) failed [ 229.667394][ T8557] FAT-fs (loop2): Directory bread(block 420) failed [ 229.699063][ T8557] FAT-fs (loop2): Directory bread(block 421) failed [ 229.785606][ T8557] syz.2.1629: attempt to access beyond end of device [ 229.785606][ T8557] loop2: rw=3, sector=462, nr_sectors = 2 limit=128 [ 229.859215][ T8557] syz.2.1629: attempt to access beyond end of device [ 229.859215][ T8557] loop2: rw=2051, sector=464, nr_sectors = 6 limit=128 [ 230.190411][ T8582] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 230.569409][ T8570] loop5: detected capacity change from 0 to 32768 [ 230.605080][ T8570] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1634 (8570) [ 230.631846][ T8597] loop2: detected capacity change from 0 to 16 [ 230.645848][ T8597] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 230.684427][ T8570] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 230.714389][ T8570] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 230.783068][ T8570] BTRFS info (device loop5): using free space tree [ 230.849308][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 230.864229][ T4382] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.910170][ T8605] loop2: detected capacity change from 0 to 8 [ 231.037193][ T8586] loop1: detected capacity change from 0 to 40427 [ 231.051581][ T8586] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 231.066453][ T4382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.080017][ T8586] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 231.097885][ T8586] F2FS-fs (loop1): invalid crc value [ 231.104245][ T4382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.114017][ T4382] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 231.123112][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.133449][ T4382] usb 5-1: config 0 descriptor?? [ 231.138711][ T8570] BTRFS info (device loop5): enabling ssd optimizations [ 231.183102][ T8586] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.468617][ T5943] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 231.495365][ T8586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.785266][ T4382] usb 5-1: string descriptor 0 read error: -71 [ 231.814322][ T4382] uclogic 0003:5543:0081.0017: failed retrieving string descriptor #200: -71 [ 231.823234][ T4382] uclogic 0003:5543:0081.0017: failed retrieving pen parameters: -71 [ 231.919766][ T4268] syz-executor: attempt to access beyond end of device [ 231.919766][ T4268] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.924902][ T4382] uclogic 0003:5543:0081.0017: failed probing pen v2 parameters: -71 [ 232.013208][ T4382] uclogic 0003:5543:0081.0017: failed probing parameters: -71 [ 232.031458][ T4382] uclogic: probe of 0003:5543:0081.0017 failed with error -71 [ 232.050228][ T4382] usb 5-1: USB disconnect, device number 11 [ 232.137792][ T8641] loop3: detected capacity change from 0 to 2048 [ 232.217658][ T8641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.339397][ T8643] loop5: detected capacity change from 0 to 512 [ 232.366879][ T8641] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 232.441175][ T8643] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.583249][ T8648] loop4: detected capacity change from 0 to 512 [ 232.638937][ T8648] EXT4-fs: Ignoring removed oldalloc option [ 232.665303][ T8648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.720196][ T8653] loop1: detected capacity change from 0 to 512 [ 232.730436][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 232.730449][ T27] audit: type=1326 audit(1770331933.853:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 232.793229][ T8648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 232.805149][ T8648] System zones: 1-3, 19-19, 35-38 [ 232.826513][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 232.867885][ T27] audit: type=1326 audit(1770331933.853:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 232.903506][ T8648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.955237][ T8648] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.996264][ T27] audit: type=1326 audit(1770331933.853:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 233.047596][ T8660] devpts: called with bogus options [ 233.144433][ T27] audit: type=1326 audit(1770331933.853:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 233.263060][ T27] audit: type=1326 audit(1770331933.853:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aed9aeb9 code=0x7ffc0000 [ 233.289421][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 233.436052][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 233.654316][ T8684] netlink: 'syz.3.1676': attribute type 15 has an invalid length. [ 233.809147][ T8688] loop2: detected capacity change from 0 to 1024 [ 233.989727][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 234.026476][ T8695] program syz.4.1681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.369352][ T8710] netlink: 'syz.5.1689': attribute type 1 has an invalid length. [ 234.469584][ T8714] loop4: detected capacity change from 0 to 2048 [ 234.535415][ T8714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.601199][ T8714] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 234.679198][ T8719] loop1: detected capacity change from 0 to 2048 [ 234.728829][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.963214][ T8728] loop5: detected capacity change from 0 to 512 [ 234.976425][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 235.047092][ T8728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.083010][ T8732] loop2: detected capacity change from 0 to 512 [ 235.104746][ T8732] EXT4-fs: Ignoring removed oldalloc option [ 235.134511][ T8732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 235.145083][ T8728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 235.170898][ T8728] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.222076][ T8741] loop3: detected capacity change from 0 to 256 [ 235.237444][ T8732] EXT4-fs (loop2): 1 truncate cleaned up [ 235.243108][ T8732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.496178][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 235.578114][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 235.955144][ T8763] FAT-fs (loop1): Directory bread(block 64) failed [ 235.986720][ T8763] FAT-fs (loop1): Directory bread(block 65) failed [ 236.005676][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1713'. [ 236.022347][ T8763] FAT-fs (loop1): Directory bread(block 66) failed [ 236.059706][ T8763] FAT-fs (loop1): Directory bread(block 67) failed [ 236.079818][ T8763] FAT-fs (loop1): Directory bread(block 68) failed [ 236.094676][ T8763] FAT-fs (loop1): Directory bread(block 69) failed [ 236.112929][ T8763] FAT-fs (loop1): Directory bread(block 70) failed [ 236.160222][ T8763] FAT-fs (loop1): Directory bread(block 71) failed [ 236.187930][ T8763] FAT-fs (loop1): Directory bread(block 72) failed [ 236.203738][ T8763] FAT-fs (loop1): Directory bread(block 73) failed [ 236.283831][ T8775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 236.283831][ T8775] program syz.4.1717 not setting count and/or reply_len properly [ 236.782845][ T8793] EXT4-fs: Ignoring removed bh option [ 236.808807][ T8793] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.851048][ T8793] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 236.861203][ T8799] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 236.922630][ T8793] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 236.952515][ T8793] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 236.990852][ T8793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.117448][ T8801] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 237.132721][ T8793] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 237.163739][ T8803] set_capacity_and_notify: 5 callbacks suppressed [ 237.163754][ T8803] loop3: detected capacity change from 0 to 8 [ 237.243828][ T8803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 237.293867][ T8803] SQUASHFS error: Failed to read block 0x28d: -5 [ 237.314085][ T8803] SQUASHFS error: Unable to read metadata cache entry [28b] [ 237.325319][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 237.342428][ T8803] SQUASHFS error: Unable to read inode 0x11f [ 237.999832][ T8836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 238.454506][ T8631] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.674411][ T8631] usb 6-1: Using ep0 maxpacket: 32 [ 238.681802][ T8631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.709302][ T8866] loop1: detected capacity change from 0 to 512 [ 238.714082][ T8631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.738947][ T8631] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 238.788391][ T8840] loop3: detected capacity change from 0 to 32768 [ 238.799056][ T8631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.799978][ T8866] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.1759: corrupted in-inode xattr [ 238.824243][ T8631] usb 6-1: config 0 descriptor?? [ 238.832269][ T8866] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1759: couldn't read orphan inode 15 (err -117) [ 238.855812][ T8840] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1746 (8840) [ 238.893625][ T8840] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 238.904128][ T8866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.994351][ T8840] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 239.044408][ T8840] BTRFS info (device loop3): setting nodatasum [ 239.069565][ T8840] BTRFS info (device loop3): using free space tree [ 239.087603][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 239.108761][ T8876] program syz.2.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.243260][ T8631] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 239.269648][ T8631] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 239.290023][ T8631] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 239.312467][ T8631] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 239.341374][ T8840] BTRFS info (device loop3): enabling ssd optimizations [ 239.378498][ T8631] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 239.404099][ T8895] loop4: detected capacity change from 0 to 1764 [ 239.422936][ T8631] kone 0003:1E7D:2CED.