last executing test programs: 4.393259867s ago: executing program 0 (id=1156): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.106641451s ago: executing program 0 (id=1152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) 3.932096719s ago: executing program 0 (id=1153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8001c00180001000503140040"], 0x21) 3.208595634s ago: executing program 2 (id=1160): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x129) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 3.110745089s ago: executing program 1 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.033618953s ago: executing program 1 (id=1162): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) 2.973900906s ago: executing program 2 (id=1163): unshare(0x20400) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000009400)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000080)="80ef09e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) 2.516844828s ago: executing program 3 (id=1165): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd27, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x4ad, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2000000, &(0x7f0000000440)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@umask={'umask', 0x3d, 0x2f}}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000002340)="$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") r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000000000001, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="04ec8ec9af499b0c0e607c315ec39d183e85e352faf84c2771da061dc78b49db"}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 2.401341554s ago: executing program 0 (id=1166): r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0xae60, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000001200)={r0, 0x4, 0x2}) 2.113620277s ago: executing program 1 (id=1167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x2000000000000}}) 1.893124098s ago: executing program 2 (id=1168): unshare(0x2c020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000140)=[{r0, 0x400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 1.872009989s ago: executing program 3 (id=1169): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1018400, &(0x7f0000000080)=ANY=[], 0x85, 0x675, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc6281, 0x114) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe89) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 1.699399348s ago: executing program 0 (id=1170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={0x0, 0xd, 0x7, 0x8000, 0x5, 0x7}, 0x14) 1.561676835s ago: executing program 0 (id=1171): syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa10"], 0x9) 1.430669681s ago: executing program 3 (id=1172): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8Pban0ZFbtH9qX9g9taem/xOePW8muCa3/y//UjqOreWLA7U/M9be+eNSfNbvyFXY0V7h4+kXTa26ucBJRhJM2iKtGItLKlL/yp0mWpnSWy3Q1v6trn0iXLfPEcrXRuaJnYvTUqI19eaI7Ippdz6U1q9XiCpF4yiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCh/RMAAP//3Wzjzw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd27, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x4ad, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2000000, &(0x7f0000000440)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@umask={'umask', 0x3d, 0x2f}}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000002340)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000000000001, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="04ec8ec9af499b0c0e607c315ec39d183e85e352faf84c2771da061dc78b49db"}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 1.358085814s ago: executing program 2 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\x15\x0f{\x86g\x86R\x1c\xf5^\xd3\xaa') 929.244035ms ago: executing program 1 (id=1174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001de55"], 0xfdef) 863.001858ms ago: executing program 3 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, 0x0) 364.501413ms ago: executing program 2 (id=1176): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x40047457, 0x0) 318.891924ms ago: executing program 1 (id=1177): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000003c0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000280)="f76e14895b4c948e303e1fe34234a0a92ecdc3beee7e2a71ef9514ea54ff5caf33f12cc5", 0x24}], 0x3}, 0x44000) 269.100337ms ago: executing program 3 (id=1178): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xb4, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x1d, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4d2459f025e438fe4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_gact={0x30, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 165.233222ms ago: executing program 1 (id=1179): syz_usb_connect(0x0, 0x371, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 22.811819ms ago: executing program 2 (id=1180): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(0x3) 0s ago: executing program 3 (id=1181): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xadd4}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): ][ T8497] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 576.951291][ T5840] usb 2-1: config 8 has an invalid interface number: 3 but max is 0 [ 576.966317][ T5840] usb 2-1: config 8 has no interface number 0 [ 576.986073][ T5840] usb 2-1: config 8 interface 3 has no altsetting 0 [ 577.002270][ T5840] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=d7.cd [ 577.013008][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.026425][ T5840] usb 2-1: Product: syz [ 577.036178][ T5840] usb 2-1: Manufacturer: syz [ 577.040823][ T5840] usb 2-1: SerialNumber: syz [ 577.272531][ T5840] kobil_sct 2-1:8.3: required endpoints missing [ 577.282993][ T5840] usb 2-1: USB disconnect, device number 5 [ 577.337663][ T972] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 577.476580][ T8502] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 577.551423][ T972] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 577.560790][ T972] usb 4-1: config 0 has no interface number 0 [ 577.568151][ T972] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.595084][ T972] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 577.605585][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.613974][ T972] usb 4-1: Product: syz [ 577.618750][ T972] usb 4-1: Manufacturer: syz [ 577.623516][ T972] usb 4-1: SerialNumber: syz [ 577.641368][ T972] usb 4-1: config 0 descriptor?? [ 577.661094][ T972] yurex 4-1:0.50: Could not find endpoints [ 577.682861][ T8502] usb 3-1: unable to get BOS descriptor or descriptor too short [ 577.716356][ T8502] usb 3-1: config 4 has an invalid interface number: 180 but max is 0 [ 577.744635][ T8502] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 577.775182][ T8502] usb 3-1: config 4 has no interface number 0 [ 577.783490][ T8502] usb 3-1: config 4 interface 180 has no altsetting 0 [ 577.839738][ T8502] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29 [ 577.852533][ T8502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.902677][ T972] usb 4-1: USB disconnect, device number 4 [ 577.965595][ T8502] usb 3-1: Product: syz [ 577.996166][ T8502] usb 3-1: Manufacturer: syz [ 578.000859][ T8502] usb 3-1: SerialNumber: syz [ 578.209769][ T8513] loop0: detected capacity change from 0 to 8 [ 578.232270][ T8513] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 578.267485][ T8502] qmi_wwan 3-1:4.180: bogus CDC Union: master=0, slave=1 [ 578.296546][ T8502] qmi_wwan: probe of 3-1:4.180 failed with error -22 [ 578.328850][ T8502] usb 3-1: USB disconnect, device number 7 [ 578.372197][ T972] usb 1-1: USB disconnect, device number 4 [ 578.398518][ T8515] loop0: detected capacity change from 0 to 16 [ 578.432776][ T8515] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 18446744073575399424 [ 578.995479][ T8519] loop0: detected capacity change from 0 to 32768 [ 579.018127][ T8519] XFS: noikeep mount option is deprecated. [ 579.024246][ T8519] XFS (loop0): invalid logbufsize: 84 [not 16k,32k,64k,128k or 256k] [ 579.124004][ T8523] loop1: detected capacity change from 0 to 4096 [ 579.220296][ T8523] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 579.861752][ T8536] loop3: detected capacity change from 0 to 1756 [ 579.942830][ T8536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 579.976511][ T8536] UDF-fs: Scanning with blocksize 512 failed [ 580.020991][ T8536] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 580.719180][ T8545] binder: 8539:8545 ioctl 4018620d 0 returned -22 [ 580.945576][ T8545] binder: 8539:8545 ioctl c0306201 0 returned -14 [ 581.466886][ T8536] UDF-fs: Scanning with blocksize 1024 failed [ 581.520650][ T8536] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 581.557548][ T8536] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 581.650733][ T6060] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 581.836647][ T8547] netlink: 84 bytes leftover after parsing attributes in process `syz.2.604'. [ 581.856221][ T6060] usb 1-1: Using ep0 maxpacket: 16 [ 581.872731][ T6060] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 581.894709][ T6060] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.935282][ T6060] usb 1-1: config 0 has no interface number 0 [ 582.000484][ T6060] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 582.072997][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.136894][ T6060] usb 1-1: Product: syz [ 582.180603][ T6060] usb 1-1: Manufacturer: syz [ 582.218585][ T6060] usb 1-1: SerialNumber: syz [ 582.407904][ T6060] usb 1-1: config 0 descriptor?? [ 582.528764][ T8554] UDC core: g1: couldn't find an available UDC or it's busy [ 582.789385][ T6060] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 582.829057][ T6060] usb 1-1: No valid video chain found. [ 583.063070][ T7833] usb 1-1: USB disconnect, device number 5 [ 583.187145][ T8558] loop0: detected capacity change from 0 to 512 [ 583.194566][ T8558] ext4: Bad value for 'data' [ 583.617045][ T8564] loop0: detected capacity change from 0 to 1024 [ 583.661102][ T8564] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 584.674722][ T8570] binder: 8561:8570 ioctl 80047213 2000000002c0 returned -22 [ 584.843207][ T8567] 0: reclassify loop, rule prio 0, protocol 03 [ 585.071002][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.080368][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 585.089471][ T8576] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 585.756120][ T5840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 586.076120][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 586.097187][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.118793][ T5840] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 586.128463][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.147123][ T5840] usb 2-1: Product: syz [ 586.151340][ T5840] usb 2-1: Manufacturer: syz [ 586.155966][ T5840] usb 2-1: SerialNumber: syz [ 586.181513][ T5840] usb 2-1: config 0 descriptor?? [ 586.191274][ T8562] syz.3.599 (8562): drop_caches: 2 [ 586.208725][ T5840] usb 2-1: bad CDC descriptors [ 586.214146][ T5840] usb 2-1: unsupported MDLM descriptors [ 586.412946][ T6060] usb 2-1: USB disconnect, device number 6 [ 586.576484][ T7833] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 586.758753][ T7833] usb 3-1: Using ep0 maxpacket: 16 [ 586.765984][ T7833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.775309][ T7833] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 586.783608][ T7833] usb 3-1: config 9 has no interface number 0 [ 586.789848][ T7833] usb 3-1: config 9 interface 57 has no altsetting 0 [ 586.799582][ T7833] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 586.809633][ T7833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.817787][ T7833] usb 3-1: Product: syz [ 586.821970][ T7833] usb 3-1: Manufacturer: syz [ 586.826733][ T7833] usb 3-1: SerialNumber: syz [ 587.018040][ T8581] loop1: detected capacity change from 0 to 256 [ 587.026511][ T8581] FAT-fs (loop1): Unrecognized mount option "shortnaze=lower" or missing value [ 587.228064][ T7833] usbhid 3-1:9.57: couldn't find an input interrupt endpoint [ 587.237933][ T7833] usb 3-1: USB disconnect, device number 8 [ 587.286523][ T5840] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 587.326161][ T8502] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 587.373496][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 587.447252][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 587.894443][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.016297][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 588.023775][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.033320][ T5840] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 588.047610][ T5840] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 588.057239][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.065419][ T5840] usb 1-1: Product: syz [ 588.069680][ T5840] usb 1-1: Manufacturer: syz [ 588.074316][ T5840] usb 1-1: SerialNumber: syz [ 588.098901][ T8502] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.112643][ T8502] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 588.122080][ T8502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.130279][ T8502] usb 4-1: Product: syz [ 588.134497][ T8502] usb 4-1: Manufacturer: syz [ 588.139478][ T8502] usb 4-1: SerialNumber: syz [ 588.148190][ T8502] usb 4-1: config 0 descriptor?? [ 588.305396][ T5840] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 588.317928][ T5840] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to g@b4.vu [ 588.329268][ T5840] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 588.357510][ T5840] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 588.384350][ T5840] usb 1-1: USB disconnect, device number 6 [ 588.393575][ T5818] usb 4-1: USB disconnect, device number 5 [ 588.504999][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.585659][ T8595] loop1: detected capacity change from 0 to 512 [ 588.595575][ T8595] ext4: Bad value for 'data' [ 588.606328][ T7833] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 588.798823][ T7833] usb 3-1: not running at top speed; connect to a high speed hub [ 588.810089][ T7833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.820376][ T7833] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 588.829491][ T7833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.966252][ T8597] loop1: detected capacity change from 0 to 1024 [ 589.068310][ T8597] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 589.222795][ T7833] usb 3-1: Found UVC 1.00 device (046d:0825) [ 589.467224][ T7833] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 589.532307][ T7833] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 589.582891][ T7833] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 589.655842][ T7833] usb 3-1: USB disconnect, device number 9 [ 589.966965][ T5840] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 589.996137][ T8502] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 590.068830][ T6060] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 590.149688][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 590.162326][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 590.175524][ T5840] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 590.184834][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 590.193040][ T8502] usb 4-1: Using ep0 maxpacket: 8 [ 590.198686][ T5840] usb 2-1: Product: syz [ 590.199267][ T7833] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 590.203783][ T5840] usb 2-1: Manufacturer: syz [ 590.215709][ T5840] usb 2-1: SerialNumber: syz [ 