last executing test programs: 2m24.740294503s ago: executing program 4 (id=78): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0xa, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x100004}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 2m24.52677636s ago: executing program 4 (id=81): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2m24.299370898s ago: executing program 4 (id=84): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01000000ee", 0x5, 0x2a25}]) 2m24.016334057s ago: executing program 4 (id=88): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m23.385803927s ago: executing program 4 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m22.554474555s ago: executing program 4 (id=109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) 2m22.116523269s ago: executing program 32 (id=109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) 6.048243526s ago: executing program 3 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 5.155962505s ago: executing program 3 (id=1166): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33c488a8b74311b2", 0x8, 0x40410d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x8e, 0x6, @broadcast}, 0x14) 4.823204725s ago: executing program 3 (id=1169): setresgid(0xee00, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)={0x10, 0x17, 0x2, 0x70bd28, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20, 0x80}, 0x10) 4.697646029s ago: executing program 3 (id=1170): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x7d2}], 0x1}, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.376366792s ago: executing program 5 (id=1181): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0x8}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x82e}, {0x10000, 0x3, 0x80000000, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 3.055969592s ago: executing program 1 (id=1185): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2.824868589s ago: executing program 5 (id=1186): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) 2.652433475s ago: executing program 1 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 2.381385774s ago: executing program 1 (id=1189): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]]}, 0x24}}, 0x4044) 2.376537364s ago: executing program 0 (id=1190): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 2.343826895s ago: executing program 5 (id=1191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x40000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.255851648s ago: executing program 2 (id=1192): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000280)={r2, 0x3, 0xc0, 0x0, 0x0}) 2.072804164s ago: executing program 1 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac08, 0xfac0d, 0xfac08]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 2.041273985s ago: executing program 5 (id=1194): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.002655276s ago: executing program 3 (id=1195): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x511, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd9}}, 0x100, 0x9368, 0x7, 0x0, 0xd0, 0x5, 0x5}, &(0x7f00000005c0)=0x9c) 1.988131196s ago: executing program 2 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'bridge_slave_0\x00'}) 1.822172352s ago: executing program 1 (id=1197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 1.688401156s ago: executing program 5 (id=1198): syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x4}) 1.627062848s ago: executing program 3 (id=1199): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000808, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.622673158s ago: executing program 2 (id=1200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='j'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x2, 0x1}, {0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 1.522792691s ago: executing program 1 (id=1201): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=' ', 0x1}], 0x1, 0x200007b2, 0xbfffffd1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205865, &(0x7f00000000c0)=ANY=[]) 1.157895293s ago: executing program 2 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x286, 0x0, 0xbcc}]}) 1.157210943s ago: executing program 0 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000700)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) 1.083262975s ago: executing program 5 (id=1203): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020"], 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') 913.400281ms ago: executing program 0 (id=1204): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0006"], 0xf0}, 0x1, 0x0, 0x0, 0x4805}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c}, 0x4000050) 813.526465ms ago: executing program 2 (id=1205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x9, 0x21, 0xfffffffd, 0x10000}, {0x7, 0xfffffffd, 0x4, 0x1cae, 0x3}]}) 625.86481ms ago: executing program 0 (id=1206): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a5, &(0x7f0000000140)={{@local}, 0x1}) 425.910497ms ago: executing program 2 (id=1207): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c0, &(0x7f0000001cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000140)='./file1\x00') 358.687339ms ago: executing program 0 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2c040050) 0s ago: executing program 0 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) kernel console output (not intermixed with test programs): 32 [ 109.156547][ T4273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 109.191804][ T4273] usb 4-1: config 1 has no interface number 0 [ 109.220549][ T4273] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.291409][ T4273] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.299152][ T5128] loop0: detected capacity change from 0 to 128 [ 109.344002][ T4273] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 109.399764][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.478275][ T4273] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 109.547164][ T5132] loop1: detected capacity change from 0 to 256 [ 109.680216][ T4273] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 110.114203][ T4273] usb 4-1: USB disconnect, device number 2 [ 110.122255][ T4273] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 110.301481][ T5118] loop5: detected capacity change from 0 to 32768 [ 110.386882][ T5118] XFS (loop5): Mounting V5 Filesystem [ 110.538994][ T5118] XFS (loop5): Starting recovery (logdev: internal) [ 110.627109][ T5118] XFS (loop5): Ending recovery (logdev: internal) [ 110.817904][ T27] audit: type=1800 audit(1774953804.919:5): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.232" name="file1" dev="loop5" ino=7430 res=0 errno=0 [ 110.996173][ T4663] XFS (loop5): Unmounting Filesystem [ 111.631047][ T5181] device syz_tun entered promiscuous mode [ 111.648002][ T5181] device macvtap1 entered promiscuous mode [ 111.648502][ T5140] loop0: detected capacity change from 0 to 40427 [ 111.721234][ T5140] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.901187][ T5140] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.026014][ T5181] device syz_tun left promiscuous mode [ 112.064938][ T27] audit: type=1800 audit(1774953806.169:6): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.238" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 112.303275][ T5140] syz.0.238: attempt to access beyond end of device [ 112.303275][ T5140] loop0: rw=2049, sector=53248, nr_sectors = 2568 limit=40427 [ 112.694467][ T4280] syz-executor: attempt to access beyond end of device [ 112.694467][ T4280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.274715][ T5214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.256'. [ 113.575302][ T5218] loop5: detected capacity change from 0 to 128 [ 113.635401][ T5218] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.783923][ T5218] hpfs: filesystem error: improperly stopped [ 113.821068][ T5218] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.883046][ T5218] hpfs: You really don't want any checks? You are crazy... [ 113.906658][ T5218] hpfs: hpfs_map_sector(): read error [ 113.922434][ T5218] hpfs: code page support is disabled [ 113.946193][ T5218] hpfs: hpfs_map_4sectors(): unaligned read [ 113.952238][ T5218] hpfs: hpfs_map_4sectors(): unaligned read [ 113.978563][ T5218] hpfs: filesystem error: unable to find root dir [ 115.924548][ T5266] loop5: detected capacity change from 0 to 2048 [ 116.034864][ T5266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 116.059380][ T5266] EXT4-fs (loop5): shut down requested (2) [ 116.275028][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 116.727899][ T5286] loop5: detected capacity change from 0 to 1024 [ 116.841755][ T5286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.996850][ T5267] loop2: detected capacity change from 0 to 32768 [ 117.060507][ T5267] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 117.116064][ T5267] JBD2: Ignoring recovery information on journal [ 117.191794][ T5293] loop3: detected capacity change from 0 to 512 [ 117.234430][ T5293] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.283: inode has both inline data and extents flags [ 117.263251][ T5293] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.283: couldn't read orphan inode 15 (err -117) [ 117.279654][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.438417][ T5267] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.774154][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 117.830334][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 119.437862][ T5340] loop0: detected capacity change from 0 to 128 [ 120.453776][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.644507][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 120.652115][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.681696][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.721582][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.759108][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.789437][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.821151][ T4315] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.844219][ T4315] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.862592][ T4315] usb 2-1: Manufacturer: syz [ 120.879664][ T4315] usb 2-1: config 0 descriptor?? [ 121.303942][ T4315] rc_core: IR keymap rc-hauppauge not found [ 121.309956][ T4315] Registered IR keymap rc-empty [ 121.331042][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.403988][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.445814][ T4315] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 121.492873][ T4315] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 121.566901][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.628471][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.720572][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.752404][ T5407] loop3: detected capacity change from 0 to 512 [ 121.763825][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.794084][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.835384][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.863187][ T5407] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 121.915613][ T5407] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.933929][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 121.973185][ T5407] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.988309][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.033877][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.054240][ T5407] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 122.076536][ T5407] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 122.083967][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 122.146189][ T4315] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 122.150221][ T5407] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.327: couldn't read orphan inode 13 (err -117) [ 122.170852][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 122.195106][ T4315] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 122.212773][ T5418] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.331'. [ 122.215933][ T4315] usb 2-1: USB disconnect, device number 3 [ 122.256031][ T5407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.280441][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 122.437923][ T5407] EXT4-fs (loop3): shut down requested (1) [ 122.665622][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 122.720892][ T5405] loop5: detected capacity change from 0 to 40427 [ 122.776538][ T5405] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 122.827030][ T5405] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 122.865921][ T5405] F2FS-fs (loop5): invalid crc value [ 122.940775][ T5433] loop2: detected capacity change from 0 to 512 [ 122.965811][ T5405] F2FS-fs (loop5): Found nat_bits in checkpoint [ 123.036550][ T5433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.046402][ T5433] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.088319][ T5405] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 123.101649][ T5405] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 123.218359][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 124.321306][ T5473] loop2: detected capacity change from 0 to 256 [ 124.489332][ T5473] FAT-fs (loop2): Directory bread(block 64) failed [ 124.503461][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.342'. [ 124.513770][ T5473] FAT-fs (loop2): Directory bread(block 65) failed [ 124.521090][ T5473] FAT-fs (loop2): Directory bread(block 66) failed [ 124.593819][ T5473] FAT-fs (loop2): Directory bread(block 67) failed [ 124.630563][ T5473] FAT-fs (loop2): Directory bread(block 68) failed [ 124.672044][ T5473] FAT-fs (loop2): Directory bread(block 69) failed [ 124.703878][ T5473] FAT-fs (loop2): Directory bread(block 70) failed [ 124.754204][ T5473] FAT-fs (loop2): Directory bread(block 71) failed [ 124.761072][ T5473] FAT-fs (loop2): Directory bread(block 72) failed [ 124.800682][ T5473] FAT-fs (loop2): Directory bread(block 73) failed [ 125.547946][ T5471] loop3: detected capacity change from 0 to 32768 [ 125.619164][ T5471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (5471) [ 125.689108][ T5471] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.754965][ T5471] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 125.796804][ T5471] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 125.859525][ T5471] BTRFS info (device loop3): trying to use backup root at mount time [ 125.893971][ T5471] BTRFS info (device loop3): setting nodatasum [ 125.923974][ T5471] BTRFS info (device loop3): enabling ssd optimizations [ 125.959986][ T5471] BTRFS info (device loop3): using spread ssd allocation scheme [ 125.998515][ T5471] BTRFS info (device loop3): turning on flush-on-commit [ 126.033830][ T5471] BTRFS info (device loop3): force zlib compression, level 