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 239.510668][ T8631] kone 0003:1E7D:2CED.0018: couldn't init struct kone_device [ 239.539568][ T27] audit: type=1800 audit(1770331940.663:61): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1746" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 239.562346][ T8631] kone 0003:1E7D:2CED.0018: couldn't install mouse [ 239.601234][ T8631] kone: probe of 0003:1E7D:2CED.0018 failed with error -5 [ 239.651506][ T8631] usb 6-1: USB disconnect, device number 6 [ 239.726497][ T4272] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.908865][ T8900] fido_id[8900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 240.002880][ T8885] loop1: detected capacity change from 0 to 32768 [ 240.098873][ T4437] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (4437) [ 240.131956][ T8885] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 240.459851][ T8917] loop4: detected capacity change from 0 to 1764 [ 240.624469][ T8905] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 240.702489][ T8923] loop2: detected capacity change from 0 to 16 [ 240.726183][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 240.733744][ T8923] erofs: (device loop2): mounted with root inode @ nid 36. [ 240.836908][ T8905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.888111][ T8905] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 240.921686][ T8905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.978195][ T8905] usb 6-1: config 0 descriptor?? [ 241.392166][ T8905] hid-led 0003:04D8:F372.0019: unbalanced collection at end of report description [ 241.414154][ T8905] hid-led: probe of 0003:04D8:F372.0019 failed with error -22 [ 241.635312][ T8905] usb 6-1: USB disconnect, device number 7 [ 242.059055][ T8970] loop2: detected capacity change from 0 to 1024 [ 242.068456][ T8971] loop4: detected capacity change from 0 to 512 [ 242.080009][ T8970] EXT4-fs: Ignoring removed orlov option [ 242.109931][ T8970] EXT4-fs: inline encryption not supported [ 242.191854][ T8970] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 242.224157][ T8971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.285436][ T8983] loop5: detected capacity change from 0 to 512 [ 242.290399][ T8971] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.305537][ T8970] EXT4-fs (loop2): invalid journal inode [ 242.311267][ T8970] EXT4-fs (loop2): can't get journal size [ 242.319346][ T8983] EXT4-fs: Ignoring removed bh option [ 242.332191][ T8983] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.345881][ T8970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.374400][ T8983] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 242.449757][ T8983] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 242.504622][ T8983] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 242.562353][ T8983] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 242.575215][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 242.651894][ T8983] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 242.660996][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 242.671579][ T8983] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 242.713891][ T8983] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 242.746977][ T8983] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 243.163010][ T8996] loop1: detected capacity change from 0 to 32768 [ 243.194829][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 243.212194][ T8996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1806 (8996) [ 243.343372][ T8996] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.367010][ T8996] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 243.421233][ T8996] BTRFS info (device loop1): using free space tree [ 243.832168][ T8996] BTRFS info (device loop1): enabling ssd optimizations [ 243.860315][ T27] audit: type=1800 audit(1770331944.983:62): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1806" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 243.999847][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.045745][ T9041] loop2: detected capacity change from 0 to 512 [ 244.129062][ T9041] EXT4-fs: Ignoring removed oldalloc option [ 244.157724][ T9038] loop4: detected capacity change from 0 to 4096 [ 244.195760][ T9041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.1814: Parent and EA inode have the same ino 15 [ 244.282684][ T9041] EXT4-fs (loop2): Remounting filesystem read-only [ 244.295515][ T9041] EXT4-fs (loop2): 1 orphan inode deleted [ 244.301438][ T9041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.365441][ T9041] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.1814: deleted inode referenced: 15 [ 244.420338][ T9041] EXT4-fs (loop2): Remounting filesystem read-only [ 244.641948][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 244.819918][ T9061] loop2: detected capacity change from 0 to 764 [ 246.282740][ T9082] loop4: detected capacity change from 0 to 32768 [ 246.844255][ T6282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.031464][ T9145] loop2: detected capacity change from 0 to 1024 [ 247.054302][ T6282] usb 5-1: Using ep0 maxpacket: 8 [ 247.061629][ T6282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.106381][ T6282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.174312][ T6282] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 247.213893][ T6282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.255286][ T6282] usb 5-1: config 0 descriptor?? [ 247.271343][ T9] hfsplus: b-tree write err: -5, ino 4 [ 247.366478][ T9156] loop2: detected capacity change from 0 to 8 [ 247.392244][ T9153] loop3: detected capacity change from 0 to 2048 [ 247.399835][ T9156] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 247.469771][ T4437] udevd[4437]: incorrect cramfs checksum on /dev/loop2 [ 247.522633][ T9160] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.571724][ T4437] udevd[4437]: incorrect cramfs checksum on /dev/loop2 [ 247.670340][ T9135] loop5: detected capacity change from 0 to 32768 [ 247.676183][ T6282] wacom 0003:056A:0059.001A: unbalanced collection at end of report description [ 247.744831][ T6282] wacom 0003:056A:0059.001A: parse failed [ 247.750641][ T6282] wacom: probe of 0003:056A:0059.001A failed with error -22 [ 247.782260][ T9163] loop2: detected capacity change from 0 to 256 [ 247.807368][ T9166] loop1: detected capacity change from 0 to 1024 [ 247.871774][ T6282] usb 5-1: USB disconnect, device number 12 [ 247.908539][ T9166] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 247.955376][ T9166] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 248.005146][ T9166] JBD2: no valid journal superblock found [ 248.026067][ T4277] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 248.051703][ T9166] EXT4-fs (loop1): error loading journal [ 248.068331][ T4277] FAT-fs (loop2): Filesystem has been set read-only [ 248.105608][ T4277] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 248.545087][ T9182] vivid-000: disconnect [ 248.561739][ T9181] vivid-000: reconnect [ 248.789422][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.884308][ T129] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.937903][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.071319][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.090475][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 249.097777][ T129] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.126207][ T129] usb 5-1: config 0 has no interface number 0 [ 249.148052][ T129] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.175105][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.203516][ T129] usb 5-1: Product: syz [ 249.213648][ T129] usb 5-1: Manufacturer: syz [ 249.230453][ T129] usb 5-1: SerialNumber: syz [ 249.272687][ T129] usb 5-1: config 0 descriptor?? [ 249.276092][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.338293][ T129] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.391437][ T9184] loop5: detected capacity change from 0 to 32768 [ 249.510794][ T9184] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 249.553979][ T129] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.621594][ T129] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.758521][ T9205] loop3: detected capacity change from 0 to 16 [ 249.865193][ T9205] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 249.933461][ T5943] ocfs2: Unmounting device (7,5) on (node local) [ 249.957795][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 249.976501][ T129] usb 5-1: USB disconnect, device number 13 [ 249.988575][ T129] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.076904][ T129] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.119106][ T129] quatech2 5-1:0.51: device disconnected [ 250.248071][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.260040][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.273233][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.282072][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.290760][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 250.310147][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.494679][ T8905] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 250.534283][ T4382] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.619737][ T9226] bridge: RTM_DELNEIGH with unconfigured vlan 5 on bridge0 [ 250.696068][ T8905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.719494][ T8905] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 250.749224][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 250.754383][ T8905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.764100][ T8905] usb 2-1: config 0 descriptor?? [ 250.780778][ T4382] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 250.808611][ T4382] usb 4-1: config 0 has no interface number 1 [ 250.835635][ T4382] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 250.882372][ T4382] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 250.974444][ T4382] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 250.983539][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.030944][ T4382] usb 4-1: Product: syz [ 251.046928][ T4382] usb 4-1: Manufacturer: syz [ 251.051582][ T4382] usb 4-1: SerialNumber: syz [ 251.063674][ T9238] loop5: detected capacity change from 0 to 2048 [ 251.086866][ T9238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.138033][ T4382] usb 4-1: config 0 descriptor?? [ 251.187712][ T4382] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 251.217621][ T8905] hid-rmi 0003:0461:4E72.001B: hidraw0: USB HID v10.