last executing test programs: 11.304066096s ago: executing program 0 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 9.524535013s ago: executing program 0 (id=667): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1c14744, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@abort}, {@errors_remount}]}, 0xff, 0x49b, &(0x7f0000000680)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95000000000000003c95bf10699616f89cce4f7d20f981342904b0aa9334671e9dba63e03b68c8737ca4aa44945628955e4058360c0e73c711cd0f399242b8f1e34533b842f6ec195202b80521fc1d0a908e19b36aa9dd3ed7b5bef8f3649bb84d7218268bd4dc37fc857a5c7d95131b9c39be2fe988e32321b9ddd71cfc52dadd5c"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000012e, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 9.471596565s ago: executing program 2 (id=668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.520157279s ago: executing program 0 (id=672): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009"], 0x0) 8.295790092s ago: executing program 2 (id=673): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="18001000040900009c00000007000000181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000"], 0x0, 0x7, 0x18, &(0x7f00000000c0)=""/24, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x6, 0xfffff906}, 0x10, 0xace2, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0xe}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xd}, {0x4, 0x4, 0xc, 0xf224a0dff18ded0b}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0x10001}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000540)={0xc, 0x10, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000001080)='./file0/../file0/file0\x00', r5}, 0x18) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xfffffc00, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 8.090730565s ago: executing program 1 (id=674): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 7.965604387s ago: executing program 3 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 7.460001795s ago: executing program 1 (id=676): io_setup(0x5, &(0x7f0000000000)) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xffff7fff, "4207e3753785c3bfc108000000001a00000000010100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 7.005393692s ago: executing program 2 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x40880) 6.992708482s ago: executing program 3 (id=678): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x38}}, 0x40080c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf00001}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r3, 0x0, 0x3, 0x1}}, 0x20) read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8081, 0x0, 0xa0363159, 0x5, 0x5, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {}, {0x0, 0x4}, {0x3}], 0x0, 0x20}}) getdents64(r4, 0x0, 0x20000) 6.117453746s ago: executing program 2 (id=679): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") syz_usbip_server_init(0x2) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 5.992965417s ago: executing program 3 (id=680): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x7cd, &(0x7f0000000180)=0x1) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{}, {@in6=@loopback, 0x0, 0x33}, @in=@local, {}, {0x400000000000000}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) socket$inet6_sctp(0xa, 0x801, 0x84) read$dsp(r2, &(0x7f0000000b80)=""/4112, 0x1010) 5.900896349s ago: executing program 1 (id=681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.214580759s ago: executing program 0 (id=682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x0, 0x0) 5.019641922s ago: executing program 3 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x7, 0x4, 0x4, 0x6ff}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") creat(&(0x7f0000000040)='./bus\x00', 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.61182509s ago: executing program 2 (id=684): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) syz_open_procfs(0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 2.283115585s ago: executing program 1 (id=685): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="18001000040900009c00000007000000181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000"], 0x0, 0x7, 0x18, &(0x7f00000000c0)=""/24, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x6, 0xfffff906}, 0x10, 0xace2, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0xe}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xd}, {0x4, 0x4, 0xc, 0xf224a0dff18ded0b}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0x10001}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000540)={0xc, 0x10, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000001080)='./file0/../file0/file0\x00', r5}, 0x18) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xfffffc00, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 2.097644947s ago: executing program 3 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 1.991703139s ago: executing program 0 (id=687): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={[0x7]}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.576393185s ago: executing program 2 (id=688): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 365.160544ms ago: executing program 3 (id=689): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f2", 0x23}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r5, r5, 0x2, r7, r6) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)="00000102", 0xfffff, r8) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0) 353.299504ms ago: executing program 1 (id=690): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socket$nl_route(0x10, 0x3, 0x0) 162.677237ms ago: executing program 1 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) 0s ago: executing program 0 (id=692): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") syz_usbip_server_init(0x2) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 96.425426][ T6058] XFS (loop1): Quotacheck needed: Please wait. [ 96.451967][ T1015] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 96.463633][ T1015] kworker/u4:5: attempt to access beyond end of device [ 96.463633][ T1015] loop2: rw=1048577, sector=76, nr_sectors = 1 limit=64 [ 96.478105][ T1015] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 96.486661][ T1015] kworker/u4:5: attempt to access beyond end of device [ 96.486661][ T1015] loop2: rw=1048577, sector=77, nr_sectors = 1 limit=64 [ 96.497620][ T6058] XFS (loop1): Quotacheck: Done. [ 96.525780][ T1015] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 96.536676][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.708173][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.904195][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 97.014718][ T5812] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.083564][ T5812] usb 4-1: config 179 has no interface number 0 [ 97.212631][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.298498][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.315085][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.437082][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 97.457516][ T5812] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.474654][ T5812] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.484993][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.362260][ T6102] loop2: detected capacity change from 0 to 1024 [ 98.373296][ T6096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.384307][ T5812] xpad: probe of 4-1:179.65 failed with error -5 [ 98.416748][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 98.427412][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 98.437283][ T6102] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.465282][ T6102] EXT4-fs error (device loop2): ext4_get_journal_inode:5805: inode #5: comm syz.2.58: unexpected bad inode w/o EXT4_IGET_BAD [ 98.481561][ T6102] EXT4-fs (loop2): no journal found [ 98.486770][ T6102] EXT4-fs (loop2): can't get journal size [ 98.507534][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.562713][ T6102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 98.569606][ T6102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.579159][ T6102] vhci_hcd vhci_hcd.0: Device attached [ 98.600004][ T5812] usb 4-1: USB disconnect, device number 5 [ 98.632338][ T6111] vhci_hcd: connection closed [ 98.636091][ T42] vhci_hcd: stop threads [ 98.684443][ T42] vhci_hcd: release socket [ 98.759655][ T6114] loop0: detected capacity change from 0 to 4096 [ 98.770738][ T42] vhci_hcd: disconnect device [ 98.775489][ T6114] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 100.474458][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.635796][ T6126] loop1: detected capacity change from 0 to 512 [ 100.679990][ T6127] loop3: detected capacity change from 0 to 512 [ 100.710072][ T6127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.721831][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.736676][ T6126] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.789280][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 100.798835][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 100.807449][ T5085] Bluetooth: hci1: hardware error 0x00 [ 100.992204][ T6136] Quota error (device loop1): do_check_range: Getting block 134217728 out of range 0-5 [ 101.760371][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.795228][ T6127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.952952][ T6127] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.798667][ T6134] loop2: detected capacity change from 0 to 32768 [ 103.390084][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 103.472561][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.053527][ T6160] loop1: detected capacity change from 0 to 4096 [ 105.072912][ T6160] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 106.158201][ T6173] loop0: detected capacity change from 0 to 512 [ 106.299766][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.312639][ T6173] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.432871][ T6177] loop1: detected capacity change from 0 to 2048 [ 106.547001][ T6185] Quota error (device loop0): do_check_range: Getting block 134217728 out of range 0-5 [ 107.068074][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.088538][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.041294][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.637674][ T6205] loop2: detected capacity change from 0 to 4096 [ 110.714713][ T6205] ntfs3: loop2: ino=3, Correct links count -> 2. [ 111.671063][ T6214] loop3: detected capacity change from 0 to 4096 [ 111.692130][ T6214] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 113.103980][ T6220] loop1: detected capacity change from 0 to 32768 [ 113.202122][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.408134][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 113.422073][ T5830] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.446484][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.512992][ T5830] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 113.593703][ T6220] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.631200][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.815220][ T5830] usb 4-1: config 0 descriptor?? [ 114.123248][ T6220] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 114.155477][ T6220] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.211934][ T6220] OCFS2: File system is now read-only. [ 114.227715][ T6220] (syz.1.85,6220,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 114.251547][ T6220] (syz.1.85,6220,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 114.272351][ T6220] (syz.1.85,6220,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 114.304913][ T6220] (syz.1.85,6220,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 114.333718][ T6220] (syz.1.85,6220,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 114.354888][ T6220] (syz.1.85,6220,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 114.379446][ T6220] (syz.1.85,6220,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 114.393205][ T5830] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 114.400741][ T6220] (syz.1.85,6220,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 114.411616][ T5830] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 114.421213][ T6220] (syz.1.85,6220,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 114.448351][ T6220] (syz.1.85,6220,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 114.467126][ T6238] loop0: detected capacity change from 0 to 4096 [ 114.475764][ T6220] (syz.1.85,6220,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 114.497205][ T6220] (syz.1.85,6220,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 114.531419][ T6220] (syz.1.85,6220,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 114.566373][ T6220] (syz.1.85,6220,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 114.577907][ T6220] (syz.1.85,6220,1):ocfs2_expand_inline_dir:2858 ERROR: status = -30 [ 114.578469][ T5830] usb 4-1: USB disconnect, device number 6 [ 114.599319][ T6220] (syz.1.85,6220,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 114.615452][ T6220] (syz.1.85,6220,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 114.624484][ T6220] (syz.1.85,6220,1):ocfs2_symlink:1867 ERROR: status = -30 [ 114.633524][ T6239] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.652652][ T6220] (syz.1.85,6220,1):ocfs2_symlink:2068 ERROR: status = -30 [ 114.717883][ T6220] syz.1.85 (6220) used greatest stack depth: 18992 bytes left [ 114.746277][ T5765] (syz-executor,5765,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 114.794852][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 115.476908][ T6247] sd 0:0:1:0: device reset [ 116.387917][ T6247] loop2: detected capacity change from 0 to 32768 [ 117.987407][ T6257] loop0: detected capacity change from 0 to 1024 [ 118.955833][ T6247] JBD2: journal reset failed [ 118.974988][ T6247] (syz.2.93,6247,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 119.006862][ T6247] (syz.2.93,6247,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 119.168612][ T3466] hfsplus: b-tree write err: -5, ino 4 [ 120.550640][ T6276] loop2: detected capacity change from 0 to 64 [ 120.895911][ T6276] syz.2.99: attempt to access beyond end of device [ 120.895911][ T6276] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 120.909341][ T6276] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 120.918168][ T6276] syz.2.99: attempt to access beyond end of device [ 120.918168][ T6276] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 120.931473][ T6276] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 120.940741][ T6276] syz.2.99: attempt to access beyond end of device [ 120.940741][ T6276] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 120.954025][ T6276] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 120.962823][ T6276] syz.2.99: attempt to access beyond end of device [ 120.962823][ T6276] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 120.976233][ T6276] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 120.985095][ T6276] syz.2.99: attempt to access beyond end of device [ 120.985095][ T6276] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 120.999213][ T6276] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 121.009524][ T6276] syz.2.99: attempt to access beyond end of device [ 121.009524][ T6276] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 121.023109][ T6276] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 121.032082][ T6276] syz.2.99: attempt to access beyond end of device [ 121.032082][ T6276] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 121.045400][ T6276] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 121.054342][ T6276] syz.2.99: attempt to access beyond end of device [ 121.054342][ T6276] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 121.067673][ T6276] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 121.083114][ T6276] syz.2.99: attempt to access beyond end of device [ 121.083114][ T6276] loop2: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 121.559544][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.858234][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 121.881254][ T6286] loop2: detected capacity change from 0 to 4096 [ 121.910787][ T5830] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.927784][ T6286] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 122.117390][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.148034][ T5830] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 122.305065][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.697140][ T5830] usb 1-1: config 0 descriptor?? [ 124.690510][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 124.696627][ T5830] usbhid: probe of 1-1:0.0 failed with error -71 [ 124.705993][ T5830] usb 1-1: USB disconnect, device number 2 [ 124.751521][ T6296] loop3: detected capacity change from 0 to 512 [ 125.749251][ T6302] sd 0:0:1:0: device reset [ 126.692276][ T6302] loop2: detected capacity change from 0 to 32768 [ 129.468348][ T6302] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 129.977490][ T6323] sd 0:0:1:0: device reset [ 130.868602][ T6323] loop1: detected capacity change from 0 to 32768 [ 131.874404][ T6325] loop0: detected capacity change from 0 to 2048 [ 131.908490][ T6323] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 132.274952][ T6325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.433264][ T6329] loop3: detected capacity change from 0 to 512 [ 132.539446][ T6323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.996267][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 133.103051][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110918][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.545075][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 134.328039][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.678066][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 134.886431][ T9] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.987267][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.055042][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 135.140955][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.270195][ T9] usb 3-1: config 0 descriptor?? [ 136.139883][ T6357] loop1: detected capacity change from 0 to 1024 [ 138.541110][ T5873] hfsplus: b-tree write err: -5, ino 4 [ 138.590515][ T9] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 138.608011][ T9] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 138.619006][ T9] usb 3-1: USB disconnect, device number 3 [ 138.644868][ T6363] sd 0:0:1:0: device reset [ 139.002208][ T6365] loop1: detected capacity change from 0 to 2048 [ 139.093428][ T6365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.768047][ T6363] loop0: detected capacity change from 0 to 32768 [ 140.916341][ T6368] loop2: detected capacity change from 0 to 64 [ 142.061882][ T6363] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 142.062136][ T6363] (syz.0.125,6363,1):ocfs2_initialize_super:2287 ERROR: status = -12 [ 142.360427][ T6363] (syz.0.125,6363,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 142.646860][ T6374] loop1: detected capacity change from 0 to 512 [ 142.767223][ T5774] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.828792][ T6378] loop2: detected capacity change from 0 to 1024 [ 144.247872][ T6388] loop2: detected capacity change from 0 to 2048 [ 144.283525][ T6388] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 144.306207][ T6388] UDF-fs: Scanning with blocksize 512 failed [ 144.347368][ T28] audit: type=1326 audit(1750990936.572:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.1.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70cb38e929 code=0x0 [ 144.374859][ T6394] Bluetooth: MGMT ver 1.22 [ 144.398922][ T6388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.424541][ T6395] netlink: 'syz.1.134': attribute type 27 has an invalid length. [ 144.537708][ T6397] loop0: detected capacity change from 0 to 2048 [ 144.603753][ T6397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.628057][ T6244] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.726236][ T6398] loop1: detected capacity change from 0 to 8192 [ 145.018178][ T6244] usb 4-1: Using ep0 maxpacket: 8 [ 145.034531][ T6400] sd 0:0:1:0: device reset [ 146.042738][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.051732][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.259338][ T6400] loop2: detected capacity change from 0 to 32768 [ 146.848550][ T6244] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.856991][ T6244] usb 4-1: config 179 has no interface number 0 [ 147.083517][ T6400] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 147.264153][ T6244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 147.278866][ T6244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 147.290177][ T6244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.301396][ T6244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.312193][ T6244] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.325557][ T6244] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.334722][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.413230][ T6244] usb 4-1: can't set config #179, error -71 [ 147.433280][ T6244] usb 4-1: USB disconnect, device number 7 [ 147.484918][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 149.528278][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.588692][ T6429] loop3: detected capacity change from 0 to 2048 [ 149.614290][ T6429] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 149.640274][ T6429] UDF-fs: Scanning with blocksize 512 failed [ 149.704340][ T6429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.741182][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.749894][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 149.757804][ T5817] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.777756][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.785216][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.796752][ T5817] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 149.900774][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.911356][ T5817] usb 1-1: config 0 descriptor?? [ 150.350794][ T5817] usbhid 1-1:0.0: can't add hid device: -71 [ 150.356884][ T5817] usbhid: probe of 1-1:0.0 failed with error -71 [ 150.388643][ T5817] usb 1-1: USB disconnect, device number 3 [ 150.446785][ T6395] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.460570][ T6395] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.469562][ T6395] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.480034][ T6395] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.638927][ T6435] loop2: detected capacity change from 0 to 32768 [ 150.698232][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.707314][ T6435] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.795192][ T6435] XFS (loop2): Ending clean mount [ 150.819324][ T6451] loop1: detected capacity change from 0 to 512 [ 150.903285][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 150.924866][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.948083][ T9] usb 4-1: config 179 has no interface number 0 [ 150.975608][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.012356][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.068936][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.168582][ T6457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 151.169573][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.435811][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.480106][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.496673][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.563085][ T6439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.568386][ T5762] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.618435][ T9] xpad: probe of 4-1:179.65 failed with error -5 [ 151.808127][ T9] usb 4-1: USB disconnect, device number 8 [ 151.870954][ T6464] loop0: detected capacity change from 0 to 2048 [ 152.029838][ T6464] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 152.038355][ T6464] UDF-fs: Scanning with blocksize 512 failed [ 152.256287][ T6464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.772971][ T6475] loop0: detected capacity change from 0 to 4096 [ 152.791204][ T6475] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 152.862568][ T28] audit: type=1326 audit(1750990945.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.3.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffae638e929 code=0x0 [ 152.914838][ T6476] netlink: 'syz.3.160': attribute type 27 has an invalid length. [ 153.281906][ T6481] loop3: detected capacity change from 0 to 8192 [ 154.554307][ T6490] loop2: detected capacity change from 0 to 1024 [ 154.558189][ T6492] loop1: detected capacity change from 0 to 512 [ 154.610696][ T5963] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.935992][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 156.080850][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.089653][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.386502][ T6508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.393987][ T6508] overlayfs: failed to set xattr on upper [ 156.400757][ T6508] overlayfs: ...falling back to redirect_dir=nofollow. [ 156.407632][ T6508] overlayfs: ...falling back to index=off. [ 156.413547][ T6508] overlayfs: ...falling back to uuid=null. [ 156.420221][ T6508] overlayfs: maximum fs stacking depth exceeded [ 156.664193][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.679246][ T5767] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.707378][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.868050][ T5767] usb 3-1: Using ep0 maxpacket: 8 [ 156.876823][ T5767] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 156.890564][ T5767] usb 3-1: config 179 has no interface number 0 [ 156.897073][ T5767] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 156.910160][ T5767] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 156.921789][ T5767] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.935810][ T5767] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.946162][ T5767] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.964777][ T5767] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 156.994808][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.083993][ T6511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.153332][ T5767] xpad: probe of 3-1:179.65 failed with error -5 [ 157.602173][ T5812] usb 3-1: USB disconnect, device number 4 [ 157.720823][ T6476] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.799163][ T6476] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.814315][ T6476] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.833324][ T6476] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.404586][ T6524] loop2: detected capacity change from 0 to 4096 [ 158.525311][ T6524] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 160.254636][ T6532] loop1: detected capacity change from 0 to 512 [ 160.468916][ T5963] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.729074][ T5812] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.932742][ T5812] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.973282][ T5812] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.004305][ T5812] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.037494][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.048199][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.085096][ T6537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.152018][ T5812] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 161.248328][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 161.277573][ T8] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.981890][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.005052][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 163.070934][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.524426][ T8] usb 4-1: config 0 descriptor?? [ 164.592256][ T8] usb 4-1: can't set config #0, error -71 [ 164.609633][ T8] usb 4-1: USB disconnect, device number 9 [ 165.718764][ T28] audit: type=1326 audit(1750990957.942:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.1.181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70cb38e929 code=0x0 [ 165.778375][ T5767] usb 3-1: USB disconnect, device number 5 [ 165.778743][ T6570] netlink: 'syz.1.181': attribute type 27 has an invalid length. [ 166.460857][ T6567] loop3: detected capacity change from 0 to 4096 [ 166.520390][ T6567] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 166.675716][ T6570] loop1: detected capacity change from 0 to 8192 [ 167.455406][ T6583] loop0: detected capacity change from 0 to 512 [ 167.687457][ T5966] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.999198][ T6600] sd 0:0:1:0: device reset [ 170.093773][ T6600] loop3: detected capacity change from 0 to 32768 [ 172.444763][ T6244] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.628193][ T6244] usb 3-1: Using ep0 maxpacket: 32 [ 173.256399][ T6600] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 173.423063][ T6244] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 173.443381][ T6617] loop2: detected capacity change from 0 to 512 [ 173.568248][ T6244] usb 3-1: can't read configurations, error -71 [ 173.590919][ T6617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.617794][ T6617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.087389][ T6617] EXT4-fs (loop2): 1 truncate cleaned up [ 174.171296][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.341346][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 174.494068][ T6627] loop1: detected capacity change from 0 to 512 [ 174.628808][ T28] audit: type=1326 audit(1750990966.