3 [ 126.061739][ T5471] BTRFS info (device loop3): using free space tree [ 126.190253][ T5489] loop5: detected capacity change from 0 to 32768 [ 126.274955][ T5489] (syz.5.353,5489,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.409628][ T5489] (syz.5.353,5489,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.559197][ T5489] JBD2: Ignoring recovery information on journal [ 126.581664][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.683838][ T4273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.829048][ T5489] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 126.891908][ T4273] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.905281][ T4273] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.915609][ T5497] loop0: detected capacity change from 0 to 32768 [ 126.943774][ T4273] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.959124][ T4273] usb 2-1: config 220 has no interface number 2 [ 127.012689][ T5497] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.355 (5497) [ 127.017004][ T4273] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.100787][ T4273] usb 2-1: config 220 interface 0 has no altsetting 0 [ 127.131174][ T4273] usb 2-1: config 220 interface 76 has no altsetting 0 [ 127.141302][ T4273] usb 2-1: config 220 interface 1 has no altsetting 0 [ 127.192015][ T4273] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.215274][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.243818][ T4273] usb 2-1: Product: syz [ 127.248057][ T4273] usb 2-1: Manufacturer: syz [ 127.252688][ T4273] usb 2-1: SerialNumber: syz [ 127.362710][ T4367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4367) [ 127.395609][ T4663] ocfs2: Unmounting device (7,5) on (node local) [ 127.470850][ T5497] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.529470][ T4273] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 127.543071][ T5497] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.565659][ T4273] usb 2-1: No valid video chain found. [ 127.574970][ T5497] BTRFS info (device loop0): force zlib compression, level 3 [ 127.582426][ T5497] BTRFS info (device loop0): turning on flush-on-commit [ 127.596802][ T4273] usb 2-1: selecting invalid altsetting 0 [ 127.622688][ T5497] BTRFS info (device loop0): max_inline at 4096 [ 127.642977][ T5497] BTRFS info (device loop0): using free space tree [ 127.662257][ T4273] usb 2-1: selecting invalid altsetting 0 [ 127.663851][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.684129][ T4273] usbtest: probe of 2-1:220.1 failed with error -22 [ 127.739220][ T4273] usb 2-1: USB disconnect, device number 4 [ 127.908001][ T4313] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.933575][ T5497] BTRFS info (device loop0): enabling ssd optimizations [ 127.961006][ T4313] usb 3-1: config 0 has no interface number 0 [ 128.036857][ T4313] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 128.077606][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.109874][ T4313] usb 3-1: Product: syz [ 128.117154][ T4313] usb 3-1: Manufacturer: syz [ 128.121804][ T4313] usb 3-1: SerialNumber: syz [ 128.174766][ T4313] usb 3-1: config 0 descriptor?? [ 128.389846][ T4313] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 128.424249][ T4280] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 128.463528][ T4313] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.534495][ T4313] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 128.543206][ T4313] usb 3-1: media controller created [ 128.652140][ T5586] loop3: detected capacity change from 0 to 64 [ 128.661716][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.772666][ T4781] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4781) [ 129.262921][ T5597] program syz.5.376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.292466][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 129.626410][ T5605] netlink: 'syz.5.378': attribute type 11 has an invalid length. [ 129.706919][ T4313] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 129.892288][ T4313] usb 3-1: USB disconnect, device number 4 [ 129.991132][ T5608] loop3: detected capacity change from 0 to 8192 [ 130.048513][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.065546][ T5608] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 130.093352][ T5608] REISERFS (device loop3): using journaled data mode [ 130.199661][ T5608] reiserfs: using flush barriers [ 130.281098][ T5608] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.424750][ T5608] REISERFS (device loop3): checking transaction log (loop3) [ 130.515541][ T5608] REISERFS (device loop3): Using r5 hash to sort names [ 130.545274][ T5608] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 130.615672][ T5608] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 131.009114][ T5634] loop2: detected capacity change from 0 to 2048 [ 131.096496][ T5634] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.229956][ T5638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.681175][ T5655] loop0: detected capacity change from 0 to 64 [ 132.364835][ T5668] loop0: detected capacity change from 0 to 128 [ 132.452018][ T5668] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 132.538505][ T5668] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.582170][ T5668] hpfs: You really don't want any checks? You are crazy... [ 132.620496][ T5668] hpfs: hpfs_map_sector(): read error [ 132.626926][ T5681] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 132.661250][ T5668] hpfs: code page support is disabled [ 132.684215][ T5668] hpfs: hpfs_map_4sectors(): unaligned read [ 132.691357][ T5668] hpfs: hpfs_map_4sectors(): unaligned read [ 132.691405][ T5668] hpfs: filesystem error: unable to find root dir [ 132.743793][ T5668] hpfs: hpfs_map_4sectors(): unaligned read [ 132.877829][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884438][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104672][ T5694] loop0: detected capacity change from 0 to 1024 [ 133.168493][ T5694] EXT4-fs: Ignoring removed bh option [ 133.224300][ T5694] EXT4-fs: Ignoring removed bh option [ 133.329292][ T5704] loop5: detected capacity change from 0 to 256 [ 133.329517][ T5694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.475958][ T5704] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 133.501732][ T5694] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 133.592778][ T5699] loop2: detected capacity change from 0 to 4096 [ 133.628146][ T27] audit: type=1800 audit(1774953827.729:7): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.408" name="file1" dev="loop5" ino=1048622 res=0 errno=0 [ 133.771477][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 134.422503][ T5725] vivid-000: disconnect [ 134.473403][ T5724] vivid-000: reconnect [ 135.924874][ T5732] loop5: detected capacity change from 0 to 32768 [ 135.993098][ T5732] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 136.330012][ T5770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.432'. [ 136.356000][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 136.393254][ T4737] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 136.603808][ T4542] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.796071][ T4542] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.823074][ T4542] usb 2-1: config 0 has no interface number 0 [ 136.833403][ T4542] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.913771][ T4542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.952464][ T4542] usb 2-1: Product: syz [ 136.962580][ T4542] usb 2-1: Manufacturer: syz [ 136.982896][ T4542] usb 2-1: SerialNumber: syz [ 137.024266][ T4542] usb 2-1: config 0 descriptor?? [ 137.207890][ T5800] lo speed is unknown, defaulting to 1000 [ 137.239506][ T4542] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 137.272327][ T5800] lo speed is unknown, defaulting to 1000 [ 137.272957][ T4542] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.319601][ T4542] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 137.345691][ T4542] usb 2-1: media controller created [ 137.347639][ T5800] lo speed is unknown, defaulting to 1000 [ 137.422230][ T4542] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.526623][ T5800] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.562622][ T5800] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.593304][ T5806] lo speed is unknown, defaulting to 1000 [ 137.707363][ T5800] lo speed is unknown, defaulting to 1000 [ 137.722534][ T5800] lo speed is unknown, defaulting to 1000 [ 137.753545][ T5800] lo speed is unknown, defaulting to 1000 [ 137.790322][ T5800] lo speed is unknown, defaulting to 1000 [ 137.820065][ T5800] lo speed is unknown, defaulting to 1000 [ 137.875853][ T5790] loop5: detected capacity change from 0 to 32768 [ 137.906365][ T5790] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 138.089853][ T5796] loop3: detected capacity change from 0 to 32768 [ 138.474697][ T4346] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 138.501044][ T27] audit: type=1326 audit(1774953832.599:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031899c819 code=0x7ffc0000 [ 138.584695][ T4542] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 138.642474][ T27] audit: type=1326 audit(1774953832.599:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031899c819 code=0x7ffc0000 [ 138.755065][ T4542] usb 2-1: USB disconnect, device number 5 [ 138.800852][ T27] audit: type=1326 audit(1774953832.599:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f031899c819 code=0x7ffc0000 [ 138.924858][ T27] audit: type=1326 audit(1774953832.599:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031899c819 code=0x7ffc0000 [ 139.020321][ T27] audit: type=1326 audit(1774953832.599:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031899c819 code=0x7ffc0000 [ 139.340518][ T5835] loop3: detected capacity change from 0 to 512 [ 139.468365][ T5835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.524166][ T5835] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.679184][ T5847] loop2: detected capacity change from 0 to 512 [ 139.723576][ T5847] EXT4-fs: Ignoring removed bh option [ 139.760982][ T5847] EXT4-fs: inline encryption not supported [ 139.782191][ T5847] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.833318][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 139.843847][ T4313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.897869][ T5847] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.981028][ T5847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.456: bg 0: block 248: padding at end of block bitmap is not set [ 140.046084][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.048954][ T5847] Quota error (device loop2): write_blk: dquota write failed [ 140.079815][ T5854] lo speed is unknown, defaulting to 1000 [ 140.091506][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.092033][ T5847] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 140.132106][ T4313] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 140.140884][ T5847] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.456: Failed to acquire dquot type 1 [ 140.182820][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.205708][ T4313] usb 2-1: config 0 descriptor?? [ 140.224342][ T5847] EXT4-fs (loop2): 1 truncate cleaned up [ 140.230084][ T5847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.549159][ T5829] loop5: detected capacity change from 0 to 32768 [ 140.618587][ T5864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.459'. [ 140.642493][ T4313] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 140.648073][ T5864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.459'. [ 140.655059][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 140.679540][ T4313] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 140.689140][ T5872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.459'. [ 140.705207][ T4313] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 140.721727][ T4313] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 140.738013][ T5864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.459'. [ 140.749532][ T4313] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 140.789114][ T4313] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 140.861923][ T4323] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 140.863424][ T5829] XFS (loop5): Mounting V5 Filesystem [ 140.901075][ T4323] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 140.923103][ T4313] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 0 [ 140.932988][ T4313] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 140.944811][ T4539] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.954602][ T4313] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 140.968001][ T4313] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 141.046402][ T4313] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 141.137677][ T4313] usb 2-1: USB disconnect, device number 6 [ 141.144021][ T4539] usb 4-1: Using ep0 maxpacket: 16 [ 141.157941][ T4539] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 141.174143][ T4539] usb 4-1: config 0 has no interface number 0 [ 141.184120][ T4539] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.206376][ T4539] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.243815][ T4539] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 141.274004][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.294641][ T4539] usb 4-1: config 0 descriptor?? [ 141.305484][ T5829] XFS (loop5): Ending clean mount [ 141.412026][ T5888] ALSA: mixer_oss: invalid OSS volume 'dev/vbi#' [ 141.601543][ T5886] fido_id[5886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.664776][ T4663] XFS (loop5): Unmounting Filesystem [ 141.715251][ T5895] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.730558][ T5895] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.734712][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.739651][ T5895] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.756768][ T5895] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.776775][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.783836][ T5895] device vxlan0 entered promiscuous mode [ 141.784762][ T4313] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 141.836289][ T4539] hid (null): unknown global tag 0xc [ 141.845022][ T4539] hid (null): unknown global tag 0xc [ 141.850536][ T4539] hid (null): unknown global tag 0xd [ 142.011920][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.047791][ T4720] usb 4-1: USB disconnect, device number 3 [ 142.065924][ T4313] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.111129][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.162817][ T4313] usb 1-1: Product: syz [ 142.190966][ T4313] usb 1-1: Manufacturer: syz [ 142.210381][ T4313] usb 1-1: SerialNumber: syz [ 142.246695][ T4313] usb 1-1: config 0 descriptor?? [ 