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 251.393730][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.414742][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.429605][ T8905] usb 2-1: USB disconnect, device number 8 [ 251.461281][ T2309] pvrusb2: Invalid read control endpoint [ 251.473157][ T4382] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 251.537220][ T4382] usb 4-1: USB disconnect, device number 12 [ 251.553075][ T9251] loop4: detected capacity change from 0 to 512 [ 251.570962][ T2309] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 251.601367][ T2309] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 251.623105][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 251.638595][ T9251] EXT4-fs: Mount option(s) incompatible with ext2 [ 251.702423][ T9246] fido_id[9246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 252.006911][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.020925][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.036566][ T9213] device bridge_slave_0 entered promiscuous mode [ 252.057910][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.076464][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.135095][ T9213] device bridge_slave_1 entered promiscuous mode [ 252.344582][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 252.461955][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.513942][ T9282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 252.541640][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.607057][ T46] device hsr_slave_0 left promiscuous mode [ 252.633961][ T46] device hsr_slave_1 left promiscuous mode [ 252.659749][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.687571][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.724779][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.732216][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.792181][ T46] device bridge_slave_1 left promiscuous mode [ 252.828541][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.856161][ T46] device bridge_slave_0 left promiscuous mode [ 252.885318][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.967049][ T46] device veth1_macvtap left promiscuous mode [ 252.973137][ T46] device veth0_macvtap left promiscuous mode [ 252.994358][ T46] device veth1_vlan left promiscuous mode [ 253.030697][ T46] device veth0_vlan left promiscuous mode [ 253.184090][ T9305] overlayfs: workdir and upperdir must be separate subtrees [ 254.038203][ T9327] loop1: detected capacity change from 0 to 256 [ 254.059312][ T9327] exfat: Deprecated parameter 'utf8' [ 254.131380][ T9327] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 254.176852][ T46] team0 (unregistering): Port device team_slave_1 removed [ 254.276178][ T46] team0 (unregistering): Port device team_slave_0 removed [ 254.349561][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.424248][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 254.468760][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.488560][ T8905] infiniband syz1: ib_query_port failed (-19) [ 254.959079][ T46] bond0 (unregistering): Released all slaves [ 255.070756][ T26] bond0 speed is unknown, defaulting to 1000 [ 255.078454][ T129] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.087426][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 255.160824][ T9213] team0: Port device team_slave_0 added [ 255.215510][ T9213] team0: Port device team_slave_1 added [ 255.284341][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 255.286647][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.286689][ T129] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 255.286713][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.288315][ T129] usb 2-1: config 0 descriptor?? [ 255.295139][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.295153][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.295178][ T9213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.296807][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.296821][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.296847][ T9213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.401801][ T9347] loop5: detected capacity change from 0 to 2048 [ 255.442175][ T9213] device hsr_slave_0 entered promiscuous mode [ 255.457634][ T9213] device hsr_slave_1 entered promiscuous mode [ 255.511211][ T9349] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.563431][ T9347] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 255.567110][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567203][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.569103][ T9347] Remounting filesystem read-only [ 255.702761][ T129] hkems 0003:2006:0118.001C: unbalanced delimiter at end of report description [ 255.703195][ T129] hkems 0003:2006:0118.001C: parse failed [ 255.703227][ T129] hkems: probe of 0003:2006:0118.001C failed with error -22 [ 255.906839][ T129] usb 2-1: USB disconnect, device number 9 [ 256.190714][ T9213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.198588][ T9213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.201444][ T9213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.230476][ T9213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.481272][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.494375][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 256.562119][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.572672][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.691793][ T9380] loop1: detected capacity change from 0 to 1024 [ 256.946721][ T9213] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.958146][ T46] hfsplus: b-tree write err: -5, ino 4 [ 256.983352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.027387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.056216][ T9389] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1934'. [ 257.073418][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.080601][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.309627][ T4357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.372988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.391627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.415368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.444871][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.452016][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.516086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.626014][ T4357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.670775][ T9403] loop1: detected capacity change from 0 to 2048 [ 257.678491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.698440][ T9405] loop4: detected capacity change from 0 to 64 [ 257.705904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.728061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.737102][ T9406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.765531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.810783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.848194][ T9405] syz.4.1942: attempt to access beyond end of device [ 257.848194][ T9405] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 257.865551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.896430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.925295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.933218][ T9405] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 258.022698][ T9405] syz.4.1942: attempt to access beyond end of device [ 258.022698][ T9405] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 258.037420][ T9405] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 258.038804][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.058327][ T9405] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 258.069319][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.078301][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.078443][ T9405] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 258.087989][ T4357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.108384][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.116441][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.124452][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.162706][ T9213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.219352][ T9213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.236195][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.273614][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.346645][ T4280] syz-executor: attempt to access beyond end of device [ 258.346645][ T4280] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 258.368488][ T4357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.392462][ T9415] loop1: detected capacity change from 0 to 2048 [ 258.399442][ T4280] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 258.412954][ T9412] netlink: 'syz.5.1944': attribute type 10 has an invalid length. [ 258.435576][ T4280] syz-executor: attempt to access beyond end of device [ 258.435576][ T4280] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 258.461062][ T9415] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 258.464422][ T4280] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 258.483564][ T9412] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.562414][ T4280] Trying to free block not in datazone [ 258.574267][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 258.584720][ T9415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.968637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.055476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.079056][ T9213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.109730][ T9408] chnl_net:caif_netlink_parms(): no params data found [ 259.136215][ T9431] loop5: detected capacity change from 0 to 1024 [ 259.154079][ T9433] loop1: detected capacity change from 0 to 2048 [ 259.172329][ T9436] loop4: detected capacity change from 0 to 128 [ 259.207795][ T9433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.316516][ T9431] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 259.532212][ T9448] loop1: detected capacity change from 0 to 128 [ 259.569156][ T9451] loop4: detected capacity change from 0 to 256 [ 259.573352][ T9448] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 259.679181][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 259.685964][ T4268] sysv_free_block: trying to free block not in datazone [ 259.710143][ T9451] FAT-fs (loop4): Directory bread(block 64) failed [ 259.741245][ T9451] FAT-fs (loop4): Directory bread(block 65) failed [ 259.784766][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 259.822624][ T9451] FAT-fs (loop4): Directory bread(block 66) failed [ 259.861329][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.880244][ T9451] FAT-fs (loop4): Directory bread(block 67) failed [ 259.898766][ T9451] FAT-fs (loop4): Directory bread(block 68) failed [ 259.908653][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.934291][ T9451] FAT-fs (loop4): Directory bread(block 69) failed [ 259.940953][ T9451] FAT-fs (loop4): Directory bread(block 70) failed [ 259.948809][ T9408] device bridge_slave_0 entered promiscuous mode [ 260.000355][ T9451] FAT-fs (loop4): Directory bread(block 71) failed [ 260.024311][ T9451] FAT-fs (loop4): Directory bread(block 72) failed [ 260.030905][ T9451] FAT-fs (loop4): Directory bread(block 73) failed [ 260.043417][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.075515][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.083614][ T9408] device bridge_slave_1 entered promiscuous mode [ 260.174351][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 260.195932][ T27] audit: type=1800 audit(1770331961.323:63): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1952" name="file2" dev="loop4" ino=1048809 res=0 errno=0 [ 260.266169][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.336295][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.602291][ T9408] team0: Port device team_slave_0 added [ 260.649460][ T9408] team0: Port device team_slave_1 added [ 260.713270][ T9479] loop1: detected capacity change from 0 to 64 [ 260.903878][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.930840][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.042334][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.174974][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.181968][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.274297][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.323644][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 261.416285][ T9496] loop4: detected capacity change from 0 to 128 [ 261.553320][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.574515][ T4357] IPVS: stopping backup sync thread 8153 ... [ 261.590510][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.683862][ T9408] device hsr_slave_0 entered promiscuous mode [ 261.727588][ T9408] device hsr_slave_1 entered