590.221703][ T8502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 590.232268][ T5840] usb 2-1: config 0 descriptor?? [ 590.238022][ T8502] usb 4-1: config 7 has an invalid interface number: 199 but max is 0 [ 590.251195][ T8502] usb 4-1: config 7 has no interface number 0 [ 590.257975][ T8600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.260830][ T6060] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 590.266644][ T8502] usb 4-1: config 7 interface 199 has no altsetting 0 [ 590.283879][ T6060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 590.296595][ T8502] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=2c.f3 [ 590.306690][ T6060] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29158, setting to 1023 [ 590.312127][ T8502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.326210][ T8502] usb 4-1: Product: syz [ 590.330423][ T8502] usb 4-1: Manufacturer: syz [ 590.335086][ T8502] usb 4-1: SerialNumber: syz [ 590.351190][ T6060] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 590.362776][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.374346][ T6060] usb 1-1: Product: syz [ 590.380051][ T6060] usb 1-1: Manufacturer: syz [ 590.384791][ T6060] usb 1-1: SerialNumber: syz [ 590.400568][ T6060] usb 1-1: config 0 descriptor?? [ 590.410780][ T6060] hub 1-1:0.0: bad descriptor, ignoring hub [ 590.417093][ T7833] usb 3-1: Using ep0 maxpacket: 8 [ 590.422407][ T6060] hub: probe of 1-1:0.0 failed with error -5 [ 590.433428][ T6060] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 590.445276][ T7833] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.453873][ T7833] usb 3-1: config 179 has no interface number 0 [ 590.464272][ T7833] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 590.478861][ T7833] usb 3-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 590.495140][ T6060] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 590.507684][ T7833] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.530098][ T7833] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 590.549004][ T6060] usbtouchscreen: probe of 1-1:0.0 failed with error -22 [ 590.560558][ T7833] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.575117][ T8502] pegasus 4-1:7.199: Missing or invalid endpoints [ 590.588102][ T5840] usb 2-1: USB disconnect, device number 7 [ 590.602699][ T7833] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 590.631082][ T8502] usb 4-1: USB disconnect, device number 6 [ 590.638695][ T6060] usb 1-1: USB disconnect, device number 7 [ 590.652204][ T7833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.921696][ T8502] usb 3-1: USB disconnect, device number 10 [ 591.154178][ T8609] IPv6: addrconf: prefix option has invalid lifetime [ 591.238354][ T8612] loop1: detected capacity change from 0 to 256 [ 591.331047][ T8612] FAT-fs (loop1): Directory bread(block 64) failed [ 591.339083][ T8612] FAT-fs (loop1): Directory bread(block 65) failed [ 591.345773][ T8612] FAT-fs (loop1): Directory bread(block 66) failed [ 591.355980][ T8612] FAT-fs (loop1): Directory bread(block 67) failed [ 591.362822][ T8612] FAT-fs (loop1): Directory bread(block 68) failed [ 591.376171][ T8612] FAT-fs (loop1): Directory bread(block 69) failed [ 591.382821][ T8612] FAT-fs (loop1): Directory bread(block 70) failed [ 591.394222][ T8612] FAT-fs (loop1): Directory bread(block 71) failed [ 591.401337][ T8612] FAT-fs (loop1): Directory bread(block 72) failed [ 591.430385][ T8612] FAT-fs (loop1): Directory bread(block 73) failed [ 591.489264][ T8617] nvmet: disable ns before setting buffered_io value. [ 591.499053][ T8617] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 591.511033][ T8617] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 591.522212][ T8617] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 591.576455][ T8502] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 591.666439][ T8623] loop1: detected capacity change from 0 to 512 [ 591.677169][ T8623] ext4: Bad value for 'data' [ 591.722093][ T8378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.788708][ T8502] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 591.809332][ T8502] usb 4-1: config 1 has no interface number 0 [ 591.823197][ T8502] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 591.870082][ T8502] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 591.894702][ T8502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.925379][ T8502] usb 4-1: Product: syz [ 591.935316][ T8502] usb 4-1: Manufacturer: syz [ 591.950468][ T8502] usb 4-1: SerialNumber: syz [ 591.988492][ T8615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 591.997817][ T8502] usb 4-1: Error in usbnet_get_endpoints (-22) [ 592.153261][ T8629] loop1: detected capacity change from 0 to 1024 [ 592.313687][ T8629] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 592.329047][ T5840] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 592.578768][ T972] usb 4-1: USB disconnect, device number 7 [ 592.671826][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.726115][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 592.764413][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 592.790576][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 592.809671][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 592.824596][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 592.841978][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 592.853446][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 592.861711][ T8633] loop1: detected capacity change from 0 to 512 [ 592.871441][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.884984][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.898098][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 592.917906][ T8633] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 592.941656][ T5840] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 592.952292][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.964105][ T5840] usb 3-1: Product: syz [ 592.970563][ T5840] usb 3-1: Manufacturer: syz [ 592.975254][ T5840] usb 3-1: SerialNumber: syz [ 592.981700][ T8633] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.628: casefold flag without casefold feature [ 592.997569][ T8633] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.628: couldn't read orphan inode 15 (err -117) [ 593.004944][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.020715][ T8633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.031059][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.061427][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.070671][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.083244][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.092320][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 593.108563][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.115958][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.134395][ T5840] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 593.134573][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.144795][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 593.190960][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 593.219549][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 593.257410][ T5840] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 593.278663][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 593.294716][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 593.312996][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 593.323333][ T5840] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 593.331976][ T9] usb 1-1: config 3 has an invalid interface number: 173 but max is 1 [ 593.340581][ T9] usb 1-1: config 3 has an invalid interface number: 173 but max is 1 [ 593.350887][ T5840] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 593.360980][ T9] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 593.386117][ T9] usb 1-1: config 3 has no interface number 0 [ 593.405870][ T9] usb 1-1: config 3 interface 173 has no altsetting 1 [ 593.414501][ T5840] usb 3-1: USB disconnect, device number 11 [ 593.438641][ T9] usb 1-1: string descriptor 0 read error: -22 [ 593.455065][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7a.0d [ 593.471210][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.501723][ T9] ttusbir 1-1:3.173: cannot find expected altsetting [ 593.527509][ T5840] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 593.543863][ T5840] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 593.557275][ T5840] keyspan 3-1:1.0: device disconnected [ 593.606191][ T972] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 593.696211][ T6060] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 593.711387][ T9] usb 1-1: USB disconnect, device number 8 [ 593.805111][ T972] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 593.815093][ T972] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 593.825944][ T972] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 593.836424][ T972] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.846546][ T972] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 593.856501][ T972] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 593.865571][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.884483][ T8639] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 593.892320][ T8639] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 593.903385][ T6060] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 593.916924][ T8639] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 593.916926][ T6060] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 593.923045][ T972] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 593.924455][ T6060] usb 2-1: Product: syz [ 593.951496][ T6060] usb 2-1: SerialNumber: syz [ 593.959742][ T6060] usb 2-1: config 0 descriptor?? [ 594.185422][ T6060] hso 2-1:0.0: Failed to find BULK IN ep [ 594.296249][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 594.324841][ T972] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 594.348215][ T972] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 594.373414][ T972] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 594.404788][ T972] usb 4-1: USB disconnect, device number 8 [ 594.410781][ C0] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 594.421754][ T5840] usb 2-1: USB disconnect, device number 8 [ 594.457353][ T972] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 594.473809][ T972] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 594.484767][ T972] mos7720 4-1:1.0: device disconnected [ 594.497823][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 594.505701][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 594.521258][ T9] usb 3-1: config 7 has an invalid interface number: 37 but max is 0 [ 594.532291][ T9] usb 3-1: config 7 has no interface number 0 [ 594.543808][ T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=ab.2e [ 594.554415][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.564945][ T9] usb 3-1: Product: syz [ 594.570104][ T9] usb 3-1: Manufacturer: syz [ 594.574775][ T9] usb 3-1: SerialNumber: syz [ 594.576266][ T6060] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 594.769880][ T6060] usb 1-1: Using ep0 maxpacket: 16 [ 594.780048][ T6060] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 594.789394][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.797920][ T6060] usb 1-1: Product: syz [ 594.802158][ T6060] usb 1-1: Manufacturer: syz [ 594.807026][ T6060] usb 1-1: SerialNumber: syz [ 594.814399][ T6060] usb 1-1: config 0 descriptor?? [ 594.824125][ T9] legousbtower 3-1:7.37: interrupt endpoints not found [ 594.848399][ T9] usb 3-1: USB disconnect, device number 12 [ 595.055183][ T6060] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 595.067281][ T6060] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 595.391732][ T8651] zram: Cannot change disksize for initialized device [ 595.945303][ T6060] usb 1-1: USB disconnect, device number 9 [ 597.786225][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 597.796328][ T972] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 598.013958][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 598.024565][ T5840] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 598.035490][ T5840] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 598.051866][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 598.060056][ T5840] usb 4-1: string descriptor 0 read error: -71 [ 598.070594][ T972] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 598.080745][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.090416][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 598.098668][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.106850][ T972] usb 3-1: Product: syz [ 598.111048][ T972] usb 3-1: Manufacturer: syz [ 598.115675][ T972] usb 3-1: SerialNumber: syz [ 598.123391][ T5840] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 598.132846][ T5840] usb 4-1: no configuration chosen from 1 choice [ 598.144890][ T972] usb 3-1: config 0 descriptor?? [ 598.156133][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 598.173099][ T5840] usb 4-1: USB disconnect, device number 9 [ 598.186469][ T972] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 598.349890][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.372523][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 598.385180][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.395153][ T9] usb 1-1: Product: syz [ 598.403016][ T9] usb 1-1: Manufacturer: syz [ 598.414283][ T9] usb 1-1: SerialNumber: syz [ 598.434435][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 598.584130][ T972] gspca_sn9c2028: read1 error -71 [ 598.603050][ T972] gspca_sn9c2028: read1 error -71 [ 598.610676][ T972] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 598.644514][ T972] usb 3-1: USB disconnect, device number 13 [ 598.905498][ T8667] loop1: detected capacity change from 0 to 8 [ 598.917083][ T8667] SQUASHFS error: zlib decompression failed, data probably corrupt [ 598.925087][ T8667] SQUASHFS error: Failed to read block 0x9b: -5 [ 598.939135][ T8667] SQUASHFS error: Unable to read metadata cache entry [99] [ 598.947449][ T8667] SQUASHFS error: Unable to read inode 0x127 [ 598.956406][ T9] gspca_mr97310a: reg write [21] error -110 [ 598.972408][ T9] mr97310a: probe of 1-1:1.0 failed with error -110 [ 598.996661][ T5840] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 599.177285][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 599.198482][ T5840] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 599.219960][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.234523][ T5840] usb 4-1: config 0 has no interface number 0 [ 599.247618][ T9] usb 1-1: USB disconnect, device number 10 [ 599.270508][ T5840] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 599.300886][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.328755][ T5840] usb 4-1: config 0 descriptor?? [ 599.343355][ T8673] loop0: detected capacity change from 0 to 512 [ 599.351459][ T5840] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 599.367661][ T5840] usb 4-1: Found UVC 0.00 device (0bd3:05f4) [ 599.374489][ T8673] ext4: Bad value for 'data' [ 599.395551][ T5840] usb 4-1: No valid video chain found. [ 599.458339][ T8669] loop1: detected capacity change from 0 to 32768 [ 599.492204][ T8669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.643 (8669) [ 599.637963][ T6060] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 599.669377][ T5840] usb 4-1: USB disconnect, device number 10 [ 599.693637][ T8669] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.743652][ T8669] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 