last executing test programs: 2m12.971499163s ago: executing program 0 (id=227): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000001080)) 2m12.688005371s ago: executing program 0 (id=229): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffbfffffc, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 2m12.590082373s ago: executing program 0 (id=230): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000000)) 2m10.831621491s ago: executing program 0 (id=248): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m10.208035618s ago: executing program 0 (id=253): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 2m9.435763579s ago: executing program 0 (id=259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xfffffffb) listen(r0, 0x0) listen(r0, 0x8) 2m8.936610982s ago: executing program 32 (id=259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xfffffffb) listen(r0, 0x0) listen(r0, 0x8) 4.370019791s ago: executing program 2 (id=1168): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0xfa, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 4.093032789s ago: executing program 2 (id=1170): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 4.001738771s ago: executing program 4 (id=1171): creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0xc00, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r1}}]}) 3.728035078s ago: executing program 2 (id=1172): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {0x9, 0x21, 0xffff, 0x3c}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)) 3.723403109s ago: executing program 4 (id=1173): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4086, 0xff6}], 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3.420999957s ago: executing program 4 (id=1175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2400, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000940)={0x2}) epoll_pwait(r1, &(0x7f0000000480)=[{}], 0x1, 0xa888, 0x0, 0x0) 3.087145146s ago: executing program 4 (id=1177): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 3.025484998s ago: executing program 1 (id=1178): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 3.012353568s ago: executing program 2 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x0, 0x20, 0x5, 0xfffffffa, 0x3, {0x2, 0x807, 0xe60, 0x5, 0xa, 0xffc, 0x8, 0x802, 0x3c, 0x4000, 0x2, 0x0, 0x0, 0x6704, 0x3831180e}}}, 0x90) 2.739983656s ago: executing program 4 (id=1180): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 2.718789596s ago: executing program 2 (id=1181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 2.701702046s ago: executing program 1 (id=1182): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000000}) pselect6(0x40, &(0x7f0000000080)={0xa, 0x1, 0xfffffffffffffff7, 0x4, 0x955, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) 2.504060802s ago: executing program 1 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2a, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x24}}, 0x0) 2.408548265s ago: executing program 3 (id=1184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 2.328128017s ago: executing program 1 (id=1185): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x6, 0x2}, 0x10) 1.681930874s ago: executing program 2 (id=1186): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x1e, &(0x7f0000000540)={0x5, 0xf, 0x1e, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0xc, 0xfff3}, @generic={0xf, 0x10, 0x4, "c4a706f9812bccb4c7ccff11"}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.347297674s ago: executing program 1 (id=1187): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x1, 0x7}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) 1.290279675s ago: executing program 3 (id=1188): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x401, 0x4e24, 0x0, 0x2, 0xb0, 0x20, 0x76, 0x0, 0xee01}, {0x0, 0x7f, 0xf, 0x4, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0x7fffffff}, {0x5ec18add, 0xffffffffffffff7f, 0x100000000, 0x8e40}, 0xffff, 0x6e6bb8, 0x0, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3509, 0x0, 0x0, 0x9, 0x7, 0x7, 0x1}}, 0xe8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008800) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 1.213560287s ago: executing program 1 (id=1189): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[], 0x3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 1.139069759s ago: executing program 3 (id=1190): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000005c0)={[{@fat=@discard}, {@fat=@quiet}, {@fat=@sys_immutable}, {@nodots}, {@fat=@usefree}, {@fat=@usefree}, {@dots}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 805.924478ms ago: executing program 3 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) 742.95721ms ago: executing program 4 (id=1192): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 639.096723ms ago: executing program 3 (id=1193): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES64, @ANYBLOB="a8b9e17497e1650ed6c2832e66ed9ac625ef211a2a728c28981631d154bb73625e8503a902fa2200147e89a408506f95ca0884fcf78e62b1d4dd79a0008b892b688e77266f31e978f6d04569f57fe0e2c8d070c3689b31ffdac3481a9df57de37d67669b84ec1b9a1e6bb78a5e086f22b12fe99f9ae4fbd4b6eec63e81a7c163aa8cf46ea7655309b94dee9477287f18dbfcdf87fd6bdb18bb52e0a3d27c227fe5e44bb70c6fb8463a2aa66ffaa3c86b376ecc4a3045d87815f9c23260d821b7dd0db0b6cb9c1ae507dcf2e3686394311323b88f3e147e703d81d604bc18bff7a5085e9faf427d70ece9b62cdc539b9367b1ccaf63e032365a19c33b31490d", @ANYRES32, @ANYBLOB="7586a035f55c6293d0f1b99c9b1885d532ab5c9f7209d3d9472bc4f6ae44ee7a08ce61001daaba6032a03b61fba7f6b0299550c27826218b7c1898ec7cb416ad734679ede2e5f49b3ef825c5f8f4441b01e9e4a78d86b9f7a56f4d2ce1c37c28d61560e513ae401aeb1a6b2419cd3cb8f31630e01709cfcf262367e0418aa422f760e4569bca22c7bf82b1f192a3e4f618e5978e7e8a188486fa2a380915715ef67da718b0037e943a2e8bbcd8265aef7abcca6f6e85d9d36ec4da2d8a8c1ddd4a0f9dcb5a717640", @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0xc1, 0x1521, &(0x7f0000003fc0)="$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") mknod$loop(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 3 (id=1194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): promiscuous mode [ 128.609985][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.638329][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.667100][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.684646][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.708974][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.724204][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.752793][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.781569][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.816819][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.834404][ T5814] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 128.843416][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.857182][ T5814] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 128.877061][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.897405][ T5814] usb 2-1: cp210x converter now attached to ttyUSB0 [ 128.909883][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.929028][ T5814] usb 2-1: USB disconnect, device number 7 [ 128.942052][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.981145][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.989690][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.998141][ T5953] udevd[5953]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 129.010663][ T5814] cp210x 2-1:0.0: device disconnected [ 129.031183][ T5953] udevd[5953]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 129.062906][ T6531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.083718][ T6531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.115515][ T6531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.131868][ T6531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.396458][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.436613][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.509375][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.518196][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.617149][ T5814] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.827139][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 129.852845][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.877882][ T5814] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.891641][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.903504][ T5814] usb 3-1: config 0 descriptor?? [ 130.122574][ T6744] loop3: detected capacity change from 0 to 32768 [ 130.185410][ T6744] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.287299][ T6744] XFS (loop3): Ending clean mount [ 130.340799][ T5814] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 130.377918][ T6769] netlink: 68 bytes leftover after parsing attributes in process `syz.4.321'. [ 130.399953][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 130.412937][ T6744] XFS (loop3): Quotacheck needed: Please wait. [ 130.557423][ T6744] XFS (loop3): Quotacheck: Done. [ 130.750723][ T5811] usb 3-1: USB disconnect, device number 6 [ 131.140503][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.150884][ T1189] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.211164][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 131.363084][ T1189] usb 5-1: Using ep0 maxpacket: 16 [ 131.385376][ T1189] usb 5-1: config 0 has no interfaces? [ 131.420813][ T1189] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.433459][ T1189] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.464540][ T1189] usb 5-1: Manufacturer: syz [ 131.495817][ T1189] usb 5-1: config 0 descriptor?? [ 131.761382][ T6804] loop2: detected capacity change from 0 to 2048 [ 131.817351][ T6773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.865420][ T6804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.878355][ T1189] usb 5-1: USB disconnect, device number 2 [ 132.343364][ T6825] loop2: detected capacity change from 0 to 1024 [ 132.983534][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997538][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262491][ T6854] loop3: detected capacity change from 0 to 128 [ 133.283285][ T6854] EXT4-fs: Ignoring removed i_version option [ 133.438412][ T6854] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.523407][ T6854] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.784073][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.479120][ T6883] mmap: syz.3.347 (6883) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.500796][ T6846] loop1: detected capacity change from 0 to 32768 [ 134.558911][ T789] IPVS: starting estimator thread 0... [ 134.567388][ T6890] IPVS: sed: FWM 3 0x00000003 - no destination available [ 134.576279][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 134.613310][ T6846] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 134.657501][ T6894] IPVS: using max 18 ests per chain, 43200 per kthread [ 134.668973][ T6846] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.853802][ T6846] XFS (loop1): Ending clean mount [ 134.917287][ T6846] XFS (loop1): Quotacheck needed: Please wait. [ 135.058266][ T6905] netlink: 27 bytes leftover after parsing attributes in process `syz.2.355'. [ 135.077333][ T6846] XFS (loop1): Quotacheck: Done. [ 135.335721][ T6911] loop2: detected capacity change from 0 to 256 [ 135.351992][ T6912] netlink: 'syz.4.356': attribute type 11 has an invalid length. [ 135.362489][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.399801][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.4.356'. [ 136.355931][ T6943] loop2: detected capacity change from 0 to 256 [ 136.384834][ T6943] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.441921][ T6943] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 136.442928][ T28] audit: type=1800 audit(1777557285.091:4): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.368" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 136.458844][ T6943] FAT-fs (loop2): Filesystem has been set read-only [ 136.663308][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 136.703298][ T6950] input: syz1 as /devices/virtual/input/input9 [ 136.860035][ T6956] loop2: detected capacity change from 0 to 256 [ 136.882064][ T6956] exfat: Deprecated parameter 'namecase' [ 136.907125][ T6956] exfat: Deprecated parameter 'utf8' [ 136.933083][ T6956] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 138.163583][ T6978] loop4: detected capacity change from 0 to 32768 [ 138.254620][ T6978] JBD2: Ignoring recovery information on journal [ 138.276709][ T7001] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 138.354474][ T6978] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.421849][ T7001] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.443895][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.654932][ T6531] ocfs2: Unmounting device (7,4) on (node local) [ 138.943673][ T7011] loop4: detected capacity change from 0 to 256 [ 138.977337][ T7011] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 139.265425][ T7020] syz.4.400 uses obsolete (PF_INET,SOCK_PACKET) [ 139.432656][ T7020] loop4: detected capacity change from 0 to 4096 [ 139.460984][ T7020] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 139.546207][ T7020] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 139.594127][ T7020] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 139.618437][ T7020] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 139.669032][ T7020] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 139.706903][ T7020] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 139.747470][ T7020] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 139.766338][ T7020] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 139.818008][ T7020] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 139.877793][ T7020] ntfs: volume version 3.1. [ 139.992276][ T7026] loop2: detected capacity change from 0 to 8192 [ 140.066029][ T7026] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.245012][ T7022] loop1: detected capacity change from 0 to 32768 [ 140.287725][ T7022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.401 (7022) [ 140.369962][ T7022] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.413888][ T7022] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.431492][ T7022] BTRFS info (device loop1): force clearing of disk cache [ 140.448417][ T7022] BTRFS info (device loop1): enabling auto defrag [ 140.462918][ T7022] BTRFS info (device loop1): using free space tree [ 140.689508][ T7022] BTRFS info (device loop1): enabling ssd optimizations [ 140.712232][ T7022] BTRFS info (device loop1): rebuilding free space tree [ 140.987593][ T5774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.051179][ T7035] loop4: detected capacity change from 0 to 32768 [ 141.094095][ T7035] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 141.147643][ T7035] JBD2: Ignoring recovery information on journal [ 141.291345][ T7035] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 141.355411][ T7035] (syz.4.406,7035,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 141.648393][ T7081] loop2: detected capacity change from 0 to 1024 [ 141.665666][ T6531] ocfs2: Unmounting device (7,4) on (node local) [ 141.863763][ T38] hfsplus: b-tree write err: -5, ino 25 [ 141.886569][ T38] hfsplus: b-tree write err: -5, ino 4 [ 141.912409][ T38] hfsplus: b-tree write err: -5, ino 2 [ 141.930402][ T7084] loop4: detected capacity change from 0 to 64 [ 141.997532][ T7086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.905251][ T7112] loop1: detected capacity change from 0 to 8192 [ 143.195889][ T7127] bridge_slave_0: default FDB implementation only supports local addresses [ 143.216351][ T7129] loop4: detected capacity change from 0 to 512 [ 143.277901][ T7129] EXT4-fs: Ignoring removed nobh option [ 143.287060][ T7129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.350862][ T7129] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 143.397160][ T7129] EXT4-fs (loop4): 1 truncate cleaned up [ 143.422443][ T7129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.928316][ T6531] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.636513][ T7160] loop4: detected capacity change from 0 to 128 [ 144.999931][ T49] kworker/u4:3: attempt to access beyond end of device [ 144.999931][ T49] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 145.020736][ T7168] loop2: detected capacity change from 0 to 512 [ 145.028409][ T7168] EXT4-fs: Ignoring removed nobh option [ 145.053363][ T7168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.121448][ T7168] EXT4-fs (loop2): 1 truncate cleaned up [ 145.148203][ T7168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.189443][ T7172] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 145.197628][ T7172] netlink: 'syz.4.454': attribute type 2 has an invalid length. [ 145.489185][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.597187][ T5811] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.756404][ T7164] loop1: detected capacity change from 0 to 32768 [ 145.788913][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 145.820400][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.852968][ T5811] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.892931][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.937354][ T5811] usb 4-1: config 0 descriptor?? [ 146.168560][ T5811] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.388820][ T789] usb 4-1: USB disconnect, device number 8 [ 146.572491][ T7208] loop4: detected capacity change from 0 to 128 [ 146.629839][ T7208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.672824][ T7208] hpfs: filesystem error: improperly stopped [ 146.697001][ T7208] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 146.719589][ T7208] hpfs: You really don't want any checks? You are crazy... [ 146.742615][ T7208] hpfs: hpfs_map_sector(): read error [ 146.753160][ T7208] hpfs: code page support is disabled [ 146.779956][ T7208] hpfs: hpfs_map_4sectors(): unaligned read [ 146.786050][ T7208] hpfs: hpfs_map_4sectors(): unaligned read [ 146.807097][ T7215] tap0: tun_chr_ioctl cmd 2147767511 [ 146.816407][ T7208] hpfs: filesystem error: unable to find root dir [ 146.850857][ T7209] loop2: detected capacity change from 0 to 8192 [ 146.868049][ T7209] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.881384][ T7209] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 146.892454][ T7209] REISERFS (device loop2): using ordered data mode [ 146.899922][ T7209] reiserfs: using flush barriers [ 146.914869][ T7209] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.943526][ T7209] REISERFS (device loop2): checking transaction log (loop2) [ 147.189170][ T7209] REISERFS (device loop2): Using tea hash to sort names [ 147.229716][ T7209] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 147.489133][ T5814] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.710793][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 147.736990][ T5814] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 147.746119][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.796513][ T5814] usb 2-1: Product: syz [ 147.814086][ T5814] usb 2-1: Manufacturer: syz [ 147.833923][ T5814] usb 2-1: SerialNumber: syz [ 148.069792][ T7252] loop4: detected capacity change from 0 to 512 [ 148.099161][ T5814] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 148.137962][ T5814] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.167154][ T5814] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 148.175774][ T5814] usb 2-1: media controller created [ 148.247804][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.508397][ T5814] zl10353_read_register: readreg error (reg=127, ret==-110) [ 148.640408][ T5814] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 148.668258][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.682102][ T5814] usb 2-1: USB disconnect, device number 8 [ 148.877410][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 148.894502][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 148.925817][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.998245][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 149.028907][ T9] pvrusb2: ********** [ 149.032967][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 149.084526][ T9] pvrusb2: Important functionality might not be entirely working. [ 149.111930][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.154375][ T9] pvrusb2: ********** [ 149.208626][ T2320] pvrusb2: Invalid write control endpoint [ 149.408336][ T2320] pvrusb2: Invalid write control endpoint [ 149.432579][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 149.471796][ T7286] loop1: detected capacity change from 0 to 256 [ 149.486412][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 149.516586][ T7286] exfat: Deprecated parameter 'utf8' [ 149.526286][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 149.546090][ T7286] exfat: Deprecated parameter 'utf8' [ 149.561074][ T7286] exfat: Deprecated parameter 'utf8' [ 149.565784][ T2320] pvrusb2: Device being rendered inoperable [ 149.582954][ T7258] pvrusb2: Attempted to execute control transfer when device not ok [ 149.609293][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 149.626151][ T789] usb 5-1: USB disconnect, device number 3 [ 149.648692][ T7286] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 149.666872][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 149.723722][ T2320] pvrusb2: Attached sub-driver cx25840 [ 149.753224][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 149.787433][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.823720][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 149.823736][ T28] audit: type=1800 audit(1777557298.471:6): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 150.392857][ T7284] loop2: detected capacity change from 0 to 32768 [ 150.479550][ T7284] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 150.546336][ T7284] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.747135][ T7324] loop0: detected capacity change from 0 to 7 [ 150.789722][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.798993][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 150.809662][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.818896][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 150.828085][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.837299][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 150.845343][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.854584][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 150.867635][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.876874][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 150.892722][ T7284] XFS (loop2): Ending clean mount [ 150.937190][ T7284] XFS (loop2): Quotacheck needed: Please wait. [ 150.947051][ T7324] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.985017][ T7324] Buffer I/O error on dev loop0, logical block 0, async page read [ 151.010175][ T7324] ldm_validate_partition_table(): Disk read failed. [ 151.027917][ T7324] Dev loop0: unable to read RDB block 0 [ 151.033552][ T7324] loop0: unable to read partition table [ 151.044017][ T7324] loop0: partition table beyond EOD, truncated [ 151.069922][ T7284] XFS (loop2): Quotacheck: Done. [ 151.144995][ T7324] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 151.287346][ T28] audit: type=1800 audit(1777557299.931:7): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.485" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 151.490516][ T7335] loop3: detected capacity change from 0 to 64 [ 151.567359][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.202550][ T7354] loop1: detected capacity change from 0 to 128 [ 152.459758][ T12] kworker/u4:1: attempt to access beyond end of device [ 152.459758][ T12] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 152.477204][ T789] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.685722][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 152.722327][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.747102][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.777961][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.815757][ T789] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.837361][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.889699][ T789] usb 4-1: config 0 descriptor?? [ 152.962097][ T5764] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.039010][ T7375] loop1: detected capacity change from 0 to 512 [ 153.077610][ T7375] EXT4-fs: Ignoring removed nobh option [ 153.103226][ T7375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.166937][ T5764] usb 5-1: Using ep0 maxpacket: 16 [ 153.166962][ T7375] EXT4-fs (loop1): 1 truncate cleaned up [ 153.179185][ T5764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.190349][ T5764] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 153.199484][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.212183][ T5764] usb 5-1: config 0 descriptor?? [ 153.221337][ T7375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.337678][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.345510][ T7382] loop2: detected capacity change from 0 to 256 [ 153.352051][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.364435][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.372234][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.406846][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.432135][ T7382] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 153.463355][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.488551][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.495893][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.527051][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.534470][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 153.609341][ T789] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input10 [ 153.644492][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.673895][ T789] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 153.709261][ T5764] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 153.778502][ T789] usb 4-1: USB disconnect, device number 9 [ 153.933883][ T7392] loop1: detected capacity change from 0 to 256 [ 153.998123][ T7392] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 154.020952][ T7387] fido_id[7387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 154.198545][ T789] usb 5-1: USB disconnect, device number 4 [ 154.473258][ T7402] loop3: detected capacity change from 0 to 256 [ 154.779209][ T7409] loop1: detected capacity change from 0 to 16 [ 154.786452][ T7409] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 155.844432][ T7445] loop3: detected capacity change from 0 to 16 [ 155.874454][ T7445] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 156.166879][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.182178][ T7418] loop1: detected capacity change from 0 to 32768 [ 156.257758][ T7418] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.360986][ T7418] XFS (loop1): Ending clean mount [ 156.375659][ T7418] XFS (loop1): Quotacheck needed: Please wait. [ 156.377755][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 156.398529][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.409633][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.419617][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.433430][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.442926][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.447301][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.462239][ T8] usb 5-1: config 0 descriptor?? [ 156.504141][ T7418] XFS (loop1): Quotacheck: Done. [ 156.676853][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 156.690182][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.716983][ T27] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.726073][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.750901][ T27] usb 4-1: config 0 descriptor?? [ 156.795051][ T7469] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 156.811350][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.857156][ T7469] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.895824][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.924914][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 156.948815][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 156.956121][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 156.985655][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.026222][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.033892][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.056267][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.077861][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.085274][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.096097][ T8] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 157.116058][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input11 [ 157.149441][ T8] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 157.192210][ T8] usb 5-1: USB disconnect, device number 5 [ 157.212399][ T27] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 157.395348][ T7470] fido_id[7470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 157.804490][ T5764] usb 4-1: USB disconnect, device number 10 [ 158.232039][ T7483] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.262471][ T7483] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.295233][ T7475] loop2: detected capacity change from 0 to 32768 [ 158.341081][ T7475] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 158.365010][ T7475] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.469747][ T7494] loop0: detected capacity change from 0 to 7 [ 158.483243][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.492524][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 158.510381][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.519637][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 