promiscuous mode [ 261.761385][ T9408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.774323][ T9408] Cannot create hsr debugfs directory [ 261.973930][ T9213] device veth0_vlan entered promiscuous mode [ 262.008108][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.025364][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.063043][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.083938][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.192748][ T9492] loop5: detected capacity change from 0 to 32768 [ 262.233999][ T9492] XFS: attr2 mount option is deprecated. [ 262.238760][ T9515] loop4: detected capacity change from 0 to 512 [ 262.264563][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 262.276327][ T9515] EXT4-fs: Ignoring removed bh option [ 262.291740][ T9515] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.367295][ T6283] XFS (loop5): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 262.380582][ T9515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.430624][ T9492] XFS (loop5): SB validate failed with error -22. [ 262.446051][ T9515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.461250][ T9515] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.629095][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 262.672109][ T9213] device veth1_vlan entered promiscuous mode [ 262.798569][ T4357] device hsr_slave_0 left promiscuous mode [ 262.824573][ T4357] device hsr_slave_1 left promiscuous mode [ 262.841494][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.874400][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.945116][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.952598][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.974933][ T4357] device bridge_slave_1 left promiscuous mode [ 262.981528][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.036034][ T4357] device bridge_slave_0 left promiscuous mode [ 263.042755][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.174790][ T4357] device veth1_macvtap left promiscuous mode [ 263.180881][ T4357] device veth0_macvtap left promiscuous mode [ 263.218624][ T4357] device veth1_vlan left promiscuous mode [ 263.332007][ T9546] loop1: detected capacity change from 0 to 256 [ 263.423375][ T9546] FAT-fs (loop1): Directory bread(block 64) failed [ 263.443699][ T9546] FAT-fs (loop1): Directory bread(block 65) failed [ 263.464630][ T9546] FAT-fs (loop1): Directory bread(block 66) failed [ 263.490183][ T9546] FAT-fs (loop1): Directory bread(block 67) failed [ 263.506795][ T9546] FAT-fs (loop1): Directory bread(block 68) failed [ 263.513581][ T9546] FAT-fs (loop1): Directory bread(block 69) failed [ 263.553594][ T9546] FAT-fs (loop1): Directory bread(block 70) failed [ 263.568909][ T9546] FAT-fs (loop1): Directory bread(block 71) failed [ 263.588039][ T9546] FAT-fs (loop1): Directory bread(block 72) failed [ 263.600999][ T9546] FAT-fs (loop1): Directory bread(block 73) failed [ 264.334317][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 264.343400][ T9563] loop5: detected capacity change from 0 to 47 [ 264.412410][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 264.469928][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 264.521451][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.579147][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.947479][ T4357] bond0 (unregistering): Released all slaves [ 265.024345][ T4397] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 265.098325][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.110721][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.136032][ T9213] device veth0_macvtap entered promiscuous mode [ 265.202340][ T9213] device veth1_macvtap entered promiscuous mode [ 265.204657][ T4397] usb 6-1: Using ep0 maxpacket: 32 [ 265.223376][ T4397] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.249340][ T4397] usb 6-1: config 0 has no interface number 0 [ 265.267359][ T4397] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 265.299733][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.323756][ T4397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.343515][ T4397] usb 6-1: Product: syz [ 265.348065][ T4397] usb 6-1: Manufacturer: syz [ 265.352711][ T4397] usb 6-1: SerialNumber: syz [ 265.353036][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.376240][ T4397] usb 6-1: config 0 descriptor?? [ 265.396965][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.410416][ T4397] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 265.429783][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.445134][ T4397] usb 6-1: selecting invalid altsetting 1 [ 265.450986][ T4397] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 265.467914][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.484783][ T4397] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.498888][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.505048][ T4397] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 265.530344][ T4397] usb 6-1: media controller created [ 265.535486][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.561837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.577447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.590337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.596418][ T4397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.612696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.624148][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.641527][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.652936][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.668617][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.680029][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.705114][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.723591][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.729861][ T4397] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 265.749942][ T4397] zl10353_read_register: readreg error (reg=127, ret==-71) [ 265.770578][ T4397] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 265.779001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.798320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.829730][ T9213] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.858765][ T9213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.867654][ T4325] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 265.889141][ T4397] usb 6-1: USB disconnect, device number 8 [ 265.914301][ T9213] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.933093][ T9213] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.046306][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 266.059023][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.093031][ T9408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.107369][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.130946][ T4325] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 266.150513][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.181581][ T4325] usb 2-1: config 0 descriptor?? [ 266.232166][ T9408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.277230][ T9408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 266.329783][ T9408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.414309][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 266.615968][ T4325] ft260 0003:0403:6030.001D: item fetching failed at offset 0/2 [ 266.637019][ T4325] ft260 0003:0403:6030.001D: failed to parse HID [ 266.643413][ T4325] ft260: probe of 0003:0403:6030.001D failed with error -22 [ 266.747471][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.822773][ T8905] usb 2-1: USB disconnect, device number 10 [ 266.827441][ T9603] loop4: detected capacity change from 0 to 512 [ 266.834407][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.867138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.890704][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.907028][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.928294][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.935922][ T9603] EXT4-fs: Ignoring removed nobh option [ 266.960176][ T9603] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 267.027530][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.041580][ T9603] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2000: attempt to clear invalid blocks 1 len 1 [ 267.081126][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.113116][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.135511][ T9603] EXT4-fs (loop4): Remounting filesystem read-only [ 267.150098][ T9408] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.185907][ T9603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 267.212333][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.229670][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.247131][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.254330][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.267101][ T9603] EXT4-fs (loop4): Remounting filesystem read-only [ 267.274417][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.283343][ T9603] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2000: invalid indirect mapped block 1819239214 (level 0) [ 267.300395][ T9603] EXT4-fs (loop4): Remounting filesystem read-only [ 267.309523][ T9603] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2000: invalid indirect mapped block 1819239214 (level 1) [ 267.337101][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.353280][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.363833][ T9603] EXT4-fs (loop4): Remounting filesystem read-only [ 267.383303][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.390481][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.407144][ T9603] EXT4-fs (loop4): 1 truncate cleaned up [ 267.423057][ T9603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.454411][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.495314][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.559976][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.597150][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.619397][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 267.625760][ T4389] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 267.643717][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.676291][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.722894][ T9408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.743495][ T9408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.768255][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.787382][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.798427][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.815800][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.824641][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.833065][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.843210][ T4389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.853999][ T4389] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 267.915877][ T4389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.952764][ T4389] usb 7-1: config 0 descriptor?? [ 268.386641][ T4389] wacom 0003:056A:033B.001E: unbalanced collection at end of report description [ 268.416539][ T9637] loop1: detected capacity change