599.827794][ T8675] loop0: detected capacity change from 0 to 1024 [ 599.858152][ T8675] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 600.042436][ T8669] BTRFS info (device loop1): using free space tree [ 600.326851][ T8669] BTRFS info (device loop1): enabling ssd optimizations [ 600.354651][ T8669] BTRFS info (device loop1): auto enabling async discard [ 600.506140][ T6060] usb 3-1: Using ep0 maxpacket: 32 [ 600.516410][ T6060] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 600.528960][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.540538][ T6060] usb 3-1: config 0 descriptor?? [ 600.549148][ T6060] gspca_main: sq930x-2.14.0 probing 041e:403c [ 602.735430][ T6060] gspca_sq930x: reg_r 001f failed -110 [ 602.784850][ T5774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 602.794262][ T6060] sq930x: probe of 3-1:0.0 failed with error -110 [ 602.819116][ T6060] usb 3-1: USB disconnect, device number 14 [ 603.066562][ T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 603.110670][ T8706] binder: 8702:8706 ioctl 80047213 2000000002c0 returned -22 [ 603.120355][ T8378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (8378) [ 603.173518][ T8706] 0: reclassify loop, rule prio 0, protocol 03 [ 603.257078][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 603.337202][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 603.379908][ T972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.392347][ T972] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 603.406195][ T972] usb 4-1: string descriptor 0 read error: -22 [ 603.412542][ T972] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 603.436096][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.576359][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 603.583714][ T5840] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 603.616338][ T5840] usb 2-1: config 0 has no interface number 0 [ 603.622534][ T5840] usb 2-1: config 0 interface 255 altsetting 237 endpoint 0x8 has invalid maxpacket 267, setting to 64 [ 603.686088][ T5840] usb 2-1: config 0 interface 255 altsetting 237 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.710320][ T5840] usb 2-1: config 0 interface 255 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.741661][ T5840] usb 2-1: config 0 interface 255 altsetting 237 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 603.782018][ T5840] usb 2-1: config 0 interface 255 has no altsetting 0 [ 603.790810][ T6061] usb 4-1: USB disconnect, device number 11 [ 603.796516][ T5840] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 603.832419][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.859765][ T5840] usb 2-1: config 0 descriptor?? [ 604.123025][ T9] usb 2-1: USB disconnect, device number 9 [ 604.195814][ T8703] syz.2.649 (8703): drop_caches: 2 [ 604.395580][ T8711] comedi comedi1: pcl816: I/O port conflict (0x6,16) [ 604.640104][ T5840] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 604.696478][ T6061] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 605.011106][ T6061] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.211127][ T6061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.250453][ T6061] usb 1-1: string descriptor 0 read error: -22 [ 605.258014][ T6061] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 605.269651][ T6061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.377427][ T6061] usb 1-1: 0:1 : does not exist [ 605.382327][ T6061] usb 1-1: 0:2 : does not exist [ 605.436241][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 605.460597][ T5840] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 605.574492][ T8720] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 605.583385][ T8720] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 605.592374][ T8720] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 605.843421][ T5840] usb 3-1: config 0 has no interface number 0 [ 605.915545][ T5840] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.025269][ T5840] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 606.230212][ T9] IPVS: starting estimator thread 0... [ 606.239191][ T5840] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 606.251020][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.260055][ T5840] usb 3-1: Product: syz [ 606.267273][ T5840] usb 3-1: Manufacturer: syz [ 606.271918][ T5840] usb 3-1: SerialNumber: syz [ 606.324240][ T5840] usb 3-1: config 0 descriptor?? [ 606.346696][ T8724] IPVS: using max 20 ests per chain, 48000 per kthread [ 606.375881][ T6061] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 606.386180][ T6061] usb 1-1: USB disconnect, device number 11 [ 606.394092][ T8726] loop3: detected capacity change from 0 to 64 [ 606.493575][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.548136][ T5840] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 606.565619][ T5840] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 606.597013][ T5840] usb 3-1: USB disconnect, device number 15 [ 606.606374][ T8729] loop1: detected capacity change from 0 to 512 [ 606.613969][ T8729] ext4: Bad value for 'data' [ 606.642397][ T28] audit: type=1326 audit(1789689235.058:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 606.758791][ T28] audit: type=1326 audit(1789689235.058:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 606.888530][ T28] audit: type=1326 audit(1789689235.058:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 606.939188][ T28] audit: type=1326 audit(1789689235.058:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.094959][ T8734] loop1: detected capacity change from 0 to 1024 [ 607.140592][ T8734] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 607.492501][ T28] audit: type=1326 audit(1789689235.078:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.652887][ T28] audit: type=1326 audit(1789689235.078:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.712069][ T28] audit: type=1326 audit(1789689235.078:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.743964][ T28] audit: type=1326 audit(1789689235.108:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.812255][ T28] audit: type=1326 audit(1789689235.108:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 607.856412][ T6061] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 608.007969][ T8743] binder: 8737:8743 ioctl 80047213 2000000002c0 returned -22 [ 608.046063][ T6061] usb 4-1: Using ep0 maxpacket: 8 [ 608.061113][ T6061] usb 4-1: unable to get BOS descriptor or descriptor too short [ 608.082333][ T6061] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 608.188102][ T8743] 0: reclassify loop, rule prio 0, protocol 03 [ 608.239585][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 608.300848][ T6061] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 608.310385][ T6061] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 608.319477][ T6061] usb 4-1: config 1 has no interface number 3 [ 608.325644][ T6061] usb 4-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 608.336620][ T6061] usb 4-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 608.347807][ T6061] usb 4-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 608.361616][ T6061] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 608.373424][ T6061] usb 4-1: config 1 interface 6 has no altsetting 0 [ 608.386060][ T6061] usb 4-1: config 1 interface 1 has no altsetting 0 [ 609.072180][ T6061] usb 4-1: string descriptor 0 read error: -22 [ 609.078588][ T6061] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.088434][ T6061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.104230][ T6061] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 609.113231][ T6061] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 609.121792][ T6061] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 609.317202][ T8738] syz.0.661 (8738): drop_caches: 2 [ 609.762915][ T9] usb 4-1: USB disconnect, device number 12 [ 609.816237][ T5840] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 609.902988][ T8771] zram: Cannot change disksize for initialized device [ 610.006530][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 610.053661][ T5840] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 610.218561][ T5840] usb 3-1: config 0 has no interface number 0 [ 610.416400][ T5840] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.456194][ T5840] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 610.480326][ T5840] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 610.492602][ T8773] X.509: signatureAlgorithm (15) differs from tbsCertificate.signature (16) [ 610.506226][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.527317][ T5840] usb 3-1: Product: syz [ 610.540143][ T5840] usb 3-1: Manufacturer: syz [ 610.547650][ T5840] usb 3-1: SerialNumber: syz [ 610.567265][ T5840] usb 3-1: config 0 descriptor?? [ 610.578116][ T5840] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 610.623250][ T8775] loop0: detected capacity change from 0 to 512 [ 610.631156][ T8775] ext4: Bad value for 'data' [ 610.825361][ T5840] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 610.881511][ T5840] quatech2: probe of 3-1:0.51 failed with error -90 [ 611.048585][ T8781] loop0: detected capacity change from 0 to 1024 [ 611.123460][ T8781] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 611.530247][ T5840] usb 3-1: USB disconnect, device number 16 [ 611.622602][ T8783] comedi comedi1: rti802: I/O port conflict (0x4,4) [ 611.928815][ T8791] loop0: detected capacity change from 0 to 64 [ 611.994082][ T8791] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 612.131536][ T8777] loop3: detected capacity change from 0 to 32768 [ 612.146653][ T8777] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 612.255840][ T8799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.689'. [ 612.283796][ T8378] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 612.296673][ T6061] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 612.367096][ T6060] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 612.513399][ T6061] usb 2-1: unable to get BOS descriptor or descriptor too short [ 612.531317][ T6061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.556047][ T6061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.592732][ T6061] usb 2-1: string descriptor 0 read error: -22 [ 612.600798][ T6060] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 612.620509][ T6061] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 612.636882][ T6060] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 612.647551][ T6061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.656471][ T6060] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.679374][ T6060] usb 1-1: config 1 has no interface number 0 [ 612.686060][ T6060] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 612.726327][ T6061] usb 2-1: selecting invalid altsetting 1 [ 612.744801][ T6060] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 612.873225][ T6061] usb 2-1: unit 3 not found! [ 613.135697][ T6060] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.256209][ T6061] usb 2-1: unit 0 not found! [ 613.261176][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.310209][ T6060] usb 1-1: Product: syz [ 613.344268][ T6060] usb 1-1: Manufacturer: syz [ 613.373486][ T6060] usb 1-1: SerialNumber: syz [ 613.420518][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.441888][ T6060] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 613.449332][ T6060] cdc_ncm 1-1:1.1: bind() failure [ 613.544482][ T6060] usb 2-1: USB disconnect, device number 10 [ 613.674543][ T6061] usb 1-1: USB disconnect, device number 12 [ 613.748078][ T8815] loop3: detected capacity change from 0 to 4096 [ 613.761230][ T8815] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 614.084909][ T8827] loop3: detected capacity change from 0 to 512 [ 614.100360][ T8827] ext4: Bad value for 'data' [ 614.700462][ T8839] loop3: detected capacity change from 0 to 1024 [ 614.717100][ T8839] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 617.160721][ T8851] loop1: detected capacity change from 0 to 1024 [ 617.498264][ T8856] loop1: detected capacity change from 0 to 512 [ 617.627695][ T8857] zram: Cannot change disksize for initialized device [ 618.202481][ T8856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.244314][ T8856] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.598188][ T8847] loop3: detected capacity change from 0 to 32768 [ 618.614964][ T8847] XFS: ikeep mount option is deprecated. [ 618.743309][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.788992][ T8847] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 618.826811][ T8847] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 619.416260][ T8847] XFS (loop3): Ending clean mount [ 619.460529][ T8847] XFS (loop3): Quotacheck needed: Please wait. [ 619.624434][ T8847] XFS (loop3): Quotacheck: Done. [ 619.743489][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 619.768462][ T8880] comedi comedi1: Cannot bond this driver to itself! [ 620.034934][ T8886] loop3: detected capacity change from 0 to 16 [ 620.073343][ T8886] erofs: (device loop3): mounted with root inode @ nid 36. [ 620.140623][ T8888] loop0: detected capacity change from 0 to 8 [ 620.148352][ T8888] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 620.232984][ T8378] udevd[8378]: incorrect cramfs checksum on /dev/loop0 [ 620.313401][ T8378] udevd[8378]: incorrect cramfs checksum on /dev/loop0 [ 622.519529][ T8904] zram: Cannot change disksize for initialized device [ 623.780366][ T8918] loop1: detected capacity change from 0 to 16 [ 623.800663][ T8918] erofs: (device loop1): mounted with root inode @ nid 36. [ 623.832725][ T8918] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[16, 2904] out[808] [ 623.846617][ T6060] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 623.863877][ T8918] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4 in[16, 2904] out[808] [ 623.896149][ T28] audit: type=1800 audit(2000000012.160:57): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.733" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 624.021634][ T8922] loop1: detected capacity change from 0 to 512 [ 624.068912][ T6060] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 624.078792][ T6060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.099259][ T6060] usb 1-1: config 0 descriptor?? [ 624.117715][ T6060] cp210x 1-1:0.0: cp210x converter detected [ 624.277256][ T8922] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 624.330369][ T8922] EXT4-fs (loop1): Remounting filesystem read-only [ 624.342308][ T8922] EXT4-fs (loop1): 1 truncate cleaned up [ 624.354003][ T8922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.549504][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.572952][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.635217][ T6060] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 624.717788][ T6060] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 624.929131][ T6060] usb 1-1: cp210x converter now attached to ttyUSB0 [ 624.996519][ T6060] usb 1-1: USB disconnect, device number 13 [ 625.063392][ T6060] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 625.101987][ T6060] cp210x 1-1:0.0: device disconnected [ 625.108295][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.468729][ T8940] comedi comedi4: bad chanlist[0]=0x0000c000 chan=49152 range length=2 [ 625.516164][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 625.652891][ T8944] loop3: detected capacity change from 0 to 512 [ 625.665610][ T8944] ext4: Bad value for 'data' [ 625.746210][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 625.774259][ T5818] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 625.806912][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.828328][ T8936] loop0: detected capacity change from 0 to 32768 [ 625.835309][ T5818] usb 2-1: Product: syz [ 625.846692][ T5818] usb 2-1: Manufacturer: syz [ 625.856062][ T5818] usb 2-1: SerialNumber: syz [ 625.891417][ T5818] usb 2-1: config 0 descriptor?? [ 625.931425][ T8936] JBD2: Ignoring recovery information on journal [ 625.942905][ T5818] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 625.955062][ T8936] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 625.967880][ T8936] JBD2: bad block at offset 32 [ 626.268416][ T5818] ssu100: probe of 2-1:0.0 failed with error -110 [ 626.310612][ T8936] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 626.519263][ T5818] usb 2-1: USB disconnect, device number 11 [ 626.665037][ T8936] ocfs2: Unmounting device (7,0) on (node local) [ 627.599189][ T8959] loop0: detected capacity change from 0 to 256 [ 628.027949][ T8976] loop0: detected capacity change from 0 to 256 [ 628.096616][ T8976] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 628.105231][ T8976] FAT-fs (loop0): Filesystem has been set read-only [ 628.171442][ T8978] ip6tnl2: entered allmulticast mode [ 628.247258][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 628.448400][ T8989] loop0: detected capacity change from 0 to 512 [ 628.458888][ T9] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 628.473309][ T8989] ext4: Bad value for 'data' [ 628.485315][ T9] usb 4-1: config 0 has no interface number 0 [ 628.509558][ T9] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 628.551157][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 628.579204][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.604464][ T9] usb 4-1: Product: syz [ 628.629602][ T9] usb 4-1: Manufacturer: syz [ 628.634270][ T9] usb 4-1: SerialNumber: syz [ 628.744139][ T9] usb 4-1: config 0 descriptor?? [ 628.751967][ T8970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.914702][ T8995] loop0: detected capacity change from 0 to 1024 [ 629.051583][ T8995] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 629.307485][ T9] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 02:0e:7b:3a:12:7b [ 629.727205][ T9002] Illegal XDP return value 5 on prog (id 32) dev N/A, expect packet loss! [ 629.996404][ T8991] loop1: detected capacity change from 0 to 32768 [ 630.033393][ T8991] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 630.164193][ T8991] XFS (loop1): Ending clean mount [ 630.180682][ T9025] loop0: detected capacity change from 0 to 512 [ 630.212749][ T9025] EXT4-fs (loop0): orphan cleanup on readonly fs [ 630.223946][ T8991] XFS (loop1): Quotacheck needed: Please wait. [ 630.232313][ T9025] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.769: ea_inode with extended attributes [ 630.258717][ T9025] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.769: error while reading EA inode 11 err=-117 [ 630.357116][ T8991] XFS (loop1): Quotacheck: Done. [ 630.381056][ T9025] EXT4-fs (loop0): 1 orphan inode deleted [ 630.397111][ T9025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 630.438924][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 630.548428][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.969493][ T9042] loop0: detected capacity change from 0 to 256 [ 630.990246][ T5818] usb 4-1: USB disconnect, device number 13 [ 631.007830][ T5818] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 631.843990][ T9073] ip_tables: iptables: counters copy to user failed while replacing table [ 631.997298][ T9077] loop1: detected capacity change from 0 to 512 [ 632.083776][ T9077] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.770: bad orphan inode 11862016 [ 632.121487][ T9077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 632.144134][ T9077] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.306274][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 632.482811][ T9066] loop3: detected capacity change from 0 to 32768 [ 632.506999][ T9066] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.782 (9066) [ 632.560614][ T9066] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 632.589481][ T9066] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 632.626511][ T9066] BTRFS info (device loop3): enabling ssd optimizations [ 632.644054][ T9066] BTRFS info (device loop3): not using ssd optimizations [ 632.664423][ T9066] BTRFS info (device loop3): turning off barriers [ 632.674349][ T9066] BTRFS info (device loop3): use no compression [ 632.699251][ T9066] BTRFS info (device loop3): using free space tree [ 632.804007][ T9096] loop1: detected capacity change from 0 to 4096 [ 632.864603][ T9096] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 633.021362][ T9096] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 633.024947][ T5777] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 633.062507][ T9096] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 633.195289][ T9120] comedi comedi4: commands at RT priority not supported in this driver [ 633.462769][ T59] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 633.496726][ T5774] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 633.513958][ T5774] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 633.560499][ T5774] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 633.644246][ T4527] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 633.723683][ T9127] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 633.784126][ T5840] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 634.179691][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.331525][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.526142][ T5840] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 634.535347][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.610755][ T5840] usb 1-1: Product: syz [ 634.615007][ T5840] usb 1-1: Manufacturer: syz [ 634.650892][ T5840] usb 1-1: SerialNumber: syz [ 634.947757][ T5840] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 635.062455][ T9144] loop3: detected capacity change from 0 to 512 [ 635.093808][ T9144] ext4: Bad value for 'data' [ 635.135201][ T5840] usb 1-1: USB disconnect, device number 14 [ 635.159900][ T5840] usblp0: removed [ 635.574862][ T9153] loop3: detected capacity change from 0 to 1024 [ 635.600424][ T9153] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 636.287045][ T9135] loop1: detected capacity change from 0 to 40427 [ 636.356140][ T9135] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 636.364398][ T9135] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 636.415746][ T9135] F2FS-fs (loop1): inline encryption not supported [ 636.466297][ T9135] F2FS-fs (loop1): journaled quota format not specified [ 636.766228][ T9172] loop1: detected capacity change from 0 to 512 [ 636.834877][ T9172] ext4: Bad value for 'data' [ 636.890339][ T9176] loop3: detected capacity change from 0 to 256 [ 637.031737][ T9181] loop0: detected capacity change from 0 to 16 [ 637.095003][ T9181] erofs: (device loop0): mounted with root inode @ nid 36. [ 637.189298][ T9181] syz.0.809: attempt to access beyond end of device [ 637.189298][ T9181] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 637.325182][ T9185] loop1: detected capacity change from 0 to 1024 [ 637.457099][ T9185] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 638.132051][ T9198] loop0: detected capacity change from 0 to 512 [ 638.238521][ T9198] ext4: Bad value for 'data' [ 638.300406][ T8373] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.699997][ T9204] loop0: detected capacity change from 0 to 1024 [ 638.799910][ T9204] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 639.556297][ T9191] loop3: detected capacity change from 0 to 32768 [ 639.585095][ T9191] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 639.815537][ T8378] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 639.874921][ T9222] comedi: No check for data length of config insn id 2 is implemented [ 639.899458][ T9220] ext4: Bad value for 'data' [ 639.906313][ T9222] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 639.935913][ T9222] comedi: Assuming n=15 is correct [ 640.201392][ T9201] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 640.201392][ T9201] [ 640.332909][ T9228] set_capacity_and_notify: 2 callbacks suppressed [ 640.332946][ T9228] loop0: detected capacity change from 0 to 1024 [ 640.369500][ T9228] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 640.533760][ T9201] ERROR: (device loop1): remounting filesystem as read-only [ 640.775516][ T9201] ialloc: diAlloc returned -5! [ 640.904421][ T9230] loop3: detected capacity change from 0 to 64 [ 641.376651][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 641.406963][ T9242] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 641.461267][ T9247] loop3: detected capacity change from 0 to 256 [ 641.475814][ T9248] loop1: detected capacity change from 0 to 512 [ 641.499069][ T9247] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 641.511675][ T9248] ext4: Bad value for 'data' [ 641.752917][ T9254] ip_tables: iptables: counters copy to user failed while replacing table [ 641.895328][ T9255] loop1: detected capacity change from 0 to 1024 [ 641.948393][ T9255] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 642.446467][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 642.693107][ T9264] loop1: detected capacity change from 0 to 512 [ 642.722334][ T9264] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.761954][ T9264] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 642.789169][ T9264] EXT4-fs (loop1): Test dummy encryption mode enabled [ 642.801896][ T9264] EXT4-fs (loop1): orphan cleanup on readonly fs [ 642.809977][ T9264] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.836: Attempting to read directory block (0) that is past i_size (256) [ 642.831025][ T9264] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 642.842731][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.059856][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.177661][ T9279] usb usb8: usbfs: process 9279 (syz.3.843) did not claim interface 0 before use [ 643.231011][ T9281] loop1: detected capacity change from 0 to 1024 [ 643.247197][ T9281] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.270630][ T9281] EXT4-fs: inline encryption not supported [ 643.282016][ T9281] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 643.365099][ T9281] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.844: lblock 2 mapped to illegal pblock 2 (length 1) [ 643.529635][ T9281] EXT4-fs (loop1): Remounting filesystem read-only [ 643.548129][ T9281] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 643.580134][ T9281] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 643.628111][ T9281] EXT4-fs (loop1): 1 orphan inode deleted [ 643.661909][ T9281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.720250][ T9283] loop0: detected capacity change from 0 to 32768 [ 643.932451][ T9283] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.846 (9283) [ 643.945505][ T5840] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 643.998035][ T9281] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 644.232104][ T9283] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 644.245520][ T5840] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.297799][ T9283] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 644.322845][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 644.366446][ T9283] BTRFS info (device loop0): enabling auto defrag [ 644.374325][ T5840] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 644.405264][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.424865][ T9283] BTRFS info (device loop0): force clearing of disk cache [ 644.434722][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.453036][ T9283] BTRFS info (device loop0): disabling log replay at mount time [ 644.460926][ T9283] BTRFS info (device loop0): turning on async discard [ 644.470853][ T9283] BTRFS info (device loop0): setting nodatacow, compression disabled [ 644.479677][ T9283] BTRFS info (device loop0): turning off async discard [ 644.486626][ T9283] BTRFS info (device loop0): disabling free space tree [ 644.493566][ T9283] BTRFS info (device loop0): disabling tree log [ 644.499921][ T9283] BTRFS info (device loop0): enabling disk space caching [ 644.507042][ T9283] BTRFS info (device loop0): disk space caching is enabled [ 644.541819][ T5840] usb 4-1: config 0 descriptor?? [ 644.922768][ T5776] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 645.068539][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.075933][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.098183][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.105375][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.136369][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.143561][ T5840] logitech 0003:046D:C623.0001: unknown main item tag 0x0 [ 645.279350][ T5840] logitech 0003:046D:C623.0001: hidraw0: USB HID v10.01 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 645.339942][ T5840] usb 4-1: USB disconnect, device number 14 [ 645.514707][ T9324] fido_id[9324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 645.966391][ T5840] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 646.187159][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.209683][ T5840] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.252281][ T5840] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 646.274816][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.293457][ T5840] usb 1-1: Product: syz [ 646.298265][ T5840] usb 1-1: Manufacturer: syz [ 646.302906][ T5840] usb 1-1: SerialNumber: syz [ 646.358929][ T9350] ip_tables: iptables: counters copy to user failed while replacing table [ 646.371639][ T5840] usb 1-1: unsupported MDLM descriptors [ 646.676336][ T6061] usb 1-1: USB disconnect, device number 15 [ 646.694518][ T9360] loop3: detected capacity change from 0 to 512 [ 646.737314][ T9360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 646.947764][ T9360] EXT4-fs (loop3): 1 truncate cleaned up [ 647.155652][ T9360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.584825][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.616755][ T9374] UBIFS error (pid: 9374): cannot open "./file0", error -22 [ 647.891144][ T9377] loop0: detected capacity change from 0 to 4096 [ 647.954506][ T9377] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 647.972514][ T9381] ip_tables: iptables: counters copy to user failed while replacing table [ 648.337327][ T9394] loop0: detected capacity change from 0 to 512 [ 648.358489][ T9394] ext4: Bad value for 'data' [ 648.398398][ T8378] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 648.519380][ T9401] capability: warning: `syz.3.886' uses deprecated v2 capabilities in a way that may be insecure [ 648.796753][ T9409] loop0: detected capacity change from 0 to 1024 [ 648.815969][ T9409] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 649.887942][ T9436] loop1: detected capacity change from 0 to 512 [ 649.895318][ T9436] ext4: Bad value for 'data' [ 649.927331][ T28] audit: type=1326 audit(2000000005.190:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 649.984255][ T28] audit: type=1326 audit(2000000005.190:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.013459][ T8378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 650.054862][ T28] audit: type=1326 audit(2000000005.190:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.092407][ T28] audit: type=1326 audit(2000000005.190:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.123167][ T28] audit: type=1326 audit(2000000005.190:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.276147][ T28] audit: type=1326 audit(2000000005.190:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.379761][ T28] audit: type=1326 audit(2000000005.190:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 650.513471][ T9450] loop1: detected capacity change from 0 to 1024 [ 650.647256][ T9450] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 650.849808][ T28] audit: type=1326 audit(2000000005.190:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 651.000990][ T28] audit: type=1326 audit(2000000005.190:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 651.075815][ T28] audit: type=1326 audit(2000000005.190:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.3.