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.3.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffae638e929 code=0x0 [ 174.701897][ T5963] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.713012][ T6629] netlink: 'syz.3.197': attribute type 27 has an invalid length. [ 175.704662][ T6629] loop3: detected capacity change from 0 to 8192 [ 175.766708][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.060989][ T6637] loop2: detected capacity change from 0 to 4096 [ 176.082640][ T6637] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 176.202920][ T6643] input: syz0 as /devices/virtual/input/input6 [ 178.568048][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.772446][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 178.803672][ T8] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.828920][ T6661] sd 0:0:1:0: device reset [ 178.906737][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.952484][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 179.018264][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.223354][ T8] usb 1-1: config 0 descriptor?? [ 180.128170][ T6661] loop3: detected capacity change from 0 to 32768 [ 180.538691][ T8] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 180.584748][ T8] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 180.716849][ T8] usb 1-1: USB disconnect, device number 4 [ 181.221593][ T6661] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.608654][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 182.726636][ T28] audit: type=1326 audit(1750991230.941:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.3.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffae638e929 code=0x0 [ 182.748160][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.790021][ T6676] netlink: 'syz.3.209': attribute type 27 has an invalid length. [ 183.101226][ T6676] loop3: detected capacity change from 0 to 8192 [ 184.112140][ T6688] loop2: detected capacity change from 0 to 1024 [ 184.924001][ T6359] hfsplus: b-tree write err: -5, ino 4 [ 185.127314][ T6699] loop0: detected capacity change from 0 to 512 [ 185.192716][ T5963] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.397074][ T6703] loop3: detected capacity change from 0 to 4096 [ 185.509685][ T6703] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 185.548283][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 185.691510][ T6707] input: syz0 as /devices/virtual/input/input7 [ 185.766402][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 186.468181][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 186.474377][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 187.650526][ T23] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.448941][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.458113][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 188.471135][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.498415][ T23] usb 3-1: config 0 descriptor?? [ 188.510461][ T23] usb 3-1: can't set config #0, error -71 [ 188.519402][ T23] usb 3-1: USB disconnect, device number 8 [ 190.347201][ T6722] loop3: detected capacity change from 0 to 32768 [ 190.506175][ T6732] loop0: detected capacity change from 0 to 512 [ 190.658364][ T6722] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.906501][ T6722] XFS (loop3): Ending clean mount [ 191.005414][ T28] audit: type=1800 audit(1750991495.230:7): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.224" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 191.561465][ T28] audit: type=1326 audit(1750991495.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 191.649137][ T28] audit: type=1326 audit(1750991495.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 191.689730][ T28] audit: type=1326 audit(1750991495.350:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 191.722132][ T5763] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.738403][ T28] audit: type=1326 audit(1750991495.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 191.791896][ T28] audit: type=1326 audit(1750991495.630:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 191.900316][ T28] audit: type=1326 audit(1750991495.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3a78e929 code=0x7ffc0000 [ 192.061547][ T6753] input: syz0 as /devices/virtual/input/input8 [ 193.234177][ T6755] loop2: detected capacity change from 0 to 4096 [ 193.260208][ T6755] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 193.668211][ T6244] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.858140][ T6244] usb 4-1: Using ep0 maxpacket: 32 [ 193.874836][ T6244] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.888316][ T6244] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.895234][ T6244] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 193.936941][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.958631][ T6244] usb 4-1: config 0 descriptor?? [ 194.372996][ T6244] usbhid 4-1:0.0: can't add hid device: -71 [ 194.385974][ T6244] usbhid: probe of 4-1:0.0 failed with error -71 [ 194.398405][ T6244] usb 4-1: USB disconnect, device number 10 [ 194.543427][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550015][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.568299][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.748849][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 194.770525][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.776020][ T6769] loop2: detected capacity change from 0 to 512 [ 194.778894][ T23] usb 2-1: config 179 has no interface number 0 [ 194.779003][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.807518][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.824140][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.831312][ T5755] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.845382][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.860727][ T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.882241][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.891700][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.969970][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.002918][ T23] xpad: probe of 2-1:179.65 failed with error -5 [ 195.116390][ T6773] loop3: detected capacity change from 0 to 2048 [ 195.138631][ T6773] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 195.142778][ T6777] loop2: detected capacity change from 0 to 128 [ 195.146914][ T6773] UDF-fs: Scanning with blocksize 512 failed [ 195.177385][ T6773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.204662][ T6777] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.240214][ T6777] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.243080][ T5767] usb 2-1: USB disconnect, device number 3 [ 196.195237][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.842571][ T6794] loop1: detected capacity change from 0 to 512 [ 196.895446][ T5755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.983113][ T6796] loop2: detected capacity change from 0 to 4096 [ 197.022864][ T6796] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 197.308187][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.501473][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 197.522339][ T5812] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.569539][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.596224][ T5812] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 197.629004][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.670339][ T5812] usb 2-1: config 0 descriptor?? [ 198.010516][ T6806] loop3: detected capacity change from 0 to 2048 [ 198.042618][ T6808] usb usb1: usbfs: process 6808 (syz.0.251) did not claim interface 0 before use [ 198.062318][ T6806] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 198.078156][ T6806] UDF-fs: Scanning with blocksize 512 failed [ 198.111255][ T6806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.113153][ T5812] usbhid 2-1:0.0: can't add hid device: -71 [ 198.129110][ T5812] usbhid: probe of 2-1:0.0 failed with error -71 [ 198.147231][ T5812] usb 2-1: USB disconnect, device number 4 [ 198.652206][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.391213][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 199.406120][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.414802][ T8] usb 3-1: config 179 has no interface number 0 [ 199.426254][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 199.448755][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 199.586417][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.634036][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.969899][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.035639][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.059717][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.097089][ T6814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.124503][ T8] xpad: probe of 3-1:179.65 failed with error -5 [ 200.140859][ T6828] loop0: detected capacity change from 0 to 4096 [ 200.162131][ T6828] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 200.332232][ T8] usb 3-1: USB disconnect, device number 9 [ 201.332820][ T6844] input: syz0 as /devices/virtual/input/input9 [ 201.895731][ T6833] loop1: detected capacity change from 0 to 32768 [ 202.007608][ T6846] loop3: detected capacity change from 0 to 2048 [ 202.018269][ T6833] [ 202.018269][ T6833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.018269][ T6833] [ 202.034144][ T6846] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 202.046139][ T6846] UDF-fs: Scanning with blocksize 512 failed [ 202.089897][ T6833] ERROR: (device loop1): dtSearch: stack overrun! [ 202.089897][ T6833] [ 202.104883][ T6846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.142029][ T6833] ERROR: (device loop1): remounting filesystem as read-only [ 202.183811][ T6833] btstack dump: [ 202.197646][ T6849] delete_channel: no stack [ 202.209609][ T6833] bn = 0, index = 0 [ 202.213477][ T6833] bn = 0, index = 0 [ 202.217317][ T6833] bn = 0, index = 0 [ 202.259453][ T6833] bn = 0, index = 0 [ 202.293876][ T6833] bn = 0, index = 0 [ 202.308917][ T6833] bn = 0, index = 0 [ 202.328004][ T6833] bn = 0, index = 0 [ 202.333795][ T6833] bn = 0, index = 0 [ 202.349670][ T6833] jfs_lookup: dtSearch returned -5 [ 202.379151][ T6851] ERROR: (device loop1): dtSearch: stack overrun! [ 202.379151][ T6851] [ 202.399760][ T6851] btstack dump: [ 202.403305][ T6851] bn = 0, index = 0 [ 202.412382][ T6851] bn = 0, index = 0 [ 202.416266][ T6851] bn = 0, index = 0 [ 202.417871][ T6854] loop2: detected capacity change from 0 to 256 [ 202.428589][ T6851] bn = 0, index = 0 [ 202.457883][ T6851] bn = 0, index = 0 [ 202.476723][ T6851] bn = 0, index = 0 [ 202.674480][ T6851] bn = 0, index = 0 [ 202.718485][ T6851] bn = 0, index = 0 [ 202.787159][ T6851] jfs_lookup: dtSearch returned -5 [ 203.196713][ T6862] netlink: 'syz.3.267': attribute type 12 has an invalid length. [ 203.718218][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.941845][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 204.035074][ T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.195709][ T23] usb 3-1: config 179 has no interface number 0 [ 204.234878][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.262777][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 204.284506][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.322465][ T23] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 204.367986][ T23] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.406410][ T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 204.427981][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.815614][ T6865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.295435][ T23] xpad: probe of 3-1:179.65 failed with error -5 [ 205.315927][ T23] usb 3-1: USB disconnect, device number 10 [ 205.330829][ T6869] loop3: detected capacity change from 0 to 32768 [ 205.366195][ T6878] input: syz0 as /devices/virtual/input/input10 [ 205.394242][ T6869] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.507210][ T6869] XFS (loop3): Ending clean mount [ 205.567249][ T28] audit: type=1800 audit(1750992021.790:14): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.271" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 205.612203][ T6889] loop0: detected capacity change from 0 to 2048 [ 205.651386][ T5763] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.661570][ T6889] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 205.672883][ T6889] UDF-fs: Scanning with blocksize 512 failed [ 205.755320][ T6889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.781042][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 206.078741][ T6902] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 206.162102][ T6902] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 206.184436][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.194190][ T1015] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 206.759705][ T6902] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 206.878666][ T6902] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 206.946347][ T6902] bond1 (unregistering): Released all slaves [ 207.355714][ T6913] input: syz0 as /devices/virtual/input/input11 [ 208.186222][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 208.283652][ T6915] loop1: detected capacity change from 0 to 32768 [ 208.343039][ T6915] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.438101][ T5754] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.463095][ T6915] XFS (loop1): Ending clean mount [ 208.482804][ T28] audit: type=1800 audit(1750992024.710:15): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.286" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 208.546937][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.653065][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 208.669350][ T5754] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.683883][ T5754] usb 1-1: config 179 has no interface number 0 [ 208.691003][ T5754] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.706661][ T5754] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.722608][ T5754] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.734347][ T5754] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.749811][ T5754] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.785981][ T5754] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 208.802448][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.816445][ T6922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.846519][ T5754] xpad: probe of 1-1:179.65 failed with error -5 [ 209.183998][ T5754] usb 1-1: USB disconnect, device number 5 [ 