142.261028][ T5904] loop5: detected capacity change from 0 to 7 [ 142.297200][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.306466][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.333943][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.343181][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.351382][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.360667][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.381016][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.390311][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.399906][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.409144][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.445362][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.454602][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.488523][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.497962][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.510844][ T4737] ldm_validate_partition_table(): Disk read failed. [ 142.571937][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.581195][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.593500][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.602877][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.656820][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.666064][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.677703][ T4737] Dev loop5: unable to read RDB block 0 [ 142.708882][ T4737] loop5: unable to read partition table [ 142.725331][ T4737] loop5: partition table beyond EOD, truncated [ 142.797266][ T5904] ldm_validate_partition_table(): Disk read failed. [ 142.833113][ T5904] Dev loop5: unable to read RDB block 0 [ 142.851715][ T4539] usb 1-1: USB disconnect, device number 5 [ 142.885285][ T5904] loop5: unable to read partition table [ 142.891165][ T5904] loop5: partition table beyond EOD, truncated [ 142.932851][ T5904] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 143.872971][ T5932] loop3: detected capacity change from 0 to 8192 [ 143.951755][ T5932] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.038573][ T5932] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 144.091792][ T5932] REISERFS (device loop3): using ordered data mode [ 144.119203][ T5932] reiserfs: using flush barriers [ 144.139249][ T5932] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.198524][ T5932] REISERFS (device loop3): checking transaction log (loop3) [ 144.225889][ T5947] process 'syz.5.484' launched './file1' with NULL argv: empty string added [ 144.251544][ T5932] REISERFS (device loop3): Using r5 hash to sort names [ 144.281887][ T5932] REISERFS (device loop3): using 3.5.x disk format [ 144.329803][ T5932] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 144.993030][ T5961] loop0: detected capacity change from 0 to 256 [ 145.050365][ T5961] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.166560][ T5943] loop2: detected capacity change from 0 to 32768 [ 145.203534][ T5943] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 145.351234][ T5963] loop3: detected capacity change from 0 to 2048 [ 145.437571][ T5963] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.549435][ T5968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.640741][ T4367] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 145.972504][ T5977] loop5: detected capacity change from 0 to 128 [ 146.031382][ T5976] loop3: detected capacity change from 0 to 2048 [ 146.109342][ T5980] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.148146][ T5971] loop0: detected capacity change from 0 to 8192 [ 146.280446][ T5971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.367034][ T5971] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.385976][ T5971] REISERFS (device loop0): using ordered data mode [ 146.395487][ T5971] reiserfs: using flush barriers [ 146.481038][ T5971] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.564489][ T5971] REISERFS (device loop0): checking transaction log (loop0) [ 146.815201][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 146.921346][ T5971] REISERFS (device loop0): Using tea hash to sort names [ 146.931695][ T5971] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 147.163903][ T4539] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.255935][ T6002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.506'. [ 147.287515][ T4313] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.385877][ T4539] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.403741][ T4539] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.444619][ T4539] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.464257][ T4539] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.501703][ T4313] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.509520][ T4539] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.518956][ T4313] usb 6-1: config 0 has no interface number 0 [ 147.544104][ T4539] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.549033][ T4313] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 147.572857][ T4539] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.583882][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.602229][ T4313] usb 6-1: Product: syz [ 147.609384][ T4313] usb 6-1: Manufacturer: syz [ 147.614278][ T4313] usb 6-1: SerialNumber: syz [ 147.621034][ T4313] usb 6-1: config 0 descriptor?? [ 147.656904][ T4539] usb 3-1: Product: syz [ 147.661787][ T4539] usb 3-1: Manufacturer: syz [ 147.715205][ T4539] cdc_wdm 3-1:1.0: skipping garbage [ 147.736219][ T4539] cdc_wdm 3-1:1.0: skipping garbage [ 147.803207][ T4539] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 147.823211][ T4539] cdc_wdm 3-1:1.0: Unknown control protocol [ 147.841989][ T4313] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 147.888492][ T4313] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.944730][ T4313] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 147.952829][ T4313] usb 6-1: media controller created [ 148.011863][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.018835][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.043909][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.050775][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.072446][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.091890][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.098562][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.105417][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.112060][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.127036][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.133705][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.141247][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 148.147884][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 148.154322][ T4316] usb 3-1: USB disconnect, device number 5 [ 149.033518][ T6024] Falling back ldisc for ttyS3. [ 149.171628][ T6011] loop3: detected capacity change from 0 to 32768 [ 149.225337][ T4313] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 149.290320][ T6033] loop0: detected capacity change from 0 to 256 [ 149.309018][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 149.312029][ T6011] XFS (loop3): Mounting V5 Filesystem [ 149.375262][ T4313] usb 6-1: USB disconnect, device number 2 [ 149.477712][ T6011] XFS (loop3): Ending clean mount [ 149.526678][ T6011] XFS (loop3): Quotacheck needed: Please wait. [ 149.713826][ T6011] XFS (loop3): Quotacheck: Done. [ 150.095488][ T6054] loop0: detected capacity change from 0 to 256 [ 150.177710][ T6054] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.226391][ T4272] XFS (loop3): Unmounting Filesystem [ 150.369371][ T6054] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.601653][ T6062] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 150.620353][ T6062] syzkaller0: linktype set to 825 [ 151.857460][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.540'. [ 152.064687][ T6091] netlink: 116 bytes leftover after parsing attributes in process `syz.1.542'. [ 152.094548][ T6093] loop3: detected capacity change from 0 to 1024 [ 152.135529][ T6095] netlink: 'syz.0.543': attribute type 12 has an invalid length. [ 152.150541][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 152.223974][ T6093] hfsplus: bad catalog file entry [ 152.380009][ T46] hfsplus: b-tree write err: -5, ino 3 [ 152.434124][ T46] hfsplus: bad catalog file entry [ 152.831545][ T6115] loop2: detected capacity change from 0 to 128 [ 152.866189][ T6115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.886907][ T6115] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.226301][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 153.343828][ T4542] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.445906][ T6131] loop2: detected capacity change from 0 to 256 [ 153.572015][ T4542] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.594026][ T4542] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.642983][ T4542] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.673851][ T4542] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 153.695409][ T4542] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 153.728579][ T4542] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.748402][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.780485][ T4542] usb 1-1: Product: syz [ 153.790612][ T4542] usb 1-1: Manufacturer: syz [ 153.814845][ T4542] cdc_wdm 1-1:1.0: skipping garbage [ 153.835890][ T4542] cdc_wdm 1-1:1.0: skipping garbage [ 153.862428][ T4542] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.882668][ T4542] cdc_wdm 1-1:1.0: Unknown control protocol [ 153.883873][ T4722] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.051758][ T4539] usb 1-1: USB disconnect, device number 6 [ 154.103775][ T4722] usb 4-1: Using ep0 maxpacket: 32 [ 154.111079][ T4722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.140467][ T4722] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.170023][ T4722] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 154.193879][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.224237][ T4722] usb 4-1: config 0 descriptor?? [ 154.420274][ T6141] loop5: detected capacity change from 0 to 32768 [ 154.505456][ T6139] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 154.543158][ T6141] XFS (loop5): Mounting V5 Filesystem [ 154.558424][ T4722] usb 4-1: USB disconnect, device number 4 [ 154.628667][ T6141] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 154.681537][ T6141] XFS (loop5): Starting recovery (logdev: internal) [ 154.756780][ T6141] XFS (loop5): Ending recovery (logdev: internal) [ 154.833226][ T6163] program syz.0.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.922365][ T4663] XFS (loop5): Unmounting Filesystem [ 154.940957][ T27] audit: type=1326 audit(1774953849.039:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f031899c819 code=0x0 [ 155.284153][ T6171] input: syz1 as /devices/virtual/input/input6 [ 155.289338][ T6173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 155.823893][ T4273] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 156.025783][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.041365][ T4273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.072658][ T4273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.118195][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.132614][ T4273] usb 2-1: Product: syz [ 156.143874][ T4273] usb 2-1: Manufacturer: syz [ 156.148629][ T4273] usb 2-1: SerialNumber: syz [ 156.459322][ T6201] device wlan0 entered promiscuous mode [ 156.497823][ T6201] device wlan0 left promiscuous mode [ 156.600977][ T4273] usb 2-1: 0:2 : does not exist [ 156.967860][ T6211] input: syz0 as /devices/virtual/input/input8 [ 157.030220][ T4720] usb 2-1: USB disconnect, device number 7 [ 157.272956][ T6221] program syz.0.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.573124][ T6229] loop2: detected capacity change from 0 to 256 [ 157.630289][ T6229] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 157.718893][ T27] audit: type=1800 audit(1774953851.819:14): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.597" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 157.991113][ T6218] loop5: detected capacity change from 0 to 32768 [ 158.023289][ T6218] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.592 (6218) [ 158.055663][ T6218] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 158.099742][ T6218] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 158.163889][ T6218] BTRFS info (device loop5): using free space tree [ 158.474479][ T6218] BTRFS info (device loop5): enabling ssd optimizations [ 158.573766][ T4720] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.771874][ T6231] loop3: detected capacity change from 0 to 32768 [ 158.789143][ T4720] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 158.815652][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 158.836452][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.866265][ T6231] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.600 (6231) [ 158.889441][ T4663] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 158.902440][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 158.960067][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 158.992574][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.074705][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.104394][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.133898][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.163989][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.185318][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.233809][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.263896][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.282365][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.307168][ T4346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4346) [ 159.354771][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.386568][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.405016][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.444282][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.496100][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.534101][ T6256] loop2: detected capacity change from 0 to 32768 [ 159.540101][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.561258][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.572825][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.618494][ T6256] (syz.2.603,6256,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.637722][ T4720] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 159.665093][ T4720] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.681718][ T6256] (syz.2.603,6256,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.718761][ T4720] usb 2-1: config 64 interface 0 has no altsetting 0 [ 159.764617][ T4720] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.782712][ T6256] JBD2: Ignoring recovery information on journal [ 159.799616][ T4720] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.822056][ T4720] usb 2-1: Product: syz [ 159.840879][ T4720] usb 2-1: Manufacturer: syz [ 159.853997][ T4720] usb 2-1: SerialNumber: syz [ 159.868078][ T6270] mmap: syz.0.606 (6270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.894703][ T6256] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.920990][ T4720] yurex 2-1:64.0: USB YUREX device now attached to Yurex #0 [ 160.223281][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 160.419214][ T6276] syz.2.609 uses obsolete (PF_INET,SOCK_PACKET) [ 160.562840][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 160.577328][ T128] usb 2-1: USB disconnect, device number 8 [ 160.600259][ T128] yurex 2-1:64.0: USB YUREX #0 now disconnected [ 160.670475][ T6278] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.396186][ T6287] vivid-003: ================= START STATUS ================= [ 161.437411][ T6287] vivid-003: Radio HW Seek Mode: Bounded [ 161.469789][ T6287] vivid-003: Radio Programmable HW Seek: false [ 161.492660][ T6287] vivid-003: RDS Rx I/O Mode: Block I/O [ 161.522439][ T6287] vivid-003: Generate RBDS Instead of RDS: false [ 161.576281][ T6287] vivid-003: RDS Reception: true [ 161.599549][ T6287] vivid-003: RDS Program Type: 0 inactive [ 161.625999][ T6287] vivid-003: RDS PS Name: inactive [ 161.657232][ T6287] vivid-003: RDS Radio Text: inactive [ 161.682033][ T6287] vivid-003: RDS Traffic Announcement: false inactive [ 161.715944][ T6287] vivid-003: RDS Traffic Program: false inactive [ 161.777538][ T6287] vivid-003: RDS Music: false inactive [ 161.803543][ T6287] vivid-003: ================== END STATUS ================== [ 161.893681][ C1] sched: RT throttling activated [ 161.996161][ T6283] loop5: detected capacity change from 0 to 131072 [ 162.007053][ T6283] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 162.015253][ T6283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 162.055794][ T6283] F2FS-fs (loop5): invalid crc value [ 162.095656][ T6283] F2FS-fs (loop5): Found nat_bits in checkpoint [ 162.161084][ T6283] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 162.168251][ T6283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 162.208057][ T6300] loop3: detected capacity change from 0 to 256 [ 162.235985][ T6302] loop2: detected capacity change from 0 to 16 [ 162.268921][ T6302] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.273412][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 162.288730][ T6300] FAT-fs (loop3): Directory bread(block 64) failed [ 162.348733][ T6300] FAT-fs (loop3): Directory bread(block 65) failed [ 162.405086][ T6300] FAT-fs (loop3): Directory bread(block 66) failed [ 162.412235][ T6300] FAT-fs (loop3): Directory bread(block 67) failed [ 162.492661][ T6300] FAT-fs (loop3): Directory bread(block 68) failed [ 162.527495][ T6300] FAT-fs (loop3): Directory bread(block 69) failed [ 162.565431][ T6300] FAT-fs (loop3): Directory bread(block 70) failed [ 162.593745][ T6300] FAT-fs (loop3): Directory bread(block 71) failed [ 162.600417][ T6300] FAT-fs (loop3): Directory bread(block 72) failed [ 162.693794][ T6300] FAT-fs (loop3): Directory bread(block 73) failed [ 162.917113][ T27] audit: type=1800 audit(1774953857.019:15): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.619" name="file1" dev="loop3" ino=1048629 res=0 errno=0 [ 162.919087][ T6300] syz.3.619: attempt to access beyond end of device [ 162.919087][ T6300] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 163.204334][ T6300] syz.3.619: attempt to access beyond end of device [ 163.204334][ T6300] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 163.414830][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 163.766513][ T6333] loop3: detected capacity change from 0 to 2048 [ 163.825945][ T6333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.409726][ T6348] loop5: detected capacity change from 0 to 512 [ 164.457378][ T6348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.610061][ T6348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 164.644119][ T6348] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.066800][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 165.605808][ T4722] kernel read not supported for file /dsp1 (pid: 4722 comm: kworker/0:11) [ 165.762078][ T6381] loop5: detected capacity change from 0 to 256 [ 165.850245][ T6381] FAT-fs (loop5): Directory bread(block 64) failed [ 165.871910][ T6381] FAT-fs (loop5): Directory bread(block 65) failed [ 165.923915][ T6381] FAT-fs (loop5): Directory bread(block 66) failed [ 165.930535][ T6381] FAT-fs (loop5): Directory bread(block 67) failed [ 165.954058][ T6381] FAT-fs (loop5): Directory bread(block 68) failed [ 165.987288][ T6381] FAT-fs (loop5): Directory bread(block 69) failed [ 166.045297][ T6381] FAT-fs (loop5): Directory bread(block 70) failed [ 166.051925][ T6381] FAT-fs (loop5): Directory bread(block 71) failed [ 166.074092][ T4722] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.112264][ T6381] FAT-fs (loop5): Directory bread(block 72) failed [ 166.123235][ T6381] FAT-fs (loop5): Directory bread(block 73) failed [ 166.265741][ T4722] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.289080][ T4722] usb 3-1: config 0 has no interface number 0 [ 166.324675][ T4722] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 166.360100][ T4722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.369498][ T4722] usb 3-1: Product: syz [ 166.382831][ T4722] usb 3-1: Manufacturer: syz [ 166.410259][ T4722] usb 3-1: SerialNumber: syz [ 166.424336][ T4722] usb 3-1: config 0 descriptor?? [ 166.559923][ T6397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.662'. [ 166.586355][ T6379] loop0: detected capacity change from 0 to 32768 [ 166.651516][ T4722] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 166.664902][ T4722] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 166.675454][ T4722] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 166.683511][ T4722] usb 3-1: media controller created [ 166.709735][ T4722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.787218][ T6379] XFS (loop0): Mounting V5 Filesystem [ 166.862902][ T4722] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 166.870003][ T6379] XFS (loop0): Ending clean mount [ 166.974008][ T4722] usb 3-1: USB disconnect, device number 6 [ 167.117218][ T4280] XFS (loop0): Unmounting Filesystem [ 167.552462][ T6417] Invalid ELF header magic: != ELF [ 167.683874][ T128] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.890893][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 167.903800][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 167.914119][ T6429] sit0: Master is either lo or non-ether device [ 167.916098][ T128] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.937058][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 167.973991][ T6429] sit0: Master is either lo or non-ether device [ 167.991282][ T128] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.013785][ T128] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 168.070101][ T128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.084510][ T128] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.145175][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.190459][ T128] usb 2-1: config 0 descriptor?? [ 168.242592][ T6440] hugetlbfs: syz.5.677 (6440): Using mlock ulimits for SHM_HUGETLB is obsolete [ 168.468266][ T6444] blk_print_req_error: 25 callbacks suppressed [ 168.468287][ T6444] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 168.512263][ T6444] EXT4-fs (loop5): unable to read superblock [ 168.606453][ T128] hid (null): report_id 0 is invalid [ 168.611848][ T128] hid (null): bogus close delimiter [ 168.619331][ T128] hid (null): unknown global tag 0xe [ 168.642787][ T128] hid (null): global environment stack underflow [ 168.670234][ T128] hid (null): global environment stack underflow [ 168.681170][ T6450] loop0: detected capacity change from 0 to 8 [ 168.710857][ T128] hid (null): global environment stack underflow [ 168.724169][ T6450] syz.0.682: attempt to access beyond end of device [ 168.724169][ T6450] loop0: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 168.734081][ T128] hid (null): unknown global tag 0xd [ 168.799892][ T6450] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 168.821264][ T6450] unable to read xattr id index table [ 168.826922][ T128] usb 2-1: USB disconnect, device number 9 [ 168.862575][ T6454] loop5: detected capacity change from 0 to 1024 [ 168.930020][ T6454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 168.966394][ T6454] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.016555][ T6454] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: comm syz.5.684: lblock 0 mapped to illegal pblock 0 (length 6) [ 169.153793][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.173065][ T4663] EXT4-fs (loop5): unmounting filesystem. [ 169.278187][ T6463] loop2: detected capacity change from 0 to 8192 [ 169.313238][ T6463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.356204][ T4316] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.375853][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.415062][ T4316] usb 4-1: config 0 descriptor?? [ 169.430142][ T4316] cp210x 4-1:0.0: cp210x converter detected [ 169.830466][ T4316] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 170.045151][ T4316] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 170.058023][ T4316] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 170.087795][ T4316] usb 4-1: cp210x converter now attached to ttyUSB0 [ 170.129361][ T4316] usb 4-1: USB disconnect, device number 5 [ 170.191723][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.228798][ T4316] cp210x 4-1:0.0: device disconnected [ 170.499165][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 170.537352][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 171.189684][ T6514] Bluetooth: MGMT ver 1.22 [ 172.039206][ T6532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.353470][ T6540] loop0: detected capacity change from 0 to 64 [ 172.427868][ T6542] ALSA: mixer_oss: invalid OSS volume 'ÝÝ' [ 172.463929][ T27] audit: type=1800 audit(1774953866.569:16): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.718" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 174.052646][ T6584] loop5: detected capacity change from 0 to 64 [ 174.136998][ T6588] loop3: detected capacity change from 0 to 128 [ 174.197858][ T6588] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.235480][ T6588] hpfs: filesystem error: improperly stopped [ 174.241677][ T6588] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.273083][ T6588] hpfs: You really don't want any checks? You are crazy... [ 174.346677][ T6588] hpfs: hpfs_map_sector(): read error [ 174.403576][ T6588] hpfs: code page support is disabled [ 174.443898][ T6588] hpfs: hpfs_map_4sectors(): unaligned read [ 174.479903][ T6588] hpfs: hpfs_map_4sectors(): unaligned read [ 174.496278][ T6588] hpfs: filesystem error: unable to find root dir [ 174.531568][ T6596] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 174.566578][ T6588] hpfs: hpfs_map_4sectors(): unaligned read [ 174.577300][ T6588] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 175.399606][ T6621] loop5: detected capacity change from 0 to 256 [ 175.433643][ T6621] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.961478][ T27] audit: type=1326 audit(1774953870.059:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.043861][ T27] audit: type=1326 audit(1774953870.109:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.068827][ T6636] program syz.5.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.145812][ T27] audit: type=1326 audit(1774953870.109:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.221269][ T27] audit: type=1326 audit(1774953870.109:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.322221][ T27] audit: type=1326 audit(1774953870.109:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.385935][ T6645] netlink: 212 bytes leftover after parsing attributes in process `syz.5.761'. [ 176.399069][ T27] audit: type=1326 audit(1774953870.109:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.513290][ T27] audit: type=1326 audit(1774953870.109:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.576457][ T27] audit: type=1326 audit(1774953870.109:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 176.648578][ T27] audit: type=1326 audit(1774953870.109:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763099c819 code=0x7ffc0000 [ 177.819670][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.053882][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 178.064877][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.079768][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 178.110966][ T22] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 178.132731][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.165389][ T22] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 178.178539][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.187075][ T22] usb 2-1: Product: syz [ 178.191281][ T22] usb 2-1: Manufacturer: syz [ 178.196268][ T22] usb 2-1: SerialNumber: syz [ 178.203576][ T22] usb 2-1: config 0 descriptor?? [ 178.617597][ T22] gs_usb 2-1:0.0: Configuring for 25 interfaces [ 179.047725][ T22] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 179.090438][ T22] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 179.149976][ T22] gs_usb: probe of 2-1:0.0 failed with error -71 [ 179.263739][ T22] usb 2-1: USB disconnect, device number 10 [ 179.708386][ T6704] loop0: detected capacity change from 0 to 131072 [ 179.718745][ T6704] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 179.727053][ T6704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.736303][ T6704] F2FS-fs (loop0): invalid crc value [ 179.753947][ T6704] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.796173][ T6704] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.803289][ T6704] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 179.857273][ T6715] loop2: detected capacity change from 0 to 512 [ 179.989886][ T6715] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.790: iget: bad i_size value: -3674898675588399094 [ 180.008458][ T6715] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.790: couldn't read orphan inode 15 (err -117) [ 180.073031][ T6715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.171399][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 180.171417][ T27] audit: type=1804 audit(1774953874.269:31): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.790" name="/newroot/184/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 