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff4f779e159 code=0x7ffc0000 [ 651.237467][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'. [ 651.263016][ T9461] tipc: Invalid UDP bearer configuration [ 651.263076][ T9461] tipc: Enabling of bearer rejected, failed to enable media [ 651.439983][ T9469] ip_tables: iptables: counters copy to user failed while replacing table [ 651.456258][ T5840] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 651.656739][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 651.666400][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 651.682727][ T5840] usb 4-1: config 4 interface 0 has no altsetting 0 [ 651.696441][ T5840] usb 4-1: string descriptor 0 read error: -22 [ 651.705784][ T5840] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 651.725223][ T5840] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 651.744627][ T5840] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 651.767457][ T5840] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 651.779894][ T5840] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 651.789362][ T5840] usb 4-1: media controller created [ 651.840855][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.086011][ T7833] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 652.198557][ T9490] loop0: detected capacity change from 0 to 256 [ 652.305626][ T7833] usb 3-1: Using ep0 maxpacket: 16 [ 652.318207][ T7833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 652.326255][ T7833] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 652.336026][ T7833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.347299][ T7833] usb 3-1: config 0 descriptor?? [ 652.437529][ T9493] loop0: detected capacity change from 0 to 4096 [ 652.456310][ T9493] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 652.740292][ T9495] loop0: detected capacity change from 0 to 8 [ 652.783958][ T7833] wacom 0003:056A:0307.0002: unknown main item tag 0x2 [ 652.801404][ T7833] wacom 0003:056A:0307.0002: unknown main item tag 0x2 [ 652.827934][ T7833] wacom 0003:056A:0307.0002: unknown main item tag 0x2 [ 652.840496][ T7833] wacom 0003:056A:0307.0002: unknown main item tag 0x6 [ 652.888528][ T7833] wacom 0003:056A:0307.0002: hidraw0: USB HID v0.08 Device [HID 056a:0307] on usb-dummy_hcd.2-1/input0 [ 652.921765][ T5840] zl10353_read_register: readreg error (reg=127, ret==0) [ 653.085982][ T7833] usb 3-1: USB disconnect, device number 17 [ 653.105207][ T5840] usb 4-1: USB disconnect, device number 15 [ 653.321893][ T9506] "syz.0.927" (9506) uses obsolete ecb(arc4) skcipher [ 653.565740][ T8502] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 653.757687][ T8502] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.783986][ T8502] usb 2-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 653.805517][ T8502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.828910][ T8502] usb 2-1: config 0 descriptor?? [ 653.890704][ T9510] loop0: detected capacity change from 0 to 32768 [ 653.911747][ T9510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.929 (9510) [ 653.949917][ T9510] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.952073][ T9512] loop3: detected capacity change from 0 to 32768 [ 653.980348][ T9510] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 653.983041][ T9512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.930 (9512) [ 653.997109][ T9510] BTRFS info (device loop0): using free space tree [ 654.042826][ T9512] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 654.063146][ T5840] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 654.073246][ T9512] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 654.082433][ T9512] BTRFS info (device loop3): using free space tree [ 654.164329][ T9512] BTRFS info (device loop3): enabling ssd optimizations [ 654.176695][ T9510] BTRFS info (device loop0): enabling ssd optimizations [ 654.192422][ T9512] BTRFS info (device loop3): auto enabling async discard [ 654.195661][ T9510] BTRFS info (device loop0): auto enabling async discard [ 654.259774][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.288300][ T8502] wacom 0003:056A:009A.0003: unknown main item tag 0x3 [ 654.295251][ T8502] wacom 0003:056A:009A.0003: unknown main item tag 0x0 [ 654.310461][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 654.335851][ T8502] wacom 0003:056A:009A.0003: collection stack underflow [ 654.343523][ T5840] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 654.362412][ T8502] wacom 0003:056A:009A.0003: item 0 4 0 12 parsing failed [ 654.375865][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.407226][ T8502] wacom 0003:056A:009A.0003: parse failed [ 654.413208][ T8502] wacom: probe of 0003:056A:009A.0003 failed with error -22 [ 654.462631][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.502568][ T8502] usb 2-1: USB disconnect, device number 12 [ 654.682279][ T5840] dvbdev: DVB: registering new adapter (DEC2000-t) [ 654.733503][ T5840] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 654.886663][ T5840] ttusb_dec_send_command: command bulk message failed: error -71 [ 654.925051][ T5840] usb 3-1: USB disconnect, device number 18 [ 655.199965][ T9550] loop0: detected capacity change from 0 to 512 [ 655.285666][ T9550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.934: bg 0: block 393: padding at end of block bitmap is not set [ 655.301950][ T5777] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 655.338795][ T9550] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 655.371351][ T9550] EXT4-fs (loop0): 2 truncates cleaned up [ 655.426879][ T9550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.653002][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.890724][ T9565] loop0: detected capacity change from 0 to 512 [ 655.936555][ T9565] ext4: Bad value for 'data' [ 656.419532][ T9572] loop0: detected capacity change from 0 to 1024 [ 656.520750][ T9572] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 656.769280][ T6061] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 656.985696][ T6061] usb 4-1: Using ep0 maxpacket: 16 [ 657.001240][ T9579] loop1: detected capacity change from 0 to 8 [ 657.010610][ T6061] usb 4-1: config 0 interface 0 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.056926][ T9579] unable to read xattr id index table [ 657.059137][ T6061] usb 4-1: config 0 interface 0 has no altsetting 0 [ 657.093142][ T6061] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 657.123565][ T6061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.149005][ T8373] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.167889][ T6061] usb 4-1: config 0 descriptor?? [ 657.630915][ T6061] playstation 0003:054C:0CE6.0004: hidraw0: USB HID v80.04 Joystick [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 657.751100][ T9579] loop1: detected capacity change from 0 to 32768 [ 657.792462][ T9579] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 657.814687][ T9579] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 657.820721][ T6061] playstation 0003:054C:0CE6.0004: Failed to retrieve feature with reportID 9: -71 [ 657.838605][ T9579] BTRFS info (device loop1): using free space tree [ 657.845849][ T6061] playstation 0003:054C:0CE6.0004: Failed to retrieve DualSense pairing info: -71 [ 657.861992][ T6061] playstation 0003:054C:0CE6.0004: Failed to get MAC address from DualSense [ 657.877323][ T6061] playstation 0003:054C:0CE6.0004: Failed to create dualsense. [ 657.904096][ T6061] playstation: probe of 0003:054C:0CE6.0004 failed with error -71 [ 657.916101][ T6060] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 657.939341][ T6061] usb 4-1: USB disconnect, device number 16 [ 658.004812][ T9583] loop0: detected capacity change from 0 to 32768 [ 658.018732][ T9579] BTRFS info (device loop1): enabling ssd optimizations [ 658.031181][ T9579] BTRFS info (device loop1): auto enabling async discard [ 658.053447][ T9579] BTRFS info (device loop1): device stats zeroed by syz.1.943 (9579) [ 658.093163][ T5774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 658.121798][ T6060] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 658.132948][ T6060] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.143347][ T6060] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 658.153504][ T6060] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 658.162882][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.212154][ T9590] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.151366][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 659.172337][ T8151] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 659.358452][ T5840] usb 3-1: USB disconnect, device number 19 [ 659.369195][ T5779] Bluetooth: hci4: Reading Intel version command failed (-71) [ 659.955562][ T9611] loop0: detected capacity change from 0 to 32768 [ 659.991845][ T9611] JBD2: Ignoring recovery information on journal [ 660.079740][ T9611] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 660.108705][ T9626] md: loop1 has zero or unknown size, marking faulty! [ 660.416574][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 661.015218][ T9632] loop3: detected capacity change from 0 to 40427 [ 661.063912][ T9632] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 661.094364][ T9632] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 661.141325][ T9632] F2FS-fs (loop3): invalid crc value [ 661.148192][ T9632] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 661.190063][ T9632] F2FS-fs (loop3): Found nat_bits in checkpoint [ 661.327200][ T9632] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 661.345657][ T9632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 661.543598][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 661.543617][ T28] audit: type=1326 audit(2000000016.820:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.584521][ T28] audit: type=1326 audit(2000000016.820:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.634466][ T28] audit: type=1326 audit(2000000016.870:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.668678][ T28] audit: type=1326 audit(2000000016.870:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.699413][ T5777] syz-executor: attempt to access beyond end of device [ 661.699413][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 661.727139][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 661.738544][ T28] audit: type=1326 audit(2000000016.870:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.798891][ T28] audit: type=1326 audit(2000000016.890:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.887519][ T28] audit: type=1326 audit(2000000016.890:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 661.975291][ T28] audit: type=1326 audit(2000000016.890:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9646 comm="syz.0.963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abf79e159 code=0x7ffc0000 [ 662.072931][ T9660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 662.774918][ T9654] loop0: detected capacity change from 0 to 40427 [ 662.800808][ T9654] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 662.807902][ T9654] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 662.841101][ T9654] F2FS-fs (loop0): invalid crc value [ 662.888372][ T9674] jffs2: notice: (9674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 663.066276][ T9654] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 663.073391][ T9654] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 663.208266][ T9666] loop1: detected capacity change from 0 to 32768 [ 663.247928][ T9666] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.973 (9666) [ 663.263016][ T5776] syz-executor: attempt to access beyond end of device [ 663.263016][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 663.309802][ T9666] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 663.334988][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 663.355145][ T9666] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 663.365525][ T9666] BTRFS info (device loop1): enabling auto defrag [ 663.372005][ T9666] BTRFS info (device loop1): force clearing of disk cache [ 663.395162][ T9666] BTRFS info (device loop1): disabling log replay at mount time [ 663.403115][ T9666] BTRFS info (device loop1): turning on async discard [ 663.412637][ T9666] BTRFS info (device loop1): setting nodatacow, compression disabled [ 663.431175][ T9666] BTRFS info (device loop1): turning off async discard [ 663.441600][ T9666] BTRFS info (device loop1): disabling free space tree [ 663.458705][ T9666] BTRFS info (device loop1): disabling tree log [ 663.470311][ T9666] BTRFS info (device loop1): enabling disk space caching [ 663.491442][ T9666] BTRFS info (device loop1): disk space caching is enabled [ 663.611078][ T9695] loop3: detected capacity change from 0 to 512 [ 663.641903][ T9695] ext4: Bad value for 'data' [ 664.081176][ T9702] loop3: detected capacity change from 0 to 1024 [ 664.163809][ T9702] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 664.574189][ T5774] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 664.895300][ T8378] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop1 scanned by udevd (8378) [ 665.125044][ T7833] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 665.214409][ T9710] md0: using deprecated bitmap file support [ 665.222720][ T9710] md0: error: bitmap file must be a regular file [ 665.335123][ T6061] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 665.343352][ T9713] loop3: detected capacity change from 0 to 1024 [ 665.349925][ T7833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.349955][ T7833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.353037][ T7833] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 665.380925][ T7833] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 665.421370][ T7833] usb 2-1: Manufacturer: syz [ 665.430989][ T7833] usb 2-1: config 0 descriptor?? [ 665.489237][ T6060] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 665.575049][ T6061] usb 1-1: Using ep0 maxpacket: 8 [ 665.589017][ T6061] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 665.607489][ T6061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 665.616195][ T6061] usb 1-1: Product: syz [ 665.620424][ T6061] usb 1-1: Manufacturer: syz [ 665.626319][ T6061] usb 1-1: SerialNumber: syz [ 665.635313][ T6061] usb 1-1: config 0 descriptor?? [ 665.644639][ T6061] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 665.706872][ T6060] usb 3-1: Using ep0 maxpacket: 16 [ 665.714747][ T6060] usb 3-1: config 0 interface 0 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.729694][ T6060] usb 3-1: config 0 interface 0 has no altsetting 0 [ 665.736721][ T6060] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 665.746455][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.769934][ T9715] tipc: Started in network mode [ 665.774959][ T6060] usb 