from 0 to 64 [ 268.433996][ T4389] wacom 0003:056A:033B.001E: parse failed [ 268.464418][ T4389] wacom: probe of 0003:056A:033B.001E failed with error -22 [ 268.586093][ T6282] usb 7-1: USB disconnect, device number 2 [ 268.669064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.713113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.759317][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.235131][ T9645] loop5: detected capacity change from 0 to 32768 [ 269.283159][ T9645] (syz.5.2014,9645,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.335520][ T9645] (syz.5.2014,9645,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.453574][ T9645] JBD2: Ignoring recovery information on journal [ 269.645406][ T9645] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 269.774077][ T9660] loop4: detected capacity change from 0 to 32768 [ 269.814325][ T27] audit: type=1326 audit(1770331970.933:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d619aeb9 code=0x7ffc0000 [ 269.899191][ T27] audit: type=1326 audit(1770331970.993:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f92d619aeb9 code=0x7ffc0000 [ 269.937443][ T9660] XFS (loop4): Mounting V5 Filesystem [ 270.087181][ T5943] ocfs2: Unmounting device (7,5) on (node local) [ 270.109488][ T9660] XFS (loop4): Starting recovery (logdev: internal) [ 270.136333][ T27] audit: type=1326 audit(1770331971.003:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92d615b78e code=0x7ffc0000 [ 270.215290][ T27] audit: type=1326 audit(1770331971.023:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d619aeb9 code=0x7ffc0000 [ 270.248450][ T9660] XFS (loop4): Ending recovery (logdev: internal) [ 270.283050][ T27] audit: type=1326 audit(1770331971.023:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d619aeb9 code=0x7ffc0000 [ 270.449092][ T27] audit: type=1326 audit(1770331971.153:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f92d619aeb9 code=0x7ffc0000 [ 270.545041][ T4280] XFS (loop4): Unmounting Filesystem [ 270.615482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.624938][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.713309][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.722527][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.745256][ T9408] device veth0_vlan entered promiscuous mode [ 270.774435][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.782993][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.806148][ T9408] device veth1_vlan entered promiscuous mode [ 270.831797][ T9706] loop6: detected capacity change from 0 to 1024 [ 270.868031][ T9706] EXT4-fs: Ignoring removed oldalloc option [ 270.910380][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.927934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.959783][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.995457][ T9706] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 271.012192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.054993][ T9408] device veth0_macvtap entered promiscuous mode [ 271.111774][ T9408] device veth1_macvtap entered promiscuous mode [ 271.147860][ T9213] EXT4-fs (loop6): unmounting filesystem. [ 271.190330][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.257451][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.287822][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.327268][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.354325][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.379223][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.397321][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.418129][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.440771][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.452828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.462913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.495279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.511058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.536771][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.548579][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.590630][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.603020][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.612969][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.623714][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.633801][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.644529][ T8905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.652336][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.669493][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.691289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.706776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.728910][ T9408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.748134][ T9408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.761158][ T9728] loop5: detected capacity change from 0 to 2048 [ 271.764898][ T9408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.784240][ T9408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.844096][ T8905] usb 5-1: Using ep0 maxpacket: 8 [ 271.859822][ T8905] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 271.875806][ T8905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.884452][ T8905] usb 5-1: Product: syz [ 271.889297][ T8905] usb 5-1: Manufacturer: syz [ 271.894039][ T8905] usb 5-1: SerialNumber: syz [ 271.921643][ T8905] usb 5-1: config 0 descriptor?? [ 271.956231][ T9728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 271.958767][ T8905] gspca_main: se401-2.14.0 probing 047d:5003 [ 272.000944][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.014779][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.063219][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.091913][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.144263][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.235159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.245051][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 272.339141][ T8905] gspca_se401: ExtraFeatures: 8 [ 272.344058][ T8905] gspca_se401: Too many frame sizes [ 272.546829][ T8905] usb 5-1: USB disconnect, device number 14 [ 272.578765][ T9752] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 272.595179][ T9752] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.747713][ T27] audit: type=1326 audit(1770331973.873:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc879aeb9 code=0x7ffc0000 [ 272.794512][ T4395] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 272.841301][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 272.850693][ T27] audit: type=1326 audit(1770331973.873:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc879aeb9 code=0x7ffc0000 [ 272.933880][ T27] audit: type=1326 audit(1770331973.903:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0fc879aeb9 code=0x7ffc0000 [ 273.014320][ T4395] usb 7-1: Using ep0 maxpacket: 8 [ 273.025805][ T27] audit: type=1326 audit(1770331973.903:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc879aeb9 code=0x7ffc0000 [ 273.031630][ T4395] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 273.098354][ T4395] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 273.127931][ T4395] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.170435][ T4395] usb 7-1: Product: syz [ 273.179007][ T4395] usb 7-1: Manufacturer: syz [ 273.183640][ T4395] usb 7-1: SerialNumber: syz [ 273.209070][ T4395] usb 7-1: config 0 descriptor?? [ 273.246523][ T4395] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 273.299144][ T4395] usb 7-1: setting power ON [ 273.303722][ T4395] dvb-usb: bulk message failed: -22 (2/0) [ 273.340071][ T4395] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.369461][ T4395] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 273.417725][ T4395] usb 7-1: media controller created [ 273.440908][ T9751] dvb-usb: bulk message failed: -22 (3/0) [ 273.479590][ T9751] cxusb: i2c wr: len=79 is too big! [ 273.479590][ T9751] [ 273.492822][ T4395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.581114][ T4395] usb 7-1: selecting invalid altsetting 6 [ 273.590082][ T4395] usb 7-1: digital interface selection failed (-22) [ 273.601991][ T4395] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 273.623689][ T4395] usb 7-1: setting power OFF [ 273.644968][ T4395] dvb-usb: bulk message failed: -22 (2/0) [ 273.670711][ T4395] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 273.697247][ T4395] (NULL device *): no alternate interface [ 273.799476][ T4395] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 273.833687][ T4395] usb 7-1: USB disconnect, device number 3 [ 273.895072][ T9762] loop5: detected capacity change from 0 to 32768 [ 273.944128][ T9762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2047 (9762) [ 274.047919][ T9762] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.074509][ T9762] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 274.112415][ T9762] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 274.143831][ T9762] BTRFS info (device loop5): force zstd compression, level 3 [ 274.164101][ T9762] BTRFS info (device loop5): turning on sync discard [ 274.195947][ T9762] BTRFS info (device loop5): force clearing of disk cache [ 274.219779][ T9762] BTRFS info (device loop5): enabling disk space caching [ 274.246442][ T9762] BTRFS info (device loop5): turning off discard [ 274.296463][ T9762] BTRFS info (device loop5): disk space caching is enabled [ 274.744528][ T4325] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 274.766783][ T9762] BTRFS info (device loop5): enabling ssd optimizations [ 274.776748][ T9762] BTRFS info (device loop5): rebuilding free space tree [ 274.796109][ T9762] BTRFS info (device loop5): disabling free space tree [ 274.804765][ T9762] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.814797][ T9762] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.872366][ T9834] loop4: detected capacity change from 0 to 512 [ 274.897349][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 274.897362][ T27] audit: type=1800 audit(1770331976.023:75): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2047" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 274.954317][ T4325] usb 8-1: Using ep0 maxpacket: 16 [ 274.961174][ T9834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.971118][ T4325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.043025][ T4325] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.067729][ T9834] EXT4-fs (loop4): 1 truncate cleaned up [ 275.073716][ T5943] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.094683][ T9834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.111814][ T4325] usb 8-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 275.156912][ T4325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.186725][ T4325] usb 8-1: config 0 descriptor?? [ 275.609011][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 275.637877][ T4325] logitech 0003:046D:C623.001F: unexpected long global item [ 275.654974][ T4325] logitech 0003:046D:C623.001F: parse failed [ 275.677783][ T4325] logitech: probe of 0003:046D:C623.001F failed with error -22 [ 275.821313][ T9829] loop1: detected capacity change from 0 to 32768 [ 275.857596][ T4325] usb 8-1: USB disconnect, device number 