158.533664][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.542912][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 158.551106][ T7475] XFS (loop2): Ending clean mount [ 158.562821][ T7496] loop3: detected capacity change from 0 to 1024 [ 158.585478][ T7475] XFS (loop2): Quotacheck needed: Please wait. [ 158.603502][ T7494] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.670605][ T7494] Buffer I/O error on dev loop0, logical block 0, async page read [ 158.693218][ T7494] ldm_validate_partition_table(): Disk read failed. [ 158.705338][ T7475] XFS (loop2): Quotacheck: Done. [ 158.723363][ T7494] Dev loop0: unable to read RDB block 0 [ 158.757193][ T7494] loop0: unable to read partition table [ 158.787789][ T7494] loop0: partition table beyond EOD, truncated [ 158.817517][ T7494] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 159.010816][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.239361][ T7505] loop3: detected capacity change from 0 to 512 [ 159.253868][ T7505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.263456][ T7505] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.284831][ T7505] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 159.300928][ T7505] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 159.320367][ T7505] EXT4-fs (loop3): 1 truncate cleaned up [ 159.327720][ T7505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.354523][ T7505] EXT4-fs (loop3): shut down requested (2) [ 159.366990][ T5811] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 159.394034][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.429367][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 159.579115][ T5811] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 159.596913][ T5811] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.617272][ T5811] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 159.626442][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.012852][ T7513] loop3: detected capacity change from 0 to 32768 [ 160.060162][ T7513] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.278308][ T7513] XFS (loop3): Ending clean mount [ 160.331911][ T7513] XFS (loop3): Quotacheck needed: Please wait. [ 160.371124][ T7519] loop1: detected capacity change from 0 to 32768 [ 160.454405][ T7513] XFS (loop3): Quotacheck: Done. [ 160.508644][ T7519] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.620966][ T7519] XFS (loop1): Ending clean mount [ 160.670554][ T7519] XFS (loop1): Quotacheck needed: Please wait. [ 160.726979][ T5811] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 160.756699][ T5811] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12 [ 160.778780][ T5811] input: failed to attach handler kbd to device input12, error: -5 [ 160.792780][ T7519] XFS (loop1): Quotacheck: Done. [ 160.847174][ T5811] usb 5-1: USB disconnect, device number 6 [ 160.884843][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.410711][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.449255][ T7541] loop3: detected capacity change from 0 to 1024 [ 161.464219][ T7541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.473471][ T7541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.497879][ T7541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.554606][ T7541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.676282][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.821791][ T7545] netlink: 52 bytes leftover after parsing attributes in process `syz.1.545'. [ 161.966053][ T7551] loop0: detected capacity change from 0 to 7 [ 162.018739][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.028014][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 162.038590][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.047834][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 162.078036][ T7551] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.109338][ T7551] Buffer I/O error on dev loop0, logical block 0, async page read [ 162.139216][ T7551] ldm_validate_partition_table(): Disk read failed. [ 162.145923][ T7551] Dev loop0: unable to read RDB block 0 [ 162.191074][ T7551] loop0: unable to read partition table [ 162.250594][ T7551] loop0: partition table beyond EOD, truncated [ 162.277161][ T7551] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 162.543681][ T7559] loop4: detected capacity change from 0 to 2048 [ 162.611770][ T7559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.964015][ T7570] loop1: detected capacity change from 0 to 512 [ 162.995504][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.016085][ T7570] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.094164][ T7570] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 163.108834][ T7570] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 163.121193][ T7576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.138249][ T7570] EXT4-fs (loop1): 1 truncate cleaned up [ 163.145938][ T7576] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.175066][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.207717][ T7576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.283275][ T7570] EXT4-fs (loop1): shut down requested (2) [ 163.312763][ T7576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.444160][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.537092][ T49] tipc: Subscription rejected, illegal request [ 163.630942][ T6531] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.857036][ T7589] set_capacity_and_notify: 1 callbacks suppressed [ 163.857079][ T7589] loop1: detected capacity change from 0 to 128 [ 163.930847][ T7589] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 164.036524][ T7589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.052099][ T7610] loop3: detected capacity change from 0 to 1024 [ 165.069425][ T7610] EXT4-fs: Ignoring removed oldalloc option [ 165.075422][ T7610] EXT4-fs: inline encryption not supported [ 165.092695][ T7610] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.156091][ T7610] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.579: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.216679][ T7610] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 165.227095][ T7610] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.579: lblock 0 mapped to illegal pblock 48 (length 1) [ 165.249177][ T7610] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 165.263407][ T7610] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.579: Failed to acquire dquot type 0 [ 165.276049][ T7610] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 165.295092][ T7610] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.579: mark_inode_dirty error [ 165.318396][ T7610] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 165.335394][ T7610] EXT4-fs (loop3): 1 orphan inode deleted [ 165.343136][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.371407][ T38] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.413598][ T38] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 165.424566][ T38] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 165.464168][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.488121][ T5777] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 165.522286][ T5777] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 165.543609][ T5777] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 165.577674][ T7619] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 165.597767][ T7619] syzkaller1: linktype set to 805 [ 166.426567][ T7623] loop3: detected capacity change from 0 to 32768 [ 166.449099][ T7623] XFS: attr2 mount option is deprecated. [ 166.514317][ T7623] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.570108][ T7623] XFS (loop3): Ending clean mount [ 166.610685][ T7623] XFS (loop3): Quotacheck needed: Please wait. [ 166.683466][ T7623] XFS (loop3): Quotacheck: Done. [ 166.874363][ T7632] loop4: detected capacity change from 0 to 32768 [ 166.942538][ T7632] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 166.965392][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.983921][ T7632] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.011623][ T7656] loop2: detected capacity change from 0 to 128 [ 167.186103][ T7656] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.248230][ T7656] hpfs: filesystem error: improperly stopped [ 167.268023][ T7656] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.300154][ T7632] XFS (loop4): Ending clean mount [ 167.307040][ T7656] hpfs: You really don't want any checks? You are crazy... [ 167.314769][ T7656] hpfs: hpfs_map_sector(): read error [ 167.323365][ T7632] XFS (loop4): Quotacheck needed: Please wait. [ 167.356387][ T7656] hpfs: code page support is disabled [ 167.387365][ T7656] hpfs: hpfs_map_4sectors(): unaligned read [ 167.404004][ T7656] hpfs: hpfs_map_4sectors(): unaligned read [ 167.415052][ T7632] XFS (loop4): Quotacheck: Done. [ 167.420178][ T7656] hpfs: filesystem error: unable to find root dir [ 167.476957][ T28] audit: type=1800 audit(1777557316.121:8): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.581" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 167.705137][ T7671] loop2: detected capacity change from 0 to 128 [ 167.735048][ T6531] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.800438][ T7671] syz.2.590: attempt to access beyond end of device [ 167.800438][ T7671] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 169.682327][ T7679] loop2: detected capacity change from 0 to 32768 [ 169.711387][ T7679] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.765324][ T7679] XFS (loop2): Ending clean mount [ 169.774885][ T7679] XFS (loop2): Quotacheck needed: Please wait. [ 169.846980][ T27] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 169.847304][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.872313][ T7679] XFS (loop2): Quotacheck: Done. [ 170.021401][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.067102][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 170.073834][ T27] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 170.088626][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 170.092749][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.107917][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.140168][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 170.149903][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 170.160243][ T8] pvrusb2: ********** [ 170.164288][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 170.177232][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.198952][ T8] pvrusb2: Important functionality might not be entirely working. [ 170.213028][ T27] usb 5-1: config 0 descriptor?? [ 170.217263][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 170.247238][ T7691] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.258575][ T8] pvrusb2: ********** [ 170.397132][ T2320] pvrusb2: Invalid write control endpoint [ 170.549132][ T2320] pvrusb2: Invalid write control endpoint [ 170.561755][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 170.572209][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 170.582634][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 170.602271][ T2320] pvrusb2: Device being rendered inoperable [ 170.613816][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 170.623474][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 170.641654][ T2320] pvrusb2: Attached sub-driver cx25840 [ 170.648486][ T7690] pvrusb2: Attempted to execute control transfer when device not ok [ 170.658009][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 170.675325][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.689775][ T8] usb 4-1: USB disconnect, device number 11 [ 170.718141][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.743527][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.768691][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.782800][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.808787][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.815589][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.829647][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.836518][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.844342][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.852523][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.859975][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.867591][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.874482][ T27] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0 [ 170.891766][ T27] lua 0003:1E7D:2C2E.000C: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 170.902959][ T28] audit: type=1326 audit(1777557319.551:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7999cdd9 code=0x7ffc0000 [ 170.915337][ T28] audit: type=1326 audit(1777557319.561:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7999cdd9 code=0x7ffc0000 [ 171.005602][ T7711] loop1: detected capacity change from 0 to 2048 [ 171.012361][ T28] audit: type=1326 audit(1777557319.