last executing test programs: 3.60370343s ago: executing program 2 (id=1154): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000003240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[], 0x4, 0x2b8, &(0x7f0000002f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) 3.215321024s ago: executing program 2 (id=1156): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x84000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.897393168s ago: executing program 2 (id=1157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x3}]}) 2.594472491s ago: executing program 3 (id=1159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) 2.429971643s ago: executing program 2 (id=1160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0xfd97}) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) 2.418340193s ago: executing program 0 (id=1161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2.207892785s ago: executing program 0 (id=1163): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2000000, &(0x7f0000000380)={[{@user_xattr}, {@acl}, {@nodelalloc}]}, 0x1, 0x4c5, &(0x7f0000000540)="$eJzs3c1rXFUbAPAzM02apHnfflikrWALFeoHnckH0kTduLIuCmLBjUKNyTTWTDIhM6lN6CLVXRcuRFEQF+79C9zYlUUornXhTlxIRWuEKigj985Mmk5m2kHTuZD7+8E059w7neecDs/Jveee2xuA1DoW/ZG7U98bQsi0vuFY/cf6rcvT0SsTarWzv2Ti90X15lubf29PCGEthDAQQnj5hRDeyGyNW1lZnZsqlYpLjXqhOr9YqKysnrwwPzVbnC0ujE6cmpycGBkfm9y2vl59762rZ754sf/z2+/evP7+V19GzRpu7Nvcj+1U73pf2L9p264QwnMPIlgCco3+DCbdEP6V6Pt7KIRwPITwTdgbcvG3CaRBrVar/VXb3Wn3Wg3YsbLxMfDf2XwIoV7OZvP5+jH8wTCULZUr1afOl5cXZurHyvtCX/b8hVJxpHGusC/0ZaL6aFy+Ux9rqY+HEB8Df5AbjOv56XJpprdDHdBiT5zzmY38/z1Xz38gJZzyQ3rJf0gv+Q/ptTX/+xNpB9B7fv9Desl/SC/5D+kl/yGtBlrqbe7WAXas7n//u80LdhrH/5BKL505E71qzfvfZy6uLM+VL56cKVbm8vPL0/np8tJifrZcno3v2Zm/3+eVyuXF0afD8qVCtVipFioD4dx8eXmhei6+r/9csa8nvQK6sf/ote+iE/61ZwbjV9i0+Eeuws5Wq2VC0vcgA8nIJT0AAYkx9Qfp5RwfuN+in9ZFQhsWt78tQG9kk24AkJgTh13/g7Qy/w/pZf4f0ssxPmD+H9Kndf7/xsHvTyfUFKDHhlue/9N8/tf/Nj27aySE8P8Qwre5vt3NZ30BO0H2p0zj+P/E3seGW/f2Z/6ILxH0hxDe/uTsR5emqtWl0Wj7rxvbqx83to8l0X6gW808beYxAJBe67cuTzdfvYz78/P1RQhb4+9qzE0OxNcoh9Yzd61VyGzT2oW1KyGEQ+3iZxrPO69f+Rhaz22Jf6DxM1P/iLi9u+Lnpvcm/uFN8R/dFP/If/5XgXS4Fo0/I+3yLxvndNjIv7vHn+FtWjvRefzLbox/uQ7j39EuY7z56Ts/dox/JYQjbeM34w3EsVrjR2070WX8m6+98nCnfbXP6p/TLn5TVCpU5xcLlZXVk/H/IzdbXBidODU5OTEyPjZZiOeoC82Z6q2ePXTjer10u9au/0Md4t+r/9G2J7rs/5+PfP3qsQ77oviPH2///R+4R/zBEMKTXcb/beyH1zvti+LPdOh/9h7xo23jXcavfHh6d5dvBQB6oLKyOjdVKhWXFBQUFDYKSY9MwIN2J+mTbgkAAAAAAAAAAADQrV4sJ066jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8E/AQAA///Batmj") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.201903245s ago: executing program 3 (id=1164): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) 2.181819736s ago: executing program 2 (id=1165): timer_create(0x1, &(0x7f0000000140)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.898215759s ago: executing program 3 (id=1167): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x68, r1, 0x940}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40000) 1.81897436s ago: executing program 0 (id=1168): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x0, 0x4, 0x9, 0x8, 0xffffff4b}, 0x14) 1.588773183s ago: executing program 1 (id=1169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x3}]}) 1.588051243s ago: executing program 3 (id=1170): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x4000855) 1.382410855s ago: executing program 3 (id=1171): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.282054196s ago: executing program 1 (id=1172): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.060685128s ago: executing program 1 (id=1173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) 1.014376109s ago: executing program 2 (id=1174): syz_open_procfs(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x559a, &(0x7f000000cf00)="$eJzs3M2LG/UbAPBnst2+//or4sFbB4qwC01oti/oyaotarGl+HLwpNkkDWmTzLJJ07WnHjyKB/8TUfDk0b/Bgx71IIgHRfAgVDIzW5q2ttomu+76+cDkmXnmm2e+32lZeGYgAfxnHU1/+yWJI3EgIhYi4nAS+X5SbhG3I84VY5+LiGMRUblnS8r83cTeiDgYEUcmxYuaSXnq0xPj42d+vvjrV9/s23Posy+/3daFA9vq+YjorxX7N/tFzDp5uLNQ5hvjbh77p8dlXJuq0c+K/M32al7hZmNzXCOPpzrF+GztxnASr/YazUnsdK/m+bVBccHhuLNZZ/KF9FpjPT9utVfz2B1meezcKq67cav423ZrOCrqtMp6H+blYzTajEW+vdEu1rN2PY/NwajMF3WzVntjEsdlLC8XzazXyuex+qR3+d/vze7gxkY6bq8Pu9kgPVOrv1Crn63W17NWe9Q+XW30W2dPp0ud3mRYddRu9M91sqzTa9eaWX85Xeo0m9V6PV06317tNgZpvV47VTtZPbNc7p1IX7v8btprpUuT+Ep3cGPU7VXiaraeFt9YTldqp15cTo/X07cvXUmvvHXhwqUr77x//r3LL19649Vy0APTSpdWTq6sVOsnqyv15R23/mH6pOv/qJz0P1h/UsaL0+nvv3u62waFZLsnALDzPND/x/39f+j/gZl7RP8f1x7T//evl8fz6f/jof1/Zbr/j1n2/5OWSv//+P63sg3972Lo/+e4fngqT9b/7535PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HI/LH7+er5ztDg+VOb/V6aeKY+TiKhExJ2HWIi9UzUXyjqLfzF+8b45fJ1EXmFyjX3ldjAizpXbH/+f910AAACA3euL28c+Kbr14qN8BHBfN88uVfwzVw5/MKN6SUQsHv1pRtUqk49nZ1Qs//+9JzZmVC1/gLV/RsWKR257ZlXtb1mYCvvvCUkRKls6HQAAYEtMdwKP6kJub8l8AAAAmJePH3n2pS2bB3P0+48P5pLYfJV595X/viKULwQPTJ0DAAAAdqBkuycAAAAAzF3e//v9PwAAANjdit//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3buJjdxGAoA8EsgMMyPBo3mQLODY8wRZjlbuApH4AaVegHOQKUueoS2VCQuUlqQkHCgRd8nxWAHnm3I5tmSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Vy2no9PD3DxtTpNjLgAAAMB+62o5rd+Mm/q31P4jNf1K9SIiyojYl7v3YtCK2UtxqgOfr96M4TaijrBtH6bra0T8Sdfjz65/BQAAALheq/li0mTrTZGWAO6P+e6w05FxBs2iTfn9b6Z4RURU44dM0cpt8TtTsPr57sf/TNHqBawvmYI1S279/fcGuTpp67VeXmcyq//EulZ20y8AAHBJ7UzgQBYCAADAFfh36QFwDu9T+2JX7PYZ065+2hActWoAAADAJ1RcegAAAABA5+r8/yOd/1c4/w8AAACya87/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEvrajldzReTQ/dnR8Z53pwm34wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCF/XlFghAGgzA4u7wdlfsflhoRicZ0q49/ChEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB485vxnx9L406y9trYeh5J9k6No1Pj7Ny4+sP48iUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzbT08cZRgA8Gd32GmpGhENiaipSQ96sXRbW3s1RkM8+BFMCF0qurVKOdiGWLl4M5x7MXo0xkSDN75DzyXppd564ICJJw+YmZ2hs7BaUu0Mld8vefd9dnZ4/zEhPPPOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJS23o6X20WcZC8Tg7g8dmd7ZT6rN/fUmY21u9NZyeJWzeN+ArxSfXNyqrmBAAAAcHQkZX4fEfc667NZ3Z7I8/9OeU6W83/3zCAu8/m9ef/m9srx4qPpMv//9Zf7L+x2NJHk/WSNLiz2e2f2D2XsMU3x0Hv2oWeM5Suf33tJ8l9I+/3V57c6+Xq2vrl9+900D4/VMVoA4FGcLusiKP8fyupukwMD4MgYqyTeZf6fTDQ7JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6bK3GU2XciojpsQdxZnN7ZX5U/dXa3emNoly4dWut2mbWRCciFhb7vTM1zuXwKlfzxidz/X5v6dr1uoOTETHio5sH+/GkGP7fnpNGxNCRUy+OaOfDA/S1p519QXF5Rr1rOJ7N76Ent4aOtPYt+Ds7A01cAP3eUlrH0rWLTpqY4OMOymvvv2+5xj9FAAAcCZ2iZJnovc76bHasNRmx8/1w/v9aJY6hvH/n5uDI4P1GJf+//9GFO9W+qvl/t6b5PQlmlq98NnPt+o03Fq/MXe5d7n365tnuW91zF8+fvziT3yuZWYi2OyYAAAD8C2lRqvl/e3L//v+JShz/sP9fzf8//7b7ZbWvRP4/0oNNv6ZHAgAAcBSlu9Fzr/7xe2vEGa00jS/mlpeXuoPX3fdnB6+1DvcRHStKNf9PJpseFQAAAFCHrdXW0P7/pUocB9z/f/qHl36qtplExHjE1YjonZ6/2r9U33QOtTq+qJx3lDY9UwAAAJoyXpTq/n8nf/6/vfvIQzsiXj8V8WfxHf44YP6fvPf1j9W+qs//n6t1lodPe2qwHnk9FTE21fSIAAAA+D87XpQs2f+tsz778c8nPkg9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt78CAAD//wXGL2s=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 783.133441ms ago: executing program 0 (id=1175): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x1, {0x0, 0x1a, 0x11, 0xf, 0x2, 0x4f5c, 0x2, 0x5e}}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x19, 0xf, 0xf, 0x5, 0x2, 0x100, 0x0, 0x7c, 0x1}}) 656.271593ms ago: executing program 1 (id=1176): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1f7, 0xb06}, 0x25, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x20000007, 0x7, 0xd, 0x7f, 0xfffffffd, 0xfffffffd, 0x6, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x104, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9dd, 0x0, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x1f524c9c, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x23, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x4, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x7, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x8, 0x0, 0x6c, 0xa, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0x1dd, 0x6, 0x0, 0x80000349, 0x10000000, 0x80000001, 0xcb4, 0x4, 0x587a, 0x0, 0xe, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x1000002, 0x1000, 0x1000fa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x0, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1000001, 0x1d47, 0x5, 0x0, 0x4, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x3, 0x4, 0x5, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x5, 0x4, 0x8, 0x8, 0x5, 0xffffff2d, 0x8, 0xff, 0x6, 0x9, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c) 564.738763ms ago: executing program 0 (id=1177): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)='\n', 0x1}], 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 498.793934ms ago: executing program 1 (id=1178): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000400)={0x4000, 0x7, 0x9, 0x0, 0x19, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 222.650518ms ago: executing program 1 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 993.12µs ago: executing program 3 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r1, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f00000006c0)="c821b775", &(0x7f0000000040)=""/18}, 0x20) 0s ago: executing program 0 (id=1181): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 9.631914][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 119.665929][ T9] koneplus 0003:1E7D:2D51.0004: collection stack underflow [ 119.669834][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.692654][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.695925][ T9] koneplus 0003:1E7D:2D51.0004: item 0 0 0 12 parsing failed [ 119.702187][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.722520][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.731845][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.741319][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.750567][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.759492][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.775921][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.786437][ T9] koneplus 0003:1E7D:2D51.0004: parse failed [ 119.803502][ T9] koneplus: probe of 0003:1E7D:2D51.0004 failed with error -22 [ 119.967411][ T5826] usb 4-1: USB disconnect, device number 5 [ 120.091723][ T6555] program syz.2.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.248144][ T6560] loop2: detected capacity change from 0 to 1024 [ 120.640079][ T6563] loop3: detected capacity change from 0 to 7 [ 120.661919][ T6563] ldm_validate_partition_table(): Disk read failed. [ 120.672099][ T6563] Dev loop3: unable to read RDB block 0 [ 120.754059][ T6563] loop3: unable to read partition table [ 120.776125][ T6563] loop3: partition table beyond EOD, truncated [ 120.793010][ T6563] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 122.441958][ T6589] loop2: detected capacity change from 0 to 32768 [ 122.542261][ T6589] JBD2: Ignoring recovery information on journal [ 122.620879][ T6589] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.892906][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 123.000792][ T6612] loop3: detected capacity change from 0 to 32768 [ 123.041666][ T6612] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 123.041666][ T6612] [ 123.054788][ T6612] jfs_create: dtInsert returned -EIO [ 123.068218][ T6612] ERROR: (device loop3): jfs_create: [ 123.068218][ T6612] [ 123.146608][ T5826] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.380310][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 123.383305][ T6627] loop3: detected capacity change from 0 to 8192 [ 123.400820][ T5826] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.416553][ T6627] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.420620][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.438027][ T6627] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 123.486048][ T6627] REISERFS (device loop3): using ordered data mode [ 123.509561][ T6627] reiserfs: using flush barriers [ 123.561032][ T6627] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.580325][ T5826] usb 2-1: config 0 descriptor?? [ 123.656419][ T6627] REISERFS (device loop3): checking transaction log (loop3) [ 123.715305][ T6627] REISERFS (device loop3): Using r5 hash to sort names [ 123.723260][ T6627] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 123.822017][ T5826] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.851217][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.906501][ T5826] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.913772][ T5826] usb 2-1: media controller created [ 123.993302][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.026327][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 124.079613][ T6637] ipvlan2: entered allmulticast mode [ 124.086327][ T5826] az6027: usb out operation failed. (-71) [ 124.107501][ T6637] syz_tun: entered allmulticast mode [ 124.114441][ T5826] az6027: usb out operation failed. (-71) [ 124.136804][ T5826] stb0899_attach: Driver disabled by Kconfig [ 124.143095][ T5826] az6027: no front-end attached [ 124.143095][ T5826] [ 124.172855][ T5826] az6027: usb out operation failed. (-71) [ 124.185299][ T5826] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 124.215539][ T5826] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 124.267008][ T5826] dvb-usb: schedule remote query interval to 400 msecs. [ 124.296622][ T5826] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.339583][ T5826] usb 2-1: USB disconnect, device number 5 [ 124.551582][ T5826] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 124.742420][ T6642] loop2: detected capacity change from 0 to 4096 [ 124.828480][ T6646] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.055876][ T6635] loop0: detected capacity change from 0 to 40427 [ 125.103350][ T6635] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 125.117475][ T966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.152250][ T6651] loop3: detected capacity change from 0 to 64 [ 125.164507][ T6635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.176656][ T6635] F2FS-fs (loop0): heap/no_heap options were deprecated [ 125.185363][ T6635] F2FS-fs (loop0): invalid crc value [ 125.211476][ T6635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.293772][ T6651] hfs: request for non-existent node 131072 in B*Tree [ 125.303145][ T6651] hfs: request for non-existent node 131072 in B*Tree [ 125.365789][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 125.374323][ T6635] F2FS-fs (loop0): Start checkpoint disabled! [ 125.375143][ T966] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 125.405998][ T966] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 125.429127][ T966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.462725][ T6635] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.463369][ T966] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 125.481359][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.505805][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.513888][ T966] usb 2-1: Product: syz [ 125.564505][ T966] usb 2-1: Manufacturer: syz [ 125.576158][ T966] usb 2-1: SerialNumber: syz [ 125.597111][ T966] usb 2-1: config 0 descriptor?? [ 125.724825][ T6635] syz.0.302: attempt to access beyond end of device [ 125.724825][ T6635] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 125.802221][ T6635] F2FS-fs (loop0): Remounting filesystem read-only [ 125.817363][ T6635] syz.0.302: attempt to access beyond end of device [ 125.817363][ T6635] loop0: rw=2049, sector=53288, nr_sectors = 8 limit=40427 [ 125.873560][ T6635] F2FS-fs (loop0): Remounting filesystem read-only [ 125.892261][ T966] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 126.239412][ T5826] usb 2-1: USB disconnect, device number 6 [ 126.537707][ T6673] loop2: detected capacity change from 0 to 512 [ 126.592466][ T6673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.627121][ T6673] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.900238][ T6680] loop0: detected capacity change from 0 to 1024 [ 126.920675][ T6673] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.319: Directory hole found for htree leaf block 0 [ 127.036101][ T6684] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 127.063901][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.140708][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 127.140725][ T28] audit: type=1800 audit(1778535004.229:25): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 127.387424][ T59] hfsplus: b-tree write err: -5, ino 3 [ 127.605503][ T6698] netlink: 148 bytes leftover after parsing attributes in process `syz.2.329'. [ 128.082539][ T6712] loop2: detected capacity change from 0 to 1024 [ 128.115785][ T6712] EXT4-fs: Ignoring removed bh option [ 128.199978][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.254159][ T5809] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.371805][ T6712] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.489382][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 128.505090][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.533280][ T5809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.561242][ T5809] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.575974][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.594323][ T5809] usb 4-1: Product: syz [ 128.614684][ T5809] usb 4-1: Manufacturer: syz [ 128.631202][ T5809] usb 4-1: SerialNumber: syz [ 128.651845][ T5809] usb 4-1: config 0 descriptor?? [ 128.723876][ T6719] loop1: detected capacity change from 0 to 2048 [ 128.738658][ T6708] loop0: detected capacity change from 0 to 40427 [ 128.744440][ T6719] EXT4-fs: Ignoring removed nobh option [ 128.771868][ T6708] F2FS-fs (loop0): invalid crc value [ 128.778497][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.779747][ T6708] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.844497][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.865007][ T6719] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.012978][ T966] usb 4-1: USB disconnect, device number 6 [ 129.049009][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.057486][ T6708] F2FS-fs (loop0): Start checkpoint disabled! [ 129.082469][ T6708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 129.265940][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.342790][ T59] kworker/u4:4: attempt to access beyond end of device [ 129.342790][ T59] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 129.347287][ T6730] loop1: detected capacity change from 0 to 1024 [ 129.362715][ T59] kworker/u4:4: attempt to access beyond end of device [ 129.362715][ T59] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 129.387752][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.400786][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.411297][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.465777][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.473899][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 129.503126][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.516561][ T59] hfsplus: b-tree write err: -5, ino 25 [ 129.534037][ T59] hfsplus: b-tree write err: -5, ino 4 [ 129.543497][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.551702][ T59] hfsplus: b-tree write err: -5, ino 2 [ 129.562607][ T59] hfsplus: b-tree write err: -5, ino 26 [ 129.568731][ T9] pvrusb2: ********** [ 129.576322][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.626324][ T9] pvrusb2: Important functionality might not be entirely working. [ 129.634659][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.690775][ T9] pvrusb2: ********** [ 129.766404][ T2319] pvrusb2: Invalid write control endpoint [ 129.915183][ T2319] pvrusb2: Invalid write control endpoint [ 129.921388][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.935601][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.945297][ T5809] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.959596][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.973098][ T2319] pvrusb2: Device being rendered inoperable [ 129.985844][ T6724] pvrusb2: Attempted to execute control transfer when device not ok [ 130.024056][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.027574][ T966] usb 3-1: USB disconnect, device number 4 [ 130.044271][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 130.085085][ T2319] pvrusb2: Attached sub-driver cx25840 [ 130.098548][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 130.123763][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.169901][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 130.182665][ T5809] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.193874][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 130.205957][ T5809] usb 4-1: config 0 has no interface number 0 [ 130.213871][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 130.215281][ T5809] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.227087][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 130.241485][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 130.260479][ T6744] block nbd0: Unsupported socket: should be TCP or UNIX. [ 130.267990][ T5809] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.287672][ T5809] usb 4-1: config 0 interface 41 has no altsetting 0 [ 130.301956][ T5809] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 130.315859][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.324018][ T5809] usb 4-1: Product: syz [ 130.342116][ T5809] usb 4-1: Manufacturer: syz [ 130.347947][ T5809] usb 4-1: SerialNumber: syz [ 130.365023][ T5809] usb 4-1: config 0 descriptor?? [ 130.387955][ T6732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.395488][ T6732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.650121][ T6732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.658284][ T6732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.918321][ T6762] loop0: detected capacity change from 0 to 2048 [ 130.941828][ T6762] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.973383][ T6762] NILFS (loop0): mounting unchecked fs [ 131.036760][ T6762] NILFS (loop0): recovery complete [ 131.074061][ T6765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.436042][ T5809] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 12:09:2e:a2:2d:2d [ 131.443186][ T6778] loop0: detected capacity change from 0 to 1024 [ 131.487114][ T5809] usb 4-1: USB disconnect, device number 7 [ 131.494767][ T5809] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 131.646252][ T5806] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.845834][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 131.858651][ T5806] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.884217][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.917215][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.931975][ T5806] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.967106][ T5806] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.985518][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.095933][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.164217][ T6793] usb usb9: usbfs: process 6793 (syz.0.364) did not claim interface 47 before use [ 132.223741][ T5806] usb 3-1: GET_CAPABILITIES returned 0 [ 132.240237][ T5806] usbtmc 3-1:16.0: can't read capabilities [ 132.311091][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 132.341742][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.376472][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.405885][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.431346][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 132.474964][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.495497][ T9] usb 2-1: Product: syz [ 132.509785][ T9] usb 2-1: Manufacturer: syz [ 132.531842][ T9] usb 2-1: SerialNumber: syz [ 132.538944][ T786] usb 3-1: USB disconnect, device number 5 [ 132.557689][ T9] usb 2-1: config 0 descriptor?? [ 132.687128][ T6808] netlink: 188 bytes leftover after parsing attributes in process `syz.0.369'. [ 132.972794][ T6813] loop0: detected capacity change from 0 to 4096 [ 132.998140][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 133.030905][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.187638][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.198811][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.206003][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.344646][ T6827] loop2: detected capacity change from 0 to 512 [ 133.361420][ T6827] EXT4-fs: Ignoring removed nobh option [ 133.386385][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.405941][ T6827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.406298][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 133.422615][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 133.449294][ T9] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 133.467024][ T786] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.475570][ T786] usb 4-1: config 0 has no interface number 0 [ 133.483516][ T9] gs_usb: probe of 2-1:0.0 failed with error -71 [ 133.507238][ T786] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.523390][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.531157][ T6827] EXT4-fs (loop2): 1 truncate cleaned up [ 133.542830][ T9] usb 2-1: USB disconnect, device number 7 [ 133.553435][ T786] usb 4-1: Product: syz [ 133.565985][ T786] usb 4-1: Manufacturer: syz [ 133.570752][ T786] usb 4-1: SerialNumber: syz [ 133.584145][ T786] usb 4-1: config 0 descriptor?? [ 133.586932][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.592318][ T786] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 133.868462][ T786] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 133.914075][ T786] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 133.947509][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.545063][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.569149][ T786] usb 4-1: USB disconnect, device number 8 [ 134.596266][ T786] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.659027][ T786] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.698048][ T786] quatech2 4-1:0.51: device disconnected [ 134.762026][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 134.784405][ T6858] loop2: detected capacity change from 0 to 512 [ 134.828392][ T6858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.015982][ T6866] loop1: detected capacity change from 0 to 128 [ 135.039776][ T6866] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 135.055220][ T6866] hpfs: filesystem error: improperly stopped [ 135.061807][ T6866] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 135.070283][ T6866] hpfs: You really don't want any checks? You are crazy... [ 135.080217][ T6866] hpfs: hpfs_map_sector(): read error [ 135.087946][ T6866] hpfs: code page support is disabled [ 135.093904][ T6866] hpfs: hpfs_map_4sectors(): unaligned read [ 135.106610][ T6866] hpfs: hpfs_map_4sectors(): unaligned read [ 135.112917][ T6866] hpfs: filesystem error: unable to find root dir [ 135.202338][ T6867] loop0: detected capacity change from 0 to 4096 [ 135.215610][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.255841][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.557404][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.726621][ T6880] loop1: detected capacity change from 0 to 64 [ 135.801864][ T6879] loop2: detected capacity change from 0 to 4096 [ 135.818356][ T6880] MINIX-fs: mounting file system with errors, running fsck is recommended [ 135.932281][ T6879] ntfs: volume version 3.1. [ 136.341399][ T6870] loop3: detected capacity change from 0 to 32768 [ 136.431498][ T6870] JBD2: Ignoring recovery information on journal [ 136.528061][ T6870] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 136.735154][ T6893] (syz.3.388,6893,0):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume. [ 136.756152][ T6893] (syz.3.388,6893,0):ocfs2_group_add:507 ERROR: status = -22 [ 136.941413][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 137.481510][ T6884] loop0: detected capacity change from 0 to 32768 [ 137.531591][ T6884] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.550714][ T6886] loop1: detected capacity change from 0 to 40427 [ 137.584596][ T6886] F2FS-fs (loop1): invalid crc value [ 137.659562][ T6886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.765971][ T6884] XFS (loop0): Ending clean mount [ 137.831682][ T6910] loop2: detected capacity change from 0 to 256 [ 137.944638][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.954262][ T6886] F2FS-fs (loop1): Start checkpoint disabled! [ 138.023939][ T6886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 138.570075][ T49] kworker/u4:3: attempt to access beyond end of device [ 138.570075][ T49] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 138.615208][ T49] kworker/u4:3: attempt to access beyond end of device [ 138.615208][ T49] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 138.658139][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.667084][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.693905][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.943382][ T6931] loop2: detected capacity change from 0 to 2048 [ 138.994899][ T6931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.399063][ T6939] capability: warning: `syz.3.416' uses 32-bit capabilities (legacy support in use) [ 139.442689][ T6939] program syz.3.