2 [ 275.901624][ T9829] (syz.1.2064,9829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 275.951346][ T9829] (syz.1.2064,9829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.049753][ T9829] JBD2: Ignoring recovery information on journal [ 276.200851][ T9829] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 276.525927][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 276.903861][ T9888] loop5: detected capacity change from 0 to 4096 [ 276.906414][ T4325] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.037010][ T9891] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.124273][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 277.131276][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.183143][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.227358][ T4325] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 277.256434][ T9859] loop4: detected capacity change from 0 to 32768 [ 277.274485][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.355026][ T4325] usb 2-1: config 0 descriptor?? [ 277.659187][ T9899] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 277.686132][ T9899] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.692715][ T9899] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.748915][ T9899] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 277.783027][ T4325] wacom 0003:056A:0000.0020: unbalanced collection at end of report description [ 277.794405][ T9899] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 277.802072][ T9899] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 277.816637][ T9903] loop5: detected capacity change from 0 to 2048 [ 277.828158][ T4325] wacom 0003:056A:0000.0020: parse failed [ 277.836285][ T4325] wacom: probe of 0003:056A:0000.0020 failed with error -22 [ 277.855397][ T9899] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.890293][ T9899] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.899339][ T9903] loop5: p1 < > p4 [ 277.899339][ T9903] p4: [ 277.919089][ T9903] loop5: p4 size 722688 extends beyond EOD, truncated [ 277.930938][ T9899] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 277.961606][ T9899] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 277.984286][ T9899] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 278.021491][ T4325] usb 2-1: USB disconnect, device number 11 [ 278.043141][ T9899] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 278.421854][ T4386] udevd[4386]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 278.740875][ T9929] loop5: detected capacity change from 0 to 2048 [ 278.828588][ T9929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 278.946153][ T9929] EXT4-fs: can't change dax mount option while remounting [ 278.993411][ T9940] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2098'. [ 279.099181][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 279.315952][ T9948] loop4: detected capacity change from 0 to 4096 [ 279.357527][ T9948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 279.482124][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 279.532615][ T9954] loop7: detected capacity change from 0 to 1024 [ 279.581181][ T9954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.596969][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2104'. [ 279.663905][ T9954] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 279.760702][ T9954] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.2103: missing EA_INODE flag [ 279.874823][ T9954] EXT4-fs (loop7): Remounting filesystem read-only [ 279.892438][ T9954] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2103: error while reading EA inode 11 err=-117 [ 279.944763][ T9954] EXT4-fs (loop7): Remounting filesystem read-only [ 280.057948][ T9971] loop6: detected capacity change from 0 to 256 [ 280.074008][ T9408] EXT4-fs (loop7): unmounting filesystem. [ 280.139894][ T9971] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 280.305019][ T9979] syz.7.2111[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.305149][ T9979] syz.7.2111[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.335704][ T9942] loop1: detected capacity change from 0 to 32768 [ 280.559313][ T9968] loop5: detected capacity change from 0 to 32768 [ 280.566975][ T9942] XFS (loop1): Mounting V5 Filesystem [ 280.654399][ T4285] Bluetooth: hci1: command 0x0411 tx timeout [ 280.729202][ T9942] XFS (loop1): Ending clean mount [ 280.778296][ T9968] XFS (loop5): Mounting V5 Filesystem [ 280.915643][ T4268] XFS (loop1): Unmounting Filesystem [ 281.001006][ T9968] XFS (loop5): Starting recovery (logdev: internal) [ 281.083238][ T9968] XFS (loop5): Ending recovery (logdev: internal) [ 281.361730][ T5943] XFS (loop5): Unmounting Filesystem [ 281.495827][T10023] loop1: detected capacity change from 0 to 8 [ 281.612797][T10026] sch_fq: defrate 0 ignored. [ 281.666099][T10023] SQUASHFS error: lzo decompression failed, data probably corrupt [ 281.673988][T10023] SQUASHFS error: Failed to read block 0x91: -5 [ 281.694584][T10023] SQUASHFS error: Unable to read metadata cache entry [8f] [ 281.701831][T10023] SQUASHFS error: Unable to read inode 0x11f [ 281.841966][ T4386] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.146127][T10039] device netdevsim0 entered promiscuous mode [ 282.167973][T10039] device macvtap1 entered promiscuous mode [ 282.197386][T10039] device netdevsim0 left promiscuous mode [ 282.724417][T10063] loop7: detected capacity change from 0 to 512 [ 282.821319][T10066] loop1: detected capacity change from 0 to 512 [ 282.878723][T10063] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 282.909962][T10063] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.294475][T10085] can0: slcan on ttyS3. [ 283.529146][T10091] loop4: detected capacity change from 0 to 512 [ 283.546274][T10091] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.579582][ T9408] EXT4-fs (loop7): unmounting filesystem. [ 283.690269][T10084] can0 (unregistered): slcan off ttyS3. [ 283.729412][T10091] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 283.750931][T10093] loop6: detected capacity change from 0 to 512 [ 283.793642][ T27] audit: type=1326 audit(1770331984.913:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.1.2141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92d619aeb9 code=0x0 [ 283.828031][T10091] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 283.847246][T10093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 283.907457][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2144'. [ 283.926161][T10093] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 284.039852][T10103] loop5: detected capacity change from 0 to 4096 [ 284.040065][T10093] EXT4-fs (loop6): 1 truncate cleaned up [ 284.095867][T10106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.137293][T10093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 284.339664][T10110] loop4: detected capacity change from 0 to 512 [ 284.348151][ T9213] EXT4-fs (loop6): unmounting filesystem. [ 284.394152][T10110] EXT4-fs: inline encryption not supported [ 284.418323][T10110] EXT4-fs: Ignoring removed i_version option [ 284.451856][T10110] EXT4-fs (loop4): 1 orphan inode deleted [ 284.471377][T10110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.662454][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 285.569031][T10149] set_capacity_and_notify: 1 callbacks suppressed [ 285.569048][T10149] loop6: detected capacity change from 0 to 4096 [ 285.596507][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 285.890738][ T9213] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 285.948534][ T9213] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 286.100047][T10169] device dummy0 entered promiscuous mode [ 286.152185][T10169] device macsec1 entered promiscuous mode [ 286.188427][T10163] loop4: detected capacity change from 0 to 4096 [ 286.207198][T10169] device dummy0 left promiscuous mode [ 286.247836][T10163] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 286.276694][T10174] loop5: detected capacity change from 0 to 512 [ 286.385814][T10174] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.2175: invalid block [ 286.584271][T10174] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2175: invalid indirect mapped block 10 (level 1) [ 286.601122][T10179] loop1: detected capacity change from 0 to 1024 [ 286.648449][T10179] EXT4-fs: Ignoring removed nobh option [ 286.654102][T10179] EXT4-fs: Ignoring removed bh option [ 286.678654][T10174] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2175: invalid indirect mapped block 8 (level 1) [ 286.726171][T10179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 286.749219][ T9604] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 286.764854][ T9604] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 286.800829][T10174] EXT4-fs (loop5): 1 truncate cleaned up [ 286.808037][T10174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 286.844523][ T4280] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 286.865313][T10179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 287.140175][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 287.211921][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 287.343522][T10201] device netdevsim0 entered promiscuous mode [ 287.374917][T10201] device macvtap1 entered promiscuous mode [ 287.431334][T10201] device netdevsim0 left promiscuous mode [ 287.572817][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2185'. [ 287.598235][T10207] bridge_slave_0: default FDB implementation only supports local addresses [ 288.294444][ T126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 288.341384][T10241] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 288.373611][T10241] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 288.391715][T10241] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 288.412045][T10241] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 288.436437][T10241] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 288.477537][T10241] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 288.484458][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 288.489718][ T4395] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 288.498404][T10241] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 288.512369][ T126] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 288.521293][ T126] usb 6-1: config 0 has no interface number 0 [ 288.528255][T10241] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 288.536458][ T126] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 288.549133][T10241] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 288.558999][ T126] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.585165][T10241] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 288.605962][ T126] usb 6-1: New USB device found, idVendor=7dd7, idProduct=902f, bcdDevice=a3.2c [ 288.623907][T10241] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 288.630814][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.640930][T10241] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 288.654306][ T126] usb 6-1: Product: syz [ 288.658572][ T126] usb 6-1: Manufacturer: syz [ 288.673549][ T126] usb 6-1: SerialNumber: syz [ 288.681958][T10241] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 