3-1: config 0 descriptor?? [ 665.780123][ T9715] tipc: Node identity :, cluster identity 4711 [ 665.790334][ T9715] tipc: Enabling of bearer rejected, failed to enable media [ 665.860721][ T6061] gspca_sn9c2028: read1 error -32 [ 665.870541][ T6061] gspca_sn9c2028: read1 error -32 [ 666.090184][ T7833] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 666.105278][ T7833] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 666.112921][ T7833] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 666.132171][ T7833] usb 2-1: USB disconnect, device number 13 [ 666.143108][ T5840] usb 1-1: USB disconnect, device number 16 [ 666.166969][ T9722] ip_tables: iptables: counters copy to user failed while replacing table [ 666.231062][ T6060] playstation 0003:054C:0CE6.0006: hidraw0: USB HID v80.04 Joystick [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 666.413400][ T6060] playstation 0003:054C:0CE6.0006: Failed to retrieve feature with reportID 9: -71 [ 666.425597][ T6060] playstation 0003:054C:0CE6.0006: Failed to retrieve DualSense pairing info: -71 [ 666.435409][ T6060] playstation 0003:054C:0CE6.0006: Failed to get MAC address from DualSense [ 666.444252][ T6060] playstation 0003:054C:0CE6.0006: Failed to create dualsense. [ 666.462338][ T6060] playstation: probe of 0003:054C:0CE6.0006 failed with error -71 [ 666.476587][ T6060] usb 3-1: USB disconnect, device number 20 [ 666.766931][ T9727] loop0: detected capacity change from 0 to 128 [ 666.801651][ T9727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.820061][ T9727] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.840722][ T9727] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 666.954478][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.077904][ T9733] comedi comedi2: pcl812: I/O port conflict (0x140,16) [ 667.257435][ T9738] loop3: detected capacity change from 0 to 4096 [ 667.520823][ T9738] EXT4-fs (loop3): Test dummy encryption mode enabled [ 667.564177][ T9738] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 667.577541][ T9738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.614986][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 667.721499][ T9738] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 667.806776][ T9738] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 667.837494][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 667.863284][ T9738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.873568][ T9] usb 1-1: can't read configurations, error -71 [ 667.926136][ T9738] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 667.944960][ T9738] System zones: 0-5 [ 667.955713][ T9738] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 668.027138][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.221766][ T9763] ip_tables: iptables: counters copy to user failed while replacing table [ 668.225042][ T7833] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 668.395169][ T5840] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 668.411809][ T9765] loop0: detected capacity change from 0 to 512 [ 668.419342][ T9765] ext4: Bad value for 'data' [ 668.427578][ T7833] usb 2-1: Using ep0 maxpacket: 32 [ 668.448132][ T7833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 62464, setting to 1024 [ 668.459657][ T7833] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 668.484208][ T7833] usb 2-1: string descriptor 0 read error: -22 [ 668.501024][ T7833] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 668.527674][ T7833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.561404][ T9758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 668.607663][ T7833] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 668.634141][ T7833] usb 2-1: MIDIStreaming interface descriptor not found [ 668.790766][ T9767] loop0: detected capacity change from 0 to 1024 [ 668.834552][ T9767] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 669.317785][ T7833] usb 2-1: USB disconnect, device number 14 [ 669.481095][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.494230][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.509272][ T5840] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 669.518753][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.536015][ T5840] usb 4-1: config 0 descriptor?? [ 669.850410][ T6061] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 669.964159][ T5840] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 669.975023][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 669.988303][ T5840] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 669.999879][ T5840] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 670.011915][ T5840] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 670.021309][ T5840] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 670.043309][ T5840] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 670.153811][ T5840] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 140 [ 670.168066][ T5840] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 670.177969][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 670.189317][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.203352][ T5840] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 670.219964][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.231342][ T5840] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 670.245885][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 670.265580][ T5840] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 670.273831][ T9] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 670.293576][ T9] usb 1-1: Manufacturer: syz [ 670.322080][ T9] usb 1-1: config 0 descriptor?? [ 670.403009][ T5840] usb 4-1: USB disconnect, device number 17 [ 670.963572][ T9] letsketch 0003:6161:4D15.0008: Device info: а [ 670.991946][ T9773] loop1: detected capacity change from 0 to 131072 [ 671.007193][ T9773] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 671.015119][ T9773] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 671.023404][ T9773] F2FS-fs (loop1): Test dummy encryption mode enabled [ 671.042000][ T9773] F2FS-fs (loop1): invalid crc value [ 671.060375][ T9773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 671.102660][ T9773] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 671.122371][ T9773] F2FS-fs (loop1): Start checkpoint disabled! [ 671.161814][ T9773] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 671.168995][ T9773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 671.179533][ T6061] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.203439][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 671.204729][ T6061] usb 3-1: config 0 has no interface number 0 [ 671.218183][ T9] letsketch: probe of 0003:6161:4D15.0008 failed with error -71 [ 671.246957][ T6061] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 671.251045][ T9] usb 1-1: USB disconnect, device number 19 [ 671.289786][ T6061] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 671.317858][ T6061] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 671.356628][ T6061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.387659][ T6061] usb 3-1: config 0 descriptor?? [ 671.425902][ T9770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 671.460433][ T6061] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 671.681339][ T6061] usb 3-1: USB disconnect, device number 21 [ 671.980094][ T9794] loop3: detected capacity change from 0 to 512 [ 672.016436][ T9794] ext4: Bad value for 'data' [ 672.069358][ T8378] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.425046][ T9797] loop3: detected capacity change from 0 to 1024 [ 672.500216][ T9797] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 672.883995][ T9792] loop0: detected capacity change from 0 to 32768 [ 672.943954][ T9792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1010 (9792) [ 673.029746][ T9792] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.105737][ T9792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 673.164588][ T9792] BTRFS info (device loop0): setting nodatasum [ 673.174791][ T9792] BTRFS info (device loop0): force zlib compression, level 3 [ 673.234976][ T9792] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 673.274880][ T9792] BTRFS info (device loop0): use lzo compression, level 0 [ 673.311944][ T9792] BTRFS info (device loop0): turning on flush-on-commit [ 673.330247][ T9792] BTRFS info (device loop0): enabling auto defrag [ 673.345030][ T9792] BTRFS info (device loop0): max_inline at 4096 [ 673.361780][ T9792] BTRFS info (device loop0): using free space tree [ 673.468056][ T9792] BTRFS info (device loop0): enabling ssd optimizations [ 673.636421][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 673.681856][ T9831] i2c i2c-0: new_device: Missing parameters [ 673.767279][ T8378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (8378) [ 673.784655][ T6061] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 673.953506][ T9838] loop1: detected capacity change from 0 to 512 [ 673.990950][ T9838] ext4: Bad value for 'data' [ 674.216290][ T6061] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.230262][ T6061] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.240198][ T6061] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 674.250038][ T6061] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.617932][ T9839] loop1: detected capacity change from 0 to 1024 [ 674.626772][ T6061] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 674.636088][ T6061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.644173][ T9839] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 674.994518][ T9843] loop1: detected capacity change from 0 to 128 [ 675.017291][ T9843] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 675.113687][ T9835] loop0: detected capacity change from 0 to 32768 [ 675.169869][ T9835] (syz.0.1018,9835,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 675.203794][ T9835] (syz.0.1018,9835,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 675.243045][ T9835] JBD2: Ignoring recovery information on journal [ 675.365278][ T9841] loop3: detected capacity change from 0 to 40427 [ 675.373442][ T6061] gud 3-1:1.0: Failed to get properties (error=-71) [ 675.380297][ T9841] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 675.388161][ T9841] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 675.399017][ T9835] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 675.409344][ T9841] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 675.418473][ T9841] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 675.425567][ T6061] gud: probe of 3-1:1.0 failed with error -71 [ 675.435599][ T9841] F2FS-fs (loop3): invalid crc value [ 675.444185][ T9841] F2FS-fs (loop3): Found nat_bits in checkpoint [ 675.516015][ T6061] usb 3-1: USB disconnect, device number 22 [ 675.592897][ T9841] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 675.621852][ T9841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 675.788218][ T9841] syz.3.1022: attempt to access beyond end of device [ 675.788218][ T9841] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 675.820847][ T9841] syz.3.1022: attempt to access beyond end of device [ 675.820847][ T9841] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 675.936647][ T5777] syz-executor: attempt to access beyond end of device [ 675.936647][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 675.958113][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 675.986362][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 676.349028][ T9859] loop0: detected capacity change from 0 to 512 [ 676.383962][ T9859] EXT4-fs: inline encryption not supported [ 676.436601][ T9859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 676.474153][ T9850] loop1: detected capacity change from 0 to 40427 [ 676.488822][ T9859] EXT4-fs (loop0): 1 truncate cleaned up [ 676.506953][ T9850] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 676.513961][ T9850] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 676.524096][ T9859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.555432][ T28] audit: type=1800 audit(2000000031.841:80): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1025" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 676.621849][ T9850] F2FS-fs (loop1): invalid crc value [ 676.642287][ T28] audit: type=1804 audit(2000000031.851:81): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1025" name="/newroot/249/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 676.644517][ T9850] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 676.698418][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.737643][ T9850] F2FS-fs (loop1): Found nat_bits in checkpoint [ 676.926952][ T9850] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 676.944426][ T9850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 677.079925][ T28] audit: type=1804 audit(2000000032.361:82): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1024" name="/newroot/258/file1/file1" dev="loop1" ino=10 res=1 errno=0 [ 677.167755][ T5774] syz-executor: attempt to access beyond end of device [ 677.167755][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 677.216819][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 677.887290][ T9870] loop0: detected capacity change from 0 to 40427 [ 677.901824][ T9870] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 677.937191][ T9870] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 677.996656][ T9870] F2FS-fs (loop0): invalid crc value [ 678.002040][ T9870] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 678.060434][ T9870] F2FS-fs (loop0): Found nat_bits in checkpoint [ 678.126378][ T9870] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 678.133478][ T9870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 678.280273][ T5776] syz-executor: attempt to access beyond end of device [ 678.280273][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 678.302971][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 678.314388][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 678.525699][ T23] usb 3-1: config 0 has no interfaces? [ 678.533873][ T23] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 678.549400][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.562156][ T23] usb 3-1: config 0 descriptor?? [ 678.764259][ T7833] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 678.798634][ T9] usb 3-1: USB disconnect, device number 23 [ 678.946658][ T9896] jffs2: notice: (9896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 678.975975][ T7833] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.994434][ T7833] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 679.024247][ T7833] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 679.042848][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.230907][ T9892] loop3: detected capacity change from 0 to 32768 [ 679.255542][ T9892] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 679.284488][ T7833] dvbdev: DVB: registering new adapter (DEC2000-t) [ 679.300534][ T7833] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 679.371501][ T9892] XFS (loop3): Ending clean mount [ 679.485915][ T7833] ttusb_dec_send_command: command bulk message failed: error -71 [ 679.507901][ T7833] usb 2-1: USB disconnect, device number 15 [ 679.592139][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 679.663097][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 679.894250][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 679.906521][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.934091][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.965851][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 