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a7999cdd9 code=0x7ffc0000 [ 171.056514][ T27] usb 5-1: USB disconnect, device number 7 [ 171.108501][ T28] audit: type=1326 audit(1777557319.611:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a7999cb42 code=0x7ffc0000 [ 171.134342][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.174931][ T7712] fido_id[7712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 171.190086][ T28] audit: type=1326 audit(1777557319.621:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a7995d60e code=0x7ffc0000 [ 171.247037][ T28] audit: type=1326 audit(1777557319.641:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5a7999cc07 code=0x7ffc0000 [ 171.272033][ T28] audit: type=1326 audit(1777557319.651:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a7995d60e code=0x7ffc0000 [ 171.298218][ T28] audit: type=1326 audit(1777557319.651:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7999ca6b code=0x7ffc0000 [ 171.329781][ T28] audit: type=1326 audit(1777557319.691:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a7995d60e code=0x7ffc0000 [ 171.359370][ T28] audit: type=1326 audit(1777557319.691:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a7995d60e code=0x7ffc0000 [ 171.446640][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.507336][ T7720] loop3: detected capacity change from 0 to 128 [ 171.528884][ T7720] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.585890][ T7720] hpfs: filesystem error: improperly stopped [ 171.613025][ T7720] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.632245][ T7720] hpfs: You really don't want any checks? You are crazy... [ 171.663151][ T7720] hpfs: hpfs_map_sector(): read error [ 171.697061][ T7720] hpfs: code page support is disabled [ 171.702664][ T7720] hpfs: hpfs_map_4sectors(): unaligned read [ 171.770983][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 171.781614][ T7720] hpfs: hpfs_map_4sectors(): unaligned read [ 171.807027][ T7720] hpfs: filesystem error: unable to find root dir [ 172.384331][ T7741] loop4: detected capacity change from 0 to 2048 [ 172.501188][ T7741] loop4: p1 < > p3 [ 172.563429][ T7741] loop4: p3 size 134217728 extends beyond EOD, truncated [ 172.825889][ T7752] loop2: detected capacity change from 0 to 1024 [ 173.464746][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.609746][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'. [ 173.666929][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 173.677234][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.727097][ T8] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 173.747671][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.783050][ T8] usb 4-1: config 0 descriptor?? [ 174.222123][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.236847][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.244449][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.252122][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.261995][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.269968][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.277233][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 174.284535][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x4 [ 174.292226][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x6 [ 174.299809][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0xd [ 174.307936][ T8] zeroplus 0003:0C12:0030.000D: unknown main item tag 0xd [ 174.321265][ T8] zeroplus 0003:0C12:0030.000D: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 174.343003][ T8] zeroplus 0003:0C12:0030.000D: no inputs found [ 174.368860][ T7785] loop2: detected capacity change from 0 to 32768 [ 174.435723][ T7785] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.446929][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 174.474169][ T9] usb 5-1: config 0 has no interfaces? [ 174.509955][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.562858][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.583742][ T7785] XFS (loop2): Ending clean mount [ 174.591764][ T8] usb 4-1: USB disconnect, device number 12 [ 174.605042][ T9] usb 5-1: Manufacturer: syz [ 174.619584][ T7785] XFS (loop2): Quotacheck needed: Please wait. [ 174.633451][ T9] usb 5-1: config 0 descriptor?? [ 174.716149][ T7794] loop1: detected capacity change from 0 to 32768 [ 174.737006][ T7785] XFS (loop2): Quotacheck: Done. [ 174.784930][ T7794] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 174.810831][ T7794] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.881475][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 174.970695][ T8] usb 5-1: USB disconnect, device number 8 [ 174.988029][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.013004][ T7794] XFS (loop1): Ending clean mount [ 175.051864][ T7794] XFS (loop1): Quotacheck needed: Please wait. [ 175.219315][ T7794] XFS (loop1): Quotacheck: Done. [ 175.391682][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.689716][ T7818] loop2: detected capacity change from 0 to 1024 [ 175.757909][ T7818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.821556][ T7818] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.977850][ T7818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.634: bg 0: block 112: padding at end of block bitmap is not set [ 176.006395][ T7818] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 176.028511][ T7818] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.028511][ T7818] [ 176.048105][ T7827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.091543][ T7818] EXT4-fs (loop2): Total free blocks count 0 [ 176.105724][ T7818] EXT4-fs (loop2): Free/Dirty block details [ 176.141872][ T7818] EXT4-fs (loop2): free_blocks=0 [ 176.151302][ T7818] EXT4-fs (loop2): dirty_blocks=64 [ 176.179493][ T7818] EXT4-fs (loop2): Block reservation details [ 176.217133][ T7818] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 176.223278][ T7836] loop1: detected capacity change from 0 to 256 [ 176.254002][ T7836] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xb963610a, utbl_chksum : 0xe619d30d) [ 176.420869][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.555012][ T7842] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.596218][ T7842] team0: Port device batadv1 added [ 176.639887][ T7844] binder: 7843:7844 ioctl c0306201 200000000080 returned -14 [ 177.344484][ T7859] loop3: detected capacity change from 0 to 4096 [ 177.373522][ T7838] loop4: detected capacity change from 0 to 40427 [ 177.416450][ T7838] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 177.463575][ T7838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.590704][ T7838] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.622024][ T7863] loop2: detected capacity change from 0 to 2048 [ 177.688811][ T7863] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 177.736280][ T7838] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.779896][ T7863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.789880][ T7838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.948171][ T6531] syz-executor: attempt to access beyond end of device [ 177.948171][ T6531] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.970482][ T6531] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 178.113643][ T7868] vcan0: entered allmulticast mode [ 178.134385][ T7868] vcan0: left allmulticast mode [ 178.299698][ T7870] loop2: detected capacity change from 0 to 512 [ 178.303787][ T7855] loop1: detected capacity change from 0 to 40427 [ 178.340542][ T7855] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 178.349090][ T7855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 178.374267][ T7855] F2FS-fs (loop1): invalid crc value [ 178.392181][ T7870] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.656: corrupted in-inode xattr: invalid ea_ino [ 178.455776][ T7855] F2FS-fs (loop1): Found nat_bits in checkpoint [ 178.478040][ T7870] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.656: couldn't read orphan inode 15 (err -117) [ 178.565431][ T7870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.582523][ T7879] loop3: detected capacity change from 0 to 2048 [ 178.630173][ T7879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.709686][ T7855] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 178.727556][ T7855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.910564][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.937932][ T7855] syz.1.649: attempt to access beyond end of device [ 178.937932][ T7855] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 179.080602][ T5774] syz-executor: attempt to access beyond end of device [ 179.080602][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.101266][ T7882] loop3: detected capacity change from 0 to 64 [ 179.101920][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 179.600211][ T7894] netlink: 27 bytes leftover after parsing attributes in process `syz.2.665'. [ 179.810774][ T7897] set_capacity_and_notify: 1 callbacks suppressed [ 179.810792][ T7897] loop4: detected capacity change from 0 to 1024 [ 179.950169][ T1122] hfsplus: b-tree write err: -5, ino 25 [ 179.956066][ T1122] hfsplus: b-tree write err: -5, ino 4 [ 179.972262][ T1122] hfsplus: b-tree write err: -5, ino 2 [ 180.178144][ T7901] loop2: detected capacity change from 0 to 4096 [ 180.369920][ T7913] loop1: detected capacity change from 0 to 256 [ 180.422400][ T7913] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.544725][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 180.544742][ T28] audit: type=1800 audit(1777557585.187:45): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.673" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 180.572710][ T7913] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 180.572738][ T7913] FAT-fs (loop1): Filesystem has been set read-only [ 180.674606][ T5764] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.764662][ T7919] loop1: detected capacity change from 0 to 1024 [ 180.841912][ T7919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.885872][ T7925] loop4: detected capacity change from 0 to 512 [ 180.894043][ T7919] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.905601][ T5764] usb 4-1: Using ep0 maxpacket: 8 [ 180.912760][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.923027][ T5764] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.942826][ T5764] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 180.959739][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.967978][ T5764] usb 4-1: Product: syz [ 180.972263][ T5764] usb 4-1: Manufacturer: syz [ 180.977478][ T5764] usb 4-1: SerialNumber: syz [ 180.988549][ T5764] usb 4-1: config 0 descriptor?? [ 181.046369][ T7919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.677: bg 0: block 112: padding at end of block bitmap is not set [ 181.081320][ T7919] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 181.107182][ T7919] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.107182][ T7919] [ 181.143190][ T7919] EXT4-fs (loop1): Total free blocks count 0 [ 181.175883][ T7919] EXT4-fs (loop1): Free/Dirty block details [ 181.195686][ T7919] EXT4-fs (loop1): free_blocks=0 [ 181.220226][ T7919] EXT4-fs (loop1): dirty_blocks=64 [ 181.225442][ T7919] EXT4-fs (loop1): Block reservation details [ 181.235409][ T5764] usb 4-1: USB disconnect, device number 13 [ 181.244543][ T7919] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 181.264073][ T7933] erspan0: entered promiscuous mode [ 181.336478][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.454743][ T7936] loop4: detected capacity change from 0 to 1764 [ 181.547293][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 181.720391][ T7943] Zero length message leads to an empty skb [ 181.973001][ T7945] loop4: detected capacity change from 0 to 4096 [ 182.456050][ T7961] loop2: detected capacity change from 0 to 1764 [ 183.552486][ T7983] loop1: detected capacity change from 0 to 8192 [ 183.609401][ T7983] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.094372][ T8002] loop1: detected capacity change from 0 to 2048 [ 184.131123][ T8002] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 184.175169][ T8002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.243468][ T8005] hub 1-0:1.0: USB hub found [ 184.268305][ T8005] hub 1-0:1.0: 1 port detected [ 184.376076][ T8007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.533125][ T28] audit: type=1800 audit(1777557589.177:46): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.712" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.088077][ T7997] set_capacity_and_notify: 1 callbacks suppressed [ 185.088094][ T7997] loop3: detected capacity change from 0 to 40427 [ 185.137341][ T7997] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 185.157741][ T7997] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 185.193057][ T7997] F2FS-fs (loop3): invalid crc value [ 185.386081][ T7997] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 185.400856][ T7997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.642102][ T5777] syz-executor: attempt to access beyond end of device [ 185.642102][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.678988][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 186.086870][ T789] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.152318][ T8048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.181323][ T8046] loop3: detected capacity change from 0 to 4096 [ 186.267789][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.285839][ T789] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 186.302285][ T789] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 186.312691][ T789] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.329795][ T789] usb 5-1: config 220 has no interface number 2 [ 186.336278][ T789] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.358243][ T789] usb 5-1: config 220 interface 0 has no altsetting 0 [ 186.365363][ T789] usb 5-1: config 220 interface 76 has no altsetting 0 [ 186.381804][ T789] usb 5-1: config 220 interface 1 has no altsetting 0 [ 186.396287][ T789] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.409074][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.431485][ T789] usb 5-1: Product: syz [ 186.435831][ T789] usb 5-1: Manufacturer: syz [ 186.444997][ T789] usb 5-1: SerialNumber: syz [ 186.478757][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 186.508868][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.525813][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.568045][ T8] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 186.577817][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.585868][ T8] usb 2-1: Product: syz [ 186.611509][ T8] usb 2-1: Manufacturer: syz [ 186.616193][ T8] usb 2-1: SerialNumber: syz [ 186.638018][ T8] usb 2-1: config 0 descriptor?? [ 186.739939][ T789] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 186.746486][ T789] usb 5-1: No valid video chain found. [ 186.766265][ T789] usb 5-1: selecting invalid altsetting 0 [ 186.813589][ T789] usb 5-1: selecting invalid altsetting 0 [ 186.833907][ T789] usbtest: probe of 5-1:220.1 failed with error -22 [ 186.862334][ T789] usb 5-1: USB disconnect, device number 9 [ 186.909117][ T8] usb 2-1: USB disconnect, device number 9 [ 186.986556][ T8056] loop7: detected capacity change from 0 to 7 [ 187.002439][ T8056] Dev loop7: unable to read RDB block 7 [ 187.010784][ T8056] loop7: unable to read partition table [ 187.016681][ T8056] loop7: partition table beyond EOD, truncated [ 187.032216][ T8056] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 187.062895][ T145] loop: Write error at byte offset 2, length 3584. [ 187.070894][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 187.080504][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 187.265798][ T8061] netlink: 'syz.2.735': attribute type 4 has an invalid length. [ 188.490741][ T8105] loop2: detected capacity change from 0 to 512 [ 188.511167][ T8105] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.566732][ T8105] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.754: invalid indirect mapped block 10 (level 1) [ 188.613018][ T8105] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.754: invalid indirect mapped block 8 (level 1) [ 188.677623][ T8105] EXT4-fs (loop2): 1 truncate cleaned up [ 188.698278][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.775981][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.804652][ T8114] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 189.254934][ T8101] loop4: detected capacity change from 0 to 32768 [ 190.048112][ T8147] loop3: detected capacity change from 0 to 2048 [ 190.117100][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.184821][ T2943] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 190.297346][ T2943] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.321419][ T2943] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.321419][ T2943] [ 190.360460][ T2943] EXT4-fs (loop3): Total free blocks count 0 [ 190.366537][ T2943] EXT4-fs (loop3): Free/Dirty block details [ 190.400753][ T2943] EXT4-fs (loop3): free_blocks=66060288 [ 190.406434][ T2943] EXT4-fs (loop3): dirty_blocks=32 [ 190.422588][ T2943] EXT4-fs (loop3): Block reservation details [ 190.431741][ T2943] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 190.446907][ T2943] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 190.666943][ T789] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.765301][ T8167] loop3: detected capacity change from 0 to 2048 [ 190.802508][ T8167] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 190.834280][ T8167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.866973][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 190.900447][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.918869][ T789] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 190.937045][ T789] usb 2-1: config 127 has no interface number 0 [ 190.950106][ T789] usb 2-1: config 127 interface 124 has no altsetting 0 [ 190.995834][ T789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 191.037246][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.045420][ T789] usb 2-1: Product: syz [ 191.072942][ T789] usb 2-1: Manufacturer: syz [ 191.086840][ T789] usb 2-1: SerialNumber: syz [ 191.270996][ T8182] loop3: detected capacity change from 0 to 8 [ 191.519744][ T789] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 191.580015][ T8186] loop3: detected capacity change from 0 to 4096 [ 191.651298][ T8188] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.718070][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.748368][ T28] audit: type=1800 audit(1777557596.397:47): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.788" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 191.918791][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 191.936574][ T8] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 191.963684][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.988237][ T8] usb 3-1: config 0 descriptor?? [ 192.212594][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 192.230331][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.247729][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 192.247764][ T789] usb 2-1: device descriptor read/64, error -71 [ 192.261867][ T8] usb 3-1: media controller created [ 192.292461][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.406919][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.424881][ T8] az6027: usb out operation failed. (-71) [ 192.438630][ T8] az6027: usb out operation failed. (-71) [ 192.445257][ T8] stb0899_attach: Driver disabled by Kconfig [ 192.455918][ T8] az6027: no front-end attached [ 192.455918][ T8] [ 192.465654][ T8] az6027: usb out operation failed. (-71) [ 192.472054][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 192.481899][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 192.512341][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 192.520529][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 192.548578][ T8] usb 3-1: USB disconnect, device number 7 [ 192.560113][ T789] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 192.598027][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 192.611374][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.655853][ T27] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.679397][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.728373][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.735796][ T27] usb 5-1: config 0 descriptor?? [ 192.788769][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.853909][ T789] usb 2-1: device firmware changed [ 192.876198][ T789] usb 2-1: USB disconnect, device number 10 [ 192.981292][ T27] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.217556][ T8] usb 5-1: USB disconnect, device number 10 [ 193.356081][ T8205] loop2: detected capacity change from 0 to 4096 [ 193.444209][ T8207] loop1: detected capacity change from 0 to 512 [ 193.876123][ T8213] loop3: detected capacity change from 0 to 512 [ 193.960124][ T8217] warning: `syz.4.801' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.165735][ T8223] loop4: detected capacity change from 0 to 1024 [ 194.185132][ T8223] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 194.422298][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428829][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.589788][ T8233] loop3: detected capacity change from 0 to 512 [ 194.643987][ T8233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.691233][ T8233] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.976525][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.994864][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 195.074401][ T8225] loop2: detected capacity change from 0 to 32768 [ 195.102842][ T8231] loop4: detected capacity change from 0 to 32768 [ 195.135239][ T8225] JBD2: Ignoring recovery information on journal [ 195.180153][ T8225] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 195.203147][ T8225] JBD2: bad block at offset 32 [ 195.221550][ T8231] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.277776][ T8225] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 195.449730][ T8231] XFS (loop4): Ending clean mount [ 195.761592][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 195.893760][ T6531] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.509139][ T8273] loop1: detected capacity change from 0 to 4096 [ 196.537595][ T8279] loop2: detected capacity change from 0 to 16 [ 196.597764][ T8279] erofs: (device loop2): mounted with root inode @ nid 36. [ 196.672043][ T8279] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 197.277036][ T789] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.361917][ T8297] loop2: detected capacity change from 0 to 4096 [ 197.382887][ T8297] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 197.491827][ T789] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 197.517107][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.534998][ T789] usb 5-1: Product: syz [ 197.543996][ T789] usb 5-1: Manufacturer: syz [ 197.563185][ T789] usb 5-1: SerialNumber: syz [ 197.599074][ T789] usb 5-1: config 0 descriptor?? [ 197.622195][ T789] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 011 [ 198.024942][ T8304] loop1: detected capacity change from 0 to 4096 [ 198.045898][ T59] wlan1: Trigger new scan to find an IBSS to join [ 198.059331][ T789] (null): failure reading functionality [ 198.101684][ T789] i2c i2c-1: connected i2c-tiny-usb device [ 198.356929][ T5811] usb 5-1: USB disconnect, device number 11 [ 198.665494][ T8313] IPv6: Can't replace route, no match found [ 198.691902][ T8313] IPv6: Can't replace route, no match found [ 199.200526][ T8319] loop4: detected capacity change from 0 to 4096 [ 199.207351][ T8323] loop3: detected capacity change from 0 to 256 [ 199.238136][ T8319] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 199.297987][ T8323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 199.505676][ T8311] loop1: detected capacity change from 0 to 32768 [ 199.768755][ T8334] program syz.3.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.255421][ T8342] mkiss: ax0: crc mode is auto. [ 201.057036][ T145] wlan1: Creating new IBSS network, BSSID 7e:be:70:04:15:c2 [ 201.793301][ T8360] loop3: detected capacity change from 0 to 40427 [ 201.828148][ T8360] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 201.880635][ T8360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 201.908117][ T8360] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 201.946863][ T8360] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 201.955728][ T8360] F2FS-fs (loop3): Image doesn't support compression [ 202.026852][ T8360] F2FS-fs (loop3): invalid crc value [ 202.081969][ T8360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.221596][ T8391] loop1: detected capacity change from 0 to 64 [ 202.318484][ T8360] F2FS-fs (loop3): Start checkpoint disabled! [ 202.443650][ T8360] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 202.489752][ T8360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 202.730060][ T8374] loop2: detected capacity change from 0 to 32768 [ 202.826471][ T8374] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.944297][ T8374] XFS (loop2): Ending clean mount [ 202.966686][ T8417] loop4: detected capacity change from 0 to 128 [ 203.211314][ T8422] sock: sock_timestamping_bind_phc: sock not bind to device [ 203.290736][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.580702][ T12] kworker/u4:1: attempt to access beyond end of device [ 203.580702][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 203.641270][ T12] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x630 [ 203.695317][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 203.723732][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 203.843562][ T8] kernel read not supported for file /usbmon0 (pid: 8 comm: kworker/0:0) [ 203.954462][ T8439] loop2: detected capacity change from 0 to 256 [ 204.038237][ T8439] FAT-fs (loop2): Directory bread(block 64) failed [ 204.062514][ T8439] FAT-fs (loop2): Directory bread(block 65) failed [ 204.079403][ T8439] FAT-fs (loop2): Directory bread(block 66) failed [ 204.106469][ T8439] FAT-fs (loop2): Directory bread(block 67) failed [ 204.117125][ T8439] FAT-fs (loop2): Directory bread(block 68) failed [ 204.126979][ T8439] FAT-fs (loop2): Directory bread(block 69) failed [ 204.146491][ T8439] FAT-fs (loop2): Directory bread(block 70) failed [ 204.175063][ T8439] FAT-fs (loop2): Directory bread(block 71) failed [ 204.198231][ T8439] FAT-fs (loop2): Directory bread(block 72) failed [ 204.216032][ T8439] FAT-fs (loop2): Directory bread(block 73) failed [ 204.428489][ T8439] syz.2.877: attempt to access beyond end of device [ 204.428489][ T8439] loop2: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 204.460792][ T8439] syz.2.877: attempt to access beyond end of device [ 204.460792][ T8439] loop2: rw=1, sector=1320, nr_sectors = 36 limit=256 [ 204.486699][ T8447] loop4: detected capacity change from 0 to 64 [ 204.564485][ T8449] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 204.819239][ T8453] erspan0: entered promiscuous mode [ 205.184706][ T8466] loop2: detected capacity change from 0 to 2048 [ 205.246321][ T8466] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 205.279103][ T8466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.313931][ T8469] loop7: detected capacity change from 0 to 7 [ 205.341923][ T8469] Dev loop7: unable to read RDB block 7 [ 205.364059][ T8469] loop7: unable to read partition table [ 205.384123][ T8469] loop7: partition table beyond EOD, truncated [ 205.400315][ T8469] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 205.843645][ T8483] loop3: detected capacity change from 0 to 1024 [ 206.068985][ T145] hfsplus: b-tree write err: -5, ino 25 [ 206.081332][ T145] hfsplus: b-tree write err: -5, ino 4 [ 206.091461][ T145] hfsplus: b-tree write err: -5, ino 2 [ 206.719354][ T8493] loop2: detected capacity change from 0 to 4096 [ 206.793061][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 206.799365][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 206.805519][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 206.876106][ T8481] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.088690][ T8481] XFS (loop4): Ending clean mount [ 207.247622][ T8489] set_capacity_and_notify: 1 callbacks suppressed [ 207.247639][ T8489] loop1: detected capacity change from 0 to 131072 [ 207.270467][ T8489] F2FS-fs (loop1): invalid crc value [ 207.295000][ T8489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.349249][ T6531] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.349280][ T8489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 207.850652][ T8491] loop3: detected capacity change from 0 to 32768 [ 207.857745][ T8509] syz_tun: entered allmulticast mode [ 207.876577][ T8508] syz_tun: left allmulticast mode [ 207.965103][ T8491] JBD2: Ignoring recovery information on journal [ 207.994357][ T8491] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 208.056972][ T8491] JBD2: bad block at offset 32 [ 208.109235][ T8491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 208.194222][ T8515] program syz.4.902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.574738][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 208.597209][ T789] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.825241][ T789] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 208.865993][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.895862][ T789] usb 3-1: Product: syz [ 208.917014][ T789] usb 3-1: Manufacturer: syz [ 208.921687][ T789] usb 3-1: SerialNumber: syz [ 208.949079][ T789] usb 3-1: config 0 descriptor?? [ 208.980671][ T789] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 008 [ 209.245621][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 209.261884][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 209.377342][ T789] (null): failure reading functionality [ 209.391050][ T8535] loop3: detected capacity change from 0 to 4096 [ 209.404294][ T789] i2c i2c-1: connected i2c-tiny-usb device [ 209.414738][ T8535] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 209.668892][ T789] usb 3-1: USB disconnect, device number 8 [ 210.699116][ T8563] loop4: detected capacity change from 0 to 64 [ 210.722188][ T8563] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 211.229651][ T8580] loop2: detected capacity change from 0 to 2048 [ 211.237908][ T8580] EXT4-fs: Ignoring removed oldalloc option [ 211.280853][ T8580] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 211.290568][ T8580] System zones: 0-7 [ 211.317279][ T8580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.364759][ T8580] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.933: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 211.398532][ T8580] EXT4-fs (loop2): Remounting filesystem read-only [ 211.479277][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.633146][ T8590] netlink: 'syz.2.936': attribute type 12 has an invalid length. [ 211.648740][ T8590] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 211.656546][ T8590] netlink: 148 bytes leftover after parsing attributes in process `syz.2.936'. [ 211.668179][ T8590] netlink: 59 bytes leftover after parsing attributes in process `syz.2.936'. [ 213.020293][ T8624] loop3: detected capacity change from 0 to 128 [ 213.135168][ T8612] loop4: detected capacity change from 0 to 40427 [ 213.163522][ T8612] F2FS-fs (loop4): heap/no_heap options were deprecated [ 213.201153][ T8612] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 213.217820][ T8612] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x77e8c [ 213.262248][ T8612] F2FS-fs (loop4): invalid crc value [ 213.297283][ T8612] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 213.322511][ T8612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.400563][ T8612] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 213.448059][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 213.493418][ T8612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.555911][ T8612] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 213.593806][ T8612] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1030 [ 213.644175][ T6531] syz-executor: attempt to access beyond end of device [ 213.644175][ T6531] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.665336][ T6531] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 213.756869][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.934249][ T8644] loop1: detected capacity change from 0 to 128 [ 213.946865][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 213.954472][ T8] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.979543][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.986227][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 214.007537][ T8644] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.026061][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.047275][ T8644] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.062139][ T8] usb 4-1: config 0 descriptor?? [ 214.126654][ T8644] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 214.206293][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.331547][ T8650] loop1: detected capacity change from 0 to 1024 [ 214.388249][ T8652] netlink: 'syz.4.962': attribute type 4 has an invalid length. [ 214.525267][ T145] hfsplus: b-tree write err: -5, ino 25 [ 214.534408][ T8] mcp2221 0003:04D8:00DD.000E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 214.549761][ T145] hfsplus: b-tree write err: -5, ino 4 [ 214.556303][ T145] hfsplus: b-tree write err: -5, ino 2 [ 214.563767][ T145] hfsplus: b-tree write err: -5, ino 20 [ 214.801687][ T8660] netlink: 'syz.1.966': attribute type 14 has an invalid length. [ 214.955355][ T8662] loop1: detected capacity change from 0 to 256 [ 214.997733][ T27] usb 4-1: USB disconnect, device number 14 [ 215.217237][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 215.224108][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 215.281862][ T8671] loop4: detected capacity change from 0 to 256 [ 215.289313][ T8671] exfat: Deprecated parameter 'utf8' [ 215.709468][ T8681] xt_hashlimit: size too large, truncated to 1048576 [ 215.736887][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 215.774211][ T8682] : renamed from vxcan1 (while UP) [ 215.849048][ T8669] loop1: detected capacity change from 0 to 32768 [ 215.912510][ T8669] JBD2: Ignoring recovery information on journal [ 215.961620][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 216.029351][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 216.086115][ T27] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 216.110652][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.121341][ T8669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.132806][ T27] usb 5-1: Product: syz [ 216.150128][ T27] usb 5-1: Manufacturer: syz [ 216.177059][ T27] usb 5-1: SerialNumber: syz [ 216.203086][ T27] usb 5-1: config 0 descriptor?? [ 216.221822][ T8674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.241894][ T8674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.461565][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 216.503321][ T8674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.532503][ T8674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.157974][ T27] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 217.190485][ T27] usb 5-1: USB disconnect, device number 12 [ 217.712684][ T8716] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.787884][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 217.995810][ T27] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.016958][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.044226][ T27] usb 2-1: config 0 descriptor?? [ 218.068663][ T27] cp210x 2-1:0.0: cp210x converter detected [ 218.201272][ T8722] loop4: detected capacity change from 0 to 4096 [ 218.297260][ T8722] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 218.335254][ T8722] ntfs3: loop4: Failed to load $Extend (-22). [ 218.351711][ T8722] ntfs3: loop4: Failed to initialize $Extend. [ 218.490435][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 218.704107][ T27] usb 2-1: USB disconnect, device number 11 [ 218.723521][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.785552][ T27] cp210x 2-1:0.0: device disconnected [ 219.003067][ T8734] loop4: detected capacity change from 0 to 256 [ 219.352563][ T8738] capability: warning: `syz.4.997' uses deprecated v2 capabilities in a way that may be insecure [ 219.385498][ T8737] loop1: detected capacity change from 0 to 2048 [ 219.437840][ T8737] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 219.497061][ T8737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.606732][ C1] sched: RT throttling activated [ 220.762480][ T8743] loop4: detected capacity change from 0 to 131072 [ 220.788197][ T8743] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 220.797283][ T8743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.812676][ T8743] F2FS-fs (loop4): invalid crc value [ 220.843496][ T8743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.906895][ T8743] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.914023][ T8743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 221.064569][ T8747] loop1: detected capacity change from 0 to 32768 [ 221.183749][ T8747] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.449282][ T8747] XFS (loop1): Ending clean mount [ 221.502788][ T8747] XFS (loop1): Quotacheck needed: Please wait. [ 221.666463][ T8747] XFS (loop1): Quotacheck: Done. [ 222.014568][ T5774] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.370971][ T8767] loop3: detected capacity change from 0 to 32768 [ 223.329525][ T8790] loop4: detected capacity change from 0 to 256 [ 223.357762][ T8790] exfat: Deprecated parameter 'utf8' [ 223.416685][ T8790] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 223.590676][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 223.789107][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.808837][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.834350][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.843650][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.865548][ T8798] loop1: detected capacity change from 0 to 128 [ 223.877784][ T8] usb 3-1: SerialNumber: syz [ 223.896162][ T8798] EXT4-fs: Ignoring removed i_version option [ 223.959606][ T8798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 223.975146][ T8798] System zones: 1-3, 19-19, 35-36 [ 223.986546][ T8798] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.006163][ T8798] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.070073][ T8798] EXT4-fs (loop1): shut down requested (1) [ 224.135381][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.151174][ T8] usb 3-1: 0:2 : does not exist [ 224.205378][ T8786] loop3: detected capacity change from 0 to 40427 [ 224.237177][ T8786] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 224.245022][ T8786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 224.273461][ T8] usb 3-1: USB disconnect, device number 9 [ 224.316275][ T8786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.435538][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.484271][ T8786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 224.494968][ T8786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 224.595798][ T28] audit: type=1800 audit(1777557629.237:48): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1015" name="file1" dev="loop3" ino=11 res=0 errno=0 [ 224.764677][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 224.789818][ T8814] loop1: detected capacity change from 0 to 2048 [ 224.814086][ T8814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.835614][ T8816] tun0: tun_chr_ioctl cmd 1074025675 [ 224.854231][ T8814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.871473][ T8816] tun0: persist disabled [ 224.898874][ T8814] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.964553][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 224.980045][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.002881][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 225.029977][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 225.040266][ T9] usb 5-1: Manufacturer: syz [ 225.052259][ T9] usb 5-1: config 0 descriptor?? [ 225.098009][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.187957][ T9] rc_core: IR keymap rc-hauppauge not found [ 225.210538][ T9] Registered IR keymap rc-empty [ 225.243903][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 225.262428][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 225.331532][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 225.354380][ T9] usb 5-1: USB disconnect, device number 13 [ 225.877064][ T5764] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.070624][ T5764] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.097259][ T5764] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.118700][ T5764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.131572][ T5764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 226.145365][ T5764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 226.164114][ T5764] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.176048][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.189089][ T5764] usb 2-1: Product: syz [ 226.193335][ T5764] usb 2-1: Manufacturer: syz [ 226.227609][ T5764] cdc_wdm 2-1:1.0: skipping garbage [ 226.236975][ T5764] cdc_wdm 2-1:1.0: skipping garbage [ 226.246877][ T5811] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.261114][ T5764] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 226.275859][ T5764] cdc_wdm 2-1:1.0: Unknown control protocol [ 226.356949][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 226.357996][ T8844] loop3: detected capacity change from 0 to 256 [ 226.434325][ T5764] usb 2-1: USB disconnect, device number 12 [ 226.462640][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.489234][ T5811] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.512234][ T5811] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.525623][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.546898][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 226.554721][ T8846] loop3: detected capacity change from 0 to 128 [ 226.561614][ T5811] usb 3-1: Product: syz [ 226.566309][ T5811] usb 3-1: Manufacturer: syz [ 226.571319][ T5811] usb 3-1: SerialNumber: syz [ 226.577350][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.587018][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 226.603542][ T5811] usb 3-1: config 0 descriptor?? [ 226.613956][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 226.625294][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.644095][ T9] usb 5-1: Product: syz [ 226.654225][ T9] usb 5-1: Manufacturer: syz [ 226.664516][ T9] usb 5-1: SerialNumber: syz [ 226.852977][ T8] usb 3-1: USB disconnect, device number 10 [ 226.903359][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 226.914837][ T9] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 227.060920][ T8856] loop1: detected capacity change from 0 to 256 [ 227.334433][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 227.346407][ T9] usb 5-1: USB disconnect, device number 14 [ 227.389772][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.618865][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 227.798394][ T8877] program syz.2.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.020099][ T8886] loop4: detected capacity change from 0 to 128 [ 228.189123][ T8891] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 228.217495][ T8891] FAT-fs (loop4): Filesystem has been set read-only [ 228.257783][ T8890] loop2: detected capacity change from 0 to 8192 [ 228.283942][ T8890] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.310204][ T8890] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 228.322832][ T8890] REISERFS (device loop2): using ordered data mode [ 228.329816][ T8890] reiserfs: using flush barriers [ 228.338557][ T8890] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.355558][ T8890] REISERFS (device loop2): checking transaction log (loop2) [ 228.517566][ T8890] REISERFS (device loop2): Using tea hash to sort names [ 228.549938][ T8890] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 228.691634][ T8897] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1062'. [ 228.919995][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 229.086956][ T2943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.414750][ T8898] loop1: detected capacity change from 0 to 40427 [ 229.432792][ T8898] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 229.454845][ T8898] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 229.477271][ T5764] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.493846][ T8898] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.594283][ T8898] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 229.612382][ T8898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.688679][ T5764] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.707221][ T5764] usb 4-1: config 0 has no interface number 0 [ 229.730666][ T5764] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 229.747438][ T28] audit: type=1800 audit(1777557634.397:49): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1061" name="file1" dev="loop1" ino=11 res=0 errno=0 [ 229.752612][ T8910] loop2: detected capacity change from 0 to 40427 [ 229.776398][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.787780][ T5764] usb 4-1: Product: syz [ 229.792078][ T5764] usb 4-1: Manufacturer: syz [ 229.797223][ T5764] usb 4-1: SerialNumber: syz [ 229.804608][ T8910] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.816419][ T8910] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.828780][ T5764] usb 4-1: config 0 descriptor?? [ 229.836288][ T8910] F2FS-fs (loop2): invalid crc value [ 229.864866][ T8910] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.946837][ T8910] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 229.955619][ T8910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 230.062210][ T5764] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 230.091529][ T5764] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.124197][ T5764] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 230.145443][ T5764] usb 4-1: media controller created [ 230.209317][ T5764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.826931][ T789] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 230.978416][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 230.978544][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 231.037910][ T789] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 