210.565472][ T6954] input: syz0 as /devices/virtual/input/input12 [ 210.582888][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 210.679718][ T6960] netlink: 56 bytes leftover after parsing attributes in process `syz.3.300'. [ 210.689526][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 211.581277][ T6963] loop0: detected capacity change from 0 to 128 [ 211.610575][ T6963] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.627583][ T6963] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.796872][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.050193][ T6991] loop3: detected capacity change from 0 to 2048 [ 213.071944][ T6991] UDF-fs: bad mount option "volume=00000000000000001286" or missing value [ 213.783225][ T7012] loop3: detected capacity change from 0 to 512 [ 213.882059][ T5755] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.188210][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 214.988192][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 215.000030][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.029707][ T5812] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 215.058203][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.066255][ T5812] usb 2-1: Product: syz [ 215.087985][ T5812] usb 2-1: Manufacturer: syz [ 215.092649][ T5812] usb 2-1: SerialNumber: syz [ 215.123565][ T5812] usb 2-1: config 0 descriptor?? [ 215.145072][ T5812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 215.393617][ T5812] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 215.410619][ T5812] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 215.822154][ T23] usb 2-1: USB disconnect, device number 5 [ 216.325402][ T7037] loop2: detected capacity change from 0 to 2048 [ 216.538778][ T7041] loop3: detected capacity change from 0 to 32768 [ 216.545887][ T7041] XFS: attr2 mount option is deprecated. [ 216.615211][ T7047] loop0: detected capacity change from 0 to 64 [ 216.737057][ T7037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.775396][ T7041] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.899685][ T7047] syz.0.330: attempt to access beyond end of device [ 216.899685][ T7047] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 216.913232][ T7047] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 216.923733][ T7047] syz.0.330: attempt to access beyond end of device [ 216.923733][ T7047] loop0: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 216.937199][ T7047] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 216.946696][ T7047] syz.0.330: attempt to access beyond end of device [ 216.946696][ T7047] loop0: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 216.960303][ T7047] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 216.969298][ T7047] syz.0.330: attempt to access beyond end of device [ 216.969298][ T7047] loop0: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 216.982747][ T7047] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 216.991613][ T7047] syz.0.330: attempt to access beyond end of device [ 216.991613][ T7047] loop0: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 217.004996][ T7047] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 217.013924][ T7047] syz.0.330: attempt to access beyond end of device [ 217.013924][ T7047] loop0: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 217.027522][ T7047] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 217.036344][ T7047] syz.0.330: attempt to access beyond end of device [ 217.036344][ T7047] loop0: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 217.050113][ T7047] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 217.059078][ T7047] syz.0.330: attempt to access beyond end of device [ 217.059078][ T7047] loop0: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 217.072471][ T7047] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 217.087189][ T7047] syz.0.330: attempt to access beyond end of device [ 217.087189][ T7047] loop0: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 217.547624][ T7041] XFS (loop3): Ending clean mount [ 217.562133][ T7041] XFS (loop3): Quotacheck needed: Please wait. [ 217.704868][ T7041] XFS (loop3): Quotacheck: Done. [ 219.533676][ T7068] misc userio: Invalid payload size [ 219.541736][ T7068] misc userio: No port type given on /dev/userio [ 219.551509][ T7068] misc userio: The device must be registered before sending interrupts [ 221.575390][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.183741][ T7080] loop3: detected capacity change from 0 to 512 [ 223.297871][ T7082] loop2: detected capacity change from 0 to 2048 [ 223.321625][ T7082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.205573][ T7108] loop2: detected capacity change from 0 to 64 [ 226.478650][ T7108] syz.2.348: attempt to access beyond end of device [ 226.478650][ T7108] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 226.492145][ T7108] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 226.500984][ T7108] syz.2.348: attempt to access beyond end of device [ 226.500984][ T7108] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 226.514381][ T7108] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 226.523283][ T7108] syz.2.348: attempt to access beyond end of device [ 226.523283][ T7108] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 226.536730][ T7108] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 226.545689][ T7108] syz.2.348: attempt to access beyond end of device [ 226.545689][ T7108] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 226.559154][ T7108] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 226.568422][ T7108] syz.2.348: attempt to access beyond end of device [ 226.568422][ T7108] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 226.581923][ T7108] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 226.590659][ T7108] syz.2.348: attempt to access beyond end of device [ 226.590659][ T7108] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 226.604121][ T7108] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 226.612946][ T7108] syz.2.348: attempt to access beyond end of device [ 226.612946][ T7108] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 226.626471][ T7108] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 226.635337][ T7108] syz.2.348: attempt to access beyond end of device [ 226.635337][ T7108] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 226.648791][ T7108] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 226.662637][ T7108] syz.2.348: attempt to access beyond end of device [ 226.662637][ T7108] loop2: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 227.497704][ T7094] loop3: detected capacity change from 0 to 32768 [ 227.528230][ T7094] read_mapping_page failed! [ 227.533267][ T7094] jfs_mount: Failed to read AGGREGATE_I [ 227.556107][ T7094] Mount JFS Failure: -5 [ 227.613798][ T7094] jfs_mount failed w/return code = -5 [ 227.878094][ T5767] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 228.092346][ T7128] loop0: detected capacity change from 0 to 4096 [ 228.106901][ T7128] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 228.628283][ T5767] usb 2-1: Using ep0 maxpacket: 8 [ 228.654586][ T5767] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.972274][ T5767] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 229.176025][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.194559][ T5767] usb 2-1: Product: syz [ 229.235495][ T5767] usb 2-1: Manufacturer: syz [ 229.261380][ T5767] usb 2-1: SerialNumber: syz [ 229.319591][ T5767] usb 2-1: config 0 descriptor?? [ 229.503276][ T5767] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 229.818173][ T5767] snd_usb_toneport 2-1:0.0: set_interface failed [ 229.824920][ T5767] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 229.834813][ T7142] loop0: detected capacity change from 0 to 64 [ 230.086731][ T7142] syz.0.359: attempt to access beyond end of device [ 230.086731][ T7142] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 230.100357][ T7142] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 230.109320][ T7142] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 230.437870][ T5767] snd_usb_toneport: probe of 2-1:0.0 failed with error -71 [ 230.471674][ T5767] usb 2-1: USB disconnect, device number 6 [ 230.622589][ T7147] sd 0:0:1:0: device reset [ 232.119180][ T7147] loop1: detected capacity change from 0 to 32768 [ 232.576922][ T7147] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 233.137335][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 233.455353][ T7171] sd 0:0:1:0: device reset [ 235.123696][ T7171] loop0: detected capacity change from 0 to 32768 [ 235.832823][ T7171] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 236.136504][ T7180] loop2: detected capacity change from 0 to 4096 [ 236.150689][ T7180] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 236.308946][ T7185] misc userio: Invalid payload size [ 236.316067][ T7185] misc userio: No port type given on /dev/userio [ 236.325590][ T7185] misc userio: The device must be registered before sending interrupts [ 236.533495][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 237.783647][ T7193] loop0: detected capacity change from 0 to 64 [ 238.087841][ T7193] bio_check_eod: 8 callbacks suppressed [ 238.087878][ T7193] syz.0.370: attempt to access beyond end of device [ 238.087878][ T7193] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 238.107028][ T7193] buffer_io_error: 6 callbacks suppressed [ 238.107091][ T7193] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 238.121694][ T7193] syz.0.370: attempt to access beyond end of device [ 238.121694][ T7193] loop0: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 238.135067][ T7193] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 238.144356][ T7193] syz.0.370: attempt to access beyond end of device [ 238.144356][ T7193] loop0: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 238.157608][ T7193] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 238.166427][ T7193] syz.0.370: attempt to access beyond end of device [ 238.166427][ T7193] loop0: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 238.179764][ T7193] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 238.188504][ T7193] syz.0.370: attempt to access beyond end of device [ 238.188504][ T7193] loop0: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 238.201796][ T7193] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 238.210511][ T7193] syz.0.370: attempt to access beyond end of device [ 238.210511][ T7193] loop0: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 238.223783][ T7193] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 238.232517][ T7193] syz.0.370: attempt to access beyond end of device [ 238.232517][ T7193] loop0: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 238.246195][ T7193] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 238.255040][ T7193] syz.0.370: attempt to access beyond end of device [ 238.255040][ T7193] loop0: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 238.268325][ T7193] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 238.282509][ T7193] syz.0.370: attempt to access beyond end of device [ 238.282509][ T7193] loop0: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 238.747616][ T7203] loop2: detected capacity change from 0 to 64 [ 238.806897][ T7203] syz.2.385: attempt to access beyond end of device [ 238.806897][ T7203] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 238.820178][ T7203] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 238.828657][ T7203] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 239.938082][ T7211] loop1: detected capacity change from 0 to 32768 [ 240.583479][ T7215] loop0: detected capacity change from 0 to 4096 [ 240.591408][ T7215] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 240.712127][ T7218] sd 0:0:1:0: device reset [ 242.170598][ T7218] loop2: detected capacity change from 0 to 32768 [ 242.922022][ T7218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 244.313220][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 244.468814][ T7240] loop2: detected capacity change from 0 to 64 [ 244.507080][ T7240] bio_check_eod: 8 callbacks suppressed [ 244.507094][ T7240] syz.2.388: attempt to access beyond end of device [ 244.507094][ T7240] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 244.526491][ T7240] buffer_io_error: 6 callbacks suppressed [ 244.526499][ T7240] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 244.540737][ T7240] syz.2.388: attempt to access beyond end of device [ 244.540737][ T7240] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 244.553879][ T7240] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 244.562513][ T7240] syz.2.388: attempt to access beyond end of device [ 244.562513][ T7240] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 244.575655][ T7240] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 244.584217][ T7240] syz.2.388: attempt to access beyond end of device [ 244.584217][ T7240] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 244.597757][ T7240] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 244.606244][ T7240] syz.2.388: attempt to access beyond end of device [ 244.606244][ T7240] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 244.619473][ T7240] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 244.628006][ T7240] syz.2.388: attempt to access beyond end of device [ 244.628006][ T7240] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 244.641228][ T7240] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 244.649718][ T7240] syz.2.388: attempt to access beyond end of device [ 244.649718][ T7240] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 244.662852][ T7240] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 244.671343][ T7240] syz.2.388: attempt to access beyond end of device [ 244.671343][ T7240] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 244.684488][ T7240] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 244.693915][ T7240] syz.2.388: attempt to access beyond end of device [ 244.693915][ T7240] loop2: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 244.788645][ T7244] loop0: detected capacity change from 0 to 512 [ 244.805516][ T7244] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 244.998165][ T7247] loop2: detected capacity change from 0 to 4096 [ 245.009686][ T7247] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 246.489492][ T5812] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.908495][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 247.046348][ T5812] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.156805][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.163594][ T5812] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 247.173318][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.200377][ T5812] usb 4-1: config 0 descriptor?? [ 247.400701][ T7273] loop1: detected capacity change from 0 to 64 [ 247.468345][ T7273] syz.1.401: attempt to access beyond end of device [ 247.468345][ T7273] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 247.481569][ T7273] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 247.490181][ T7273] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 247.710135][ T5812] usbhid 4-1:0.0: can't add hid device: -71 [ 247.716123][ T5812] usbhid: probe of 4-1:0.0 failed with error -71 [ 247.755751][ T5812] usb 4-1: USB disconnect, device number 11 [ 248.716351][ T7281] loop2: detected capacity change from 0 to 4096 [ 248.726322][ T7281] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 250.298390][ T7300] delete_channel: no stack [ 251.423377][ T7314] loop2: detected capacity change from 0 to 64 [ 251.665089][ T7314] bio_check_eod: 8 callbacks suppressed [ 251.665140][ T7314] syz.2.414: attempt to access beyond end of device [ 251.665140][ T7314] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 251.684168][ T7314] buffer_io_error: 6 callbacks suppressed [ 251.684205][ T7314] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 251.698944][ T7314] syz.2.414: attempt to access beyond end of device [ 251.698944][ T7314] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 251.712543][ T7314] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 251.721252][ T7314] syz.2.414: attempt to access beyond end of device [ 251.721252][ T7314] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 251.734663][ T7314] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 251.743591][ T7314] syz.2.414: attempt to access beyond end of device [ 251.743591][ T7314] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 251.757212][ T7314] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 251.766048][ T7314] syz.2.414: attempt to access beyond end of device [ 251.766048][ T7314] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 251.779281][ T7314] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 251.788137][ T7314] syz.2.414: attempt to access beyond end of device [ 251.788137][ T7314] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 251.801399][ T7314] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 251.810119][ T7314] syz.2.414: attempt to access beyond end of device [ 251.810119][ T7314] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 251.823336][ T7314] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 251.832157][ T7314] syz.2.414: attempt to access beyond end of device [ 251.832157][ T7314] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 251.845393][ T7314] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 251.858686][ T7314] syz.2.414: attempt to access beyond end of device [ 251.858686][ T7314] loop2: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 252.105845][ T7319] loop0: detected capacity change from 0 to 4096 [ 252.126519][ T7319] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 252.970478][ T7331] delete_channel: no stack [ 254.491413][ T7348] loop2: detected capacity change from 0 to 64 [ 254.845441][ T7348] syz.2.427: attempt to access beyond end of device [ 254.845441][ T7348] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 254.868131][ T7348] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 254.876677][ T7348] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 255.296044][ T7359] loop3: detected capacity change from 0 to 4096 [ 255.328717][ T7359] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 256.038939][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046748][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.466170][ T7357] loop1: detected capacity change from 0 to 32768 [ 256.520740][ T7357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.431 (7357) [ 257.294191][ T7357] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.318203][ T7357] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 257.337583][ T7357] BTRFS info (device loop1): using free space tree [ 257.604060][ T7357] BTRFS info (device loop1): enabling ssd optimizations [ 257.614282][ T7357] BTRFS info (device loop1): auto enabling async discard [ 257.658955][ T7369] loop0: detected capacity change from 0 to 32768 [ 257.702606][ T7369] [ 257.702606][ T7369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.702606][ T7369] [ 257.816649][ T7369] ERROR: (device loop0): dtSearch: stack overrun! [ 257.816649][ T7369] [ 257.825924][ T7369] ERROR: (device loop0): remounting filesystem as read-only [ 257.833446][ T7369] btstack dump: [ 257.837662][ T7369] bn = 0, index = 0 [ 257.842011][ T7369] bn = 0, index = 0 [ 257.846015][ T7369] bn = 0, index = 0 [ 257.850113][ T7369] bn = 0, index = 0 [ 257.854044][ T7369] bn = 0, index = 0 [ 257.858865][ T7369] bn = 0, index = 0 [ 257.862907][ T7369] bn = 0, index = 0 [ 257.866849][ T7369] bn = 0, index = 0 [ 257.908577][ T7369] jfs_lookup: dtSearch returned -5 [ 258.033139][ T7369] ERROR: (device loop0): dtSearch: stack overrun! [ 258.033139][ T7369] [ 258.079108][ T7369] btstack dump: [ 258.082634][ T7369] bn = 0, index = 0 [ 258.086464][ T7369] bn = 0, index = 0 [ 258.090760][ T7369] bn = 0, index = 0 [ 258.099462][ T7369] bn = 0, index = 0 [ 258.103545][ T7369] bn = 0, index = 0 [ 258.107673][ T7369] bn = 0, index = 0 [ 258.111596][ T7369] bn = 0, index = 0 [ 258.115400][ T7369] bn = 0, index = 0 [ 258.120329][ T7369] jfs_lookup: dtSearch returned -5 [ 258.144374][ T5765] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.334497][ T7405] loop3: detected capacity change from 0 to 1024 [ 258.363356][ T7405] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.441223][ T7405] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 258.491238][ T7405] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 258.518628][ T7405] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.442: unexpected bad inode w/o EXT4_IGET_BAD [ 258.619697][ T7409] loop2: detected capacity change from 0 to 4096 [ 258.627709][ T7409] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 258.652607][ T7405] EXT4-fs (loop3): no journal found [ 258.676978][ T5963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5963) [ 258.698675][ T7405] EXT4-fs (loop3): can't get journal size [ 258.714030][ T7405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.428857][ T7405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 260.435434][ T7405] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.536017][ T7405] vhci_hcd vhci_hcd.0: Device attached [ 260.541852][ T7413] vhci_hcd: connection closed [ 260.612379][ T5873] vhci_hcd: stop threads [ 260.658187][ T5873] vhci_hcd: release socket [ 260.683220][ T5873] vhci_hcd: disconnect device [ 260.835140][ T5767] vhci_hcd: vhci_device speed not set [ 261.078006][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.258903][ T7434] sd 0:0:1:0: device reset [ 261.765295][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.484071][ T7434] loop2: detected capacity change from 0 to 32768 [ 262.754961][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 263.976121][ T7434] JBD2: journal reset failed [ 264.006780][ T7434] (syz.2.448,7434,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 264.037623][ T7434] (syz.2.448,7434,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 264.158616][ T5812] usb 1-1: device descriptor read/all, error -71 [ 264.216396][ T7446] loop1: detected capacity change from 0 to 128 [ 264.306255][ T7446] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.344353][ T7446] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.376277][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.696845][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.961941][ T7438] loop3: detected capacity change from 0 to 32768 [ 265.005949][ T7456] loop1: detected capacity change from 0 to 4096 [ 265.143652][ T7456] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 265.246492][ T7438] [ 265.246492][ T7438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.246492][ T7438] [ 265.678163][ T7438] ERROR: (device loop3): dtSearch: stack overrun! [ 265.678163][ T7438] [ 265.768209][ T7438] ERROR: (device loop3): remounting filesystem as read-only [ 265.998510][ T7438] btstack dump: [ 266.002038][ T7438] bn = 0, index = 0 [ 266.005874][ T7438] bn = 0, index = 0 [ 266.025569][ T7438] bn = 0, index = 0 [ 266.081306][ T7438] bn = 0, index = 0 [ 266.085180][ T7438] bn = 0, index = 0 [ 266.091871][ T7438] bn = 0, index = 0 [ 266.095714][ T7438] bn = 0, index = 0 [ 266.102086][ T7438] bn = 0, index = 0 [ 266.105955][ T7438] jfs_lookup: dtSearch returned -5 [ 266.373036][ T7461] ERROR: (device loop3): dtSearch: stack overrun! [ 266.373036][ T7461] [ 266.458846][ T7461] btstack dump: [ 266.462394][ T7461] bn = 0, index = 0 [ 266.466210][ T7461] bn = 0, index = 0 [ 266.531666][ T7461] bn = 0, index = 0 [ 266.559947][ T7461] bn = 0, index = 0 [ 266.598465][ T7461] bn = 0, index = 0 [ 266.623612][ T7461] bn = 0, index = 0 [ 266.646666][ T7461] bn = 0, index = 0 [ 266.659057][ T7469] loop0: detected capacity change from 0 to 1024 [ 266.667041][ T7461] bn = 0, index = 0 [ 266.671676][ T7461] jfs_lookup: dtSearch returned -5 [ 266.688178][ T7469] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 266.723937][ T7469] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 266.735545][ T7469] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 266.793075][ T7469] EXT4-fs error (device loop0): ext4_get_journal_inode:5805: inode #5: comm syz.0.461: unexpected bad inode w/o EXT4_IGET_BAD [ 266.872558][ T7469] EXT4-fs (loop0): no journal found [ 266.885735][ T7469] EXT4-fs (loop0): can't get journal size [ 266.913125][ T7469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.153887][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.369302][ T7478] sd 0:0:1:0: device reset [ 268.343130][ T7478] loop0: detected capacity change from 0 to 32768 [ 268.383615][ T7480] loop2: detected capacity change from 0 to 1024 [ 268.608391][ T5812] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 269.568075][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 269.893119][ T5812] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.932509][ T7485] loop1: detected capacity change from 0 to 128 [ 269.940470][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 269.951765][ T5812] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 269.951943][ T7478] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 269.992897][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.007722][ T48] hfsplus: b-tree write err: -5, ino 4 [ 270.019016][ T7485] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.045392][ T5812] usb 4-1: config 0 descriptor?? [ 270.088215][ T7485] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.240372][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 270.301990][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.478866][ T5812] usbhid 4-1:0.0: can't add hid device: -71 [ 270.538506][ T5812] usbhid: probe of 4-1:0.0 failed with error -71 [ 270.584274][ T5812] usb 4-1: USB disconnect, device number 12 [ 270.609587][ T6244] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 270.785694][ T6244] usb 3-1: device descriptor read/64, error -71 [ 271.115341][ T6244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 271.500814][ T7501] loop3: detected capacity change from 0 to 4096 [ 271.508210][ T6244] usb 3-1: device descriptor read/64, error -71 [ 271.510621][ T7501] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 271.675164][ T6244] usb usb3-port1: attempt power cycle [ 271.714337][ T7504] loop0: detected capacity change from 0 to 1024 [ 271.760948][ T7504] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 271.802482][ T7504] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 271.828304][ T7504] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 272.087396][ T7504] EXT4-fs error (device loop0): ext4_get_journal_inode:5805: inode #5: comm syz.0.472: unexpected bad inode w/o EXT4_IGET_BAD [ 272.128276][ T6244] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 272.257672][ T7504] EXT4-fs (loop0): no journal found [ 272.318054][ T7504] EXT4-fs (loop0): can't get journal size [ 272.358703][ T6244] usb 3-1: device descriptor read/8, error -71 [ 272.366935][ T7504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.520913][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.648432][ T6244] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 272.688960][ T6244] usb 3-1: device descriptor read/8, error -71 [ 272.808498][ T6244] usb usb3-port1: unable to enumerate USB device [ 273.180561][ T7514] loop0: detected capacity change from 0 to 32768 [ 273.394992][ T7525] sd 0:0:1:0: device reset [ 274.286629][ T7525] loop2: detected capacity change from 0 to 32768 [ 274.436420][ T7514] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 275.598351][ T7514] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 275.683187][ T7514] XFS (loop0): log mount failed [ 275.976018][ T7525] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 276.341582][ T7534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 277.634182][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 277.969911][ T7547] loop3: detected capacity change from 0 to 1024 [ 278.038982][ T5767] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 278.064912][ T7547] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 278.084313][ T7547] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 278.104104][ T7547] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 278.132505][ T7547] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.483: unexpected bad inode w/o EXT4_IGET_BAD [ 278.155945][ T7547] EXT4-fs (loop3): no journal found [ 278.161838][ T7547] EXT4-fs (loop3): can't get journal size [ 278.176975][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.240593][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.249229][ T5767] usb 1-1: Using ep0 maxpacket: 32 [ 278.267497][ T5767] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.282424][ T5767] usb 1-1: config 0 interface 0 has no altsetting 0 [ 278.289548][ T5767] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 278.299345][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.329515][ T5767] usb 1-1: config 0 descriptor?? [ 278.428094][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 278.479640][ T7556] loop2: detected capacity change from 0 to 2048 [ 278.517478][ T7556] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 278.541791][ T7556] UDF-fs: Scanning with blocksize 512 failed [ 278.561897][ T7556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.578549][ T5855] usb 2-1: device descriptor read/64, error -71 [ 279.334258][ T5767] usbhid 1-1:0.0: can't add hid device: -71 [ 279.341843][ T5767] usbhid: probe of 1-1:0.0 failed