180.348606][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 180.635287][ T6695] loop3: detected capacity change from 0 to 32768 [ 180.693990][ T4720] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.698067][ T6695] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 180.904659][ T4720] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 180.933266][ T4720] usb 6-1: config 0 has no interface number 0 [ 180.967646][ T4720] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 180.997490][ T4720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.027917][ T4720] usb 6-1: config 0 descriptor?? [ 181.040117][ T4367] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 181.082236][ T4720] usb 6-1: bad CDC descriptors [ 181.110294][ T4720] usb 6-1: bad CDC descriptors [ 181.243821][ T4720] usb 6-1: USB disconnect, device number 3 [ 181.594129][ T4722] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.598565][ T6726] loop2: detected capacity change from 0 to 32768 [ 181.681099][ T27] audit: type=1800 audit(1774953875.779:32): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.796" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 181.795913][ T4722] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.816405][ T4722] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.898829][ T4722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.928603][ T4722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.989713][ T4722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 182.052780][ T4722] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.079096][ T4722] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.117513][ T4722] usb 4-1: Product: syz [ 182.121935][ T4722] usb 4-1: Manufacturer: syz [ 182.150100][ T4722] cdc_wdm 4-1:1.0: skipping garbage [ 182.169002][ T4722] cdc_wdm 4-1:1.0: skipping garbage [ 182.219416][ T4722] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 182.253938][ T4722] cdc_wdm 4-1:1.0: Unknown control protocol [ 182.427290][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 182.433973][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 182.440805][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 182.447454][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 182.454519][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 182.461242][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 182.467657][ T4722] usb 4-1: USB disconnect, device number 6 [ 184.203859][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.413819][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 184.421372][ T22] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 184.433816][ T128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.464376][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.486711][ T6784] loop2: detected capacity change from 0 to 8192 [ 184.499214][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.539015][ T6784] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.540188][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 184.573770][ T6784] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 184.603508][ T6784] REISERFS (device loop2): using ordered data mode [ 184.620727][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.630301][ T6784] reiserfs: using flush barriers [ 184.635630][ T128] usb 4-1: Using ep0 maxpacket: 16 [ 184.642960][ T128] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.674613][ T22] usb 1-1: config 0 descriptor?? [ 184.679840][ T6784] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.706017][ T128] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.724399][ T6784] REISERFS (device loop2): checking transaction log (loop2) [ 184.726724][ T128] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 184.774252][ T128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.784410][ T128] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 184.825427][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.874058][ T128] usb 4-1: config 0 descriptor?? [ 184.950161][ T6784] REISERFS (device loop2): Using r5 hash to sort names [ 184.970306][ T6784] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 185.117262][ T22] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 185.513929][ T22] logitech 0003:046D:C29C.0004: no inputs found [ 185.540703][ T22] usb 1-1: USB disconnect, device number 7 [ 185.572219][ T128] usb 4-1: USB disconnect, device number 7 [ 185.766015][ T6805] fido_id[6805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 186.176336][ T6815] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 186.176336][ T6815] The task syz.2.832 (6815) triggered the difference, watch for misbehavior. [ 186.422592][ T6825] program syz.0.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.564312][ T6827] tipc: Started in network mode [ 186.588537][ T6827] tipc: Node identity ac14140f, cluster identity 4711 [ 186.621010][ T6827] tipc: New replicast peer: 255.255.255.255 [ 186.649870][ T6827] tipc: Enabled bearer , priority 10 [ 186.665758][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 186.852361][ T6835] program syz.1.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.911281][ T22] hid-generic 0005:0004:A9D3.0006: unknown main item tag 0x0 [ 186.941115][ T6837] loop3: detected capacity change from 0 to 512 [ 186.947842][ T22] hid-generic 0005:0004:A9D3.0006: unknown main item tag 0x0 [ 186.966009][ T22] hid-generic 0005:0004:A9D3.0006: unknown main item tag 0x0 [ 187.013253][ T6837] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.075989][ T22] hid-generic 0005:0004:A9D3.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 187.090741][ T6837] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 187.146771][ T6837] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 187.311518][ T6837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 187.344011][ T6837] System zones: 0-2, 18-18, 34-34 [ 187.379706][ T6837] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.841: iget: bad i_size value: 360287970189639680 [ 187.399887][ T6850] program syz.5.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.423807][ T4313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.442812][ T6837] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.841: couldn't read orphan inode 15 (err -117) [ 187.465425][ T6837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.582685][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 187.637690][ T4313] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.663739][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.696990][ T6854] loop5: detected capacity change from 0 to 4096 [ 187.700367][ T4313] usb 3-1: config 0 descriptor?? [ 187.740407][ T6854] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 187.741566][ T4313] cp210x 3-1:0.0: cp210x converter detected [ 187.778321][ T4542] tipc: Node number set to 2886997007 [ 187.863338][ T6854] ntfs: volume version 3.1. [ 188.155292][ T4313] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.210071][ T4313] usb 3-1: cp210x converter now attached to ttyUSB0 [ 188.532434][ T4313] usb 3-1: USB disconnect, device number 7 [ 188.562926][ T4313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.627022][ T4313] cp210x 3-1:0.0: device disconnected [ 188.900411][ T6879] loop0: detected capacity change from 0 to 4096 [ 188.978379][ T4722] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.175754][ T4722] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.212380][ T4722] usb 4-1: config 0 has no interface number 0 [ 189.223875][ T4722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.274059][ T4722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.304788][ T4722] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.338301][ T4722] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 189.385378][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.423142][ T4280] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 189.423554][ T4722] usb 4-1: config 0 descriptor?? [ 189.445468][ T4280] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 189.669920][ T6899] kernel read not supported for file /file1 (pid: 6899 comm: syz.0.864) [ 189.735983][ T27] audit: type=1800 audit(1774953883.839:33): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="file1" dev="mqueue" ino=41475 res=0 errno=0 [ 190.098866][ T4722] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71 [ 190.123984][ T4722] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71 [ 190.132176][ T4722] uclogic 0003:28BD:0042.0007: pen probing failed: -71 [ 190.157280][ T4722] uclogic 0003:28BD:0042.0007: failed probing parameters: -71 [ 190.183828][ T4722] uclogic: probe of 0003:28BD:0042.0007 failed with error -71 [ 190.236801][ T4722] usb 4-1: USB disconnect, device number 8 [ 190.286663][ T6916] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 190.374080][ T4313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.493496][ T6919] netlink: 'syz.5.874': attribute type 1 has an invalid length. [ 190.597939][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.627517][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.648145][ T4542] kernel write not supported for file /451/attr/fscreate (pid: 4542 comm: kworker/1:15) [ 190.661257][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.678266][ T4313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.687896][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.710809][ T4313] usb 1-1: config 0 descriptor?? [ 191.139613][ T4313] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 191.170392][ T4313] plantronics 0003:047F:FFFF.0008: parse failed [ 191.190110][ T4313] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 191.274051][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.280168][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.286664][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 191.286691][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 191.396170][ T4316] usb 1-1: USB disconnect, device number 8 [ 191.497277][ T6949] loop3: detected capacity change from 0 to 256 [ 192.160946][ T6969] loop0: detected capacity change from 0 to 64 [ 192.463747][ T4542] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.666397][ T4542] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.689100][ T4542] usb 3-1: config 0 has no interface number 0 [ 192.735807][ T4542] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 192.774615][ T6985] program syz.0.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.774837][ T4542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.821320][ T4542] usb 3-1: Product: syz [ 192.837849][ T4542] usb 3-1: Manufacturer: syz [ 192.842515][ T4542] usb 3-1: SerialNumber: syz [ 192.853076][ T4542] usb 3-1: config 0 descriptor?? [ 193.080014][ T4542] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 193.131465][ T4542] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.184493][ T4542] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 193.230734][ T4542] usb 3-1: media controller created [ 193.287165][ T4542] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.773883][ T4316] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.973802][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 193.981342][ T4316] usb 4-1: config 0 has no interfaces? [ 194.003828][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.029648][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.055070][ T4316] usb 4-1: config 0 descriptor?? [ 194.185391][ T7021] loop0: detected capacity change from 0 to 256 [ 194.229609][ T7021] exfat: Deprecated parameter 'utf8' [ 194.304018][ T7021] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 194.330388][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.331704][ T4313] usb 4-1: USB disconnect, device number 9 [ 194.336797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424125][ T4542] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 194.452796][ T4542] usb 3-1: USB disconnect, device number 8 [ 195.434573][ T7058] device dummy0 entered promiscuous mode [ 195.440904][ T7058] device macvlan2 entered promiscuous mode [ 195.642106][ T27] audit: type=1326 audit(1774953889.739:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.2.934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f031899c819 code=0x0 [ 195.882542][ T7069] loop0: detected capacity change from 0 to 4096 [ 195.976579][ T7069] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 196.031109][ T7069] ntfs3: loop0: Failed to load $Extend. [ 196.991778][ T7093] loop5: detected capacity change from 0 to 4096 [ 197.084501][ T4542] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.111963][ T7102] loop3: detected capacity change from 0 to 1024 [ 197.234023][ T7102] hfsplus: xattr exists yet [ 197.238845][ T22] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 197.276889][ T4663] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 197.283432][ T4663] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 197.308937][ T4542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.331671][ T4742] hfsplus: b-tree write err: -5, ino 8 [ 197.337428][ T4542] usb 1-1: config 0 has no interfaces? [ 197.353187][ T4542] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 197.382812][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.416051][ T4542] usb 1-1: config 0 descriptor?? [ 197.450784][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.465450][ T22] usb 2-1: config 0 has no interface number 0 [ 197.473840][ T7108] loop5: detected capacity change from 0 to 256 [ 197.493080][ T22] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 197.505766][ T22] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 197.517846][ T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.528605][ T7108] exfat: Deprecated parameter 'utf8' [ 197.555317][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.567510][ T22] usb 2-1: config 0 descriptor?? [ 197.582759][ T7100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.596697][ T22] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.619329][ T7108] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 197.874112][ T22] usb 2-1: USB disconnect, device number 11 [ 197.880117][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 197.910835][ T7119] loop2: detected capacity change from 0 to 128 [ 197.943008][ T7119] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.034813][ T27] audit: type=1800 audit(1774953892.139:35): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.962" name="bus" dev="loop2" ino=1048636 res=0 errno=0 [ 198.056224][ T4542] usb 1-1: USB disconnect, device number 9 [ 198.154383][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.418067][ T7125] mmap: syz.2.965 (7125): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 199.192616][ T7147] loop5: detected capacity change from 0 to 1024 [ 199.246522][ T7147] syz.5.973: attempt to access beyond end of device [ 199.246522][ T7147] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.293909][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.335647][ T7147] buffer_io_error: 25 callbacks suppressed [ 199.335666][ T7147] Buffer I/O error on dev loop5, logical block 2889, async page read [ 199.389890][ T7147] syz.5.973: attempt to access beyond end of device [ 199.389890][ T7147] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.476172][ T7147] Buffer I/O error on dev loop5, logical block 2889, async page read [ 199.484850][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 199.491988][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 199.512281][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.528961][ T27] audit: type=1800 audit(1774953893.629:36): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.973" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 199.558510][ T7151] syz.5.973: attempt to access beyond end of device [ 199.558510][ T7151] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.583840][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.604405][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.614801][ T4720] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.617958][ T7151] Buffer I/O error on dev loop5, logical block 2889, async page read [ 199.631197][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.654788][ T7147] hfsplus: can't free extent [ 199.663823][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.683287][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.691775][ T27] audit: type=1800 audit(1774953893.779:37): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.973" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 199.828380][ T4720] usb 3-1: Using ep0 maxpacket: 8 [ 199.843178][ T4720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.882479][ T4720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.931389][ T4720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.932055][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 199.967569][ T22] usbtmc 1-1:16.0: can't read capabilities [ 199.969497][ T4720] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.999160][ T4720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.010667][ T4720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.177072][ T22] usb 1-1: USB disconnect, device number 10 [ 200.249861][ T7169] loop3: detected capacity change from 0 to 256 [ 200.269710][ T7169] exfat: Deprecated parameter 'utf8' [ 200.289563][ T4720] usb 3-1: GET_CAPABILITIES returned 0 [ 200.305176][ T4720] usbtmc 3-1:16.0: can't read capabilities [ 200.366128][ T7169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 200.540032][ T4720] usb 3-1: USB disconnect, device number 9 [ 200.789829][ T7177] input: syz0 as /devices/virtual/input/input10 [ 201.543935][ T4539] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.658123][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 201.733790][ T4539] usb 3-1: Using ep0 maxpacket: 16 [ 201.749959][ T4539] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.767829][ T4539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.799973][ T7208] loop0: detected capacity change from 0 to 512 [ 201.801966][ T4539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.837057][ T4539] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.847388][ T4539] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.862496][ T4539] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.872057][ T4539] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.874806][ T7208] FAT-fs (loop0): Unrecognized mount option "uäéšã»P2/cÝ" or missing value [ 201.880505][ T4539] usb 3-1: Manufacturer: syz [ 201.901785][ T4539] usb 3-1: config 0 descriptor?? [ 202.290085][ T4539] rc_core: IR keymap rc-hauppauge not found [ 202.297604][ T4539] Registered IR keymap rc-empty [ 202.302587][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.390246][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.434617][ T4539] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 202.476207][ T4539] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 202.514120][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.520975][ T7215] loop5: detected capacity change from 0 to 4096 [ 202.563897][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.594218][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.623986][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.663911][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.716318][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.744149][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.793874][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.823882][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.875187][ T4539] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.925819][ T4539] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.962758][ T4539] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.028622][ T4539] usb 3-1: USB disconnect, device number 10 [ 203.426813][ T7239] IPVS: persistence engine module ip_vs_pe_ not found [ 203.631479][ T7251] loop2: detected capacity change from 0 to 64 [ 204.646178][ T4313] kernel write not supported for file /471/clear_refs (pid: 4313 comm: kworker/0:4) [ 204.965958][ T7277] loop0: detected capacity change from 0 to 1024 [ 205.041152][ T7277] syz.0.1031: attempt to access beyond end of device [ 205.041152][ T7277] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 205.102731][ T7279] loop3: detected capacity change from 0 to 128 [ 205.108313][ T7277] Buffer I/O error on dev loop0, logical block 2889, async page read [ 205.165821][ T7279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 205.173720][ T7277] syz.0.1031: attempt to access beyond end of device [ 205.173720][ T7277] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 205.232048][ T7279] binder: 7278:7279 ioctl c0306201 2000000001c0 returned -14 [ 205.280696][ T7277] Buffer I/O error on dev loop0, logical block 2889, async page read [ 205.331428][ T27] audit: type=1800 audit(1774953899.429:38): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1031" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 205.331553][ T7280] syz.0.1031: attempt to access beyond end of device [ 205.331553][ T7280] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 205.370362][ T7263] loop5: detected capacity change from 0 to 32768 [ 205.445953][ T7280] Buffer I/O error on dev loop0, logical block 2889, async page read [ 205.514264][ T7277] hfsplus: can't free extent [ 205.525381][ T7263] XFS (loop5): Mounting V5 Filesystem [ 205.566038][ T27] audit: type=1800 audit(1774953899.669:39): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1031" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 205.649335][ T7263] XFS (loop5): Ending clean mount [ 206.002315][ T4663] XFS (loop5): Unmounting Filesystem [ 206.274008][ T4720] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.475901][ T4720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.497497][ T4720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.526400][ T4720] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.588910][ T4720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.617176][ T4720] usb 4-1: SerialNumber: syz [ 206.697981][ T7304] device ip6gre1 entered promiscuous mode [ 206.747380][ T4323] kworker/u4:6: attempt to access beyond end of device [ 206.747380][ T4323] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 206.750812][ T4542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.793372][ T4542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.826095][ T4323] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 206.870317][ T4720] usb 4-1: 0:2 : does not exist [ 206.874495][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.888752][ T4323] kworker/u4:6: attempt to access beyond end of device [ 206.888752][ T4323] loop2: rw=1, sector=4173, nr_sectors = 16 limit=64 [ 206.925348][ T4323] kworker/u4:6: attempt to access beyond end of device [ 206.925348][ T4323] loop2: rw=1, sector=4189, nr_sectors = 1 limit=64 [ 206.949752][ T4720] usb 4-1: USB disconnect, device number 10 [ 206.984681][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.998039][ T4323] Buffer I/O error on dev loop2, logical block 4189, lost async page write [ 207.012327][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.037422][ T4323] kworker/u4:6: attempt to access beyond end of device [ 207.037422][ T4323] loop2: rw=1, sector=4190, nr_sectors = 1 limit=64 [ 207.063565][ T4323] Buffer I/O error on dev loop2, logical block 4190, lost async page write [ 207.073822][ T4313] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 207.082689][ T4323] kworker/u4:6: attempt to access beyond end of device [ 207.082689][ T4323] loop2: rw=1, sector=4191, nr_sectors = 1 limit=64 [ 207.130156][ T4323] Buffer I/O error on dev loop2, logical block 4191, lost async page write [ 207.150565][ T4323] kworker/u4:6: attempt to access beyond end of device [ 207.150565][ T4323] loop2: rw=1, sector=4192, nr_sectors = 1 limit=64 [ 207.169712][ T4323] Buffer I/O error on dev loop2, logical block 4192, lost async page write [ 207.188880][ T4323] kworker/u4:6: attempt to access beyond end of device [ 207.188880][ T4323] loop2: rw=1, sector=4193, nr_sectors = 1 limit=64 [ 207.223779][ T4323] Buffer I/O error on dev loop2, logical block 4193, lost async page write [ 207.239628][ T4323] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 207.263873][ T4313] usb 6-1: Using ep0 maxpacket: 16 [ 207.271110][ T4313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.302628][ T4313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.326256][ T4313] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.354017][ T4313] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.394815][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.423889][ T4542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.445388][ T4313] usb 6-1: config 0 descriptor?? [ 207.860798][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 207.893900][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 207.901377][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 207.925579][ T7329] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 207.933711][ T7329] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 207.938173][ T7327] lo speed is unknown, defaulting to 1000 [ 207.941514][ T7329] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1051'. [ 207.953825][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 207.993837][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.001135][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.028766][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.043773][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.082456][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.091076][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.120701][ T7332] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.122136][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.149618][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.157668][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.173884][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.180351][ T4542] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.188438][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.214019][ T4313] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 208.255436][ T4313] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input12 [ 208.298899][ T4313] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 208.316843][ T4313] usb 6-1: USB disconnect, device number 4 [ 208.393820][ T4542] usb 4-1: Using ep0 maxpacket: 32 [ 208.411195][ T4542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.433426][ T7336] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 208.463442][ T4542] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.516361][ T4542] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 208.558959][ T4542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.577694][ T4542] usb 4-1: Product: syz [ 208.582118][ T4542] usb 4-1: Manufacturer: syz [ 208.595651][ T4542] usb 4-1: SerialNumber: syz [ 208.622011][ T4542] usb 4-1: config 0 descriptor?? [ 208.762085][ T7337] fido_id[7337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 208.897553][ T27] audit: type=1326 audit(1774953902.999:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.2.1056" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f031899c819 code=0x0 [ 208.906175][ T7345] loop5: detected capacity change from 0 to 1024 [ 209.013501][ T4542] usb 4-1: USB disconnect, device number 11 [ 209.215998][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 209.264659][ T7351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.664051][ T4542] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.883763][ T4542] usb 1-1: Using ep0 maxpacket: 8 [ 209.895418][ T4542] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.910980][ T4542] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.922801][ T4542] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.941052][ T4542] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.955954][ T4542] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.965467][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.983549][ T7364] device macvtap0 entered promiscuous mode [ 210.005020][ T7364] device macvtap0 left promiscuous mode [ 210.023945][ T128] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.189565][ T4542] usb 1-1: GET_CAPABILITIES returned 0 [ 210.195638][ T4542] usbtmc 1-1:16.0: can't read capabilities [ 210.223773][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 210.237772][ T128] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 210.247551][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.273771][ T128] usb 2-1: Product: syz [ 210.284679][ T128] usb 2-1: Manufacturer: syz [ 210.301870][ T128] usb 2-1: SerialNumber: syz [ 210.326568][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1071'. [ 210.429729][ T4542] usb 1-1: USB disconnect, device number 11 [ 210.510925][ T7376] ipt_CLUSTERIP: Please specify destination IP [ 210.793871][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.123161][ T7390] loop0: detected capacity change from 0 to 1024 [ 211.133726][ T4313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.136800][ T128] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 211.171382][ T128] usb 2-1: USB disconnect, device number 12 [ 211.333160][ T4313] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.360868][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.381520][ T4313] usb 4-1: Product: syz [ 211.390361][ T4313] usb 4-1: Manufacturer: syz [ 211.399791][ T4313] usb 4-1: SerialNumber: syz [ 211.623625][ T4313] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 211.659109][ T4313] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 