231.056142][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.067832][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.081555][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.090667][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.109620][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.130036][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.139928][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.154362][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.166276][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.175032][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.184669][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.196223][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.205236][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.214840][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.226426][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.238129][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.248110][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.266580][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.286120][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.296248][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.312884][ T5764] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 231.329617][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.346956][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.363231][ T789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.391794][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.411393][ T789] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 231.436084][ T5764] usb 4-1: USB disconnect, device number 15 [ 231.444859][ T789] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 231.483432][ T789] usb 2-1: Product: syz [ 231.493450][ T789] usb 2-1: Manufacturer: syz [ 231.501312][ T789] usb 2-1: SerialNumber: syz [ 231.510714][ T789] usb 2-1: config 0 descriptor?? [ 231.527768][ T789] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.863723][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 231.899550][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 231.922349][ T5764] usb 2-1: USB disconnect, device number 13 [ 231.957368][ T5764] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 232.136284][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 232.170746][ T8927] loop4: detected capacity change from 0 to 32768 [ 232.215491][ T8927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1071 (8927) [ 232.284452][ T8927] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.307446][ T8927] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 232.316170][ T8927] BTRFS info (device loop4): force clearing of disk cache [ 232.358055][ T8927] BTRFS info (device loop4): enabling auto defrag [ 232.388332][ T8927] BTRFS info (device loop4): max_inline at 0 [ 232.397637][ T8927] BTRFS info (device loop4): enabling ssd optimizations [ 232.404664][ T8927] BTRFS info (device loop4): using spread ssd allocation scheme [ 232.420127][ T8927] BTRFS info (device loop4): using free space tree [ 232.619227][ T8927] BTRFS info (device loop4): rebuilding free space tree [ 232.737120][ T5084] Bluetooth: hci3: command tx timeout [ 233.132388][ T38] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 233.175521][ T6531] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.087105][ T8997] loop4: detected capacity change from 0 to 64 [ 234.136829][ T8997] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 234.586921][ T789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.717367][ T5811] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 234.808283][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 234.823956][ T789] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 234.835905][ T789] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.865811][ T789] usb 3-1: Product: syz [ 234.870914][ T789] usb 3-1: Manufacturer: syz [ 234.875594][ T789] usb 3-1: SerialNumber: syz [ 234.898231][ T789] usb 3-1: config 0 descriptor?? [ 234.938671][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 234.947047][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.966659][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.981693][ T5811] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 234.992144][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.004914][ T5811] usb 5-1: config 0 descriptor?? [ 235.104078][ T9016] loop3: detected capacity change from 0 to 4096 [ 235.186451][ T789] usb 3-1: USB disconnect, device number 11 [ 235.470815][ T5811] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 235.503261][ T5811] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 235.593754][ T9027] loop1: detected capacity change from 0 to 256 [ 235.603568][ T9024] sctp: [Deprecated]: syz.3.1105 (pid 9024) Use of int in maxseg socket option. [ 235.603568][ T9024] Use struct sctp_assoc_value instead [ 235.655485][ T5811] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 235.678707][ T9027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 235.858597][ T5811] ft260 0003:0403:6030.000F: failed to retrieve system status [ 235.882439][ T5811] ft260: probe of 0003:0403:6030.000F failed with error -71 [ 235.904929][ T28] audit: type=1326 audit(1777557640.547:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 235.952615][ T5811] usb 5-1: USB disconnect, device number 15 [ 235.996115][ T28] audit: type=1326 audit(1777557640.547:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.065220][ T9037] loop2: detected capacity change from 0 to 256 [ 236.091549][ T28] audit: type=1326 audit(1777557640.547:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.127190][ T28] audit: type=1326 audit(1777557640.577:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.163985][ T28] audit: type=1326 audit(1777557640.577:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.228007][ T28] audit: type=1326 audit(1777557640.577:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.307928][ T28] audit: type=1326 audit(1777557640.577:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.343618][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 236.376832][ T28] audit: type=1326 audit(1777557640.577:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.426686][ T28] audit: type=1326 audit(1777557640.577:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.491315][ T28] audit: type=1326 audit(1777557640.577:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.2.1110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0949d9cdd9 code=0x7ffc0000 [ 236.556977][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 236.572729][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 236.595414][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.618503][ T9] usb 4-1: Product: syz [ 236.622762][ T9] usb 4-1: Manufacturer: syz [ 236.643950][ T9] usb 4-1: SerialNumber: syz [ 236.663269][ T9] usb 4-1: config 0 descriptor?? [ 236.681624][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 236.779434][ T9047] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.789463][ T9047] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.798422][ T9047] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.807430][ T9047] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.999872][ T9055] loop1: detected capacity change from 0 to 2048 [ 237.017723][ T9055] EXT4-fs: Ignoring removed oldalloc option [ 237.084120][ T9055] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 237.106669][ T9055] System zones: 0-7 [ 237.148206][ T9055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.193412][ T9055] EXT4-fs error (device loop1): ext4_find_extent:945: inode #2: comm syz.1.1121: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 237.254482][ T9055] EXT4-fs (loop1): Remounting filesystem read-only [ 237.335676][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.501895][ T9] ssu100: probe of 4-1:0.0 failed with error -71 [ 237.531320][ T9] usb 4-1: USB disconnect, device number 16 [ 237.720320][ T9079] loop4: detected capacity change from 0 to 16 [ 237.732802][ T9079] erofs: (device loop4): mounted with root inode @ nid 36. [ 237.824013][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 237.859004][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.183363][ T789] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.392370][ T9099] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 238.406896][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 238.414390][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.436254][ T789] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.460160][ T789] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 238.480094][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.496215][ T789] usb 2-1: Product: syz [ 238.502644][ T789] usb 2-1: Manufacturer: syz [ 238.516010][ T789] usb 2-1: SerialNumber: syz [ 238.534457][ T789] usb 2-1: config 0 descriptor?? [ 238.770912][ T789] usb 2-1: USB disconnect, device number 14 [ 239.427042][ T789] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 239.661465][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 239.687105][ T789] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 239.722166][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.751347][ T789] usb 5-1: config 0 descriptor?? [ 239.768591][ T9116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.787160][ T1189] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 240.018882][ T1189] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 240.028758][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.068326][ T1189] usb 4-1: config 0 descriptor?? [ 240.279252][ T9116] loop4: detected capacity change from 0 to 512 [ 240.331373][ T1189] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 240.385706][ T1189] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 240.442841][ T9116] FAT-fs (loop4): Directory bread(block 199916) failed [ 240.483304][ T9116] FAT-fs (loop4): Directory bread(block 199917) failed [ 240.545426][ T9116] FAT-fs (loop4): Directory bread(block 199918) failed [ 240.577137][ T9116] FAT-fs (loop4): Directory bread(block 199919) failed [ 240.590990][ T1189] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 240.634444][ T9116] FAT-fs (loop4): Directory bread(block 199920) failed [ 240.641686][ T1189] [drm] Initialized udl on minor 2 [ 240.699363][ T9123] loop1: detected capacity change from 0 to 32768 [ 240.716356][ T9116] FAT-fs (loop4): Directory bread(block 199921) failed [ 240.756676][ T9116] FAT-fs (loop4): Directory bread(block 199922) failed [ 240.781990][ T9116] FAT-fs (loop4): Directory bread(block 199923) failed [ 240.784219][ T9123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1149 (9123) [ 240.811699][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 240.882530][ T9123] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 240.917012][ T9123] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 240.947797][ T789] hid (null): unknown global tag 0x1c [ 240.952192][ T1189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 240.972329][ T9123] BTRFS info (device loop1): metadata ratio 0 [ 241.016807][ T9123] BTRFS info (device loop1): using free space tree [ 241.017741][ T1189] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 241.103811][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 241.128331][ T1189] usb 4-1: USB disconnect, device number 17 [ 241.175642][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 241.178128][ T789] usb 5-1: string descriptor 0 read error: -71 [ 241.192702][ T789] uclogic 0003:5543:006E.0011: failed retrieving string descriptor #200: -71 [ 241.202137][ T789] uclogic 0003:5543:006E.0011: failed retrieving pen parameters: -71 [ 241.210368][ T789] uclogic 0003:5543:006E.0011: failed probing pen v2 parameters: -71 [ 241.219076][ T789] uclogic 0003:5543:006E.0011: failed probing parameters: -71 [ 241.226701][ T789] uclogic: probe of 0003:5543:006E.0011 failed with error -71 [ 241.238153][ T789] usb 5-1: USB disconnect, device number 16 [ 241.514610][ T9123] BTRFS info (device loop1): enabling ssd optimizations [ 241.528272][ T9123] BTRFS info (device loop1): auto enabling async discard [ 241.714843][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 241.714857][ T28] audit: type=1800 audit(1777557646.357:79): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1149" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 242.329563][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 243.174611][ T9181] loop1: detected capacity change from 0 to 164 [ 243.569116][ T9160] loop3: detected capacity change from 0 to 32768 [ 243.582202][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1170'. [ 243.644423][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1170'. [ 243.669571][ T9160] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 243.679493][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1170'. [ 243.688675][ T9160] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 243.697954][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1170'. [ 243.756240][ T9190] tmpfs: Bad value for 'gid' [ 243.884895][ T9160] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 243.961945][ T5814] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 243.996841][ T5814] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 244.284441][ T5814] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 287ms [ 244.310601][ T5814] gfs2: fsid=syz:syz.0: jid=0: Done [ 244.327584][ T9160] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 244.995377][ T9160] gfs2: fsid=syz:syz.0: found 1 quota changes [ 245.309907][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 245.324405][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 245.332039][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.342154][ T5777] Call Trace: [ 245.345466][ T5777] [ 245.348421][ T5777] dump_stack_lvl+0x18c/0x250 [ 245.353147][ T5777] ? show_regs_print_info+0x20/0x20 [ 245.358381][ T5777] ? load_image+0x420/0x420 [ 245.362950][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 245.368216][ T5777] gfs2_assert_warn_i+0x193/0x2c0 [ 245.373326][ T5777] gfs2_qd_dispose+0x4aa/0x5b0 [ 245.378140][ T5777] gfs2_quota_cleanup+0x410/0x720 [ 245.383206][ T5777] ? spin_lock_bucket+0x150/0x150 [ 245.388351][ T5777] ? __might_sleep+0xe0/0xe0 [ 245.392993][ T5777] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 245.398153][ T5777] ? gfs2_quota_sync+0x591/0x5a0 [ 245.403136][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 245.407942][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 245.412921][ T5777] ? __lock_acquire+0x7d40/0x7d40 [ 245.417978][ T5777] ? __rwlock_init+0x150/0x150 [ 245.422777][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 245.428013][ T5777] gfs2_put_super+0x224/0x930 [ 245.432729][ T5777] ? gfs2_evict_inode+0x1350/0x1350 [ 245.437951][ T5777] generic_shutdown_super+0x134/0x2b0 [ 245.443341][ T5777] kill_block_super+0x44/0x90 [ 245.448039][ T5777] deactivate_locked_super+0x97/0x100 [ 245.453427][ T5777] cleanup_mnt+0x43b/0x4d0 [ 245.457876][ T5777] task_work_run+0x1d4/0x260 [ 245.462513][ T5777] ? task_work_cancel+0x220/0x220 [ 245.467565][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 