679.972534][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 679.993326][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.005140][ T23] usb 1-1: config 0 descriptor?? [ 680.235033][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.244682][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.487841][ T23] hid (null): invalid report_size 27387 [ 680.504648][ T23] hid (null): unknown global tag 0x72 [ 680.511490][ T23] hid (null): unknown global tag 0xe [ 680.518262][ T23] hid (null): unknown global tag 0xe [ 680.523751][ T23] hid (null): invalid report_count 32874 [ 680.700097][ T9] usb 1-1: USB disconnect, device number 20 [ 680.795155][ T9938] md: array md0 already has disks! [ 680.994198][ T8502] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 681.196163][ T8502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.214138][ T8502] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 681.254069][ T8502] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 681.263186][ T8502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.278924][ T9945] loop1: detected capacity change from 0 to 4096 [ 681.347717][ T9945] NILFS (loop1): invalid segment: Checksum error in segment payload [ 681.371671][ T9945] NILFS (loop1): trying rollback from an earlier position [ 681.460377][ T9945] NILFS (loop1): recovery complete [ 681.496555][ T9951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.567948][ T8502] dvbdev: DVB: registering new adapter (DEC2000-t) [ 681.608208][ T8502] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 681.762745][ T8502] ttusb_dec_send_command: command bulk message failed: error -71 [ 681.783035][ T8502] usb 4-1: USB disconnect, device number 18 [ 681.834122][ T7833] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 682.034321][ T7833] usb 1-1: Using ep0 maxpacket: 32 [ 682.040599][ T9964] loop1: detected capacity change from 0 to 8192 [ 682.054751][ T7833] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 682.077884][ T7833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.096395][ T9964] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 682.120757][ T7833] usb 1-1: config 0 descriptor?? [ 682.159342][ T9964] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 682.181402][ T9964] REISERFS (device loop1): using ordered data mode [ 682.216138][ T9964] reiserfs: using flush barriers [ 682.230560][ T9964] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 682.269045][ T9964] REISERFS (device loop1): checking transaction log (loop1) [ 682.361274][ T7833] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 682.419759][ T7833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 682.430358][ T7833] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 682.443949][ T9964] REISERFS (device loop1): Using tea hash to sort names [ 682.459921][ T7833] usb 1-1: media controller created [ 682.470159][ T9964] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 682.507890][ T7833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.593274][ T7833] az6027: usb out operation failed. (-71) [ 682.621853][ T7833] az6027: usb out operation failed. (-71) [ 682.634855][ T7833] stb0899_attach: Driver disabled by Kconfig [ 682.638963][ T28] audit: type=1804 audit(2000000037.912:83): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1066" name="/newroot/265/file6/file0" dev="loop1" ino=4 res=1 errno=0 [ 682.651200][ T7833] az6027: no front-end attached [ 682.651200][ T7833] [ 682.700734][ T7833] az6027: usb out operation failed. (-71) [ 682.724131][ T7833] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 682.758456][ T7833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 682.814643][ T7833] dvb-usb: schedule remote query interval to 400 msecs. [ 682.821657][ T7833] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 682.875546][ T7833] usb 1-1: USB disconnect, device number 21 [ 683.048748][ T7833] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 683.423608][ T9981] ip_tables: iptables: counters copy to user failed while replacing table [ 684.555238][ T6061] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 684.766276][ T6061] usb 2-1: config 0 has no interfaces? [ 684.773882][ T6061] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 684.808172][ T6061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.836551][ T6061] usb 2-1: config 0 descriptor?? [ 685.062301][ T6061] usb 2-1: USB disconnect, device number 16 [ 685.101888][T10030] ip_tables: iptables: counters copy to user failed while replacing table [ 685.919929][T10063] loop3: detected capacity change from 0 to 512 [ 685.953909][ T8151] Bluetooth: hci3: command 0x0405 tx timeout [ 685.968107][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.977605][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.984310][T10063] EXT4-fs (loop3): Test dummy encryption mode enabled [ 686.027809][T10063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 686.069378][T10063] EXT4-fs (loop3): 1 truncate cleaned up [ 686.102004][T10063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.176586][T10063] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 686.254048][T10063] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 686.463920][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.508225][T10135] FAULT_INJECTION: forcing a failure. [ 687.508225][T10135] name failslab, interval 1, probability 0, space 0, times 1 [ 687.533851][T10135] CPU: 0 PID: 10135 Comm: syz.2.1121 Not tainted syzkaller #0 [ 687.541378][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.551518][T10135] Call Trace: [ 687.554838][T10135] [ 687.557826][T10135] dump_stack_lvl+0x18c/0x250 [ 687.562626][T10135] ? show_regs_print_info+0x20/0x20 [ 687.567920][T10135] ? load_image+0x420/0x420 [ 687.572521][T10135] should_fail_ex+0x394/0x4c0 [ 687.577292][T10135] should_failslab+0x9/0x20 [ 687.581878][T10135] slab_pre_alloc_hook+0x59/0x300 [ 687.586974][T10135] ? proc_thread_self_get_link+0xfc/0x190 [ 687.592757][T10135] __kmem_cache_alloc_node+0x53/0x250 [ 687.598198][T10135] ? proc_thread_self_get_link+0xfc/0x190 [ 687.603981][T10135] kmalloc_trace+0x2a/0xe0 [ 687.608455][T10135] proc_thread_self_get_link+0xfc/0x190 [ 687.614087][T10135] ? proc_setup_thread_self+0x2c0/0x2c0 [ 687.619678][T10135] pick_link+0x6a8/0xdd0 [ 687.624013][T10135] step_into+0xc18/0xee0 [ 687.628315][T10135] ? set_root+0x3a0/0x3a0 [ 687.632697][T10135] ? lookup_fast+0x14a/0x4c0 [ 687.637341][T10135] ? security_inode_permission+0xb0/0xf0 [ 687.643068][T10135] link_path_walk+0x748/0xe40 [ 687.647843][T10135] ? handle_lookup_down+0x130/0x130 [ 687.653107][T10135] __filename_parentat+0x231/0x650 [ 687.658272][T10135] ? vfs_path_parent_lookup+0x50/0x50 [ 687.663681][T10135] ? __kasan_slab_alloc+0x6c/0x80 [ 687.668798][T10135] do_renameat2+0x25e/0xc80 [ 687.673360][T10135] ? fsnotify_move+0x4e0/0x4e0 [ 687.678189][T10135] ? __check_object_size+0x4fc/0xa40 [ 687.683523][T10135] ? strncpy_from_user+0x1a1/0x2f0 [ 687.688681][T10135] ? getname_flags+0x20a/0x500 [ 687.693486][T10135] __x64_sys_rename+0x86/0x90 [ 687.698232][T10135] do_syscall_64+0x55/0xb0 [ 687.702697][T10135] ? clear_bhb_loop+0x40/0x90 [ 687.707465][T10135] ? clear_bhb_loop+0x40/0x90 [ 687.712209][T10135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.718194][T10135] RIP: 0033:0x7fb44bb9e159 [ 687.722648][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.742328][T10135] RSP: 002b:00007fb44c9ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 687.750798][T10135] RAX: ffffffffffffffda RBX: 00007fb44be25fa0 RCX: 00007fb44bb9e159 [ 687.758797][T10135] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000380 [ 687.766813][T10135] RBP: 00007fb44bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 687.774829][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.782836][T10135] R13: 00007fb44be26038 R14: 00007fb44be25fa0 R15: 00007ffddda17248 [ 687.790856][T10135] [ 687.894831][T10141] loop3: detected capacity change from 0 to 4096 [ 687.935052][T10141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 687.944029][ T5840] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 687.975842][T10141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.142661][ T5840] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.150862][ T5840] usb 1-1: config 0 has no interface number 0 [ 688.157707][ T5840] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 688.177036][ T5840] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 688.194010][ T5840] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 688.213719][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.240260][ T5840] usb 1-1: config 0 descriptor?? [ 688.267105][T10132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 688.318364][ T5840] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 688.460426][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.614854][ T6061] usb 1-1: USB disconnect, device number 22 [ 688.773726][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 688.975870][ T23] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.994207][ T23] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.022254][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.033550][ T23] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 689.050868][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.070339][ T23] usb 2-1: config 0 descriptor?? [ 689.109925][T10180] loop3: detected capacity change from 0 to 8192 [ 689.364551][ T28] audit: type=1326 audit(2000000044.642:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.2.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb44bb9e159 code=0x0 [ 689.490715][ T23] hid (null): bogus close delimiter [ 689.507104][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.517544][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.526121][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.535132][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.542834][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x7 [ 689.551225][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x6 [ 689.570802][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.588948][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.609419][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.622283][ T23] hid-multitouch 0003:0EEF:72C4.000A: unknown main item tag 0x0 [ 689.674156][ T23] hid-multitouch 0003:0EEF:72C4.000A: bogus close delimiter [ 689.695683][ T23] hid-multitouch 0003:0EEF:72C4.000A: item 0 1 2 10 parsing failed [ 689.713255][ T23] hid-multitouch: probe of 0003:0EEF:72C4.000A failed with error -22 [ 689.743549][ T23] usb 2-1: USB disconnect, device number 17 [ 690.994213][ T6061] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 691.116739][ T5779] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 691.216020][ T6061] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.229743][ T6061] usb 4-1: config 0 has no interface number 0 [ 691.243818][ T6061] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 691.258389][ T6061] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 691.278963][ T6061] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.295632][ T6061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.315448][ T6061] usb 4-1: config 0 descriptor?? [ 691.330672][T10223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 691.353754][ T6061] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 691.618395][ T8502] usb 4-1: USB disconnect, device number 19 [ 692.270572][T10250] loop1: detected capacity change from 0 to 32768 [ 692.281051][ T28] audit: type=1800 audit(2000000047.562:85): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1164" name="addr_adrfam" dev="configfs" ino=22416 res=0 errno=0 [ 692.310501][T10255] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 692.345049][T10250] (syz.1.1162,10250,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 692.374175][T10250] (syz.1.1162,10250,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 692.420150][T10250] JBD2: Ignoring recovery information on journal [ 692.487879][T10258] loop3: detected capacity change from 0 to 512 [ 692.520125][T10250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 692.564689][T10258] ext4: Bad value for 'data' [ 692.647324][ T8373] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 692.904309][T10258] loop3: detected capacity change from 0 to 1024 [ 692.913639][T10258] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 693.029812][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 693.073649][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 693.230376][T10268] loop3: detected capacity change from 0 to 1024 [ 693.644453][T10279] loop3: detected capacity change from 0 to 512 [ 693.651821][T10279] ext4: Bad value for 'data' [ 693.917144][T10279] loop3: detected capacity change from 0 to 1024 [ 693.926066][T10279] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 694.023650][T10281] FAULT_INJECTION: forcing a failure. [ 694.023650][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 694.113537][T10281] CPU: 0 PID: 10281 Comm: syz.2.1173 Not tainted syzkaller #0 [ 694.121077][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.131157][T10281] Call Trace: [ 694.134448][T10281] [ 694.137392][T10281] dump_stack_lvl+0x18c/0x250 [ 694.142099][T10281] ? show_regs_print_info+0x20/0x20 [ 694.147330][T10281] ? load_image+0x420/0x420 [ 694.151853][T10281] ? __might_sleep+0xe0/0xe0 [ 694.156489][T10281] ? __lock_acquire+0x7d80/0x7d80 [ 694.161531][T10281] ? mark_lock+0x94/0x320 [ 694.165875][T10281] should_fail_ex+0x394/0x4c0 [ 694.170620][T10281] should_failslab+0x9/0x20 [ 694.175166][T10281] slab_pre_alloc_hook+0x59/0x300 [ 694.180230][T10281] kmem_cache_alloc+0x5a/0x2c0 [ 694.185025][T10281] ? mas_alloc_nodes+0x2f8/0x8c0 [ 694.189984][T10281] mas_alloc_nodes+0x2f8/0x8c0 [ 694.194778][T10281] mas_preallocate+0xa1f/0x1170 [ 694.199660][T10281] ? lockdep_softirqs_off+0x440/0x440 [ 694.205054][T10281] ? mas_destroy+0x20a0/0x20a0 [ 694.209841][T10281] ? vma_iter_config+0xe6/0x270 [ 694.214726][T10281] __split_vma+0x2dd/0xc20 [ 694.219176][T10281] ? mmap_write_unlock+0x160/0x160 [ 694.224323][T10281] ? split_vma+0x8f/0x110 [ 694.228682][T10281] madvise_update_vma+0x44e/0xda0 [ 694.233732][T10281] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 694.239486][T10281] ? read_lock_is_recursive+0x20/0x20 [ 694.244889][T10281] madvise_set_anon_name+0x30b/0x440 [ 694.250198][T10281] ? anon_vma_name+0x140/0x140 [ 694.254989][T10281] ? prctl_set_vma+0x199/0x400 [ 694.259773][T10281] prctl_set_vma+0x1dc/0x400 [ 694.264385][T10281] __se_sys_prctl+0x3fe/0x1510 [ 694.269179][T10281] ? __x64_sys_prctl+0xc0/0xc0 [ 694.273987][T10281] ? __x64_sys_prctl+0x20/0xc0 [ 694.278826][T10281] do_syscall_64+0x55/0xb0 [ 694.283271][T10281] ? clear_bhb_loop+0x40/0x90 [ 694.287983][T10281] ? clear_bhb_loop+0x40/0x90 [ 694.292695][T10281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.298610][T10281] RIP: 0033:0x7fb44bb9e159 [ 694.303124][T10281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.322744][T10281] RSP: 002b:00007fb44c9ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 694.331198][T10281] RAX: ffffffffffffffda RBX: 00007fb44be25fa0 RCX: 00007fb44bb9e159 [ 694.339193][T10281] RDX: 0000200000ffd000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 694.347195][T10281] RBP: 00007fb44bc3506b R08: 0000200000000000 R09: 0000000000000000 [ 694.355235][T10281] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 694.363221][T10281] R13: 00007fb44be26038 R14: 00007fb44be25fa0 R15: 00007ffddda17248 [ 694.371226][T10281] [ 694.767282][T10274] loop0: detected capacity change from 0 to 40427 [ 694.778248][T10274] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x7ffff [ 695.021498][T10295] [ 695.023894][T10295] ====================================================== [ 695.030966][T10295] WARNING: possible circular locking dependency detected [ 695.038025][T10295] syzkaller #0 Not tainted [ 695.042463][T10295] ------------------------------------------------------ [ 695.049501][T10295] syz.1.1179/10295 is trying to acquire lock: [ 695.055685][T10295] ffff88814e8b40e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390 [ 695.065105][T10295] [ 695.065105][T10295] but task is already holding lock: [ 695.072472][T10295] ffff8881488c9888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 695.082102][T10295] [ 695.082102][T10295] which lock already depends on the new lock. [ 695.082102][T10295] [ 695.092523][T10295] [ 695.092523][T10295] the existing dependency chain (in reverse order) is: [ 695.101544][T10295] [ 695.101544][T10295] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 695.109738][T10295] __mutex_lock+0x135/0xc80 [ 695.114907][T10295] bd_finish_claiming+0x229/0x3f0 [ 695.120471][T10295] blkdev_get_by_dev+0x469/0x610 [ 695.125956][T10295] bdev_open_by_dev+0x77/0x100 [ 695.131354][T10295] setup_bdev_super+0x59/0x660 [ 695.136656][T10295] mount_bdev+0x1ce/0x2c0 [ 695.141518][T10295] legacy_get_tree+0xea/0x180 [ 695.146754][T10295] vfs_get_tree+0x8c/0x280 [ 695.151716][T10295] do_new_mount+0x24a/0xa40 [ 695.156752][T10295] init_mount+0xde/0x130 [ 695.161634][T10295] do_mount_root+0x97/0x230 [ 695.166680][T10295] mount_root_generic+0x1a6/0x3e0 [ 695.172243][T10295] prepare_namespace+0xc2/0x100 [ 695.177629][T10295] kernel_init_freeable+0x41a/0x560 [ 695.183371][T10295] kernel_init+0x1d/0x1c0 [ 695.188259][T10295] ret_from_fork+0x48/0x80 [ 695.193206][T10295] ret_from_fork_asm+0x11/0x20 [ 695.198528][T10295] [ 695.198528][T10295] -> #3 (bdev_lock){+.