288.691977][ T126] usb 6-1: config 0 descriptor?? [ 288.701248][ T4395] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.717494][T10241] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 288.734355][ T4395] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.745172][T10241] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 288.745597][T10226] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.759820][T10241] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 288.774382][ T4395] usb 8-1: config 0 interface 0 has no altsetting 0 [ 288.791408][T10241] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 288.799712][T10226] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.808108][ T4395] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 288.843543][ T4395] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.897160][ T4395] usb 8-1: config 0 descriptor?? [ 289.010391][T10252] loop1: detected capacity change from 0 to 2048 [ 289.049411][ T126] usb 6-1: MIDIStreaming interface descriptor not found [ 289.129410][ T126] usb 6-1: USB disconnect, device number 9 [ 289.202630][T10252] loop1: p1 < > p4 [ 289.202630][T10252] p4: [ 289.277630][T10252] loop1: p4 size 722688 extends beyond EOD, truncated [ 289.332629][ T4395] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 289.344334][ T8905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 289.360088][ T4395] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 289.388688][ T4395] hid-steam 0003:28DE:1102.0021: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 289.448971][ T4395] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 289.510010][ T4395] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 289.534368][ T8905] usb 5-1: Using ep0 maxpacket: 16 [ 289.541402][ T8905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.582161][T10268] loop1: detected capacity change from 0 to 64 [ 289.588399][ T4395] hid-steam 0003:28DE:1102.0022: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 289.598899][ T8905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.624443][ T8905] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 289.654127][ T8905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.663045][ T4395] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' connected [ 289.674313][ T8905] usb 5-1: config 0 descriptor?? [ 289.690682][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.717013][ T4395] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.0021/input/input11 [ 289.786982][T10261] udevd[10261]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 289.832146][ T4395] usb 8-1: USB disconnect, device number 3 [ 289.842201][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 290.017910][ T4395] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' disconnected [ 290.072728][T10278] loop6: detected capacity change from 0 to 64 [ 290.096521][ T8905] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 290.123204][ T8905] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 290.185920][ T8905] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 290.229780][ T8905] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 290.247487][ T8905] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 290.301376][ T8905] savu 0003:1E7D:2D5A.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 290.333562][T10275] fido_id[10275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 290.388832][T10284] loop5: detected capacity change from 0 to 512 [ 290.402496][ T8905] usb 5-1: USB disconnect, device number 15 [ 290.425046][T10284] ext3: Unknown parameter 'rootcontext' [ 290.533953][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2214'. [ 290.534415][ T4399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.614855][T10293] [U] s„ï [ 290.813433][T10294] fido_id[10294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 290.968563][T10302] loop6: detected capacity change from 0 to 2048 [ 291.052533][T10302] loop6: p1 < > p4 [ 291.052533][T10302] p4: [ 291.079035][T10302] loop6: p4 size 722688 extends beyond EOD, truncated [ 291.601394][ T4386] udevd[4386]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 291.630498][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 291.986008][ T126] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 292.047177][T10332] loop6: detected capacity change from 0 to 4096 [ 292.111271][T10338] loop5: detected capacity change from 0 to 1024 [ 292.206296][ T126] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.229889][ T126] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 292.279761][ T126] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 292.314421][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.355468][ T33] hfsplus: b-tree write err: -5, ino 4 [ 292.371329][ T126] usb 8-1: config 0 descriptor?? [ 292.402498][ T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 292.441033][ T9213] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 292.448724][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 292.460734][ T9213] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 292.500630][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 292.551603][ T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 292.584348][ T126] usb 8-1: media controller created [ 292.590832][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.605953][T10324] dvb-usb: bulk message failed: -22 (2/0) [ 292.678487][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 292.704698][ T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 292.744345][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 292.779323][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 292.802122][ T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 292.871549][ T126] usb 8-1: USB disconnect, device number 4 [ 292.918576][ T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 293.486656][T10372] loop1: detected capacity change from 0 to 4096 [ 293.589684][T10381] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.820285][T10386] loop6: detected capacity change from 0 to 256 [ 293.855782][T10386] exfat: Deprecated parameter 'utf8' [ 293.912824][T10386] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 294.293373][T10403] device bridge0 entered promiscuous mode [ 294.332218][T10403] device macsec1 entered promiscuous mode [ 294.390301][T10403] bridge0: port 3(macsec1) entered blocking state [ 294.415325][T10403] bridge0: port 3(macsec1) entered disabled state [ 294.454911][T10403] device bridge0 left promiscuous mode [ 294.529607][T10415] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 294.539606][T10415] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 295.183906][T10437] loop4: detected capacity change from 0 to 64 [ 295.256526][T10437] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 295.407704][T10445] tipc: Can't bind to reserved service type 0 [ 295.759516][T10453] loop5: detected capacity change from 0 to 1024 [ 295.822111][T10453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.853548][T10460] loop4: detected capacity change from 0 to 1024 [ 295.867519][T10420] loop7: detected capacity change from 0 to 32768 [ 295.886447][T10453] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 295.906412][T10460] EXT4-fs: inline encryption not supported [ 295.912271][T10460] EXT4-fs: Ignoring removed i_version option [ 295.954628][T10420] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.2265 (10420) [ 295.992723][T10460] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.2279: lblock 2 mapped to illegal pblock 2 (length 1) [ 296.010285][T10460] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 296.047473][T10460] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.2279: lblock 0 mapped to illegal pblock 48 (length 1) [ 296.068930][T10420] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 296.086705][T10420] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 296.101455][T10460] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 296.132113][T10420] BTRFS info (device loop7): using free space tree [ 296.139119][T10460] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.2279: Failed to acquire dquot type 0 [ 296.221616][T10460] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 296.264774][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 296.310303][T10460] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.2279: mark_inode_dirty error [ 296.370930][T10460] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 296.382718][T10460] EXT4-fs (loop4): 1 orphan inode deleted [ 296.388581][T10460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 296.397253][ T8553] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.479274][T10420] BTRFS info (device loop7): enabling ssd optimizations [ 296.529429][ T8553] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 296.584633][ T8553] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 0 [ 296.618206][ T4395] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 296.632165][T10497] netlink: 'syz.5.2285': attribute type 4 has an invalid length. [ 296.659980][T10460] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 296.675276][T10495] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 296.705581][T10497] netlink: 'syz.5.2285': attribute type 8 has an invalid length. [ 296.739518][T10495] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.2279: lblock 0 mapped to illegal pblock 48 (length 1) [ 296.758965][T10497] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2285'. [ 296.793420][T10495] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 296.834069][T10495] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 296.857950][ T4395] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 296.880599][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.933023][ T4395] usb 2-1: config 0 descriptor?? [ 296.960633][ T9408] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 297.082214][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 297.254488][T10505] loop5: detected capacity change from 0 to 1024 [ 297.261708][T10505] EXT4-fs: Ignoring removed bh option [ 297.315942][T10505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.396241][T10505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.631182][ T4395] usb 2-1: Cannot set autoneg [ 297.637501][ T4395] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 297.698438][ T4395] usb 2-1: USB disconnect, device number 12 [ 297.768059][ T5943] EXT4-fs (loop5): unmounting filesystem. [ 297.870991][T10517] loop7: detected capacity change from 0 to 1024 [ 297.911255][T10517] EXT4-fs: inline encryption not supported [ 298.027387][T10517] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.2287: lblock 2 mapped to illegal pblock 2 (length 1) [ 298.056149][T10523] program syz.5.2294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.086812][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 298.093460][T10517] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 298.128110][T10517] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.2287: lblock 0 mapped to illegal pblock 48 (length 1) [ 298.176082][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 298.182696][T10517] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 