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.614720][ T6942] netlink: 'syz.1.406': attribute type 30 has an invalid length. [ 139.658921][ T6942] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.669953][ T6942] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.679024][ T6942] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.687905][ T6942] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.712822][ T6942] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.722549][ T6942] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.732124][ T6942] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.741227][ T6942] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.922004][ T5826] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.104793][ T6954] loop1: detected capacity change from 0 to 4096 [ 140.153807][ T5826] usb 1-1: Using ep0 maxpacket: 32 [ 140.168064][ T5826] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 140.180945][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.198186][ T5826] usb 1-1: config 0 descriptor?? [ 140.203753][ T6957] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.463096][ T5826] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 140.497742][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.516431][ T5826] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 140.523782][ T5826] usb 1-1: media controller created [ 140.563966][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.691959][ T5826] az6027: usb out operation failed. (-71) [ 140.702664][ T5826] az6027: usb out operation failed. (-71) [ 140.721940][ T5826] stb0899_attach: Driver disabled by Kconfig [ 140.736681][ T5826] az6027: no front-end attached [ 140.736681][ T5826] [ 140.756656][ T5826] az6027: usb out operation failed. (-71) [ 140.762474][ T5826] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 140.772894][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 140.797717][ T5826] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 140.841950][ T5826] dvb-usb: schedule remote query interval to 400 msecs. [ 140.842541][ T6964] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 140.875724][ T5826] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 140.881441][ T6964] netlink: 'syz.1.424': attribute type 2 has an invalid length. [ 140.902955][ T5826] usb 1-1: USB disconnect, device number 6 [ 141.013508][ T5826] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 141.150582][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 141.166358][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 141.223608][ T6971] ipvlan2: entered allmulticast mode [ 141.242092][ T6971] syz_tun: entered allmulticast mode [ 141.775963][ T5806] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.818746][ T6983] loop1: detected capacity change from 0 to 8192 [ 141.841289][ T6983] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.860266][ T6983] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 141.870022][ T6983] REISERFS (device loop1): using ordered data mode [ 141.876786][ T6983] reiserfs: using flush barriers [ 141.892397][ T6983] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.956392][ T6983] REISERFS (device loop1): checking transaction log (loop1) [ 141.976037][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 142.027546][ T5806] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 142.048296][ T6983] REISERFS (device loop1): Using r5 hash to sort names [ 142.065823][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.073991][ T5806] usb 3-1: Product: syz [ 142.081050][ T6983] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 142.092130][ T5806] usb 3-1: Manufacturer: syz [ 142.106218][ T5806] usb 3-1: SerialNumber: syz [ 142.127964][ T5806] usb 3-1: config 0 descriptor?? [ 142.155354][ T6989] netlink: 'syz.0.434': attribute type 30 has an invalid length. [ 142.184042][ T6989] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.193543][ T6989] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.202937][ T6989] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.212377][ T6989] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.249694][ T6989] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.259169][ T6989] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.268759][ T6989] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.278176][ T6989] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.398654][ T5806] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 143.010663][ T5806] usb write operation failed. (-71) [ 143.035631][ T5806] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.057406][ T5806] dvbdev: DVB: registering new adapter (Terratec H7) [ 143.064492][ T5806] usb 3-1: media controller created [ 143.073998][ T5806] usb read operation failed. (-71) [ 143.083423][ T5806] usb write operation failed. (-71) [ 143.086628][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 143.102053][ T5806] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 143.114211][ T5806] usb 3-1: USB disconnect, device number 6 [ 143.119343][ T7002] ipvlan2: entered allmulticast mode [ 143.131994][ T7002] syz_tun: entered allmulticast mode [ 143.502588][ T7013] loop1: detected capacity change from 0 to 1024 [ 143.537981][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.582087][ T7013] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.610189][ T7013] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.446: lblock 3 mapped to illegal pblock 3 (length 2) [ 143.679521][ T7018] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.446: lblock 0 mapped to illegal pblock 0 (length 3) [ 143.809198][ T7018] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 143.833382][ T7025] netlink: 'syz.2.448': attribute type 30 has an invalid length. [ 143.846645][ T7018] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.846645][ T7018] [ 143.860951][ T7025] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.869890][ T7025] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.879145][ T7025] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.889215][ T7025] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.960743][ T7025] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.970760][ T7025] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.979964][ T7025] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.988956][ T7025] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.209661][ T36] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 1) [ 144.248675][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 144.275882][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.275882][ T36] [ 144.301317][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.927238][ T7030] loop3: detected capacity change from 0 to 32768 [ 144.991944][ T7030] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.058345][ T7030] XFS (loop3): Ending clean mount [ 145.095061][ T786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.293865][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.315825][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 145.366817][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.388215][ T786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.418226][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.452485][ T786] usb 2-1: config 0 descriptor?? [ 145.492813][ T7038] loop2: detected capacity change from 0 to 32768 [ 145.615304][ T28] audit: type=1800 audit(1778535022.699:26): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 145.735622][ T7052] loop0: detected capacity change from 0 to 4096 [ 145.740377][ T786] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.274166][ T786] usb 2-1: USB disconnect, device number 8 [ 146.442768][ T7062] loop2: detected capacity change from 0 to 512 [ 146.514774][ T7062] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.461: invalid indirect mapped block 256 (level 2) [ 146.553064][ T7068] loop0: detected capacity change from 0 to 512 [ 146.563772][ T7062] EXT4-fs (loop2): 2 truncates cleaned up [ 146.583336][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.621311][ T7068] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.464: bg 0: block 5: invalid block bitmap [ 146.637344][ T28] audit: type=1800 audit(1778535023.709:27): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.461" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.709488][ T7068] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 146.728969][ T7068] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.464: invalid indirect mapped block 3 (level 2) [ 146.741106][ T7061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.461: bg 0: block 5: invalid block bitmap [ 146.751603][ T7068] EXT4-fs (loop0): 1 orphan inode deleted [ 146.766245][ T7061] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 146.768951][ T7068] EXT4-fs (loop0): 1 truncate cleaned up [ 146.791051][ T7068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.795779][ T7061] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.795779][ T7061] [ 146.883310][ T7061] EXT4-fs (loop2): Total free blocks count 0 [ 146.916020][ T7061] EXT4-fs (loop2): Free/Dirty block details [ 146.922139][ T7061] EXT4-fs (loop2): free_blocks=0 [ 146.952145][ T7061] EXT4-fs (loop2): dirty_blocks=32 [ 146.955857][ T28] audit: type=1800 audit(1778535024.039:28): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.464" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 146.965777][ T7061] EXT4-fs (loop2): Block reservation details [ 147.005582][ T7061] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 147.035179][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.108517][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.270019][ T7082] loop2: detected capacity change from 0 to 256 [ 147.285863][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.486156][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 147.505286][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.541136][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.566771][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.580144][ T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.590348][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.605536][ T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.625992][ T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.655352][ T786] usb 2-1: Manufacturer: syz [ 147.677519][ T786] usb 2-1: config 0 descriptor?? [ 147.995843][ T786] rc_core: IR keymap rc-hauppauge not found [ 148.009801][ T786] Registered IR keymap rc-empty [ 148.019397][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.058450][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.107631][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 148.161638][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 148.206200][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.252455][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.291462][ T7108] loop2: detected capacity change from 0 to 512 [ 148.298278][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.336120][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.387073][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.401135][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.418592][ T7108] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.446304][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.509597][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.546089][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.591793][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.645809][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 148.658584][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.706579][ T786] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 148.714679][ T786] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.776238][ T7117] netlink: 'syz.3.487': attribute type 7 has an invalid length. [ 148.799721][ T786] usb 2-1: USB disconnect, device number 9 [ 149.190612][ T6318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.389957][ T6318] usb 3-1: Using ep0 maxpacket: 32 [ 149.426818][ T6318] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.434997][ T6318] usb 3-1: config 0 has no interface number 0 [ 149.466302][ T6318] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.502147][ T6318] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.522553][ T6318] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 149.535137][ T7134] loop1: detected capacity change from 0 to 4096 [ 149.544078][ T6318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.597463][ T6318] usb 3-1: config 0 descriptor?? [ 150.107092][ T7145] loop1: detected capacity change from 0 to 4096 [ 150.179832][ T7145] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 150.218662][ T28] audit: type=1800 audit(1778535027.309:29): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 150.245906][ T6318] uclogic 0003:28BD:0094.0005: pen parameters not found [ 150.259106][ T6318] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 150.285208][ T6318] usb 3-1: USB disconnect, device number 7 [ 150.415827][ T5760] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.606220][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 150.629346][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.654185][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.667855][ T5760] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 150.677297][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.703969][ T5760] usb 4-1: config 0 descriptor?? [ 150.742912][ T7158] loop1: detected capacity change from 0 to 256 [ 151.150829][ T5760] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 151.183155][ T5760] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 151.201698][ T5760] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 151.212969][ T5760] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 151.237406][ T5760] samsung 0003:0419:0600.0006: unknown main item tag 0x0 [ 151.249256][ T5760] samsung 0003:0419:0600.0006: unknown global tag 0xe [ 151.262336][ T5760] samsung 0003:0419:0600.0006: item 0 0 1 14 parsing failed [ 151.271662][ T5760] samsung 0003:0419:0600.0006: parse failed [ 151.278185][ T5760] samsung: probe of 0003:0419:0600.0006 failed with error -22 [ 151.342742][ T7172] loop2: detected capacity change from 0 to 4096 [ 151.407218][ T966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.427495][ T7174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.441607][ T5760] usb 4-1: USB disconnect, device number 9 [ 151.626471][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 151.670052][ T966] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.704001][ T966] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 151.746311][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.753136][ T966] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 151.787951][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.801671][ T966] usb 1-1: config 0 descriptor?? [ 152.130468][ T7182] loop3: detected capacity change from 0 to 256 [ 152.233454][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.261512][ T7184] loop2: detected capacity change from 0 to 4096 [ 152.268135][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.286463][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.303858][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.328223][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.334468][ T7184] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.354009][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.369421][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.384826][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.399510][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x7 [ 152.409021][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.425552][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.444544][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.465613][ T7184] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 152.479395][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.501561][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.521768][ T966] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 152.534711][ T7184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 152.566032][ T966] elo 0003:04E7:0030.0007: unexpected long global item [ 152.573758][ T966] elo 0003:04E7:0030.0007: parse failed [ 152.579847][ T7184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 152.616962][ T966] elo: probe of 0003:04E7:0030.0007 failed with error -22 [ 152.654929][ T7184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 152.664163][ T966] usb 1-1: USB disconnect, device number 7 [ 152.703663][ T7184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 152.738367][ T7184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 152.747850][ T7184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 152.785976][ T7184] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 152.805128][ T7184] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 152.854776][ T7184] ntfs: volume version 3.1. [ 152.930748][ T7195] loop1: detected capacity change from 0 to 1024 [ 153.515631][ T7200] sctp: [Deprecated]: syz.0.522 (pid 7200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.515631][ T7200] Use struct sctp_sack_info instead [ 153.528747][ T7190] loop3: detected capacity change from 0 to 32768 [ 153.643786][ T7190] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.785193][ T7190] XFS (loop3): Ending clean mount [ 154.054357][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.469441][ T7213] loop1: detected capacity change from 0 to 32768 [ 154.511201][ T7213] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.526 (7213) [ 154.584669][ T7213] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 154.615995][ T7213] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 154.656044][ T7213] BTRFS info (device loop1): using free space tree [ 154.703578][ T7220] loop0: detected capacity change from 0 to 32768 [ 154.901987][ T7213] BTRFS info (device loop1): enabling ssd optimizations [ 154.946205][ T7213] BTRFS info (device loop1): auto enabling async discard [ 154.965921][ T7244] loop2: detected capacity change from 0 to 256 [ 154.973944][ T7244] exfat: Deprecated parameter 'utf8' [ 154.991582][ T7244] exfat: Deprecated parameter 'utf8' [ 155.068989][ T7244] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdc00, utbl_chksum : 0xe619d30d) [ 155.368151][ T7252] loop3: detected capacity change from 0 to 256 [ 155.566242][ T5806] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.586793][ T5770] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 155.741661][ T7257] Bluetooth: MGMT ver 1.22 [ 155.787277][ T5806] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 155.849151][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.868821][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.889225][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.913512][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.936131][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.976359][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.996597][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.029539][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.081233][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.113661][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.138223][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.184297][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.211949][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.227613][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.239056][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.259082][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.275927][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.299874][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.314189][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.323737][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.376330][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.396563][ T5806] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.426812][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.441711][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.453352][ T5806] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.495730][ T5806] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.504173][ T5806] usb 1-1: Product: syz [ 156.536113][ T5806] usb 1-1: Manufacturer: syz [ 156.540806][ T5806] usb 1-1: SerialNumber: syz [ 156.567137][ T5806] usb 1-1: config 0 descriptor?? [ 156.602372][ T5806] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.794898][ T9] usb 1-1: USB disconnect, device number 8 [ 156.818440][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 157.215814][ T5827] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.359618][ T7294] loop3: detected capacity change from 0 to 32768 [ 157.396318][ T7294] JBD2: Ignoring recovery information on journal [ 157.407501][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 157.441938][ T5827] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 157.473301][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.539946][ T5827] usb 2-1: Product: syz [ 157.544220][ T5827] usb 2-1: Manufacturer: syz [ 157.545552][ T7299] loop2: detected capacity change from 0 to 16 [ 157.557508][ T7299] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.565862][ T7294] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.604173][ T5827] usb 2-1: SerialNumber: syz [ 157.630568][ T5827] usb 2-1: config 0 descriptor?? [ 157.663392][ T5827] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 158.007627][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 158.033206][ T7304] loop2: detected capacity change from 0 to 2048 [ 158.059290][ T7304] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 158.138897][ T7304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.498072][ T5827] ssu100: probe of 2-1:0.0 failed with error -71 [ 158.526956][ T5827] usb 2-1: USB disconnect, device number 10 [ 158.754242][ T7307] loop0: detected capacity change from 0 to 32768 [ 158.805625][ T7307] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.959812][ T7307] XFS (loop0): Ending clean mount [ 158.965850][ T6318] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.990827][ T7307] XFS (loop0): Quotacheck needed: Please wait. [ 159.062028][ T7307] XFS (loop0): Quotacheck: Done. [ 159.095266][ T7311] loop2: detected capacity change from 0 to 40427 [ 159.139460][ T7311] F2FS-fs (loop2): invalid crc value [ 159.172274][ T6318] usb 4-1: Using ep0 maxpacket: 8 [ 159.175799][ T7311] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.219923][ T6318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.262679][ T6318] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.294722][ T6318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.311206][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.340511][ T6318] usb 4-1: config 0 descriptor?? [ 159.411183][ T7311] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.557288][ T7311] syz.2.561: attempt to access beyond end of device [ 159.557288][ T7311] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.620406][ T6318] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.652053][ T7311] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 159.664095][ T7311] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 159.974459][ T7331] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.996081][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 160.081584][ T6318] usb 4-1: USB disconnect, device number 10 [ 160.494624][ T7336] loop0: detected capacity change from 0 to 4096 [ 160.621634][ T7343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.796919][ T7348] program syz.1.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.086220][ T5827] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 161.275843][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 161.288074][ T5827] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.308295][ T5827] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 161.350580][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.414943][ T5827] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 161.435831][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.456733][ T5827] usb 4-1: Product: syz [ 161.464886][ T5827] usb 4-1: Manufacturer: syz [ 161.488854][ T5827] usb 4-1: SerialNumber: syz [ 161.511682][ T5827] usb 4-1: config 0 descriptor?? [ 161.775302][ T5827] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 161.934934][ T7355] loop1: detected capacity change from 0 to 32768 [ 161.987834][ T7355] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.575 (7355) [ 162.011456][ T7373] ªªªªªª: renamed from vlan0 (while UP) [ 162.042353][ T7355] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 162.075909][ T7355] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 162.115828][ T7355] BTRFS info (device loop1): using free space tree [ 162.127793][ T5826] usb 4-1: USB disconnect, device number 11 [ 162.354430][ T7355] BTRFS info (device loop1): enabling ssd optimizations [ 162.404954][ T7355] BTRFS info (device loop1): auto enabling async discard [ 162.733178][ T5770] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 163.434101][ T5806] IPVS: starting estimator thread 0... [ 163.557999][ T7419] IPVS: using max 15 ests per chain, 36000 per kthread [ 163.700952][ T7414] Falling back ldisc for ttyS3. [ 164.159130][ T7440] loop3: detected capacity change from 0 to 128 [ 164.265816][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.460620][ T7423] loop2: detected capacity change from 0 to 32768 [ 164.485995][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.513219][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.585839][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.600555][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'. [ 164.614810][ T7452] loop1: detected capacity change from 0 to 256 [ 164.616844][ T7454] erspan0: entered promiscuous mode [ 164.630772][ T7423] JBD2: Ignoring recovery information on journal [ 164.645758][ T7454] erspan0: left promiscuous mode [ 164.691834][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 164.732304][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 164.763259][ T9] usb 1-1: Product: syz [ 164.779403][ T9] usb 1-1: Manufacturer: syz [ 164.794517][ T9] usb 1-1: SerialNumber: syz [ 164.800698][ T7423] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.059328][ T7461] loop1: detected capacity change from 0 to 64 [ 165.093829][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.119417][ T7461] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 165.205794][ T7423] (syz.2.598,7423,1):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume. [ 165.244832][ T7423] (syz.2.598,7423,1):ocfs2_group_add:507 ERROR: status = -22 [ 165.323898][ T6318] usb 1-1: USB disconnect, device number 9 [ 165.352239][ T6318] usblp0: removed [ 165.463989][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 165.753027][ T7466] loop1: detected capacity change from 0 to 4096 [ 165.796165][ T7466] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 166.051907][ T7459] loop3: detected capacity change from 0 to 32768 [ 166.692635][ T7483] loop1: detected capacity change from 0 to 8192 [ 166.739350][ T7483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.806277][ T7483] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 166.832366][ T7483] REISERFS (device loop1): using ordered data mode [ 166.910598][ T7483] reiserfs: using flush barriers [ 166.927273][ T7483] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.989727][ T7483] REISERFS (device loop1): checking transaction log (loop1) [ 167.031875][ T7483] REISERFS (device loop1): Using r5 hash to sort names [ 167.044932][ T7483] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 167.174026][ T7473] loop2: detected capacity change from 0 to 32768 [ 168.567435][ T7519] loop2: detected capacity change from 0 to 8192 [ 168.579733][ T7504] loop1: detected capacity change from 0 to 32768 [ 168.620280][ T7519] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.681252][ T7504] JBD2: Ignoring recovery information on journal [ 168.701652][ T7519] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 168.735018][ T7504] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 168.762023][ T7519] REISERFS (device loop2): using ordered data mode [ 168.792979][ T7504] JBD2: bad block at offset 32 [ 168.803504][ T7519] reiserfs: using flush barriers [ 168.848429][ T7504] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 168.872164][ T7519] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.970423][ T7519] REISERFS (device loop2): checking transaction log (loop2) [ 169.008494][ T7519] REISERFS (device loop2): Using r5 hash to sort names [ 169.045038][ T7519] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 169.335685][ C0] sched: RT throttling activated [ 169.374993][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 170.211144][ T7534] loop1: detected capacity change from 0 to 1024 [ 170.334590][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 170.334608][ T28] audit: type=1800 audit(1778535047.419:30): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.631" name="file1" dev="loop1" ino=3 res=0 errno=0 [ 170.435986][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.541211][ T3540] hfsplus: b-tree write err: -5, ino 3 [ 170.631732][ T5826] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 170.662709][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.700979][ T5826] usb 3-1: Product: syz [ 170.711691][ T5826] usb 3-1: Manufacturer: syz [ 170.728987][ T5826] usb 3-1: SerialNumber: syz [ 170.781149][ T5826] usb 3-1: config 0 descriptor?? [ 170.921529][ T7520] loop3: detected capacity change from 0 to 262144 [ 170.931822][ T7520] BTRFS: device fsid fd264d70-4fa2-405d-a1bb-708262ad6b73 devid 1 transid 8 /dev/loop3 scanned by syz.3.629 (7520) [ 170.970934][ T7520] BTRFS info (device loop3): first mount of filesystem fd264d70-4fa2-405d-a1bb-708262ad6b73 [ 170.983272][ T7520] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 170.992718][ T7520] BTRFS info (device loop3): using free space tree [ 171.129512][ T7520] BTRFS info (device loop3): enabling ssd optimizations [ 171.131776][ T5826] usb 3-1: USB disconnect, device number 8 [ 171.136913][ T7520] BTRFS info (device loop3): auto enabling async discard [ 171.254199][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.306881][ T5774] BTRFS info (device loop3): last unmount of filesystem fd264d70-4fa2-405d-a1bb-708262ad6b73 [ 171.829419][ T7566] loop1: detected capacity change from 0 to 512 [ 171.935103][ T7566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.154265][ T7557] loop0: detected capacity change from 0 to 32768 [ 172.191702][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.293057][ T7557] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.340826][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 172.395533][ T7557] XFS (loop0): Ending clean mount [ 172.407625][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.418227][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.519622][ T7557] XFS (loop0): Quotacheck needed: Please wait. [ 172.553856][ T7583] loop2: detected capacity change from 0 to 2048 [ 172.569602][ T7579] bridge0: entered allmulticast mode [ 172.593573][ T7583] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 172.613000][ T7585] loop1: detected capacity change from 0 to 512 [ 172.639428][ T7583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.659197][ T7585] EXT4-fs: Ignoring removed orlov option [ 172.700830][ T7585] EXT4-fs (loop1): first meta block group too large: 1048576 (group descriptor block count 1) [ 172.817665][ T7557] XFS (loop0): Quotacheck: Done. [ 172.975908][ T28] audit: type=1800 audit(1778535050.059:31): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 173.238176][ T7592] loop3: detected capacity change from 0 to 64 [ 173.255958][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.275887][ T7592] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 173.514910][ T7598] loop1: detected capacity change from 0 to 256 [ 173.846686][ T7601] binder: Binderfs stats mode cannot be changed during a remount [ 173.972366][ T7603] Context (ID=0x10) not attached to queue pair (handle=0x2:0xf2) [ 174.304944][ T7615] loop1: detected capacity change from 0 to 64 [ 174.366147][ T7615] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 174.520233][ T7617] loop2: detected capacity change from 0 to 1024 [ 174.643791][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.855268][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.875202][ T7630] loop0: detected capacity change from 0 to 64 [ 174.923414][ T7630] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 175.748550][ T7626] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.998694][ T7626] XFS (loop1): Ending clean mount [ 176.046519][ T7626] XFS (loop1): Quotacheck needed: Please wait. [ 176.260009][ T7626] XFS (loop1): Quotacheck: Done. [ 176.408647][ T7666] set_capacity_and_notify: 2 callbacks suppressed [ 176.408665][ T7666] loop2: detected capacity change from 0 to 512 [ 176.487630][ T7666] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 176.499776][ T7666] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 176.542329][ T7666] EXT4-fs (loop2): 1 truncate cleaned up [ 176.552727][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.591166][ T7666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.732318][ T7666] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.746115][ T7675] Zero length message leads to an empty skb [ 176.828388][ T7666] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 176.882963][ T7672] loop0: detected capacity change from 0 to 8192 [ 176.919039][ T7672] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.955834][ T7672] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 176.965292][ T7672] REISERFS (device loop0): using ordered data mode [ 177.027523][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.045863][ T7672] reiserfs: using flush barriers [ 177.065800][ T7672] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.108303][ T7672] REISERFS (device loop0): checking transaction log (loop0) [ 177.150014][ T7672] REISERFS (device loop0): Using r5 hash to sort names [ 177.162287][ T7672] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 177.452937][ T7684] loop3: detected capacity change from 0 to 2048 [ 177.489229][ T7684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.555329][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.735579][ T7684] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 5: comm syz.3.685: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 177.750782][ T7687] loop1: detected capacity change from 0 to 4096 [ 177.791990][ T7693] loop0: detected capacity change from 0 to 128 [ 177.804031][ T7684] EXT4-fs (loop3): Remounting filesystem read-only [ 177.844564][ T7693] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.874956][ T7693] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.895204][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.953706][ T7693] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0c) [ 178.022575][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.392961][ T7702] loop1: detected capacity change from 0 to 2048 [ 178.424736][ T7702] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 178.475582][ T7702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.916653][ T5826] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 179.126492][ T7700] loop2: detected capacity change from 0 to 32768 [ 179.145476][ T5826] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 179.176536][ T5826] usb 1-1: can't read configurations, error -71 [ 179.214161][ T7700] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.241918][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 179.370773][ T7700] XFS (loop2): Ending clean mount [ 179.391649][ T7700] XFS (loop2): Quotacheck needed: Please wait. [ 179.460510][ T7700] XFS (loop2): Quotacheck: Done. [ 179.473330][ T7723] loop1: detected capacity change from 0 to 512 [ 179.599356][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 179.621940][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.626440][ T7725] netem: incorrect ge model size [ 179.656004][ T7725] netem: change failed [ 179.975324][ T7731] batadv_slave_1: entered promiscuous mode [ 179.985280][ T7730] batadv_slave_1: left promiscuous mode [ 180.557380][ T7749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 181.057083][ T7761] loop1: detected capacity change from 0 to 1024 [ 181.082574][ T7761] EXT4-fs: Ignoring removed orlov option [ 181.142550][ T7761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.425400][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.605153][ T7774] loop1: detected capacity change from 0 to 512 [ 181.898948][ T7774] EXT4-fs: Ignoring removed bh option [ 181.909579][ T7774] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.933465][ T7774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.006201][ T7774] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.714: inode has both inline data and extents flags [ 182.111876][ T7774] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.714: couldn't read orphan inode 15 (err -117) [ 182.137351][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.556597][ T7774] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 182.647946][ T7805] loop2: detected capacity change from 0 to 512 [ 182.693833][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.734400][ T7805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.828632][ T7805] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.061428][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.071578][ T7800] loop0: detected capacity change from 0 to 32768 [ 183.157642][ T7800] read_mapping_page failed! [ 183.162287][ T7800] ERROR: (device loop0): txCommit: [ 183.162287][ T7800] [ 183.878624][ T7834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.736'. [ 183.970477][ T7839] loop0: detected capacity change from 0 to 64 [ 184.419328][ T7850] loop0: detected capacity change from 0 to 512 [ 184.468832][ T7850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.503661][ T7850] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.699589][ T7846] loop1: detected capacity change from 0 to 40427 [ 184.734048][ T7846] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.745805][ T7846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.755446][ T7846] F2FS-fs (loop1): invalid crc value [ 184.782934][ T7846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.813753][ T5773] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 184.940331][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.952518][ T7846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.970092][ T7846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.173572][ T7867] loop0: detected capacity change from 0 to 128 [ 185.194582][ T7866] mmap: syz.2.747 (7866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.244388][ T7867] FAT-fs (loop0): Directory bread(block 524322) failed [ 185.261326][ T7867] FAT-fs (loop0): Directory bread(block 524323) failed [ 185.294903][ T7867] FAT-fs (loop0): Directory bread(block 524324) failed [ 185.326526][ T7867] FAT-fs (loop0): Directory bread(block 524325) failed [ 185.356110][ T7867] FAT-fs (loop0): Directory bread(block 524326) failed [ 185.363274][ T7867] FAT-fs (loop0): Directory bread(block 524327) failed [ 185.372176][ T7870] loop2: detected capacity change from 0 to 512 [ 185.410388][ T7867] FAT-fs (loop0): Directory bread(block 524328) failed [ 185.424138][ T7870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.437466][ T7870] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.448539][ T7867] FAT-fs (loop0): Directory bread(block 524329) failed [ 185.503676][ T7867] FAT-fs (loop0): Directory bread(block 524322) failed [ 185.549738][ T7867] FAT-fs (loop0): Directory bread(block 524323) failed [ 185.724652][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.965911][ T5771] Bluetooth: hci3: command tx timeout [ 186.133924][ T7884] loop2: detected capacity change from 0 to 2048 [ 186.170125][ T7884] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.245344][ T7887] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.337157][ T7884] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 262144 [ 186.361911][ T7884] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 186.447151][ T7884] Remounting filesystem read-only [ 186.452287][ T7884] NILFS (loop2): error -5 truncating bmap (ino=15) [ 186.701441][ T7898] loop0: detected capacity change from 0 to 512 [ 186.719212][ T5780] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 186.775749][ T5780] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 186.803055][ T5780] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 186.832672][ T5780] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.865335][ T5780] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.894860][ T7900] netlink: 'syz.3.762': attribute type 2 has an invalid length. [ 186.906358][ T5780] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 186.920631][ T7900] netlink: 'syz.3.762': attribute type 8 has an invalid length. [ 186.929227][ T5780] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 186.936448][ T7900] netlink: 120 bytes leftover after parsing attributes in process `syz.3.762'. [ 186.946621][ T5780] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 186.953879][ T5780] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 186.974743][ T5780] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 186.994661][ T5780] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 187.623989][ T5764] blk_print_req_error: 22 callbacks suppressed [ 187.624008][ T5764] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.706980][ T7898] netlink: 268 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.754920][ T7898] netlink: 136 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.815281][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.879550][ T7896] loop1: detected capacity change from 0 to 131072 [ 187.901721][ T7896] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 187.908707][ T7896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.918772][ T7896] F2FS-fs (loop1): invalid crc value [ 187.961404][ T7896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.042072][ T7896] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.049523][ T7896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 188.141356][ T7910] loop2: detected capacity change from 0 to 8192 [ 188.429571][ T7918] loop0: detected capacity change from 0 to 1024 [ 188.557960][ T7918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.608143][ T7918] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.762040][ T7918] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.768: lblock 3 mapped to illegal pblock 3 (length 3) [ 188.850508][ T7918] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 188.885832][ T7918] EXT4-fs (loop0): This should not happen!! Data will be lost [ 188.885832][ T7918] [ 188.913944][ T7925] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm syz.0.768: lblock 8 mapped to illegal pblock 8 (length 8) [ 188.950610][ T7925] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.968141][ T7925] EXT4-fs (loop0): This should not happen!! Data will be lost [ 188.968141][ T7925] [ 189.096089][ T7908] loop3: detected capacity change from 0 to 40427 [ 189.107735][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.135738][ T7908] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 189.143577][ T7908] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 189.173035][ T7908] F2FS-fs (loop3): invalid crc value [ 189.208734][ T7908] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.450162][ T7934] loop0: detected capacity change from 0 to 2048 [ 189.450375][ T7908] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.513881][ T7908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.543385][ T7938] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.651293][ T28] audit: type=1800 audit(1778535066.739:32): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.765" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 190.539403][ T7957] loop1: detected capacity change from 0 to 64 [ 190.625829][ T28] audit: type=1800 audit(1778535067.709:33): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 190.883941][ T7965] loop2: detected capacity change from 0 to 1024 [ 190.907958][ T7965] EXT4-fs: Ignoring removed orlov option [ 190.992371][ T7965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.041550][ T7970] tun0: tun_chr_ioctl cmd 2147767521 [ 191.201187][ T7978] loop1: detected capacity change from 0 to 128 [ 191.211996][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.224568][ T7978] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 191.269953][ T7978] hpfs: filesystem error: improperly stopped [ 191.285978][ T7978] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 191.293976][ T7978] hpfs: You really don't want any checks? You are crazy... [ 191.328099][ T7978] hpfs: hpfs_map_sector(): read error [ 191.342884][ T7978] hpfs: code page support is disabled [ 191.386639][ T7978] hpfs: hpfs_map_4sectors(): unaligned read [ 191.393752][ T7978] hpfs: hpfs_map_4sectors(): unaligned read [ 191.435049][ T7978] hpfs: filesystem error: unable to find root dir [ 191.497797][ T7978] hpfs: hpfs_map_4sectors(): unaligned read [ 191.916130][ T786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.095815][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 192.117770][ T786] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 192.145352][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.174873][ T786] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 192.255945][ T5806] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.477403][ T5806] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 192.498896][ T5806] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 192.514432][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.532415][ T5806] usb 2-1: Product: syz [ 192.537129][ T5806] usb 2-1: Manufacturer: syz [ 192.541901][ T5806] usb 2-1: SerialNumber: syz [ 192.557314][ T7994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.564742][ T7994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.735547][ T8012] loop3: detected capacity change from 0 to 512 [ 192.772008][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.813153][ T8012] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.847066][ T5806] usb 2-1: USB disconnect, device number 11 [ 192.986124][ T786] gspca_nw80x: reg_r err -71 [ 192.990926][ T786] nw80x: probe of 1-1:3.0 failed with error -71 [ 193.001912][ T786] usb 1-1: USB disconnect, device number 12 [ 193.095385][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.496783][ T786] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 193.598338][ T8032] loop0: detected capacity change from 0 to 16 [ 193.655973][ T8032] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.738841][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.774462][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.796708][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.815192][ T786] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.829880][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.847133][ T786] usb 4-1: config 0 descriptor?? [ 194.062610][ T8040] loop1: detected capacity change from 0 to 1024 [ 194.155176][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.175984][ T8040] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.194537][ T8042] loop0: detected capacity change from 0 to 4096 [ 194.289993][ T8040] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.814: lblock 3 mapped to illegal pblock 3 (length 3) [ 194.312260][ T786] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 194.362774][ T8040] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 194.373060][ T8042] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 194.402796][ T786] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 194.407750][ T8040] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.407750][ T8040] [ 194.576667][ T8047] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm syz.1.814: lblock 8 mapped to illegal pblock 8 (length 8) [ 194.617515][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.624287][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.648407][ T5760] usb 4-1: USB disconnect, device number 12 [ 194.662839][ T8047] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 194.693594][ T8047] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.693594][ T8047] [ 194.870141][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.977681][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 195.174972][ T8058] program syz.0.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.729415][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 196.055565][ T8088] loop0: detected capacity change from 0 to 512 [ 196.070422][ T8090] loop1: detected capacity change from 0 to 256 [ 196.108585][ T8090] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.113185][ T8088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 196.152363][ T8093] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 196.153444][ T8090] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.229213][ T8088] System zones: 1-12 [ 196.257124][ T8088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.834: missing EA_INODE flag [ 196.324624][ T8088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.834: error while reading EA inode 12 err=-117 [ 196.403320][ T8088] EXT4-fs (loop0): 1 orphan inode deleted [ 196.442223][ T8088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.628447][ T28] audit: type=1800 audit(1778535073.719:34): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.834" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 196.764705][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.080564][ T8115] input: syz1 as /devices/virtual/input/input12 [ 197.575234][ T8126] loop0: detected capacity change from 0 to 4096 [ 197.606197][ T8126] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 198.270963][ T8122] loop1: detected capacity change from 0 to 32768 [ 199.540644][ T8157] loop0: detected capacity change from 0 to 32768 [ 200.120148][ T8184] loop2: detected capacity change from 0 to 764 [ 200.208121][ T8184] Symlink component flag not implemented [ 200.214635][ T8184] Symlink component flag not implemented (116) [ 200.937281][ T8181] loop0: detected capacity change from 0 to 32768 [ 201.024987][ T8181] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 201.093591][ T28] audit: type=1800 audit(1778535078.179:35): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 201.122856][ T8185] loop1: detected capacity change from 0 to 40427 [ 201.138394][ T8185] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 201.154221][ T8185] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 201.164885][ T8185] F2FS-fs (loop1): heap/no_heap options were deprecated [ 201.181068][ T8185] F2FS-fs (loop1): invalid crc value [ 201.230241][ T8185] F2FS-fs (loop1): Found nat_bits in checkpoint [ 201.354438][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 201.422438][ T8185] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 201.436980][ T8185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.683573][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 201.713992][ T28] audit: type=1800 audit(1778535078.799:36): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.871" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 201.762652][ T8192] loop2: detected capacity change from 0 to 40427 [ 201.773565][ T8185] syz.1.871: attempt to access beyond end of device [ 201.773565][ T8185] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 201.804839][ T8192] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 201.807014][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 201.816960][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.824480][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 201.849890][ T8192] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.925028][ T8192] F2FS-fs (loop2): invalid crc value [ 201.941547][ T5770] syz-executor: attempt to access beyond end of device [ 201.941547][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.999805][ T8192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.006262][ T5770] F2FS-fs (loop1): Remounting filesystem read-only [ 202.163534][ T8192] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.185144][ T8192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.350627][ T8221] loop3: detected capacity change from 0 to 8192 [ 202.396417][ T5907] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.425837][ T28] audit: type=1800 audit(1778535079.509:37): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.875" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 203.255123][ T8238] loop0: detected capacity change from 0 to 128 [ 203.332374][ T8238] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.351735][ T8238] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.381122][ T28] audit: type=1800 audit(1778535080.469:38): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.899" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 203.441370][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.475467][ T28] audit: type=1804 audit(1778535080.469:39): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.899" name="/newroot/212/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 204.105902][ T966] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.329778][ T966] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.340315][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.368291][ T966] usb 2-1: config 0 descriptor?? [ 204.613060][ T966] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 204.625810][ T966] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 204.870463][ T966] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 204.882239][ T966] [drm] Initialized udl on minor 2 [ 205.020783][ T966] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 205.064654][ T966] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 205.279969][ T786] usb 2-1: USB disconnect, device number 12 [ 205.282623][ T5806] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.303960][ T6318] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.312622][ T5806] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 205.356047][ T5760] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 205.466224][ T8287] loop0: detected capacity change from 0 to 32768 [ 205.495842][ T6318] usb 3-1: Using ep0 maxpacket: 32 [ 205.507793][ T6318] usb 3-1: config 32 has an invalid interface number: 85 but max is 0 [ 205.527753][ T6318] usb 3-1: config 32 has no interface number 0 [ 205.534382][ T6318] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.552875][ T6318] usb 3-1: config 32 interface 85 has no altsetting 0 [ 205.563014][ T12] read_mapping_page failed! [ 205.565613][ T6318] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 205.574149][ T12] ERROR: (device loop0): txCommit: [ 205.574149][ T12] [ 205.592508][ T5760] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.607680][ T12] jfs_write_inode: jfs_commit_inode failed! [ 205.607737][ T6318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.614113][ T5760] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.633563][ T6318] usb 3-1: Product: syz [ 205.640133][ T5760] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.655869][ T6318] usb 3-1: Manufacturer: syz [ 205.658156][ T5760] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.662541][ T6318] usb 3-1: SerialNumber: syz [ 205.685802][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.698502][ T5760] usb 4-1: config 0 descriptor?? [ 205.749637][ T8289] loop0: detected capacity change from 0 to 128 [ 205.789806][ T8289] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.806103][ T8289] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.878624][ T8289] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 206.040150][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.042238][ T8292] loop1: detected capacity change from 0 to 512 [ 206.106610][ T8292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.148542][ T8292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.912: invalid indirect mapped block 6684672 (level 2) [ 206.172956][ T8292] EXT4-fs (loop1): 1 truncate cleaned up [ 206.182781][ T8292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.253132][ T8292] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.912: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 206.270519][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 206.301617][ T8292] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 206.465373][ T5760] usb 4-1: USB disconnect, device number 13 [ 206.499406][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.548854][ T6318] appletouch 3-1:32.85: Geyser mode initialized. [ 206.565002][ T6318] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.85/input/input13 [ 206.584507][ C1] appletouch 3-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 206.873571][ T5827] usb 3-1: USB disconnect, device number 9 [ 206.901034][ T5827] appletouch 3-1:32.85: input: appletouch disconnected [ 206.925839][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 206.985902][ T6318] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 207.141053][ T8304] loop0: detected capacity change from 0 to 32768 [ 207.170109][ T6318] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 207.186297][ T8304] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 207.195188][ T6318] usb 2-1: config 0 has no interface number 0 [ 207.213673][ T6318] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.254924][ T6318] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 207.256877][ T8304] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 207.265739][ T6318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.283544][ T6318] usb 2-1: Product: syz [ 207.288007][ T6318] usb 2-1: Manufacturer: syz [ 207.292659][ T6318] usb 2-1: SerialNumber: syz [ 207.308262][ T6318] usb 2-1: config 0 descriptor?? [ 207.319823][ T6318] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 207.598310][ T966] usb 2-1: USB disconnect, device number 13 [ 207.625188][ T966] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 207.633006][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 208.545216][ T8334] loop1: detected capacity change from 0 to 4096 [ 208.599761][ T8334] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 208.623643][ T8334] ntfs3: loop1: Failed to load $Extend (-22). [ 208.632992][ T8334] ntfs3: loop1: Failed to initialize $Extend. [ 208.717465][ T966] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 208.930367][ T966] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.972592][ T966] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.004620][ T966] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.028516][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.045219][ T966] usb 3-1: Product: syz [ 209.053222][ T966] usb 3-1: Manufacturer: syz [ 209.060375][ T966] usb 3-1: SerialNumber: syz [ 209.084694][ T966] cdc_ncm 3-1:1.0: skipping garbage [ 209.093775][ T966] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 209.104903][ T966] cdc_ncm 3-1:1.0: bind() failure [ 209.128307][ T966] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 209.135312][ T966] cdc_ncm 3-1:1.1: bind() failure [ 209.369597][ T8346] loop3: detected capacity change from 0 to 128 [ 209.411493][ T966] usb 3-1: USB disconnect, device number 10 [ 209.457000][ T8346] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.562779][ T8346] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.597229][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.952386][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.405369][ T8356] loop2: detected capacity change from 0 to 128 [ 210.482994][ T8356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.522274][ T8356] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.819642][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.195970][ T5806] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.215820][ T966] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.384940][ T5806] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 211.414076][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.425037][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.445053][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.465815][ T966] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 211.495861][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.507184][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.515569][ T966] usb 4-1: Product: syz [ 211.523314][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.535853][ T966] usb 4-1: Manufacturer: syz [ 211.540742][ T966] usb 4-1: SerialNumber: syz [ 211.555715][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.568777][ T966] usb 4-1: config 0 descriptor?? [ 211.576744][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.590272][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.602653][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.623453][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.645340][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.665791][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.689260][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.705784][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.730200][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.754305][ T5806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 211.780677][ T5806] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.806077][ T5806] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.824889][ T5806] usb 1-1: Product: syz [ 211.829501][ T5806] usb 1-1: Manufacturer: syz [ 211.834403][ T5806] usb 1-1: SerialNumber: syz [ 211.869471][ T5806] usb 1-1: config 0 descriptor?? [ 212.002726][ T966] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 212.011195][ T966] usb 4-1: Firmware version (0.0) predates our first public release. [ 212.023480][ T966] usb 4-1: Please update to version 0.2 or newer [ 212.161218][ T5806] usb 1-1: USB disconnect, device number 13 [ 212.276205][ T966] usb 4-1: USB disconnect, device number 14 [ 212.924743][ T5760] kernel write not supported for file /input/event2 (pid: 5760 comm: kworker/1:3) [ 213.124000][ T8388] loop3: detected capacity change from 0 to 2048 [ 213.173892][ T8388] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.210819][ T8388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.489102][ T8399] loop3: detected capacity change from 0 to 64 [ 213.521867][ T8399] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 213.606150][ T8381] loop0: detected capacity change from 0 to 32768 [ 213.636714][ T8381] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 213.655565][ T8381] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.742295][ T8409] tap0: tun_chr_ioctl cmd 1074025677 [ 213.748131][ T8409] tap0: linktype set to 0 [ 213.784118][ T8381] XFS (loop0): Ending clean mount [ 213.835323][ T8381] XFS (loop0): Quotacheck needed: Please wait. [ 213.959885][ T8381] XFS (loop0): Quotacheck: Done. [ 213.984732][ T8411] program syz.3.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.098431][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.975176][ T8431] bond0: entered promiscuous mode [ 214.998947][ T8431] bond_slave_0: entered promiscuous mode [ 215.004958][ T8431] bond_slave_1: entered promiscuous mode [ 215.034256][ T8431] batadv0: entered promiscuous mode [ 215.055236][ T8431] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 215.325935][ T6318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 215.355130][ T28] audit: type=1326 audit(1778535092.439:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.1.972" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb059cdd9 code=0x0 [ 215.494690][ T8447] loop3: detected capacity change from 0 to 1024 [ 215.535783][ T6318] usb 1-1: Using ep0 maxpacket: 32 [ 215.576233][ T6318] usb 1-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 215.585034][ T6318] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 215.602911][ T6318] usb 1-1: config 0 has no interface number 0 [ 215.624701][ T6318] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.640962][ T6318] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.654380][ T6318] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 215.669369][ T6318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.690063][ T6318] usb 1-1: config 0 descriptor?? [ 215.922936][ T8455] loop2: detected capacity change from 0 to 64 [ 216.128454][ T6318] corsair 0003:1B1C:1B34.000A: unknown main item tag 0x0 [ 216.156443][ T6318] corsair 0003:1B1C:1B34.000A: unknown main item tag 0x0 [ 216.164660][ T6318] corsair 0003:1B1C:1B34.000A: failed to start in urb: -90 [ 216.204300][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 216.219333][ T6318] corsair 0003:1B1C:1B34.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input1 [ 216.346075][ T8467] loop3: detected capacity change from 0 to 128 [ 216.377418][ T8467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.401677][ T8467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.416761][ T6318] usb 1-1: USB disconnect, device number 14 [ 216.439489][ T8467] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.495115][ T8467] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.540235][ T8467] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.652457][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.221534][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 217.234692][ T8486] ip6_vti0: Master is either lo or non-ether device [ 217.320054][ T8475] loop3: detected capacity change from 0 to 32768 [ 217.417187][ T8475] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.538205][ T8475] XFS (loop3): Ending clean mount [ 217.813796][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.451246][ T8516] loop3: detected capacity change from 0 to 512 [ 218.518053][ T8516] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.583763][ T8516] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.997: invalid indirect mapped block 6684672 (level 2) [ 218.634457][ T8516] EXT4-fs (loop3): 1 truncate cleaned up [ 218.688522][ T8516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.791378][ T8516] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.997: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 218.852082][ T8516] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 218.983206][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.120974][ T8534] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 219.128220][ T8534] syzkaller1: linktype set to 773 [ 219.441841][ T8544] bond0: entered promiscuous mode [ 219.457562][ T8544] bond_slave_0: entered promiscuous mode [ 219.463754][ T8544] bond_slave_1: entered promiscuous mode [ 219.479638][ T8544] batadv0: entered promiscuous mode [ 219.486281][ T8544] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 219.494091][ T8544] Cannot create hsr debugfs directory [ 219.513768][ T8544] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.105927][ T5760] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 220.308371][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.329709][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.358810][ T5760] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.382401][ T5760] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.395733][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.431083][ T5760] usb 3-1: config 0 descriptor?? [ 220.606181][ T5806] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 220.703928][ T8546] loop0: detected capacity change from 0 to 131072 [ 220.717581][ T8546] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 220.725902][ T8546] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 220.735764][ T8546] F2FS-fs (loop0): invalid crc value [ 220.748275][ T8546] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.802939][ T8546] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 220.810147][ T8546] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 220.837746][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 220.855191][ T5806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.865758][ T6318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.882804][ T5760] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x4 [ 220.890642][ T5806] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 220.908795][ T5760] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 220.917544][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.936329][ T5806] usb 4-1: config 0 descriptor?? [ 220.949227][ T5760] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 221.104038][ T6318] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 221.115420][ T6318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.124320][ T6318] usb 2-1: Product: syz [ 221.129917][ T6318] usb 2-1: Manufacturer: syz [ 221.134564][ T6318] usb 2-1: SerialNumber: syz [ 221.154167][ T6318] usb 2-1: config 0 descriptor?? [ 221.173180][ T5826] usb 3-1: USB disconnect, device number 11 [ 221.401128][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.416331][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.423431][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.431294][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.438777][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.447432][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x0 [ 221.454400][ T5806] kone 0003:1E7D:2CED.000C: unknown main item tag 0x7 [ 221.462670][ T5806] kone 0003:1E7D:2CED.000C: invalid report_size 24940 [ 221.470081][ T5806] kone 0003:1E7D:2CED.000C: item 0 2 1 7 parsing failed [ 221.480109][ T5806] kone 0003:1E7D:2CED.000C: parse failed [ 221.486922][ T5806] kone: probe of 0003:1E7D:2CED.000C failed with error -22 [ 221.598355][ T6318] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 221.614323][ T5827] usb 4-1: USB disconnect, device number 15 [ 221.620707][ T6318] usb 2-1: Firmware version (0.0) predates our first public release. [ 221.643361][ T6318] usb 2-1: Please update to version 0.2 or newer [ 221.887288][ T6318] usb 2-1: USB disconnect, device number 14 [ 222.180109][ T8569] loop2: detected capacity change from 0 to 8192 [ 222.564426][ T8580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1024'. [ 222.895757][ T5760] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 223.095832][ T5760] usb 3-1: Using ep0 maxpacket: 32 [ 223.103667][ T5760] usb 3-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 223.114994][ T5760] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 223.133321][ T5760] usb 3-1: config 0 has no interface number 0 [ 223.140633][ T5760] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.158527][ T5760] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.184724][ T8599] loop0: detected capacity change from 0 to 256 [ 223.203342][ T5760] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 223.223589][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.254034][ T5760] usb 3-1: config 0 descriptor?? [ 223.515290][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1037'. [ 223.707562][ T5760] corsair 0003:1B1C:1B34.000D: unknown main item tag 0x0 [ 223.717521][ T5760] corsair 0003:1B1C:1B34.000D: unknown main item tag 0x0 [ 223.726533][ T5760] corsair 0003:1B1C:1B34.000D: failed to start in urb: -90 [ 223.729056][ T6318] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.753746][ T5760] corsair 0003:1B1C:1B34.