+.}-{3:3}: [ 695.205659][T10295] __mutex_lock+0x135/0xc80 [ 695.210703][T10295] bd_prepare_to_claim+0x1d9/0x4a0 [ 695.216429][T10295] truncate_bdev_range+0x4e/0x260 [ 695.221979][T10295] blkdev_common_ioctl+0x1c7a/0x2580 [ 695.227906][T10295] blkdev_ioctl+0x512/0x730 [ 695.232941][T10295] __se_sys_ioctl+0xfd/0x170 [ 695.238066][T10295] do_syscall_64+0x55/0xb0 [ 695.243027][T10295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.249472][T10295] [ 695.249472][T10295] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 695.257835][T10295] down_write+0x97/0x200 [ 695.262707][T10295] set_blocksize+0x247/0x4b0 [ 695.267839][T10295] sb_min_blocksize+0xbe/0x190 [ 695.273173][T10295] ext4_fill_super+0x6e7/0x6870 [ 695.278593][T10295] get_tree_bdev+0x3e5/0x520 [ 695.283749][T10295] vfs_get_tree+0x8c/0x280 [ 695.288696][T10295] do_new_mount+0x24a/0xa40 [ 695.293739][T10295] init_mount+0xde/0x130 [ 695.298521][T10295] do_mount_root+0x97/0x230 [ 695.303643][T10295] mount_root_generic+0x1a6/0x3e0 [ 695.309196][T10295] prepare_namespace+0xc2/0x100 [ 695.314581][T10295] kernel_init_freeable+0x41a/0x560 [ 695.320314][T10295] kernel_init+0x1d/0x1c0 [ 695.325271][T10295] ret_from_fork+0x48/0x80 [ 695.330234][T10295] ret_from_fork_asm+0x11/0x20 [ 695.335539][T10295] [ 695.335539][T10295] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 695.344186][T10295] down_write+0x97/0x200 [ 695.348976][T10295] set_blocksize+0x1ff/0x4b0 [ 695.354098][T10295] sb_min_blocksize+0xbe/0x190 [ 695.359399][T10295] ext4_fill_super+0x6e7/0x6870 [ 695.364783][T10295] get_tree_bdev+0x3e5/0x520 [ 695.369905][T10295] vfs_get_tree+0x8c/0x280 [ 695.374873][T10295] do_new_mount+0x24a/0xa40 [ 695.380001][T10295] init_mount+0xde/0x130 [ 695.384786][T10295] do_mount_root+0x97/0x230 [ 695.389832][T10295] mount_root_generic+0x1a6/0x3e0 [ 695.395392][T10295] prepare_namespace+0xc2/0x100 [ 695.400779][T10295] kernel_init_freeable+0x41a/0x560 [ 695.406538][T10295] kernel_init+0x1d/0x1c0 [ 695.411398][T10295] ret_from_fork+0x48/0x80 [ 695.416374][T10295] ret_from_fork_asm+0x11/0x20 [ 695.421675][T10295] [ 695.421675][T10295] -> #0 (&type->s_umount_key#32){++++}-{3:3}: [ 695.429968][T10295] __lock_acquire+0x37ef/0x7d80 [ 695.435369][T10295] lock_acquire+0x19e/0x420 [ 695.440496][T10295] down_read+0x46/0x2e0 [ 695.445182][T10295] super_lock+0x189/0x390 [ 695.450043][T10295] fs_bdev_mark_dead+0xad/0x1f0 [ 695.455423][T10295] bdev_mark_dead+0x83/0x1a0 [ 695.460547][T10295] blk_report_disk_dead+0x21c/0x3e0 [ 695.466291][T10295] del_gendisk+0x2cb/0x8f0 [ 695.471242][T10295] sd_remove+0x8d/0x100 [ 695.475982][T10295] device_release_driver_internal+0x458/0x6f0 [ 695.482604][T10295] bus_remove_device+0x43b/0x520 [ 695.488109][T10295] device_del+0x51f/0x910 [ 695.493001][T10295] __scsi_remove_device+0x1a2/0x390 [ 695.498785][T10295] scsi_forget_host+0xd0/0x110 [ 695.504143][T10295] scsi_remove_host+0x1b3/0x730 [ 695.509547][T10295] virtscsi_remove+0x130/0x1a0 [ 695.514867][T10295] virtio_dev_remove+0x96/0x1a0 [ 695.520320][T10295] device_release_driver_internal+0x408/0x6f0 [ 695.526932][T10295] bus_remove_device+0x43b/0x520 [ 695.532413][T10295] device_del+0x51f/0x910 [ 695.537312][T10295] device_unregister+0x20/0xc0 [ 695.542613][T10295] unregister_virtio_device+0x37/0x60 [ 695.548528][T10295] virtio_pci_remove+0x7f/0xf0 [ 695.553839][T10295] pci_device_remove+0x97/0x230 [ 695.559250][T10295] device_release_driver_internal+0x408/0x6f0 [ 695.565847][T10295] pci_stop_bus_device+0x108/0x140 [ 695.571503][T10295] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 695.578573][T10295] remove_store+0xe6/0x150 [ 695.583538][T10295] kernfs_fop_write_iter+0x3a4/0x520 [ 695.589356][T10295] vfs_write+0x474/0x9a0 [ 695.594147][T10295] ksys_write+0x151/0x260 [ 695.599016][T10295] do_syscall_64+0x55/0xb0 [ 695.603962][T10295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.610395][T10295] [ 695.610395][T10295] other info that might help us debug this: [ 695.610395][T10295] [ 695.620629][T10295] Chain exists of: [ 695.620629][T10295] &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock [ 695.620629][T10295] [ 695.634295][T10295] Possible unsafe locking scenario: [ 695.634295][T10295] [ 695.641835][T10295] CPU0 CPU1 [ 695.647238][T10295] ---- ---- [ 695.652609][T10295] lock(&bdev->bd_holder_lock); [ 695.657575][T10295] lock(bdev_lock); [ 695.663998][T10295] lock(&bdev->bd_holder_lock); [ 695.671465][T10295] rlock(&type->s_umount_key#32); [ 695.676755][T10295] [ 695.676755][T10295] *** DEADLOCK *** [ 695.676755][T10295] [ 695.684915][T10295] 9 locks held by syz.1.1179/10295: [ 695.690113][T10295] #0: ffff888078bea348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 695.699366][T10295] #1: ffff888019728418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 695.708282][T10295] #2: ffff8880784f8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 695.718046][T10295] #3: ffffffff8d816548 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x12/0x30 [ 695.730103][T10295] #4: ffff8880192dc1f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 695.740712][T10295] #5: ffff8881416a51b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 695.751261][T10295] #6: ffff8880229880e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 695.761193][T10295] #7: ffff8880237403b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 695.771728][T10295] #8: ffff8881488c9888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 695.781755][T10295] [ 695.781755][T10295] stack backtrace: [ 695.787648][T10295] CPU: 1 PID: 10295 Comm: syz.1.1179 Not tainted syzkaller #0 [ 695.795109][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.805176][T10295] Call Trace: [ 695.808465][T10295] [ 695.811412][T10295] dump_stack_lvl+0x18c/0x250 [ 695.816123][T10295] ? load_image+0x420/0x420 [ 695.820671][T10295] ? show_regs_print_info+0x20/0x20 [ 695.825893][T10295] ? print_circular_bug+0x12b/0x1a0 [ 695.831107][T10295] check_noncircular+0x2fc/0x400 [ 695.836062][T10295] ? print_deadlock_bug+0x5d0/0x5d0 [ 695.841276][T10295] ? lockdep_lock+0xf5/0x230 [ 695.845883][T10295] ? _find_first_zero_bit+0xd6/0x100 [ 695.851206][T10295] __lock_acquire+0x37ef/0x7d80 [ 695.856080][T10295] ? __lock_acquire+0x1262/0x7d80 [ 695.861115][T10295] ? verify_lock_unused+0x140/0x140 [ 695.866321][T10295] ? verify_lock_unused+0x140/0x140 [ 695.871565][T10295] ? find_lock_entries+0x120/0x1020 [ 695.876788][T10295] lock_acquire+0x19e/0x420 [ 695.881320][T10295] ? super_lock+0x189/0x390 [ 695.885864][T10295] ? __might_sleep+0xe0/0xe0 [ 695.890471][T10295] ? read_lock_is_recursive+0x20/0x20 [ 695.895858][T10295] ? __mutex_trylock_common+0x160/0x270 [ 695.901417][T10295] ? trace_raw_output_contention_end+0xd0/0xd0 [ 695.907590][T10295] ? mapping_try_invalidate+0x4bf/0x570 [ 695.913156][T10295] down_read+0x46/0x2e0 [ 695.917332][T10295] ? super_lock+0x189/0x390 [ 695.921858][T10295] super_lock+0x189/0x390 [ 695.926203][T10295] ? xa_find_after+0xaf/0x430 [ 695.930900][T10295] ? user_get_super+0x180/0x180 [ 695.935762][T10295] ? mutex_lock_nested+0x20/0x20 [ 695.940720][T10295] fs_bdev_mark_dead+0xad/0x1f0 [ 695.945599][T10295] ? super_s_dev_set+0xa0/0xa0 [ 695.950377][T10295] bdev_mark_dead+0x83/0x1a0 [ 695.954993][T10295] ? blk_report_disk_dead+0x88/0x3e0 [ 695.960296][T10295] blk_report_disk_dead+0x21c/0x3e0 [ 695.965526][T10295] ? __blk_mark_disk_dead+0x120/0x120 [ 695.970913][T10295] ? xa_find_after+0xaf/0x430 [ 695.975609][T10295] del_gendisk+0x2cb/0x8f0 [ 695.980046][T10295] ? blk_report_disk_dead+0x3e0/0x3e0 [ 695.985432][T10295] ? __pm_runtime_resume+0x129/0x170 [ 695.990737][T10295] sd_remove+0x8d/0x100 [ 695.994905][T10295] ? sd_probe+0x11c0/0x11c0 [ 695.999418][T10295] device_release_driver_internal+0x458/0x6f0 [ 696.005507][T10295] bus_remove_device+0x43b/0x520 [ 696.010462][T10295] ? bus_probe_device+0x260/0x260 [ 696.015513][T10295] ? up_write+0x1be/0x410 [ 696.019861][T10295] ? kernfs_remove_by_name_ns+0x117/0x150 [ 696.025615][T10295] device_del+0x51f/0x910 [ 696.029966][T10295] ? kill_device+0x160/0x160 [ 696.034583][T10295] ? kobject_put+0x421/0x450 [ 696.039187][T10295] __scsi_remove_device+0x1a2/0x390 [ 696.044399][T10295] scsi_forget_host+0xd0/0x110 [ 696.049176][T10295] scsi_remove_host+0x1b3/0x730 [ 696.054047][T10295] virtscsi_remove+0x130/0x1a0 [ 696.058835][T10295] virtio_dev_remove+0x96/0x1a0 [ 696.063748][T10295] ? virtio_dev_probe+0xae0/0xae0 [ 696.068784][T10295] device_release_driver_internal+0x408/0x6f0 [ 696.074867][T10295] bus_remove_device+0x43b/0x520 [ 696.079819][T10295] ? bus_probe_device+0x260/0x260 [ 696.084856][T10295] ? up_write+0x1be/0x410 [ 696.089192][T10295] ? kernfs_remove_by_name_ns+0x117/0x150 [ 696.094928][T10295] device_del+0x51f/0x910 [ 696.099275][T10295] ? kill_device+0x160/0x160 [ 696.103874][T10295] ? pci_device_is_present+0x175/0x240 [ 696.109343][T10295] ? pci_real_dma_dev+0x20/0x20 [ 696.114216][T10295] device_unregister+0x20/0xc0 [ 696.119016][T10295] unregister_virtio_device+0x37/0x60 [ 696.124413][T10295] virtio_pci_remove+0x7f/0xf0 [ 696.129203][T10295] pci_device_remove+0x97/0x230 [ 696.134081][T10295] ? pci_device_probe+0x8d0/0x8d0 [ 696.139118][T10295] device_release_driver_internal+0x408/0x6f0 [ 696.145200][T10295] pci_stop_bus_device+0x108/0x140 [ 696.150330][T10295] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 696.156865][T10295] remove_store+0xe6/0x150 [ 696.161293][T10295] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 696.167196][T10295] ? __virt_addr_valid+0x10c/0x380 [ 696.172328][T10295] ? sysfs_kf_write+0x187/0x2a0 [ 696.177194][T10295] ? sysfs_kf_read+0x360/0x360 [ 696.181969][T10295] kernfs_fop_write_iter+0x3a4/0x520 [ 696.187267][T10295] vfs_write+0x474/0x9a0 [ 696.191529][T10295] ? file_end_write+0x250/0x250 [ 696.196398][T10295] ? __fget_files+0x3fc/0x460 [ 696.201099][T10295] ? __fdget_pos+0x2a3/0x330 [ 696.205704][T10295] ? ksys_write+0x74/0x260 [ 696.210139][T10295] ksys_write+0x151/0x260 [ 696.214495][T10295] ? __ia32_sys_read+0x90/0x90 [ 696.219287][T10295] ? trace_sys_enter+0x1f/0x80 [ 696.224075][T10295] do_syscall_64+0x55/0xb0 [ 696.228515][T10295] ? clear_bhb_loop+0x40/0x90 [ 696.233208][T10295] ? clear_bhb_loop+0x40/0x90 [ 696.237920][T10295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.243839][T10295] RIP: 0033:0x7f045119e159 [ 696.248268][T10295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.267901][T10295] RSP: 002b:00007f0452068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 696.276332][T10295] RAX: ffffffffffffffda RBX: 00007f0451425fa0 RCX: 00007f045119e159 [ 696.284321][T10295] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 696.292299][T10295] RBP: 00007f045123506b R08: 0000000000000000 R09: 0000000000000000 [ 696.300281][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.308258][T10295] R13: 00007f0451426038 R14: 00007f0451425fa0 R15: 00007ffd7409bd48 [ 696.316270][T10295] [ 696.475130][ T6035] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 696.486278][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246) [ 696.498132][ T6035] Buffer I/O error on device sda1, logical block 94208 [ 696.505298][ T6035] device offline error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 696.515844][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95269) [ 696.527923][ T6035] Buffer I/O error on device sda1, logical block 95231 [ 696.535182][ T6035] device offline error, dev sda, sector 766030 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 696.545957][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95753) [ 696.557845][ T6035] Buffer I/O error on device sda1, logical block 95715 [ 696.565019][ T6035] Buffer I/O error on device sda1, logical block 95716 [ 696.571908][ T6035] Buffer I/O error on device sda1, logical block 95717 [ 696.580150][ T6035] Buffer I/O error on device sda1, logical block 95718 [ 696.587302][ T6035] Buffer I/O error on device sda1, logical block 95719 [ 696.594539][ T6035] Buffer I/O error on device sda1, logical block 95720 [ 696.601447][ T6035] Buffer I/O error on device sda1, logical block 95721 [ 696.608711][ T6035] Buffer I/O error on device sda1, logical block 95722 [ 696.615933][ T6035] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 10 prio class 2 [ 696.626822][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 96294) [ 696.639083][ T6035] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 696.649818][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 102438) [ 696.661685][ T6035] device offline error, dev sda, sector 827582 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 696.672758][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103447) [ 696.686410][ T6035] device offline error, dev sda, sector 831614 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 696.697121][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103951) [ 696.709333][ T6035] device offline error, dev sda, sector 713014 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 696.720038][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2027 starting block 89126) [ 696.732195][ T6035] device offline error, dev sda, sector 717110 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 696.742857][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2029 starting block 89638) [ 696.755052][ T6035] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90161) [ 696.780280][ T5104] Aborting journal on device sda1-8. [ 696.786179][ T6035] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 696.795155][ T5104] JBD2: I/O error when updating journal superblock for sda1-8. [ 696.833134][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 696.910057][T10295] EXT4-fs (sda1): shut down requested (2) May 18 03:34:12 syzkaller kern.alert kernel: [ 696.910057][T10295] EXT4-fs (sda1): shut down requested (2) [ 696.969436][T10295] sd 0:0:1:0: [sda] Synchronizing SCSI cache