with error -71 [ 279.350940][ T5767] usb 1-1: USB disconnect, device number 8 [ 279.488049][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 280.301579][ T7565] loop2: detected capacity change from 0 to 128 [ 280.320933][ T7565] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.374492][ T7565] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.407092][ T5855] usb 2-1: device descriptor read/64, error -71 [ 280.647165][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.690364][ T5855] usb usb2-port1: attempt power cycle [ 282.181188][ T7563] loop3: detected capacity change from 0 to 32768 [ 282.389396][ T7563] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.428516][ T7563] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 282.429315][ T7563] XFS (loop3): log mount failed [ 282.463077][ T7583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 282.469646][ T7583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 282.482190][ T7583] vhci_hcd vhci_hcd.0: Device attached [ 282.496510][ T7584] vhci_hcd: connection closed [ 282.497700][ T3466] vhci_hcd: stop threads [ 282.548790][ T3466] vhci_hcd: release socket [ 282.553279][ T3466] vhci_hcd: disconnect device [ 282.576767][ T7591] loop2: detected capacity change from 0 to 2048 [ 282.636549][ T7591] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 282.677699][ T7591] UDF-fs: Scanning with blocksize 512 failed [ 282.791542][ T7591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.043924][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 283.301189][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 283.410127][ T23] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.574316][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.639271][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 283.662926][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.697261][ T23] usb 1-1: config 0 descriptor?? [ 283.729220][ T7600] loop3: detected capacity change from 0 to 128 [ 283.926070][ T7600] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.077745][ T7600] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.565404][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 284.635515][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 284.645281][ T23] usb 1-1: USB disconnect, device number 9 [ 284.703317][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.931262][ T7617] Zero length message leads to an empty skb [ 286.116186][ T7625] loop0: detected capacity change from 0 to 2048 [ 286.157570][ T7625] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 286.165896][ T7625] UDF-fs: Scanning with blocksize 512 failed [ 286.168922][ T7622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 286.178426][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 286.194170][ T7625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.206729][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 286.277068][ T7623] vhci_hcd: connection closed [ 286.390532][ T42] vhci_hcd: stop threads [ 286.401450][ T42] vhci_hcd: release socket [ 286.406027][ T42] vhci_hcd: disconnect device [ 286.635370][ T5812] vhci_hcd: vhci_device speed not set [ 287.686774][ T7641] loop3: detected capacity change from 0 to 128 [ 288.633902][ T7643] loop0: detected capacity change from 0 to 32768 [ 290.075885][ T7641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.089845][ T7641] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.413910][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.222761][ T7659] loop2: detected capacity change from 0 to 512 [ 291.308078][ T5755] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.007566][ T7650] loop0: detected capacity change from 0 to 32768 [ 292.102714][ T7650] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.178025][ T7672] loop3: detected capacity change from 0 to 2048 [ 292.224553][ T7650] XFS (loop0): Ending clean mount [ 292.288126][ T7672] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 292.295822][ T7672] UDF-fs: Scanning with blocksize 512 failed [ 292.405637][ T7672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.468257][ T5764] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.623631][ T7674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 292.630209][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 292.641633][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 292.659939][ T7675] vhci_hcd: connection closed [ 292.660173][ T3466] vhci_hcd: stop threads [ 292.670094][ T3466] vhci_hcd: release socket [ 292.674686][ T3466] vhci_hcd: disconnect device [ 293.108488][ T6244] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.750691][ T6244] usb 4-1: Using ep0 maxpacket: 32 [ 294.774025][ T6244] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.833300][ T6244] usb 4-1: config 0 interface 0 has no altsetting 0 [ 294.843630][ T6244] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 294.855680][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.870390][ T6244] usb 4-1: config 0 descriptor?? [ 295.248142][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.852669][ T6244] usbhid 4-1:0.0: can't add hid device: -71 [ 295.876244][ T6244] usbhid: probe of 4-1:0.0 failed with error -71 [ 295.902429][ T5830] usb 1-1: device descriptor read/64, error -71 [ 295.915373][ T6244] usb 4-1: USB disconnect, device number 13 [ 296.394184][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 296.568161][ T5830] usb 1-1: device descriptor read/64, error -71 [ 296.698305][ T5830] usb usb1-port1: attempt power cycle [ 297.334856][ T7718] loop3: detected capacity change from 0 to 1024 [ 297.533201][ T7718] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 297.556540][ T7718] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 297.578086][ T7718] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 297.622558][ T7718] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.531: unexpected bad inode w/o EXT4_IGET_BAD [ 297.736197][ T5830] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 297.825634][ T5830] usb 1-1: device descriptor read/8, error -71 [ 297.981927][ T7718] EXT4-fs (loop3): no journal found [ 298.024056][ T7718] EXT4-fs (loop3): can't get journal size [ 298.158091][ T5830] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 298.252074][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.384785][ T7718] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 298.391387][ T7718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 298.430081][ T5830] usb 1-1: device not accepting address 13, error -71 [ 298.457479][ T7718] vhci_hcd vhci_hcd.0: Device attached [ 298.474707][ T5830] usb usb1-port1: unable to enumerate USB device [ 299.098237][ T5754] vhci_hcd: vhci_device speed not set [ 299.167101][ T7729] vhci_hcd: connection closed [ 299.173217][ T42] vhci_hcd: stop threads [ 299.182989][ T5754] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 299.191136][ T42] vhci_hcd: release socket [ 299.197007][ T42] vhci_hcd: disconnect device [ 299.249254][ T7743] loop2: detected capacity change from 0 to 512 [ 299.414622][ T7746] loop0: detected capacity change from 0 to 512 [ 299.429044][ T7746] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 300.708381][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.316965][ T5830] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 301.605437][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 301.612893][ T5830] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.627009][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.833074][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 301.843344][ T5830] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 301.852571][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.988195][ T5812] usb 4-1: device descriptor read/64, error -71 [ 302.051074][ T5830] usb 2-1: config 0 descriptor?? [ 302.268265][ T5812] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 302.500667][ T5812] usb 4-1: device descriptor read/64, error -71 [ 302.618328][ T5812] usb usb4-port1: attempt power cycle [ 302.796946][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 302.806224][ T5830] usbhid: probe of 2-1:0.0 failed with error -71 [ 302.834803][ T5830] usb 2-1: USB disconnect, device number 10 [ 303.059428][ T5812] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.100822][ T5812] usb 4-1: device descriptor read/8, error -71 [ 303.789165][ T5812] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.804073][ T7781] loop1: detected capacity change from 0 to 512 [ 303.823026][ T7781] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 303.838415][ T5812] usb 4-1: device descriptor read/8, error -71 [ 304.065937][ T5812] usb usb4-port1: unable to enumerate USB device [ 304.878820][ T5754] vhci_hcd: vhci_device speed not set [ 305.197731][ T7787] loop3: detected capacity change from 0 to 1024 [ 305.291779][ T7787] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 305.301772][ T7787] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 305.419822][ T7787] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 305.445142][ T7787] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.550: unexpected bad inode w/o EXT4_IGET_BAD [ 305.460709][ T7787] EXT4-fs (loop3): no journal found [ 305.470850][ T7787] EXT4-fs (loop3): can't get journal size [ 306.017073][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.496314][ T7787] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 306.502893][ T7787] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.540727][ T7787] vhci_hcd vhci_hcd.0: Device attached [ 306.586546][ T7805] loop1: detected capacity change from 0 to 512 [ 306.668248][ T7800] vhci_hcd: connection closed [ 306.672544][ T1074] vhci_hcd: stop threads [ 306.686540][ T1074] vhci_hcd: release socket [ 306.695983][ T5755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.712657][ T1074] vhci_hcd: disconnect device [ 306.738080][ T5754] vhci_hcd: vhci_device speed not set [ 307.090086][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 307.298812][ T23] usb 1-1: device descriptor read/64, error -71 [ 307.628080][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.671300][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 307.848376][ T23] usb 1-1: device descriptor read/64, error -71 [ 307.988496][ T6244] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.996711][ T23] usb usb1-port1: attempt power cycle [ 308.888600][ T6244] usb 4-1: Using ep0 maxpacket: 32 [ 308.910854][ T6244] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.937990][ T6244] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.944669][ T6244] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 309.062458][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.078943][ T6244] usb 4-1: config 0 descriptor?? [ 309.266332][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 309.525121][ T23] usb 1-1: device descriptor read/8, error -71 [ 310.264489][ T6244] usbhid 4-1:0.0: can't add hid device: -71 [ 310.274407][ T6244] usbhid: probe of 4-1:0.0 failed with error -71 [ 310.318689][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 310.338125][ T6244] usb 4-1: USB disconnect, device number 18 [ 310.609406][ T23] usb 1-1: device not accepting address 17, error -71 [ 310.619297][ T23] usb usb1-port1: unable to enumerate USB device [ 311.991191][ T7858] loop0: detected capacity change from 0 to 512 [ 312.258278][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 312.379499][ T5755] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.481428][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 312.515082][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.572639][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.629712][ T23] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 312.666369][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.725052][ T23] usb 2-1: Product: syz [ 312.730074][ T23] usb 2-1: Manufacturer: syz [ 312.734698][ T23] usb 2-1: SerialNumber: syz [ 312.771366][ T23] usb 2-1: config 0 descriptor?? [ 312.970226][ T7847] loop3: detected capacity change from 0 to 32768 [ 313.205757][ T7847] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 313.327835][ T5763] (syz-executor,5763,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 313.880218][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 315.221735][ T5754] usb 2-1: USB disconnect, device number 11 [ 316.184163][ T7893] loop2: detected capacity change from 0 to 64 [ 316.223489][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.278625][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 317.349663][ T23] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.423042][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.429542][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498690][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.505708][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 317.515280][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.532839][ T23] usb 4-1: config 0 descriptor?? [ 318.393830][ T7909] loop0: detected capacity change from 0 to 512 [ 318.592226][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 318.599476][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 318.614773][ T7890] bio_check_eod: 8 callbacks suppressed [ 318.614784][ T7890] syz.2.580: attempt to access beyond end of device [ 318.614784][ T7890] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 318.633712][ T23] usb 4-1: USB disconnect, device number 19 [ 319.205840][ T7890] buffer_io_error: 6 callbacks suppressed [ 319.205850][ T7890] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 319.287282][ T7890] syz.2.580: attempt to access beyond end of device [ 319.287282][ T7890] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 319.450878][ T7890] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 320.258997][ T7890] syz.2.580: attempt to access beyond end of device [ 320.258997][ T7890] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 320.679966][ T7890] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 320.701469][ T7890] syz.2.580: attempt to access beyond end of device [ 320.701469][ T7890] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 320.730086][ T7890] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 320.738873][ T7890] syz.2.580: attempt to access beyond end of device [ 320.738873][ T7890] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 320.752637][ T7890] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 320.761551][ T7890] syz.2.580: attempt to access beyond end of device [ 320.761551][ T7890] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 320.808075][ T7890] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 320.835818][ T7890] syz.2.580: attempt to access beyond end of device [ 320.835818][ T7890] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 320.880279][ T7890] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 320.889917][ T7890] syz.2.580: attempt to access beyond end of device [ 320.889917][ T7890] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 320.904461][ T7890] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 320.914936][ T7890] syz.2.580: attempt to access beyond end of device [ 320.914936][ T7890] loop2: rw=2049, sector=78, nr_sectors = 648 limit=64 [ 321.138228][ T5754] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 321.840380][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 322.709141][ T5754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.719804][ T5754] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.731238][ T5754] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 322.740384][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.749410][ T5754] usb 1-1: Product: syz [ 322.753613][ T5754] usb 1-1: Manufacturer: syz [ 322.758519][ T5754] usb 1-1: SerialNumber: syz [ 322.767275][ T7939] loop1: detected capacity change from 0 to 128 [ 322.774885][ T5754] usb 1-1: config 0 descriptor?? [ 322.795707][ T7939] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.817404][ T7939] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.881811][ T7944] loop3: detected capacity change from 0 to 512 [ 323.019025][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.645741][ T5812] usb 1-1: USB disconnect, device number 18 [ 325.828467][ T7959] loop2: detected capacity change from 0 to 64 [ 326.002817][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 327.021839][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 327.078688][ T7957] syz.2.601: attempt to access beyond end of device [ 327.078688][ T7957] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 327.091995][ T7957] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 327.100600][ T7957] syz.2.601: attempt to access beyond end of device [ 327.100600][ T7957] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 327.113958][ T7957] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 327.122766][ T7957] syz.2.601: attempt to access beyond end of device [ 327.122766][ T7957] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 327.136060][ T7957] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 327.144664][ T7957] syz.2.601: attempt to access beyond end of device [ 327.144664][ T7957] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 327.158093][ T7957] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 327.166806][ T7957] syz.2.601: attempt to access beyond end of device [ 327.166806][ T7957] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 327.180206][ T7957] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 327.188816][ T7957] syz.2.601: attempt to access beyond end of device [ 327.188816][ T7957] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 327.202133][ T7957] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 327.210692][ T7957] syz.2.601: attempt to access beyond end of device [ 327.210692][ T7957] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 327.224272][ T7957] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 327.232768][ T7957] syz.2.601: attempt to access beyond end of device [ 327.232768][ T7957] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 327.246635][ T7957] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 327.256911][ T7957] syz.2.601: attempt to access beyond end of device [ 327.256911][ T7957] loop2: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 327.300493][ T23] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.326687][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 327.344168][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 327.358052][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.386174][ T23] usb 2-1: config 0 descriptor?? [ 327.656363][ T7982] loop2: detected capacity change from 0 to 512 [ 328.235850][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 328.382826][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 328.577836][ T23] usb 2-1: USB disconnect, device number 12 [ 329.018525][ T5767] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 329.458021][ T5767] usb 3-1: Using ep0 maxpacket: 8 [ 329.465700][ T5767] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.476174][ T5767] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.494397][ T5767] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 329.504567][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.513352][ T5767] usb 3-1: Product: syz [ 329.517754][ T5767] usb 3-1: Manufacturer: syz [ 329.527305][ T5767] usb 3-1: SerialNumber: syz [ 329.564604][ T5767] usb 3-1: config 0 descriptor?? [ 330.883035][ T8008] loop1: detected capacity change from 0 to 64 [ 331.112638][ T8008] syz.1.613: attempt to access beyond end of device [ 331.112638][ T8008] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 331.126504][ T8008] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 331.135605][ T8008] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 331.740705][ T8014] loop1: detected capacity change from 0 to 512 [ 332.125803][ T8016] xt_socket: unknown flags 0x58 [ 332.918257][ T5767] usb 3-1: USB disconnect, device number 15 [ 333.048382][ T8022] loop0: detected capacity change from 0 to 512 [ 333.056663][ T8022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 333.101184][ T8022] EXT4-fs (loop0): 1 truncate cleaned up [ 333.121979][ T8022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.126651][ T8029] loop3: detected capacity change from 0 to 1024 [ 333.211314][ T8029] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 333.556766][ T5830] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 333.605356][ T8029] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 333.712808][ T8029] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 333.745476][ T8029] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.621: unexpected bad inode w/o EXT4_IGET_BAD [ 333.763590][ T8029] EXT4-fs (loop3): no journal found [ 333.770549][ T8029] EXT4-fs (loop3): can't get journal size [ 333.780274][ T8029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.810625][ T8029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 333.817199][ T8029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 333.827037][ T8029] vhci_hcd vhci_hcd.0: Device attached [ 333.888155][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 333.895743][ T5830] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.955032][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 333.961765][ T5830] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 333.971099][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.985875][ T5830] usb 2-1: config 0 descriptor?? [ 334.010064][ T8034] vhci_hcd: connection closed [ 334.018975][ T1074] vhci_hcd: stop threads [ 334.029038][ T5812] vhci_hcd: vhci_device speed not set [ 334.034916][ T1074] vhci_hcd: release socket [ 334.040016][ T1074] vhci_hcd: disconnect device [ 334.073373][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.098293][ T5812] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 334.105894][ T5812] usb 39-1: enqueue for inactive port 0 [ 334.215847][ T5812] vhci_hcd: vhci_device speed not set [ 335.768638][ T8051] loop2: detected capacity change from 0 to 64 [ 336.501719][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 336.642682][ T5830] usbhid: probe of 2-1:0.0 failed with error -71 [ 336.652025][ T5830] usb 2-1: USB disconnect, device number 13 [ 336.661911][ T8051] bio_check_eod: 8 callbacks suppressed [ 336.661923][ T8051] syz.2.625: attempt to access beyond end of device [ 336.661923][ T8051] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 336.726906][ T8051] buffer_io_error: 6 callbacks suppressed [ 336.726919][ T8051] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 336.751087][ T8051] syz.2.625: attempt to access beyond end of device [ 336.751087][ T8051] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 336.765405][ T8051] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 336.774150][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.774782][ T8051] syz.2.625: attempt to access beyond end of device [ 336.774782][ T8051] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 336.795743][ T8054] loop0: detected capacity change from 0 to 1024 [ 336.797209][ T8051] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 336.812957][ T8051] syz.2.625: attempt to access beyond end of device [ 336.812957][ T8051] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 336.847584][ T8051] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 336.878502][ T8051] syz.2.625: attempt to access beyond end of device [ 336.878502][ T8051] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 336.904364][ T8051] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 336.924893][ T8057] loop3: detected capacity change from 0 to 512 [ 336.933195][ T8051] syz.2.625: attempt to access beyond end of device [ 336.933195][ T8051] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 336.949421][ T8051] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 337.086806][ T8051] syz.2.625: attempt to access beyond end of device [ 337.086806][ T8051] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 337.114333][ T8051] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 337.124848][ T8051] syz.2.625: attempt to access beyond end of device [ 337.124848][ T8051] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 337.768719][ T5830] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 337.785065][ T1074] hfsplus: b-tree write err: -5, ino 4 [ 337.845656][ T8051] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 337.867215][ T8051] syz.2.625: attempt to access beyond end of device [ 337.867215][ T8051] loop2: rw=2049, sector=78, nr_sectors = 680 limit=64 [ 337.958009][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 337.981661][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.014153][ T5830] usb 2-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 338.035750][ T5830] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.067992][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 338.127372][ T5830] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 338.208700][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.319723][ T5830] usb 2-1: Product: syz [ 338.390403][ T5830] usb 2-1: Manufacturer: syz [ 338.461257][ T5830] usb 2-1: SerialNumber: syz [ 338.603677][ T5830] usb 2-1: config 0 descriptor?? [ 338.669283][ T8068] delete_channel: no stack [ 338.756213][ T5830] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 338.855846][ T8073] loop3: detected capacity change from 0 to 1024 [ 338.880454][ T8073] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 338.895759][ T8073] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 338.907122][ T8073] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 338.924253][ T5830] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 338.944905][ T8073] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.634: unexpected bad inode w/o EXT4_IGET_BAD [ 338.948180][ T5830] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 339.014882][ T5830] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 339.057993][ T8073] EXT4-fs (loop3): no journal found [ 339.078066][ T8073] EXT4-fs (loop3): can't get journal size [ 339.111724][ T8073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.153650][ T8073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 339.154209][ T23] usb 2-1: USB disconnect, device number 14 [ 339.160205][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.164921][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 339.208095][ T6244] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 339.436939][ T6244] usb 1-1: Using ep0 maxpacket: 8 [ 339.463553][ T6244] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.552266][ T6244] usb 1-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 339.623034][ T6244] usb 1-1: config 179 has no interface number 0 [ 339.662354][ T6244] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.700512][ T8078] vhci_hcd: connection closed [ 339.709365][ T1334] vhci_hcd: stop threads [ 339.750640][ T6244] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.775307][ T1334] vhci_hcd: release socket [ 339.836431][ T1334] vhci_hcd: disconnect device [ 339.846213][ T6244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.941322][ T5830] vhci_hcd: vhci_device speed not set [ 340.031482][ T8086] loop2: detected capacity change from 0 to 1024 [ 340.084873][ T6244] usb 1-1: USB disconnect, device number 19 [ 340.109158][ T8088] loop1: detected capacity change from 0 to 512 [ 340.114848][ T1334] hfsplus: b-tree write err: -5, ino 4 [ 340.151038][ T5963] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 340.299247][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.083116][ T8096] loop3: detected capacity change from 0 to 64 [ 342.065997][ T8096] syz.3.640: attempt to access beyond end of device [ 342.065997][ T8096] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 342.080109][ T8096] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 342.089293][ T8096] syz.3.640: attempt to access beyond end of device [ 342.089293][ T8096] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 342.102948][ T8096] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 342.111735][ T8096] syz.3.640: attempt to access beyond end of device [ 342.111735][ T8096] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 342.125456][ T8096] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 342.134452][ T8096] syz.3.640: attempt to access beyond end of device [ 342.134452][ T8096] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 342.148654][ T8096] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 342.157487][ T8096] syz.3.640: attempt to access beyond end of device [ 342.157487][ T8096] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 342.171323][ T8096] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 342.180378][ T8096] syz.3.640: attempt to access beyond end of device [ 342.180378][ T8096] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 342.193784][ T8096] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 342.202535][ T8096] syz.3.640: attempt to access beyond end of device [ 342.202535][ T8096] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 342.215963][ T8096] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 342.224764][ T8096] syz.3.640: attempt to access beyond end of device [ 342.224764][ T8096] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 342.238304][ T8096] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 342.253639][ T8096] syz.3.640: attempt to access beyond end of device [ 342.253639][ T8096] loop3: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 