211.737321][ T7388] loop5: detected capacity change from 0 to 32768 [ 211.871842][ T7388] XFS (loop5): Mounting V5 Filesystem [ 211.893612][ T4313] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 211.915294][ T4313] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.925808][ T4313] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.928695][ T7400] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 211.950350][ T4313] lan78xx: probe of 4-1:1.0 failed with error -71 [ 211.984151][ T4313] usb 4-1: USB disconnect, device number 12 [ 212.045903][ T7388] XFS (loop5): Ending clean mount [ 212.308566][ T4663] XFS (loop5): Unmounting Filesystem [ 212.906592][ T7415] loop3: detected capacity change from 0 to 64 [ 213.402329][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1089'. [ 213.449584][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1089'. [ 213.504009][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1089'. [ 213.543948][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1089'. [ 213.587935][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 213.901025][ T7436] lo speed is unknown, defaulting to 1000 [ 213.930998][ T7439] loop3: detected capacity change from 0 to 512 [ 213.965013][ T7439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 214.014325][ T7439] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.069981][ T7439] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 214.107871][ T7439] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 214.123593][ T4539] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.163015][ T7439] System zones: 0-2, 18-18, 34-35 [ 214.212729][ T7439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.327759][ T7439] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 214.343782][ T4539] usb 1-1: Using ep0 maxpacket: 32 [ 214.351196][ T4539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.382079][ T4539] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.414318][ T4539] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 214.440925][ T4539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.469672][ T4539] usb 1-1: Product: syz [ 214.469827][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 214.486859][ T4539] usb 1-1: Manufacturer: syz [ 214.506747][ T4539] usb 1-1: SerialNumber: syz [ 214.518670][ T4539] usb 1-1: config 0 descriptor?? [ 214.882579][ T4539] usb 1-1: USB disconnect, device number 12 [ 215.060823][ T7457] kvm [7456]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x62b1775a [ 215.165705][ T7460] loop2: detected capacity change from 0 to 4096 [ 215.405687][ T4271] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 215.459697][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 215.571282][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.580959][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.589475][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.603942][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.611414][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.639317][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.682346][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.704437][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.730531][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.763794][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.772804][ T7472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 215.781686][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.801778][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.809575][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.823723][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.841395][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.853771][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.872079][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.893715][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.901159][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.923738][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.931285][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.953789][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.962015][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.970155][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.977661][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.985123][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 215.992548][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.001380][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.008929][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.020046][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.030224][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.042106][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.050567][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.058314][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.066889][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.074414][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.081984][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.089579][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.097162][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.104756][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.112291][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.119784][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.127475][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.134966][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.142499][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.150078][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.158542][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.167162][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.174777][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.182300][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.189948][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.197700][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.205344][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.212762][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.220256][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.227885][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.239004][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.250888][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.262653][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.273062][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.280641][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.288318][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.296803][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.304306][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.312231][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.319957][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.327632][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.339379][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.346880][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.356204][ T7477] loop2: detected capacity change from 0 to 512 [ 216.363406][ T7477] EXT4-fs: Ignoring removed orlov option [ 216.369571][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.377841][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.385458][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.392922][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.400645][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.412446][ T7477] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.425638][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.433181][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.441079][ T7477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.451353][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.459140][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.467243][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.477431][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.479831][ T7477] EXT4-fs (loop2): 1 truncate cleaned up [ 216.485196][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.496802][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.499637][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.514969][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.522479][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.530130][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.537684][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.545280][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.552691][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.560482][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.567988][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.576165][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.583608][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.591120][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.598695][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.606297][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.613790][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.621260][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.628753][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.636278][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.643900][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.651575][ T4316] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 216.680942][ T4316] hid-generic 0000:0000:0004.000A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 216.728427][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 217.101119][ T7479] fido_id[7479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.115757][ T7523] netlink: 'syz.1.1130': attribute type 9 has an invalid length. [ 218.489331][ T7529] device erspan0 entered promiscuous mode [ 218.633826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.732710][ T7537] loop3: detected capacity change from 0 to 256 [ 219.318175][ T7550] loop2: detected capacity change from 0 to 1024 [ 219.542734][ T7559] tipc: Started in network mode [ 219.570865][ T7559] tipc: Node identity ac14140f, cluster identity 4711 [ 219.593084][ T7559] tipc: New replicast peer: 255.255.255.255 [ 219.616827][ T7559] tipc: Enabled bearer , priority 10 [ 220.143806][ T4347] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.349657][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 220.376266][ T4347] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 220.392005][ T7552] loop5: detected capacity change from 0 to 40427 [ 220.423816][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.440534][ T7552] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 220.456049][ T4347] usb 2-1: Product: syz [ 220.460281][ T4347] usb 2-1: Manufacturer: syz [ 220.463726][ T7552] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 220.479782][ T4347] usb 2-1: SerialNumber: syz [ 220.501219][ T7552] F2FS-fs (loop5): invalid crc value [ 220.532159][ T7552] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 220.671018][ T7552] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 220.683767][ T7552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 220.726044][ T4347] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 220.743917][ T128] tipc: Node number set to 2886997007 [ 220.776546][ T4347] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.819971][ T4347] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 220.849096][ T4347] usb 2-1: media controller created [ 220.858288][ T7566] loop0: detected capacity change from 0 to 40427 [ 220.924620][ T7566] F2FS-fs (loop0): invalid crc value [ 220.935328][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.959526][ T7566] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.967181][ T4663] bio_check_eod: 106 callbacks suppressed [ 220.967198][ T4663] syz-executor: attempt to access beyond end of device [ 220.967198][ T4663] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.037389][ T4347] zl10353_read_register: readreg error (reg=127, ret==-71) [ 221.152429][ T4347] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 221.160056][ T7566] F2FS-fs (loop0): Start checkpoint disabled! [ 221.220676][ T4347] usb 2-1: USB disconnect, device number 13 [ 221.259625][ T7566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 221.296105][ T7571] loop3: detected capacity change from 0 to 32768 [ 221.441120][ T7571] XFS (loop3): Mounting V5 Filesystem [ 221.464834][ T27] audit: type=1800 audit(1774953915.569:41): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1150" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 221.661674][ T7571] XFS (loop3): Ending clean mount [ 221.948087][ T4742] kworker/u4:8: attempt to access beyond end of device [ 221.948087][ T4742] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 221.981639][ T4272] XFS (loop3): Unmounting Filesystem [ 222.213794][ T4542] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 222.414031][ T4542] usb 6-1: Using ep0 maxpacket: 16 [ 222.426501][ T4542] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 222.458657][ T4542] usb 6-1: config 0 has no interface number 0 [ 222.489296][ T4542] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.531061][ T4542] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 222.563579][ T4542] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 222.589705][ T4542] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 222.623710][ T4542] usb 6-1: Product: syz [ 222.628999][ T7607] loop2: detected capacity change from 0 to 512 [ 222.642463][ T4542] usb 6-1: SerialNumber: syz [ 222.655961][ T4542] usb 6-1: config 0 descriptor?? [ 222.674386][ T4542] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 222.690366][ T4542] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input13 [ 222.703985][ T7607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.729799][ T7607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.768084][ T7607] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1164: Invalid block bitmap block 0 in block_group 0 [ 222.917736][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.917836][ T4722] usb 6-1: USB disconnect, device number 5 [ 222.924986][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 222.926093][ T7607] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 222.967379][ T7607] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1164: attempt to clear invalid blocks 983261 len 1 [ 222.987441][ T4722] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 223.033379][ T7607] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.1164: Invalid inode table block 0 in block_group 0 [ 223.090842][ T7607] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 223.111211][ T7607] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 223.132625][ T7607] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.1164: Invalid inode table block 0 in block_group 0 [ 223.155579][ T7607] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 223.162192][ T7619] loop0: detected capacity change from 0 to 512 [ 223.197155][ T7607] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.1164: mark_inode_dirty error [ 223.226292][ T7607] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 223.251855][ T7607] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.1164: Invalid inode table block 0 in block_group 0 [ 223.279996][ T7619] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1167: Directory hole found for htree index block 0 [ 223.304271][ T7607] EXT4-fs (loop2): 1 truncate cleaned up [ 223.339288][ T7607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.365324][ T7619] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 223.374189][ T7619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.395153][ T7619] EXT4-fs (loop0): shut down requested (1) [ 223.449308][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 223.663568][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 223.673744][ T4722] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.863724][ T4722] usb 4-1: Using ep0 maxpacket: 16 [ 223.874940][ T4722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.921463][ T4722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.955399][ T4722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.991848][ T4722] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.022487][ T4722] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.022903][ T7636] loop2: detected capacity change from 0 to 4096 [ 224.090144][ T4722] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.091515][ T7636] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 224.112833][ T4722] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.129858][ T7636] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 224.181550][ T4722] usb 4-1: Manufacturer: syz [ 224.194346][ T7636] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 224.218647][ T4722] usb 4-1: config 0 descriptor?? [ 224.225591][ T7636] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 224.284099][ T7636] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 224.396629][ T7636] ntfs: volume version 3.1. [ 224.405567][ T7636] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 224.447252][ T7636] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 224.479040][ T7636] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 224.544352][ T7636] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 224.753909][ T4722] rc_core: IR keymap rc-hauppauge not found [ 224.759888][ T4722] Registered IR keymap rc-empty [ 224.792529][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 224.797884][ T7632] loop0: detected capacity change from 0 to 32768 [ 224.844001][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 224.922604][ T4722] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 224.976394][ T4722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 225.009840][ T7632] XFS (loop0): Mounting V5 Filesystem [ 225.029471][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.074163][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.113913][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.143858][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.199720][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.233780][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.256086][ T7632] XFS (loop0): Ending clean mount [ 225.284812][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.343770][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.393923][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.439121][ T4722] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 225.495105][ T4722] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.514467][ T4722] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.557869][ T4722] usb 4-1: USB disconnect, device number 13 [ 225.635014][ T4280] XFS (loop0): Unmounting Filesystem [ 226.164055][ T7687] pim6reg0: tun_chr_ioctl cmd 35111 [ 226.909763][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 227.167779][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'. [ 227.193938][ T7711] netlink: 'syz.0.1204': attribute type 6 has an invalid length. [ 227.232538][ T7711] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1204'. [ 227.492692][ T7699] loop3: detected capacity change from 0 to 32768 [ 227.560151][ T7699] JBD2: Ignoring recovery information on journal [ 227.729364][ T7699] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 227.775528][ T7720] loop2: detected capacity change from 0 to 1024 [ 227.960662][ T7699] [ 227.963065][ T7699] ====================================================== [ 227.970196][ T7699] WARNING: possible circular locking dependency detected [ 227.977237][ T7699] syzkaller #0 Not tainted [ 227.981766][ T7699] ------------------------------------------------------ [ 227.988832][ T7699] syz.3.1199/7699 is trying to acquire lock: [ 227.994935][ T7699] ffff88807caac650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xd39/0x1d30 [ 228.003974][ T7699] [ 228.003974][ T7699] but task is already holding lock: [ 228.011366][ T7699] ffff888055a494a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd2a/0x1d30 [ 228.021695][ T7699] [ 228.021695][ T7699] which lock already depends on the new lock. [ 228.021695][ T7699] [ 228.032125][ T7699] [ 228.032125][ T7699] the existing dependency chain (in reverse order) is: [ 228.041146][ T7699] [ 228.041146][ T7699] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 228.050019][ T7699] down_read+0x42/0x2d0 [ 228.054721][ T7699] ocfs2_read_virt_blocks+0x25d/0x970 [ 228.060626][ T7699] ocfs2_read_dir_block+0xd1/0x4f0 [ 228.066285][ T7699] ocfs2_dir_foreach_blk+0x268/0x1a90 [ 228.072214][ T7699] ocfs2_dir_foreach+0x16d/0x1c0 [ 228.077802][ T7699] ocfs2_empty_dir+0x105/0x650 [ 228.083102][ T7699] ocfs2_rename+0x218a/0x3950 [ 228.088329][ T7699] vfs_rename+0xbe1/0x1100 [ 228.093301][ T7699] do_renameat2+0x8e5/0xce0 [ 228.098347][ T7699] __x64_sys_rename+0x82/0x90 [ 228.103554][ T7699] do_syscall_64+0x4c/0xa0 [ 228.108502][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.115021][ T7699] [ 228.115021][ T7699] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 228.123546][ T7699] down_read+0x42/0x2d0 [ 228.128233][ T7699] ocfs2_start_trans+0x3a4/0x6f0 [ 228.133711][ T7699] ocfs2_mknod+0xf77/0x25b0 [ 228.138776][ T7699] ocfs2_create+0x1b6/0x4b0 [ 228.143821][ T7699] path_openat+0x1181/0x2ee0 [ 228.148954][ T7699] do_filp_open+0x1f1/0x430 [ 228.153988][ T7699] do_sys_openat2+0x150/0x4b0 [ 228.159201][ T7699] __x64_sys_openat+0x135/0x160 [ 228.164671][ T7699] do_syscall_64+0x4c/0xa0 [ 228.169697][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.176127][ T7699] [ 228.176127][ T7699] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 228.183789][ T7699] __lock_acquire+0x2d07/0x7d10 [ 228.189171][ T7699] lock_acquire+0x1bb/0x4a0 [ 228.194207][ T7699] ocfs2_start_trans+0x2a5/0x6f0 [ 228.199669][ T7699] ocfs2_setattr+0xd39/0x1d30 [ 228.204875][ T7699] notify_change+0xc74/0xf40 [ 228.209991][ T7699] ovl_workdir_create+0x58d/0x760 [ 228.215543][ T7699] ovl_get_workdir+0x3c6/0x1610 [ 228.220930][ T7699] ovl_fill_super+0x1824/0x2a30 [ 228.226304][ T7699] mount_nodev+0x52/0xe0 [ 228.231078][ T7699] legacy_get_tree+0xe6/0x180 [ 228.236373][ T7699] vfs_get_tree+0x88/0x270 [ 228.241421][ T7699] do_new_mount+0x24a/0xa40 [ 228.246465][ T7699] __se_sys_mount+0x2e3/0x3d0 [ 228.251667][ T7699] do_syscall_64+0x4c/0xa0 [ 228.256716][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.263148][ T7699] [ 228.263148][ T7699] other info that might help us debug this: [ 228.263148][ T7699] [ 228.273552][ T7699] Chain exists of: [ 228.273552][ T7699] sb_internal#2 --> &journal->j_trans_barrier --> &ocfs2_file_ip_alloc_sem_key [ 228.273552][ T7699] [ 228.288456][ T7699] Possible unsafe locking scenario: [ 228.288456][ T7699] [ 228.295924][ T7699] CPU0 CPU1 [ 228.301316][ T7699] ---- ---- [ 228.306864][ T7699] lock(&ocfs2_file_ip_alloc_sem_key); [ 228.312447][ T7699] lock(&journal->j_trans_barrier); [ 228.320288][ T7699] lock(&ocfs2_file_ip_alloc_sem_key); [ 228.328473][ T7699] lock(sb_internal#2); [ 228.332835][ T7699] [ 228.332835][ T7699] *** DEADLOCK *** [ 228.332835][ T7699] [ 228.340992][ T7699] 5 locks held by syz.3.1199/7699: [ 228.346208][ T7699] #0: ffff888052c4e0e0 (&type->s_umount_key#55/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 228.356409][ T7699] #1: ffff88807caac460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 228.365678][ T7699] #2: ffff888055a489c8 (&sb->s_type->i_mutex_key#23/1){+.+.}-{3:3}, at: ovl_workdir_create+0x14f/0x760 [ 228.376947][ T7699] #3: ffff888055a49808 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: ovl_workdir_create+0x521/0x760 [ 228.387937][ T7699] #4: ffff888055a494a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd2a/0x1d30 [ 228.398661][ T7699] [ 228.398661][ T7699] stack backtrace: [ 228.404557][ T7699] CPU: 0 PID: 7699 Comm: syz.3.1199 Not tainted syzkaller #0 [ 228.412026][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.422092][ T7699] Call Trace: [ 228.425386][ T7699] [ 228.428326][ T7699] dump_stack_lvl+0x188/0x24e [ 228.433022][ T7699] ? load_image+0x400/0x400 [ 228.437532][ T7699] ? show_regs_print_info+0x12/0x12 [ 228.442743][ T7699] ? print_circular_bug+0x12b/0x1a0 [ 228.448128][ T7699] check_noncircular+0x296/0x330 [ 228.453086][ T7699] ? add_chain_block+0x940/0x940 [ 228.458033][ T7699] ? lockdep_lock+0xf1/0x1f0 [ 228.462635][ T7699] ? _find_first_zero_bit+0xcf/0x100 [ 228.468016][ T7699] __lock_acquire+0x2d07/0x7d10 [ 228.472898][ T7699] ? verify_lock_unused+0x140/0x140 [ 228.478116][ T7699] ? verify_lock_unused+0x140/0x140 [ 228.483417][ T7699] ? verify_lock_unused+0x140/0x140 [ 228.488735][ T7699] lock_acquire+0x1bb/0x4a0 [ 228.493270][ T7699] ? ocfs2_setattr+0xd39/0x1d30 [ 228.498147][ T7699] ? __might_sleep+0xd0/0xd0 [ 228.502749][ T7699] ? do_raw_spin_lock+0x128/0x2f0 [ 228.507788][ T7699] ? read_lock_is_recursive+0x10/0x10 [ 228.513175][ T7699] ? __rwlock_init+0x140/0x140 [ 228.517943][ T7699] ? do_raw_spin_unlock+0x11d/0x230 [ 228.523144][ T7699] ocfs2_start_trans+0x2a5/0x6f0 [ 228.528088][ T7699] ? ocfs2_setattr+0xd39/0x1d30 [ 228.532955][ T7699] ? ocfs2_recovery_exit+0x50/0x50 [ 228.538074][ T7699] ? setattr_prepare+0x1f5/0xd00 [ 228.543030][ T7699] ocfs2_setattr+0xd39/0x1d30 [ 228.547727][ T7699] ? ocfs2_extend_allocation+0x1930/0x1930 [ 228.553545][ T7699] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 228.559466][ T7699] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 228.565734][ T7699] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 228.571654][ T7699] ? current_time+0x196/0x2b0 [ 228.576363][ T7699] ? atime_needs_update+0x780/0x780 [ 228.581574][ T7699] ? evm_inode_setattr+0x91/0x790 [ 228.586611][ T7699] ? bpf_lsm_inode_setattr+0x5/0x10 [ 228.591824][ T7699] ? security_inode_setattr+0xd8/0x140 [ 228.597294][ T7699] ? try_break_deleg+0x79/0x120 [ 228.602151][ T7699] ? ocfs2_extend_allocation+0x1930/0x1930 [ 228.607967][ T7699] notify_change+0xc74/0xf40 [ 228.612572][ T7699] ovl_workdir_create+0x58d/0x760 [ 228.617611][ T7699] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 228.622925][ T7699] ? rcu_read_lock_any_held+0xb0/0x130 [ 228.628407][ T7699] ? __mnt_want_write+0x21f/0x2a0 [ 228.633465][ T7699] ovl_get_workdir+0x3c6/0x1610 [ 228.638341][ T7699] ? __rwlock_init+0x140/0x140 [ 228.643118][ T7699] ? do_raw_spin_unlock+0x11d/0x230 [ 228.648324][ T7699] ? ovl_get_upper+0x600/0x600 [ 228.653105][ T7699] ? _raw_spin_unlock+0x24/0x40 [ 228.657961][ T7699] ? ovl_inuse_trylock+0xb9/0xd0 [ 228.662910][ T7699] ? ovl_get_upper+0x456/0x600 [ 228.667678][ T7699] ? ovl_fill_super+0x2a30/0x2a30 [ 228.672724][ T7699] ? ovl_fill_super+0x13c9/0x2a30 [ 228.677850][ T7699] ? rcu_is_watching+0x11/0xa0 [ 228.682893][ T7699] ? ovl_fill_super+0x13c9/0x2a30 [ 228.687945][ T7699] ? __kmalloc+0xe1/0x240 [ 228.692305][ T7699] ovl_fill_super+0x1824/0x2a30 [ 228.697179][ T7699] ? ovl_mount+0x30/0x30 [ 228.701452][ T7699] ? sget+0x461/0x490 [ 228.705538][ T7699] ? free_anon_bdev+0x20/0x20 [ 228.710229][ T7699] ? ovl_mount+0x30/0x30 [ 228.714493][ T7699] mount_nodev+0x52/0xe0 [ 228.718743][ T7699] legacy_get_tree+0xe6/0x180 [ 228.723437][ T7699] ? virtio_fs_zero_page_range+0x130/0x130 [ 228.729338][ T7699] vfs_get_tree+0x88/0x270 [ 228.733764][ T7699] do_new_mount+0x24a/0xa40 [ 228.738274][ T7699] __se_sys_mount+0x2e3/0x3d0 [ 228.742956][ T7699] ? __x64_sys_mount+0xc0/0xc0 [ 228.747729][ T7699] ? lockdep_hardirqs_on+0x94/0x140 [ 228.752935][ T7699] ? __x64_sys_mount+0x1c/0xc0 [ 228.757704][ T7699] do_syscall_64+0x4c/0xa0 [ 228.762135][ T7699] ? clear_bhb_loop+0x60/0xb0 [ 228.766825][ T7699] ? clear_bhb_loop+0x60/0xb0 [ 228.771516][ T7699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.777415][ T7699] RIP: 0033:0x7f763099c819 [ 228.781855][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.801474][ T7699] RSP: 002b:00007f763192b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.809913][ T7699] RAX: ffffffffffffffda RBX: 00007f7630c15fa0 RCX: 00007f763099c819 [ 228.817893][ T7699] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 228.825874][ T7699] RBP: 00007f7630a32c91 R08: 0000200000000300 R09: 0000000000000000 [ 228.833849][ T7699] R10: 0000000002000808 R11: 0000000000000246 R12: 0000000000000000 [ 228.841834][ T7699] R13: 00007f7630c16038 R14: 00007f7630c15fa0 R15: 00007ffe2e8a55f8 [ 228.849817][ T7699] [ 228.859610][ T7699] overlayfs: upper fs does not support tmpfile. [ 228.876201][ T7699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.927404][ T7699] overlayfs: upper fs missing required features. [ 228.934558][ T4742] hfsplus: b-tree write err: -5, ino 25 [ 228.941471][ T4742] hfsplus: b-tree write err: -5, ino 4 [ 228.953861][ T9] wlan1: Trigger new scan to find an IBSS to join [ 228.967704][ T4742] hfsplus: b-tree write err: -5, ino 2 [ 228.972057][ T7709] loop5: detected capacity change from 0 to 40427 [ 228.989820][ T4742] hfsplus: b-tree write err: -5, ino 26 [ 229.002374][ T7709] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 229.033723][ T7709] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 229.045606][ T7709] F2FS-fs (loop5): invalid crc value [ 229.055830][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 229.098465][ T7709] F2FS-fs (loop5): Found nat_bits in checkpoint [ 229.179411][ T7709] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 229.186708][ T7709] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 231.913845][ T4742] wlan1: Trigger new scan to find an IBSS to join [ 233.993817][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.873898][ T9] wlan1: Trigger new scan to find an IBSS to join [ 235.814675][ T4323] wlan1: Creating new IBSS network, BSSID ae:a9:9b:72:fe:57