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input1 [ 223.926671][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 223.951855][ T6318] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 223.960886][ T5760] usb 3-1: USB disconnect, device number 12 [ 223.985809][ T6318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.005814][ T6318] usb 1-1: Product: syz [ 224.010275][ T6318] usb 1-1: Manufacturer: syz [ 224.015102][ T6318] usb 1-1: SerialNumber: syz [ 224.048970][ T6318] usb 1-1: config 0 descriptor?? [ 224.414020][ T8625] loop3: detected capacity change from 0 to 1024 [ 224.422117][ T8625] EXT4-fs: Ignoring removed orlov option [ 224.463236][ T8625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.486652][ T6318] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 224.496309][ T6318] usb 1-1: Firmware version (0.0) predates our first public release. [ 224.511673][ T6318] usb 1-1: Please update to version 0.2 or newer [ 224.631381][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.617008][ T5760] Process accounting resumed [ 225.750006][ T8642] Process accounting resumed [ 225.801583][ T8633] loop2: detected capacity change from 0 to 131072 [ 225.815133][ T8633] F2FS-fs (loop2): Test dummy encryption mode enabled [ 225.825572][ T8633] F2FS-fs (loop2): invalid crc value [ 225.838809][ T6318] usb 1-1: USB disconnect, device number 15 [ 225.896990][ T8633] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.949981][ T8633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.281426][ T8633] fscrypt (loop2, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 226.851485][ T8652] loop3: detected capacity change from 0 to 32768 [ 226.896107][ T8652] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1052 (8652) [ 226.937419][ T8652] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 226.953105][ T8666] loop0: detected capacity change from 0 to 1024 [ 226.969882][ T8666] EXT4-fs: Ignoring removed orlov option [ 226.984834][ T8652] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 227.012082][ T8652] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.032261][ T8652] BTRFS info (device loop3): use zstd compression, level 3 [ 227.033765][ T8666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.041057][ T8652] BTRFS info (device loop3): using free space tree [ 227.224218][ T8652] BTRFS info (device loop3): enabling ssd optimizations [ 227.242159][ T8652] BTRFS info (device loop3): auto enabling async discard [ 227.349603][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.402230][ T28] audit: type=1800 audit(1778535104.489:41): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1052" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 227.749585][ T5774] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.037914][ T8701] loop0: detected capacity change from 0 to 256 [ 228.110728][ T8701] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 228.626525][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 228.761577][ T8716] loop0: detected capacity change from 0 to 4096 [ 229.340905][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 229.372951][ T8734] ipvlan2: entered allmulticast mode [ 229.384503][ T8734] syz_tun: entered allmulticast mode [ 229.452670][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 229.471518][ T8739] ipvlan2: entered allmulticast mode [ 230.303988][ T8759] loop3: detected capacity change from 0 to 512 [ 230.437870][ T8742] loop1: detected capacity change from 0 to 32768 [ 230.477323][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.505939][ T8759] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.536327][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 230.567129][ T8742] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.641811][ T8742] XFS (loop1): Ending clean mount [ 230.675310][ T8770] ipvlan2: entered allmulticast mode [ 230.690856][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.905017][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.995946][ T5806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.225943][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 231.265314][ T5806] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 231.301739][ T5806] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 231.335320][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.365728][ T5806] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 231.381698][ T8786] loop0: detected capacity change from 0 to 4096 [ 231.395572][ T5806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 231.417168][ T8786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.434951][ T5806] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.455570][ T8786] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.471838][ T5806] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.491095][ T8786] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 231.533297][ T8786] System zones: 0-5 [ 231.549898][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.586847][ T8786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.841255][ T5806] usb 3-1: GET_CAPABILITIES returned 0 [ 231.849310][ T5806] usbtmc 3-1:16.0: can't read capabilities [ 231.926972][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.108101][ T786] usb 3-1: USB disconnect, device number 13 [ 232.590996][ T8803] loop0: detected capacity change from 0 to 32768 [ 232.684904][ T8803] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 232.994487][ T8819] loop3: detected capacity change from 0 to 4096 [ 233.213628][ T8821] loop1: detected capacity change from 0 to 4096 [ 233.285234][ T8821] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 233.320915][ T8821] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 233.372127][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 233.374864][ T8825] vcan0: tx address claim with different name [ 233.407363][ T8821] ntfs: volume version 3.1. [ 233.845403][ T8833] loop1: detected capacity change from 0 to 1024 [ 234.227458][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 234.261087][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1117'. [ 234.522061][ T8847] loop1: detected capacity change from 0 to 8192 [ 234.578300][ T8847] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.633036][ T8847] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 234.687196][ T8847] REISERFS (device loop1): using ordered data mode [ 234.717304][ T8853] loop3: detected capacity change from 0 to 4096 [ 234.724874][ T8847] reiserfs: using flush barriers [ 234.764535][ T8847] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.765492][ T8859] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.835520][ T8847] REISERFS (device loop1): checking transaction log (loop1) [ 234.864754][ T8847] REISERFS (device loop1): Using r5 hash to sort names [ 234.894333][ T8847] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 235.105765][ T5826] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 235.311261][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 235.362723][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.387583][ T5826] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.414656][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.468613][ T5826] usb 1-1: config 0 descriptor?? [ 235.686338][ T5826] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 235.891649][ T6318] usb 1-1: USB disconnect, device number 16 [ 236.600839][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 236.713473][ T8897] nvme_fabrics: missing parameter 'transport=%s' [ 236.726006][ T8897] nvme_fabrics: missing parameter 'nqn=%s' [ 236.828641][ T8906] loop2: detected capacity change from 0 to 4096 [ 236.843288][ T8906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.886202][ T8910] loop0: detected capacity change from 0 to 128 [ 236.894483][ T8906] EXT4-fs (loop2): Test dummy encryption mode enabled [ 236.953747][ T8906] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 236.967898][ T8906] System zones: 0-5 [ 236.996925][ T8906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.312666][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.385947][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.573152][ T8926] loop2: detected capacity change from 0 to 512 [ 237.601238][ T8926] EXT4-fs: Invalid want_extra_isize 5 [ 237.607119][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 237.637479][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 237.670825][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.700863][ T9] usb 2-1: Product: syz [ 237.705361][ T9] usb 2-1: Manufacturer: syz [ 237.749996][ T9] usb 2-1: SerialNumber: syz [ 237.805302][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 237.926425][ T8933] loop2: detected capacity change from 0 to 128 [ 238.039658][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 238.104311][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.146212][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 238.171439][ T9] usb 2-1: media controller created [ 238.248591][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.305481][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 238.413911][ T9] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 238.439504][ T9] usb 2-1: USB disconnect, device number 15 [ 239.313085][ T8965] loop0: detected capacity change from 0 to 512 [ 239.346739][ T8965] EXT4-fs (loop0): bad geometry: block count 768 exceeds size of device (256 blocks) [ 240.976868][ T8991] loop3: detected capacity change from 0 to 32768 [ 241.047145][ T28] audit: type=1800 audit(1778535118.139:42): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1171" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 241.107757][ T8991] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 241.107757][ T8991] [ 241.120038][ T9007] nvme_fabrics: missing parameter 'transport=%s' [ 241.150800][ T9007] nvme_fabrics: missing parameter 'nqn=%s' [ 241.189192][ T8991] ERROR: (device loop3): remounting filesystem as read-only [ 241.216677][ T8991] syz.3.1171: attempt to access beyond end of device [ 241.216677][ T8991] loop3: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 241.359898][ T5774] ------------[ cut here ]------------ [ 241.366334][ T5774] kernel BUG at fs/jfs/inode.c:175! [ 241.378896][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1179'. [ 241.410170][ T5774] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 241.415811][ T9014] sch_fq: defrate 0 ignored. [ 241.416313][ T5774] CPU: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 241.428497][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.438695][ T5774] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 241.444394][ T5774] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 d9 bb df fe e9 16 fe ff ff e8 bf 84 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 241.464483][ T5774] RSP: 0018:ffffc90004737ac0 EFLAGS: 00010293 [ 241.470658][ T5774] RAX: ffffffff82ff9d41 RBX: ffff88805d090d70 RCX: ffff88802f06bc00 [ 241.479256][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805d090d70 [ 241.487341][ T5774] RBP: 0000000000000002 R08: ffffffff911c6627 R09: 1ffffffff2238cc4 [ 241.495915][ T5774] R10: dffffc0000000000 R11: fffffbfff2238cc5 R12: dffffc0000000000 [ 241.504476][ T5774] R13: dffffc0000000000 R14: ffff88805d0909f8 R15: ffff88805d090da8 [ 241.512775][ T5774] FS: 000055557427f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 241.521368][ T9000] loop2: detected capacity change from 0 to 40427 [ 241.521858][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.521878][ T5774] CR2: 00007fc373a54000 CR3: 0000000061126000 CR4: 00000000003506f0 [ 241.543063][ T5774] Call Trace: [ 241.546552][ T5774] [ 241.549662][ T5774] ? evict+0x4c4/0x8d0 [ 241.553872][ T5774] ? jfs_write_inode+0x220/0x220 [ 241.559536][ T5774] evict+0x4ca/0x8d0 [ 241.563592][ T5774] ? proc_nr_inodes+0x230/0x230 [ 241.568727][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 241.574084][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 241.579530][ T5774] evict_inodes+0x606/0x6a0 [ 241.584235][ T5774] ? clear_inode+0x150/0x150 [ 241.588888][ T5774] generic_shutdown_super+0x97/0x2b0 [ 241.594386][ T5774] kill_block_super+0x44/0x90 [ 241.599290][ T5774] deactivate_locked_super+0x97/0x100 [ 241.605151][ T5774] cleanup_mnt+0x43b/0x4d0 [ 241.609687][ T5774] task_work_run+0x1d4/0x260 [ 241.614385][ T5774] ? task_work_cancel+0x220/0x220 [ 241.619443][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 241.625007][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 241.630326][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 241.635923][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 241.641405][ T5774] do_syscall_64+0x61/0xa0 [ 241.645943][ T5774] ? clear_bhb_loop+0x40/0x90 [ 241.650721][ T5774] ? clear_bhb_loop+0x40/0x90 [ 241.655427][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.661339][ T5774] RIP: 0033:0x7fa293d9e017 [ 241.665774][ T5774] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 241.685587][ T5774] RSP: 002b:00007fffa4afda58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 241.694376][ T5774] RAX: 0000000000000000 RBX: 00007fa293e32120 RCX: 00007fa293d9e017 [ 241.702377][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa4afdb10 [ 241.710450][ T5774] RBP: 00007fffa4afdb10 R08: 00007fffa4afeb10 R09: 00000000ffffffff [ 241.718463][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa4afeba0 [ 241.726479][ T5774] R13: 00007fa293e32120 R14: 000000000003ae4f R15: 00007fffa4afebe0 [ 241.734502][ T5774] [ 241.737562][ T5774] Modules linked in: [ 241.751780][ T9000] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 241.760475][ T9000] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.762287][ T5774] ---[ end trace 0000000000000000 ]--- [ 241.798376][ T9000] F2FS-fs (loop2): invalid crc value [ 241.813778][ T5774] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 241.837525][ T5774] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 d9 bb df fe e9 16 fe ff ff e8 bf 84 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 241.859461][ T5774] RSP: 0018:ffffc90004737ac0 EFLAGS: 00010293 [ 241.867029][ T5774] RAX: ffffffff82ff9d41 RBX: ffff88805d090d70 RCX: ffff88802f06bc00 [ 241.871733][ T9000] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.875355][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805d090d70 [ 241.894105][ T5774] RBP: 0000000000000002 R08: ffffffff911c6627 R09: 1ffffffff2238cc4 [ 241.904565][ T5774] R10: dffffc0000000000 R11: fffffbfff2238cc5 R12: dffffc0000000000 [ 241.914634][ T5774] R13: dffffc0000000000 R14: ffff88805d0909f8 R15: ffff88805d090da8 [ 241.923874][ T5774] FS: 000055557427f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 241.934090][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.940937][ T9000] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 241.941240][ T5774] CR2: 00007efcb07ea2f8 CR3: 0000000061126000 CR4: 00000000003506f0 [ 241.949593][ T9000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.956769][ T5774] Kernel panic - not syncing: Fatal exception [ 241.964719][ T5774] Kernel Offset: disabled