342.766850][ T8101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.642'. [ 343.270612][ T8109] sd 0:0:1:0: device reset [ 344.216398][ T8109] loop2: detected capacity change from 0 to 32768 [ 345.549657][ T8110] delete_channel: no stack [ 345.572403][ T8109] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 345.589357][ T8117] loop0: detected capacity change from 0 to 1024 [ 345.724434][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 345.757480][ T8119] loop1: detected capacity change from 0 to 1024 [ 345.778547][ T6359] hfsplus: b-tree write err: -5, ino 4 [ 345.788511][ T8119] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 345.798566][ T5754] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 345.892376][ T8119] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 345.922957][ T8119] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 346.004207][ T8119] EXT4-fs error (device loop1): ext4_get_journal_inode:5805: inode #5: comm syz.1.648: unexpected bad inode w/o EXT4_IGET_BAD [ 346.020404][ T5754] usb 4-1: Using ep0 maxpacket: 8 [ 346.058827][ T5754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.080149][ T8119] EXT4-fs (loop1): no journal found [ 346.085401][ T8119] EXT4-fs (loop1): can't get journal size [ 346.390871][ T8119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.807445][ T8119] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 346.814020][ T8119] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.821448][ T5754] usb 4-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 346.832835][ T5754] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.845964][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.855722][ T5754] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 346.867697][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.876400][ T8119] vhci_hcd vhci_hcd.0: Device attached [ 346.882203][ T5754] usb 4-1: Product: syz [ 346.887037][ T5754] usb 4-1: Manufacturer: syz [ 346.908907][ T5754] usb 4-1: SerialNumber: syz [ 346.921993][ T5754] usb 4-1: config 0 descriptor?? [ 346.937101][ T5754] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 346.951713][ T8133] loop2: detected capacity change from 0 to 128 [ 346.992391][ T8133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 347.025912][ T8133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.058093][ T5830] vhci_hcd: vhci_device speed not set [ 347.063706][ T8129] vhci_hcd: connection closed [ 347.065190][ T42] vhci_hcd: stop threads [ 347.078822][ T42] vhci_hcd: release socket [ 347.093831][ T42] vhci_hcd: disconnect device [ 347.135421][ T5754] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 347.146028][ T5830] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 347.168233][ T5754] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 347.176200][ T5830] usb 35-1: enqueue for inactive port 0 [ 347.197444][ T5754] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 347.268358][ T5830] vhci_hcd: vhci_device speed not set [ 347.432727][ T5767] usb 4-1: USB disconnect, device number 20 [ 348.062142][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.291338][ T8144] delete_channel: no stack [ 349.172488][ T8150] sd 0:0:1:0: device reset [ 350.305208][ T8150] loop0: detected capacity change from 0 to 32768 [ 350.446936][ T8156] loop3: detected capacity change from 0 to 512 [ 350.774538][ T8156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.142834][ T8159] loop1: detected capacity change from 0 to 128 [ 351.504322][ T8150] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 351.737586][ T8156] EXT4-fs (loop3): 1 truncate cleaned up [ 351.744769][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.815229][ T8159] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.245473][ T5764] ocfs2: Unmounting device (7,0) on (node local) [ 352.343050][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.365008][ T8159] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.685847][ T8173] loop3: detected capacity change from 0 to 1024 [ 352.704376][ T8173] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 352.956878][ T8173] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 353.278402][ T8173] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 353.482726][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.578027][ T8173] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.665: unexpected bad inode w/o EXT4_IGET_BAD [ 353.659805][ T8173] EXT4-fs (loop3): no journal found [ 353.665064][ T8173] EXT4-fs (loop3): can't get journal size [ 353.673138][ T8179] loop0: detected capacity change from 0 to 512 [ 353.702502][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.749324][ T8179] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 353.779129][ T8173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 353.785701][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.804063][ T8173] vhci_hcd vhci_hcd.0: Device attached [ 353.968108][ T8183] vhci_hcd: connection closed [ 353.998265][ T5767] vhci_hcd: vhci_device speed not set [ 354.018476][ T5873] vhci_hcd: stop threads [ 354.040983][ T5873] vhci_hcd: release socket [ 354.092670][ T5873] vhci_hcd: disconnect device [ 354.188043][ T5767] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 354.195862][ T5767] usb 39-1: enqueue for inactive port 0 [ 354.278050][ T5767] vhci_hcd: vhci_device speed not set [ 354.476701][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.959343][ T28] audit: type=1326 audit(1750992171.190:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3a78e929 code=0x0 [ 354.998140][ T6244] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 355.221558][ T8206] loop2: detected capacity change from 0 to 8192 [ 355.243096][ T8206] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 356.028259][ T6244] usb 1-1: Using ep0 maxpacket: 8 [ 356.073001][ T6244] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 356.081989][ T6244] usb 1-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 356.109082][ T6244] usb 1-1: config 179 has no interface number 0 [ 356.125383][ T6244] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 356.210350][ T6244] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 356.328686][ T6244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.963290][ T6244] usb 1-1: USB disconnect, device number 20 [ 357.005488][ T8222] loop2: detected capacity change from 0 to 1024 [ 357.014990][ T8222] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 357.032715][ T8222] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 357.042539][ T8222] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 357.054849][ T8222] EXT4-fs error (device loop2): ext4_get_journal_inode:5805: inode #5: comm syz.2.679: unexpected bad inode w/o EXT4_IGET_BAD [ 357.069318][ T8222] EXT4-fs (loop2): no journal found [ 357.074552][ T8222] EXT4-fs (loop2): can't get journal size [ 357.083603][ T8222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.102972][ T8222] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 357.109704][ T8222] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 357.119090][ T8222] vhci_hcd vhci_hcd.0: Device attached [ 357.320854][ T5830] vhci_hcd: vhci_device speed not set [ 357.433577][ T5830] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 357.819420][ T8224] vhci_hcd: connection reset by peer [ 357.905909][ T3466] vhci_hcd: stop threads [ 357.954261][ T3466] vhci_hcd: release socket [ 358.029785][ T3466] vhci_hcd: disconnect device [ 358.162525][ T8236] sd 0:0:1:0: device reset [ 359.078172][ T8236] loop3: detected capacity change from 0 to 32768 [ 360.694157][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.746601][ T8236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 361.015381][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 361.351809][ T28] audit: type=1326 audit(1750992177.430:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.1.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70cb38e929 code=0x0 [ 361.486190][ T8249] loop1: detected capacity change from 0 to 8192 [ 361.530770][ T8249] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 361.698049][ T5755] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.679821][ T5830] vhci_hcd: vhci_device speed not set [ 363.116901][ T8271] ------------[ cut here ]------------ [ 363.123088][ T8271] WARNING: CPU: 1 PID: 8271 at fs/inode.c:389 inc_nlink+0x121/0x130 [ 363.131762][ T8271] Modules linked in: [ 363.136018][ T8271] CPU: 1 PID: 8271 Comm: syz.1.691 Not tainted 6.6.94-syzkaller #0 [ 363.144006][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.154280][ T8271] RIP: 0010:inc_nlink+0x121/0x130 [ 363.159462][ T8271] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 19 43 ea ff e9 3f ff ff ff e8 0f 9c 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 363.179615][ T8271] RSP: 0018:ffffc900034e7c28 EFLAGS: 00010287 [ 363.186037][ T8271] RAX: ffffffff81f3f9c1 RBX: ffff88805a578058 RCX: 0000000000080000 [ 363.194177][ T8271] RDX: ffffc9000c399000 RSI: 0000000000014ce3 RDI: 0000000000014ce4 [ 363.202345][ T8271] RBP: 0000000000000000 R08: ffff88805f99809b R09: 1ffff1100bf33013 [ 363.210396][ T8271] R10: dffffc0000000000 R11: ffffed100bf33014 R12: dffffc0000000000 [ 363.215255][ T8276] loop0: detected capacity change from 0 to 1024 [ 363.218537][ T8271] R13: 1ffff1100b4af00b R14: ffff88805a578000 R15: 0000000000000000 [ 363.233236][ T8271] FS: 00007f70cc25e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 363.242619][ T8271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.249385][ T8271] CR2: 0000001b34113ff8 CR3: 000000007f4e5000 CR4: 00000000003506e0 [ 363.256726][ T8276] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 363.257374][ T8271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.257391][ T8271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.283867][ T8271] Call Trace: [ 363.287332][ T8271] [ 363.290387][ T8271] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 363.295546][ T8271] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 363.301162][ T8271] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 363.306939][ T8271] ? inode_permission+0xf3/0x480 [ 363.312020][ T8271] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 363.313267][ T8276] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 363.317093][ T8271] ? security_inode_mkdir+0xb7/0x100 [ 363.317137][ T8271] vfs_mkdir+0x296/0x440 [ 363.336410][ T8271] do_mkdirat+0x1d4/0x440 [ 363.340885][ T8271] ? vfs_mkdir+0x440/0x440 [ 363.345618][ T8271] ? getname_flags+0x20a/0x500 [ 363.350499][ T8271] __x64_sys_mkdir+0x6e/0x80 [ 363.355128][ T8271] do_syscall_64+0x55/0xb0 [ 363.359685][ T8271] ? clear_bhb_loop+0x40/0x90 [ 363.364396][ T8271] ? clear_bhb_loop+0x40/0x90 [ 363.369185][ T8271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.375494][ T8271] RIP: 0033:0x7f70cb38e929 [ 363.380113][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.382831][ T8276] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 363.399740][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.399865][ T8271] RSP: 002b:00007f70cc25e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 363.399892][ T8271] RAX: ffffffffffffffda RBX: 00007f70cb5b5fa0 RCX: 00007f70cb38e929 [ 363.399907][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 363.399921][ T8271] RBP: 00007f70cb410b39 R08: 0000000000000000 R09: 0000000000000000 [ 363.399933][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.399946][ T8271] R13: 0000000000000000 R14: 00007f70cb5b5fa0 R15: 00007ffe80a899e8 [ 363.399975][ T8271] [ 363.399985][ T8271] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.399996][ T8271] CPU: 1 PID: 8271 Comm: syz.1.691 Not tainted 6.6.94-syzkaller #0 [ 363.400014][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.400025][ T8271] Call Trace: [ 363.400031][ T8271] [ 363.400039][ T8271] dump_stack_lvl+0x16c/0x230 [ 363.400071][ T8271] ? show_regs_print_info+0x20/0x20 [ 363.400097][ T8271] ? load_image+0x3b0/0x3b0 [ 363.400125][ T8271] panic+0x2c0/0x710 [ 363.400150][ T8271] ? bpf_jit_dump+0xd0/0xd0 [ 363.400185][ T8271] __warn+0x2e0/0x470 [ 363.400204][ T8271] ? inc_nlink+0x121/0x130 [ 363.400227][ T8271] ? inc_nlink+0x121/0x130 [ 363.400247][ T8271] report_bug+0x2be/0x4f0 [ 363.400274][ T8271] ? inc_nlink+0x121/0x130 [ 363.400295][ T8271] ? inc_nlink+0x121/0x130 [ 363.400314][ T8271] ? inc_nlink+0x123/0x130 [ 363.400334][ T8271] handle_bug+0xcf/0x120 [ 363.400361][ T8271] exc_invalid_op+0x1a/0x50 [ 363.400388][ T8271] asm_exc_invalid_op+0x1a/0x20 [ 363.400415][ T8271] RIP: 0010:inc_nlink+0x121/0x130 [ 363.400438][ T8271] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 19 43 ea ff e9 3f ff ff ff e8 0f 9c 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 363.400454][ T8271] RSP: 0018:ffffc900034e7c28 EFLAGS: 00010287 [ 363.400470][ T8271] RAX: ffffffff81f3f9c1 RBX: ffff88805a578058 RCX: 0000000000080000 [ 363.400483][ T8271] RDX: ffffc9000c399000 RSI: 0000000000014ce3 RDI: 0000000000014ce4 [ 363.400496][ T8271] RBP: 0000000000000000 R08: ffff88805f99809b R09: 1ffff1100bf33013 [ 363.400508][ T8271] R10: dffffc0000000000 R11: ffffed100bf33014 R12: dffffc0000000000 [ 363.400522][ T8271] R13: 1ffff1100b4af00b R14: ffff88805a578000 R15: 0000000000000000 [ 363.400542][ T8271] ? inc_nlink+0x121/0x130 [ 363.400579][ T8271] ? inc_nlink+0x121/0x130 [ 363.400606][ T8271] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 363.400640][ T8271] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 363.400669][ T8271] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 363.400706][ T8271] ? inode_permission+0xf3/0x480 [ 363.400723][ T8271] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 363.400743][ T8271] ? security_inode_mkdir+0xb7/0x100 [ 363.400775][ T8271] vfs_mkdir+0x296/0x440 [ 363.400801][ T8271] do_mkdirat+0x1d4/0x440 [ 363.400824][ T8271] ? vfs_mkdir+0x440/0x440 [ 363.400846][ T8271] ? getname_flags+0x20a/0x500 [ 363.400868][ T8271] __x64_sys_mkdir+0x6e/0x80 [ 363.400890][ T8271] do_syscall_64+0x55/0xb0 [ 363.400913][ T8271] ? clear_bhb_loop+0x40/0x90 [ 363.400930][ T8271] ? clear_bhb_loop+0x40/0x90 [ 363.400949][ T8271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.400976][ T8271] RIP: 0033:0x7f70cb38e929 [ 363.400991][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.401006][ T8271] RSP: 002b:00007f70cc25e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 363.401024][ T8271] RAX: ffffffffffffffda RBX: 00007f70cb5b5fa0 RCX: 00007f70cb38e929 [ 363.401037][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 363.401049][ T8271] RBP: 00007f70cb410b39 R08: 0000000000000000 R09: 0000000000000000 [ 363.401061][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.401071][ T8271] R13: 0000000000000000 R14: 00007f70cb5b5fa0 R15: 00007ffe80a899e8 [ 363.401098][ T8271] [ 363.410020][ T8271] Kernel Offset: disabled