298.268266][T10517] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.2287: Failed to acquire dquot type 0 [ 298.350353][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 298.383723][T10517] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 298.445057][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 298.451642][T10517] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.2287: mark_inode_dirty error [ 298.543412][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 298.594269][T10517] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 298.644493][T10517] EXT4-fs (loop7): 1 orphan inode deleted [ 298.683134][ T4357] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 298.694641][T10517] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 298.754573][ T4357] EXT4-fs (loop7): Remounting filesystem read-only [ 298.784436][ T4357] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 298.804105][T10517] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 16: comm syz.7.2287: lblock 0 mapped to illegal pblock 16 (length 1) [ 298.822724][ T4357] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 0 [ 298.888910][ T4357] EXT4-fs (loop7): Remounting filesystem read-only [ 298.930941][T10517] EXT4-fs (loop7): Remounting filesystem read-only [ 299.135347][ T9408] EXT4-fs (loop7): unmounting filesystem. [ 299.141523][ T9408] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 299.184567][ T9408] EXT4-fs (loop7): Remounting filesystem read-only [ 299.191398][ T9408] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 299.254626][ T9408] EXT4-fs (loop7): Remounting filesystem read-only [ 299.261215][ T9408] EXT4-fs error (device loop7): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 299.294649][ T9408] EXT4-fs (loop7): Remounting filesystem read-only [ 299.398293][T10558] loop6: detected capacity change from 0 to 1024 [ 299.635246][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 300.002217][T10575] loop4: detected capacity change from 0 to 128 [ 300.328932][T10586] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 300.359459][T10586] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 300.386877][T10586] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 300.407015][T10586] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 300.434427][T10586] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 300.461371][T10586] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 300.493058][T10586] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 300.531796][T10586] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 300.546899][T10586] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 300.573882][T10586] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 300.588588][T10586] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 300.597119][T10556] loop5: detected capacity change from 0 to 32768 [ 300.624492][T10586] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 300.864837][ T5943] non-latin1 character 0x2e66 found in JFS file name [ 300.900077][ T5943] mount with iocharset=utf8 to access [ 300.925342][ T9846] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 301.062992][T10606] loop6: detected capacity change from 0 to 512 [ 301.144280][ T9846] usb 8-1: Using ep0 maxpacket: 16 [ 301.155806][ T9846] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.175244][T10606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01d, mo2=0002] [ 301.183284][T10606] System zones: 1-12 [ 301.190968][ T9846] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 301.208772][T10606] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.2326: Directory hole found for htree index block 0 [ 301.224873][ T9846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.266300][ T9846] usb 8-1: config 0 descriptor?? [ 301.281271][T10606] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 301.289781][T10606] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.2326: Directory hole found for htree index block 0 [ 301.304635][T10606] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 301.313009][T10606] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 301.434859][T10606] EXT4-fs: Ignoring removed orlov option [ 301.481922][ T107] ------------[ cut here ]------------ [ 301.487951][ T107] WARNING: CPU: 1 PID: 107 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 301.496683][ T107] Modules linked in: [ 301.500658][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 301.507973][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.518119][ T107] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 301.523229][ T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 301.526462][T10606] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 301.543411][ T107] RSP: 0018:ffffc900025d7668 EFLAGS: 00010293 [ 301.558732][ T107] RAX: ffffffff82f04438 RBX: ffff88807f813010 RCX: ffff888019f9bb80 [ 301.566798][ T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 301.574843][ T107] RBP: 0000000000020056 R08: ffffea0001fe04c7 R09: 1ffffd40003fc098 [ 301.582852][ T107] R10: dffffc0000000000 R11: fffff940003fc099 R12: ffff88807f813018 [ 301.590892][ T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 301.598925][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 301.607922][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.614565][ T107] CR2: 0000001b30220ff8 CR3: 00000000530c4000 CR4: 00000000003506e0 [ 301.622584][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.630618][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.638659][ T107] Call Trace: [ 301.641983][ T107] [ 301.644977][ T107] ? lock_page+0x2b0/0x2b0 [ 301.649446][ T107] dbJoin+0x238/0x300 [ 301.653468][ T107] ? PageHeadHuge+0x8f/0x1c0 [ 301.658138][ T107] dbFreeBits+0x4e1/0xda0 [ 301.662525][ T107] dbFree+0x32e/0x640 [ 301.666588][ T107] txFreeMap+0x9e2/0xde0 [ 301.670873][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 301.676149][ T107] xtTruncate+0xcc0/0x2d10 [ 301.680637][ T107] ? xtInitRoot+0x160/0x160 [ 301.685238][ T107] ? mapping_evict_folio+0x520/0x520 [ 301.690571][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 301.695683][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 301.700768][ T107] ? memset+0x1e/0x40 [ 301.704842][ T107] ? __dquot_initialize+0x213/0xcd0 [ 301.710091][ T107] jfs_free_zero_link+0x358/0x4b0 [ 301.715205][ T107] ? inode_wait_for_writeback+0x1df/0x220 [ 301.720978][ T107] ? jfs_write_failed+0x190/0x190 [ 301.726084][ T107] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 301.731862][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 301.736959][ T107] ? bit_waitqueue+0x30/0x30 [ 301.741623][ T107] jfs_evict_inode+0x359/0x430 [ 301.746466][ T107] ? evict+0x4c3/0x8d0 [ 301.750602][ T107] ? jfs_write_inode+0x220/0x220 [ 301.755621][ T107] evict+0x4c9/0x8d0 [ 301.759577][ T107] ? proc_nr_inodes+0x2f0/0x2f0 [ 301.761428][T10606] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 301.764482][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 301.764512][ T107] ? _raw_spin_unlock+0x24/0x40 [ 301.781410][ T107] ? iput+0x768/0x980 [ 301.785476][ T107] jfs_lazycommit+0x425/0xa70 [ 301.790212][ T107] ? txFreelock+0x5a0/0x5a0 [ 301.794783][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 301.800724][ T107] ? do_task_dead+0xd0/0xd0 [ 301.805304][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 301.811245][ T107] ? __kthread_parkme+0x162/0x1c0 [ 301.816354][ T107] kthread+0x29d/0x330 [ 301.820495][ T107] ? txFreelock+0x5a0/0x5a0 [ 301.825088][ T107] ? kthread_blkcg+0xd0/0xd0 [ 301.829727][ T107] ret_from_fork+0x1f/0x30 [ 301.834242][ T107] [ 301.837298][ T107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.844605][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 301.851829][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.861899][ T107] Call Trace: [ 301.865282][ T107] [ 301.868231][ T107] dump_stack_lvl+0x188/0x24e [ 301.872934][ T107] ? memcpy+0x3c/0x60 [ 301.876934][ T107] ? show_regs_print_info+0x12/0x12 [ 301.882156][ T107] ? load_image+0x400/0x400 [ 301.886693][ T107] panic+0x2e5/0x730 [ 301.890624][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 301.895184][ T107] ? ret_from_fork+0x1f/0x30 [ 301.899809][ T107] __warn+0x2f8/0x4f0 [ 301.903829][ T107] ? dbAdjTree+0x448/0x4d0 [ 301.908270][ T107] ? dbAdjTree+0x448/0x4d0 [ 301.912786][ T107] report_bug+0x2ba/0x4f0 [ 301.917142][ T107] ? dbAdjTree+0x448/0x4d0 [ 301.921575][ T107] handle_bug+0x3a/0x70 [ 301.925751][ T107] exc_invalid_op+0x16/0x40 [ 301.930285][ T107] asm_exc_invalid_op+0x16/0x20 [ 301.935152][ T107] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 301.940200][ T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 301.959913][ T107] RSP: 0018:ffffc900025d7668 EFLAGS: 00010293 [ 301.966000][ T107] RAX: ffffffff82f04438 RBX: ffff88807f813010 RCX: ffff888019f9bb80 [ 301.973990][ T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 301.981983][ T107] RBP: 0000000000020056 R08: ffffea0001fe04c7 R09: 1ffffd40003fc098 [ 301.989977][ T107] R10: dffffc0000000000 R11: fffff940003fc099 R12: ffff88807f813018 [ 301.997967][ T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 302.005966][ T107] ? dbAdjTree+0x448/0x4d0 [ 302.010406][ T107] ? dbAdjTree+0x448/0x4d0 [ 302.014839][ T107] ? lock_page+0x2b0/0x2b0 [ 302.019291][ T107] dbJoin+0x238/0x300 [ 302.023288][ T107] ? PageHeadHuge+0x8f/0x1c0 [ 302.027905][ T107] dbFreeBits+0x4e1/0xda0 [ 302.032268][ T107] dbFree+0x32e/0x640 [ 302.036272][ T107] txFreeMap+0x9e2/0xde0 [ 302.040549][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 302.045772][ T107] xtTruncate+0xcc0/0x2d10 [ 302.050235][ T107] ? xtInitRoot+0x160/0x160 [ 302.054779][ T107] ? mapping_evict_folio+0x520/0x520 [ 302.060092][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 302.065403][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 302.070446][ T107] ? memset+0x1e/0x40 [ 302.074447][ T107] ? __dquot_initialize+0x213/0xcd0 [ 302.079667][ T107] jfs_free_zero_link+0x358/0x4b0 [ 302.084718][ T107] ? inode_wait_for_writeback+0x1df/0x220 [ 302.090463][ T107] ? jfs_write_failed+0x190/0x190 [ 302.095516][ T107] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 302.101282][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 302.106335][ T107] ? bit_waitqueue+0x30/0x30 [ 302.110955][ T107] jfs_evict_inode+0x359/0x430 [ 302.115752][ T107] ? evict+0x4c3/0x8d0 [ 302.119850][ T107] ? jfs_write_inode+0x220/0x220 [ 302.124820][ T107] evict+0x4c9/0x8d0 [ 302.128743][ T107] ? proc_nr_inodes+0x2f0/0x2f0 [ 302.133617][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 302.138836][ T107] ? _raw_spin_unlock+0x24/0x40 [ 302.143709][ T107] ? iput+0x768/0x980 [ 302.147722][ T107] jfs_lazycommit+0x425/0xa70 [ 302.152422][ T107] ? txFreelock+0x5a0/0x5a0 [ 302.156959][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 302.162868][ T107] ? do_task_dead+0xd0/0xd0 [ 302.167395][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.173308][ T107] ? __kthread_parkme+0x162/0x1c0 [ 302.178365][ T107] kthread+0x29d/0x330 [ 302.182465][ T107] ? txFreelock+0x5a0/0x5a0 [ 302.186988][ T107] ? kthread_blkcg+0xd0/0xd0 [ 302.191615][ T107] ret_from_fork+0x1f/0x30 [ 302.196069][ T107] [ 302.199682][ T107] Kernel Offset: disabled [ 302.204093][ T107] Rebooting in 86400 seconds..