245.473060][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 245.478383][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 245.483964][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 245.489447][ T5777] do_syscall_64+0x61/0xa0 [ 245.493889][ T5777] ? clear_bhb_loop+0x40/0x90 [ 245.498591][ T5777] ? clear_bhb_loop+0x40/0x90 [ 245.503289][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.509205][ T5777] RIP: 0033:0x7f4f4379e017 [ 245.513659][ T5777] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 245.533287][ T5777] RSP: 002b:00007ffd2456c228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 245.541721][ T5777] RAX: 0000000000000000 RBX: 00007f4f43832120 RCX: 00007f4f4379e017 [ 245.549739][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2456c2e0 [ 245.557727][ T5777] RBP: 00007ffd2456c2e0 R08: 00007ffd2456d2e0 R09: 00000000ffffffff [ 245.565715][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2456d370 [ 245.573714][ T5777] R13: 00007f4f43832120 R14: 000000000003b0ab R15: 00007ffd2456d3b0 [ 245.581727][ T5777] [ 245.586217][ T5814] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 245.811871][ T5814] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 245.831570][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.851794][ T5814] usb 5-1: Product: syz [ 245.856024][ T5814] usb 5-1: Manufacturer: syz [ 245.865213][ T5814] usb 5-1: SerialNumber: syz [ 246.163282][ T5814] rtl8150 5-1:1.0: couldn't reset the device [ 246.187247][ T5814] rtl8150: probe of 5-1:1.0 failed with error -5 [ 246.221461][ T5814] usb 5-1: USB disconnect, device number 17 [ 246.227873][ T789] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.437267][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 246.448995][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.454305][ T9235] loop3: detected capacity change from 0 to 512 [ 246.467011][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.498319][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.526834][ T789] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.566829][ T789] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.597175][ T789] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.606674][ T789] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.616098][ T789] usb 3-1: Manufacturer: syz [ 246.654093][ T789] usb 3-1: config 0 descriptor?? [ 246.971636][ T9242] loop3: detected capacity change from 0 to 256 [ 247.036826][ T789] rc_core: IR keymap rc-hauppauge not found [ 247.043972][ T789] Registered IR keymap rc-empty [ 247.053301][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.083791][ T9242] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 247.115495][ T9233] loop1: detected capacity change from 0 to 32768 [ 247.122289][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.178268][ T789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 247.217812][ T789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 247.241995][ T9233] JBD2: Ignoring recovery information on journal [ 247.283758][ T9233] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 247.328584][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.397111][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.460802][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.517667][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.561906][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.569692][ T9233] [ 247.572062][ T9233] ====================================================== [ 247.579112][ T9233] WARNING: possible circular locking dependency detected [ 247.586167][ T9233] syzkaller #0 Not tainted [ 247.590613][ T9233] ------------------------------------------------------ [ 247.597656][ T9233] syz.1.1189/9233 is trying to acquire lock: [ 247.603673][ T9233] ffff88805e4242d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 247.616981][ T9233] [ 247.616981][ T9233] but task is already holding lock: [ 247.624383][ T9233] ffff888055c56ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 247.633945][ T9233] [ 247.633945][ T9233] which lock already depends on the new lock. [ 247.633945][ T9233] [ 247.644378][ T9233] [ 247.644378][ T9233] the existing dependency chain (in reverse order) is: [ 247.653421][ T9233] [ 247.653421][ T9233] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 247.661322][ T9233] down_read+0x46/0x2e0 [ 247.666047][ T9233] ocfs2_init_acl+0x30a/0x770 [ 247.671302][ T9233] ocfs2_mknod+0x140f/0x2300 [ 247.676457][ T9233] ocfs2_create+0x196/0x430 [ 247.681532][ T9233] path_openat+0x12a0/0x3230 [ 247.686692][ T9233] do_filp_open+0x1f5/0x430 [ 247.691785][ T9233] do_sys_openat2+0x134/0x1d0 [ 247.697123][ T9233] __x64_sys_openat+0x139/0x160 [ 247.702556][ T9233] do_syscall_64+0x55/0xa0 [ 247.707558][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.714041][ T9233] [ 247.714041][ T9233] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 247.722615][ T9233] down_read+0x46/0x2e0 [ 247.727344][ T9233] ocfs2_start_trans+0x3a8/0x6f0 [ 247.732861][ T9233] ocfs2_reserve_local_alloc_bits+0xb44/0x2600 [ 247.739688][ T9233] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 247.746685][ T9233] ocfs2_symlink+0x111d/0x2700 [ 247.752100][ T9233] vfs_symlink+0x138/0x2b0 [ 247.757143][ T9233] do_symlinkat+0x1ba/0x400 [ 247.762226][ T9233] __x64_sys_symlinkat+0x99/0xb0 [ 247.767725][ T9233] do_syscall_64+0x55/0xa0 [ 247.772705][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.779168][ T9233] [ 247.779168][ T9233] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 247.786694][ T9233] ocfs2_start_trans+0x2a9/0x6f0 [ 247.792192][ T9233] ocfs2_reserve_local_alloc_bits+0xb44/0x2600 [ 247.798906][ T9233] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 247.805798][ T9233] ocfs2_symlink+0x111d/0x2700 [ 247.811146][ T9233] vfs_symlink+0x138/0x2b0 [ 247.816126][ T9233] do_symlinkat+0x1ba/0x400 [ 247.821192][ T9233] __x64_sys_symlinkat+0x99/0xb0 [ 247.826697][ T9233] do_syscall_64+0x55/0xa0 [ 247.831681][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.838142][ T9233] [ 247.838142][ T9233] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 247.848728][ T9233] down_write+0x97/0x200 [ 247.853537][ T9233] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 247.859989][ T9233] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 247.866968][ T9233] ocfs2_mknod+0xebb/0x2300 [ 247.872036][ T9233] ocfs2_create+0x196/0x430 [ 247.877100][ T9233] path_openat+0x12a0/0x3230 [ 247.882254][ T9233] do_filp_open+0x1f5/0x430 [ 247.887325][ T9233] do_sys_openat2+0x134/0x1d0 [ 247.892656][ T9233] __x64_sys_openat+0x139/0x160 [ 247.898168][ T9233] do_syscall_64+0x55/0xa0 [ 247.903148][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.909607][ T9233] [ 247.909607][ T9233] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 247.920318][ T9233] __lock_acquire+0x2df1/0x7d40 [ 247.925741][ T9233] lock_acquire+0x19e/0x420 [ 247.930894][ T9233] down_write+0x97/0x200 [ 247.935712][ T9233] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 247.942174][ T9233] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 247.949068][ T9233] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 247.955271][ T9233] ocfs2_xattr_set+0xc3f/0x13e0 [ 247.960796][ T9233] __vfs_setxattr+0x431/0x470 [ 247.966049][ T9233] __vfs_setxattr_noperm+0x12d/0x5e0 [ 247.971910][ T9233] vfs_setxattr+0x16b/0x2f0 [ 247.977037][ T9233] path_setxattr+0x3f3/0x5d0 [ 247.982198][ T9233] __x64_sys_lsetxattr+0xb8/0xd0 [ 247.987708][ T9233] do_syscall_64+0x55/0xa0 [ 247.992691][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.999156][ T9233] [ 247.999156][ T9233] other info that might help us debug this: [ 247.999156][ T9233] [ 248.009415][ T9233] Chain exists of: [ 248.009415][ T9233] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 248.009415][ T9233] [ 248.026481][ T9233] Possible unsafe locking scenario: [ 248.026481][ T9233] [ 248.033973][ T9233] CPU0 CPU1 [ 248.039388][ T9233] ---- ---- [ 248.044777][ T9233] lock(&oi->ip_xattr_sem); [ 248.049420][ T9233] lock(&journal->j_trans_barrier); [ 248.057280][ T9233] lock(&oi->ip_xattr_sem); [ 248.064454][ T9233] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 248.071797][ T9233] [ 248.071797][ T9233] *** DEADLOCK *** [ 248.071797][ T9233] [ 248.079967][ T9233] 3 locks held by syz.1.1189/9233: [ 248.085123][ T9233] #0: ffff88802d89a418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 248.094433][ T9233] #1: ffff888055c56d98 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 248.104965][ T9233] #2: ffff888055c56ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 248.114992][ T9233] [ 248.114992][ T9233] stack backtrace: [ 248.120927][ T9233] CPU: 1 PID: 9233 Comm: syz.1.1189 Not tainted syzkaller #0 [ 248.128340][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.138438][ T9233] Call Trace: [ 248.141757][ T9233] [ 248.144724][ T9233] dump_stack_lvl+0x18c/0x250 [ 248.149462][ T9233] ? load_image+0x420/0x420 [ 248.154039][ T9233] ? show_regs_print_info+0x20/0x20 [ 248.159393][ T9233] ? print_circular_bug+0x12b/0x1a0 [ 248.164649][ T9233] check_noncircular+0x2fc/0x400 [ 248.169655][ T9233] ? print_deadlock_bug+0x5d0/0x5d0 [ 248.174904][ T9233] ? lockdep_lock+0xf5/0x230 [ 248.179551][ T9233] ? _find_first_zero_bit+0xd3/0x100 [ 248.184890][ T9233] __lock_acquire+0x2df1/0x7d40 [ 248.189810][ T9233] ? __lock_acquire+0x7d40/0x7d40 [ 248.194873][ T9233] ? verify_lock_unused+0x140/0x140 [ 248.200120][ T9233] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 248.205786][ T9233] ? do_raw_spin_lock+0x11f/0x2c0 [ 248.210848][ T9233] ? mutex_unlock+0x10/0x10 [ 248.215383][ T9233] lock_acquire+0x19e/0x420 [ 248.219916][ T9233] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 248.225990][ T9233] ? ocfs2_get_system_file_inode+0x202/0x850 [ 248.231988][ T9233] ? __might_sleep+0xe0/0xe0 [ 248.236608][ T9233] ? read_lock_is_recursive+0x20/0x20 [ 248.242036][ T9233] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 248.248228][ T9233] ? verify_lock_unused+0x140/0x140 [ 248.253507][ T9233] down_write+0x97/0x200 [ 248.257775][ T9233] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 248.263913][ T9233] ? down_read_killable+0x340/0x340 [ 248.269143][ T9233] ? mark_lock+0x94/0x320 [ 248.273505][ T9233] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 248.279463][ T9233] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.285658][ T9233] ? lockdep_hardirqs_on+0x98/0x150 [ 248.290884][ T9233] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.297097][ T9233] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 248.303029][ T9233] ? ocfs2_block_group_search+0x470/0x470 [ 248.308770][ T9233] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 248.314700][ T9233] ? _raw_spin_unlock+0x40/0x40 [ 248.319574][ T9233] ? stack_trace_save+0xaa/0x100 [ 248.324522][ T9233] ? stack_trace_snprint+0xf0/0xf0 [ 248.329657][ T9233] ? __stack_depot_save+0x560/0x630 [ 248.334902][ T9233] ? kasan_set_track+0x5f/0x70 [ 248.339690][ T9233] ? kasan_set_track+0x4e/0x70 [ 248.344492][ T9233] ? __kasan_kmalloc+0x8f/0xa0 [ 248.349281][ T9233] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 248.355810][ T9233] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 248.361644][ T9233] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 248.366684][ T9233] ? __vfs_setxattr+0x431/0x470 [ 248.371580][ T9233] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 248.377066][ T9233] ? vfs_setxattr+0x16b/0x2f0 [ 248.381814][ T9233] ? path_setxattr+0x3f3/0x5d0 [ 248.386606][ T9233] ? __x64_sys_lsetxattr+0xb8/0xd0 [ 248.391729][ T9233] ? do_syscall_64+0x55/0xa0 [ 248.396328][ T9233] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.402456][ T9233] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 248.408814][ T9233] ? ocfs2_init_steal_slots+0x160/0x160 [ 248.414419][ T9233] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 248.420093][ T9233] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 248.425745][ T9233] ? ocfs2_xattr_set+0xc05/0x13e0 [ 248.430834][ T9233] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 248.436925][ T9233] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 248.443208][ T9233] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 248.449140][ T9233] ? down_write+0x16e/0x200 [ 248.453675][ T9233] ? down_read_killable+0x340/0x340 [ 248.458907][ T9233] ? up_write+0x1c3/0x410 [ 248.463253][ T9233] ocfs2_xattr_set+0xc3f/0x13e0 [ 248.468149][ T9233] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 248.473916][ T9233] ? __lock_acquire+0x1347/0x7d40 [ 248.478983][ T9233] ? verify_lock_unused+0x140/0x140 [ 248.484205][ T9233] ? ____kasan_slab_free+0x126/0x1e0 [ 248.489531][ T9233] ? aa_get_newest_label+0xfd/0x5c0 [ 248.494795][ T9233] ? end_current_label_crit_section+0x170/0x170 [ 248.501094][ T9233] ? posix_xattr_acl+0x93/0xb0 [ 248.505935][ T9233] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 248.511459][ T9233] __vfs_setxattr+0x431/0x470 [ 248.516193][ T9233] __vfs_setxattr_noperm+0x12d/0x5e0 [ 248.521502][ T9233] vfs_setxattr+0x16b/0x2f0 [ 248.526068][ T9233] ? xattr_permission+0x470/0x470 [ 248.531117][ T9233] ? __mnt_want_write+0x223/0x2a0 [ 248.536203][ T9233] ? path_setxattr+0x3a1/0x5d0 [ 248.541012][ T9233] path_setxattr+0x3f3/0x5d0 [ 248.545648][ T9233] ? simple_xattrs_free+0x150/0x150 [ 248.550888][ T9233] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 248.556905][ T9233] ? lock_chain_count+0x20/0x20 [ 248.561785][ T9233] __x64_sys_lsetxattr+0xb8/0xd0 [ 248.566757][ T9233] do_syscall_64+0x55/0xa0 [ 248.571208][ T9233] ? clear_bhb_loop+0x40/0x90 [ 248.575915][ T9233] ? clear_bhb_loop+0x40/0x90 [ 248.580614][ T9233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.586520][ T9233] RIP: 0033:0x7f5a7999cdd9 [ 248.590993][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.610667][ T9233] RSP: 002b:00007f5a7a858028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 248.619108][ T9233] RAX: ffffffffffffffda RBX: 00007f5a79c15fa0 RCX: 00007f5a7999cdd9 [ 248.627105][ T9233] RDX: 0000200000000280 RSI: 0000200000000100 RDI: 00002000000000c0 [ 248.635100][ T9233] RBP: 00007f5a79a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 248.643079][ T9233] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 248.651075][ T9233] R13: 00007f5a79c16038 R14: 00007f5a79c15fa0 R15: 00007fff5982ab98 [ 248.659083][ T9233] [ 248.686837][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 248.716837][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 248.746836][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 248.786841][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 248.795354][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 248.818253][ T789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 248.868866][ T789] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.887425][ T789] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.914736][ T789] usb 3-1: USB disconnect, device number 12 [ 255.860555][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.867059][ T1291] ieee802154 phy1 wpan1: encryption failed: -22